Function at 0x140020359
Capabilities:
Identify system language via api
Query environment variable

Disassembly:
push rbp
sub rsp, 0x300
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x290], rcx
mov qword [rbp + 0x298], rdx
mov qword [rbp + 0x2a0], r8
mov dword [rbp + 0x2a8], r9d
mov ecx, 0
call sub.KERNEL32.dll_GetModuleHandleW
mov qword [0x140298d50], rax
mov r8d, 0
mov edx, 0x1000
mov ecx, 0
call sub.KERNEL32.dll_HeapCreate
mov qword [0x140298d48], rax
lea rax, [0x140053020]
mov qword [0x140298d58], rax
call fcn.140038210
call fcn.1400369e0
call fcn.140036940
call fcn.140034a30
call fcn.140031f34
call fcn.140031400
call fcn.1400309e4
call fcn.14002f310
call fcn.14002e9a4
call fcn.14002e890
call fcn.14002da6c
call fcn.14002cb7c
call fcn.14002c564
call fcn.14002b798
call fcn.14002ad40
call fcn.140028aa4
call fcn.1400276d0
call fcn.1400238e8
call fcn.1400234a8
call fcn.140023008
call fcn.140022b14
call fcn.1400220a8
call fcn.140021df0
lea rax, str.Office_uninstall_v1.9.0
mov rdx, rax
lea rax, [0x140298e00]
mov rcx, rax
call fcn.1400380c0
call fcn.140037c70
mov rax, qword [0x140298e00]
mov rcx, rax
call fcn.140037f90
lea rax, str._x64
mov rcx, rax
call fcn.140037f90
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e00]
mov rcx, rax
call fcn.140037eb0
lea rax, [0x14029296e]
mov rdx, rax
lea rax, [0x140298e20]
mov rcx, rax
call fcn.1400380c0
mov qword [0x140298e98], 0
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov edx, eax
mov ecx, 0x3e8
call fcn.140035360
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e80]
mov rcx, rax
call fcn.140037eb0
mov qword [0x140298de8], 0
mov qword [0x140298dd0], 0
mov qword [0x140298ea8], 1
mov qword [0x140298e70], 2
mov r8d, 0x808080
mov edx, 1
mov ecx, 0
call sub.GDI32.dll_CreatePen
mov qword [rbp + 0x278], rax
mov rax, qword [rbp + 0x278]
mov qword [0x140298e08], rax
mov r8d, 0xcc872c
mov edx, 1
mov ecx, 0
call sub.GDI32.dll_CreatePen
mov qword [rbp + 0x270], rax
mov rax, qword [rbp + 0x270]
mov qword [0x140298e58], rax
mov r9d, 7
mov r8d, 0
lea rax, [0x140299450]
mov rdx, rax
mov ecx, 0x3b
call fcn.14002f33c
mov dword [rsp + 0x20], 0x200
lea r9, [0x140299510]
mov r8d, 0
mov edx, 7
mov ecx, 0x59
call fcn.14002c590
mov dword [rsp + 0x20], 0x200
lea r9, [0x140299518]
mov r8d, 0
mov edx, SafeArrayPutElement
mov ecx, 8
call fcn.14002c590
mov dword [rsp + 0x20], 0x200
lea r9, [0x140299520]
mov r8d, 0
mov edx, SafeArrayPutElement
mov ecx, 8
call fcn.14002c590
mov qword [0x140298d78], 2
mov qword [0x140298d80], 1
lea rax, [0x140298d70]
mov qword [rsp + 0x20], rax
mov r9d, 0
mov r8d, SafeArrayPutElement
mov edx, 8
mov ecx, 2
call fcn.14002db84
lea rax, [0x140299440]
mov rdx, rax
lea rax, [0x140298e40]
mov rcx, rax
call fcn.1400380c0
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov edx, eax
mov ecx, 0xc8
call fcn.140035360
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e48]
mov rcx, rax
call fcn.140037eb0
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov edx, eax
mov ecx, 0xc8
call fcn.140035360
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298ea0]
mov rcx, rax
call fcn.140037eb0
mov rax, qword [0x140298e48]
mov qword [rbp + 0x268], rax
lea rax, str.PROCESSOR_ARCHITECTURE
mov rdx, qword [rbp + 0x268]
mov r8d, 0xc8
mov rcx, rax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov qword [rbp + 0x260], rax
mov rax, qword [0x140298ea0]
mov qword [rbp + 0x258], rax
lea rax, str.PROCESSOR_ARCHITEW6432
mov rdx, qword [rbp + 0x258]
mov r8d, 0xc8
mov rcx, rax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov qword [rbp + 0x250], rax
mov rax, qword [0x140298e80]
mov qword [rbp + 0x248], rax
lea rax, str.TEMP
mov rdx, qword [rbp + 0x248]
mov r8d, 0x3e8
mov rcx, rax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov qword [rbp + 0x240], rax
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov edx, eax
mov ecx, 0x3e8
call fcn.140035360
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e90]
mov rcx, rax
call fcn.140037eb0
mov rax, qword [0x140298e90]
mov qword [rbp + 0x238], rax
lea rax, str.WINDIR
mov rdx, qword [rbp + 0x238]
mov r8d, 0x3e8
mov rcx, rax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov qword [rbp + 0x230], rax
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov edx, eax
mov ecx, 0x3e8
call fcn.140035360
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298db0]
mov rcx, rax
call fcn.140037eb0
mov rax, qword [0x140298db0]
mov qword [rbp + 0x228], rax
lea rax, str.WINDIR
mov rdx, qword [rbp + 0x228]
mov r8d, 0x3e8
mov rcx, rax
call sub.KERNEL32.dll_GetEnvironmentVariableW
mov qword [rbp + 0x220], rax
call fcn.140037c70
call fcn.140037c70
mov rax, qword [0x140298e90]
mov rcx, rax
call fcn.140037f90
lea rax, str.Sysnativecmd.exe
mov rcx, rax
call fcn.140037f90
call fcn.140037e20
mov qword [rbp + 0x218], rax
mov rax, qword [rbp + 0x218]
mov rcx, rax
call fcn.140029ddc
mov qword [rbp + 0x210], rax
call fcn.140037d40
cmp qword [rbp + 0x210], 0
jle 0x140020889
call fcn.140037c70
mov rax, qword [0x140298e90]
mov rcx, rax
call fcn.140037f90
lea rax, str.Sysnative
mov rcx, rax
call fcn.140037f90
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e90]
mov rcx, rax
call fcn.140037eb0
jmp 0x1400208c3
nop
call fcn.140037c70
mov rax, qword [0x140298e90]
mov rcx, rax
call fcn.140037f90
lea rax, str.System32
mov rcx, rax
call fcn.140037f90
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e90]
mov rcx, rax
call fcn.140037eb0
mov qword [0x140298eb0], 0
call fcn.140022cc8
mov qword [rbp + 0x208], rax
mov rax, qword [rbp + 0x208]
sub rax, 1
mov qword [0x140298dc8], rax
mov rax, qword [0x140298dc8]
test rax, rax
js 0x1400209e3
mov qword [0x140298e28], 0
mov rdx, qword [0x140298dc8]
mov rax, qword [0x140298e28]
cmp rdx, rax
jl 0x1400209e6
call fcn.140037c70
call fcn.140037c70
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov edx, eax
mov rax, qword [0x140298e28]
mov rcx, rax
call fcn.140022d5c
call fcn.140037e20
mov qword [rbp + 0x200], rax
call fcn.140037cd0
mov edx, eax
mov rax, qword [rbp + 0x200]
mov rcx, rax
call fcn.140034e00
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e50]
mov rcx, rax
call fcn.140037eb0
mov qword [rbp - 0x38], 0
mov rdx, qword [0x140298e50]
lea rax, [rbp - 0x38]
mov rcx, rax
call fcn.140037c00
mov rax, qword [rbp - 0x38]
lea rdx, str._CMD
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x1400209bf
mov qword [0x140298eb0], 1
jmp 0x1400209c0
nop
mov rax, qword [rbp - 0x38]
mov rcx, rax
call fcn.140038000
mov rax, qword [0x140298e28]
add rax, 1
mov qword [0x140298e28], rax
jmp 0x140020907
nop
jmp 0x1400209e7
nop
mov r8d, 9
lea rax, str.Consolas
mov rdx, rax
mov ecx, 0
call fcn.140036a54
mov qword [rbp + 0x1f8], rax
call fcn.140037c70
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov ecx, eax
call fcn.140022a4c
call fcn.140037e20
mov qword [rbp + 0x1f0], rax
mov rax, qword [rbp + 0x1f0]
mov edx, 1
mov rcx, rax
call fcn.140006d41
mov qword [rbp + 0x1e8], rax
call fcn.140037d40
call fcn.140022cc8
mov qword [rbp + 0x1e0], rax
mov rax, qword [rbp + 0x1e0]
sub rax, 1
mov qword [0x140298dc8], rax
mov rax, qword [0x140298dc8]
test rax, rax
js 0x140020cfd
mov qword [0x140298ea8], 0
mov qword [0x140298e28], 0
mov rdx, qword [0x140298dc8]
mov rax, qword [0x140298e28]
cmp rdx, rax
jl 0x140020bdb
call fcn.140037c70
call fcn.140037c70
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov edx, eax
mov rax, qword [0x140298e28]
mov rcx, rax
call fcn.140022d5c
call fcn.140037e20
mov qword [rbp + 0x1d8], rax
call fcn.140037cd0
mov edx, eax
mov rax, qword [rbp + 0x1d8]
mov rcx, rax
call fcn.140034e00
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e50]
mov rcx, rax
call fcn.140037eb0
mov qword [rbp - 0x40], 0
mov rdx, qword [0x140298e50]
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.140037c00
mov rax, qword [rbp - 0x40]
lea rdx, str._LOG
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x140020b4b
mov qword [0x140298e98], 1
jmp 0x140020bb8
mov rax, qword [rbp - 0x40]
lea rdx, str._O2010
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x140020b6f
mov qword [0x140298de8], 1
jmp 0x140020bb8
mov rax, qword [rbp - 0x40]
lea rdx, str._O2013_16
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x140020b93
mov qword [0x140298dd0], 1
jmp 0x140020bb8
mov rax, qword [rbp - 0x40]
lea rdx, str._O2013_21C2R
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x140020bb7
mov qword [0x140298ea8], 1
jmp 0x140020bb8
nop
mov rax, qword [rbp - 0x40]
mov rcx, rax
call fcn.140038000
mov rax, qword [0x140298e28]
add rax, 1
mov qword [0x140298e28], rax
jmp 0x140020a93
nop
mov qword [0x140298e28], 0
mov rdx, qword [0x140298dc8]
mov rax, qword [0x140298e28]
cmp rdx, rax
jl 0x140020cf5
call fcn.140037c70
call fcn.140037c70
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov edx, eax
mov rax, qword [0x140298e28]
mov rcx, rax
call fcn.140022d5c
call fcn.140037e20
mov qword [rbp + 0x1d0], rax
call fcn.140037cd0
mov edx, eax
mov rax, qword [rbp + 0x1d0]
mov rcx, rax
call fcn.140034e00
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298e50]
mov rcx, rax
call fcn.140037eb0
mov qword [rbp - 0x48], 0
mov rdx, qword [0x140298e50]
lea rax, [rbp - 0x48]
mov rcx, rax
call fcn.140037c00
mov rax, qword [rbp - 0x48]
lea rdx, str._UNINSTALL
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x140020cd1
mov ecx, 0x3e8
call fcn.14000c201
mov qword [rbp + 0x1c8], rax
mov ecx, 0x7d0
call fcn.1400281f4
mov qword [rbp + 0x1c0], rax
mov rax, qword [0x140298da0]
mov rcx, rax
call fcn.140021ff4
mov qword [rbp + 0x1b8], rax
call fcn.140021455
jmp 0x140020cd2
nop
mov rax, qword [rbp - 0x48]
mov rcx, rax
call fcn.140038000
mov rax, qword [0x140298e28]
add rax, 1
mov qword [0x140298e28], rax
jmp 0x140020be7
nop
call fcn.140021455
jmp 0x140020cfe
nop
call fcn.140037c70
call fcn.140037c70
call sub.KERNEL32.dll_GetUserDefaultLangID
mov qword [rbp + 0x1b0], rax
call fcn.140037cd0
mov edx, eax
mov rax, qword [rbp + 0x1b0]
mov rcx, rax
call fcn.140035f20
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298d98]
mov rcx, rax
call fcn.140037eb0
mov rax, qword [0x140298d98]
mov rcx, rax
call fcn.140035470
mov qword [rbp + 0x1a8], rax
cmp qword [rbp + 0x1a8], 3
jne 0x140020d9b
call fcn.140037c70
lea rax, [0x1402912e0]
mov rcx, rax
call fcn.140037f90
mov rax, qword [0x140298d98]
mov rcx, rax
call fcn.140037f90
call fcn.140037cd0
mov edx, eax
lea rax, [0x140298d98]
mov rcx, rax
call fcn.140037eb0
jmp 0x140020d9c
nop
mov rax, qword [0x140298d98]
mov qword [rbp + 0x1a0], rax
lea rax, str.0419
mov qword [rbp + 0x198], rax
mov rdx, qword [rbp + 0x1a0]
mov rax, qword [rbp + 0x198]
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x140020ded
lea rax, [0x140291a5a]
mov rdx, rax
lea rax, [0x140298e20]
mov rcx, rax
call fcn.1400380c0
jmp 0x140020e07
nop
lea rax, [0x14029296e]
mov rdx, rax
lea rax, [0x140298e20]
mov rcx, rax
call fcn.1400380c0
mov r9d, 0xfa
mov r8d, 0x1d2
mov edx, 0
mov ecx, 0
call fcn.14000101d
mov qword [rbp + 0x190], rax
mov rax, qword [0x140298df8]
mov edx, 1
mov rcx, rax
call fcn.1400269ac
mov qword [rbp + 0x188], rax
mov rax, qword [0x140298e88]
mov edx, 0
mov rcx, rax
call fcn.140026e3c
mov qword [rbp + 0x180], rax
mov rax, qword [0x140298e68]
mov edx, 0
mov rcx, rax
call fcn.140026e3c
mov qword [rbp + 0x178], rax
mov rax, qword [0x140298dd8]
mov edx, 1
mov rcx, rax
call fcn.140026e3c
mov qword [rbp + 0x170], rax
mov r8d, 0x28
mov edx, 0x28
mov ecx, 0x28
call fcn.14002ddd8
mov qword [rbp + 0x168], rax
mov rax, qword [0x140298e60]
mov rdx, qword [rbp + 0x168]
mov r9, 0xfffffffffffffffe
mov r8, rdx
mov rdx, 0xffffffffffffffff
mov rcx, rax
call fcn.140013f74
mov qword [rbp + 0x160], rax
mov r8d, 0
mov edx, 0
mov ecx, 0
call fcn.14002ddd8
mov qword [rbp + 0x158], rax
mov rax, qword [0x140298db8]
mov rdx, qword [rbp + 0x158]
mov rcx, rax
call fcn.14000d5b8
mov qword [rbp + 0x150], rax
mov r8d, 0xff
mov edx, 0xff
mov ecx, 0xff
call fcn.14002ddd8
mov qword [rbp + 0x148], rax
mov rax, qword [0x140298db8]
mov rdx, qword [rbp + 0x148]
mov rcx, rax
call fcn.140013ac3
mov qword [rbp + 0x140], rax
call fcn.140027ff8
mov qword [rbp + 0x138], rax
cmp qword [rbp + 0x138], 0x6d
jle 0x1400210d6
lea rax, str.dwmapi
mov rdx, rax
mov ecx, 0
call fcn.140023774
mov qword [rbp + 0x130], rax
cmp qword [rbp + 0x130], 0
je 0x1400210d9
mov qword [0x140298de0], 1
lea rax, str.DwmSetWindowAttribute
mov rdx, rax
mov ecx, 0
call fcn.1400237fc
mov qword [rbp + 0x128], rax
mov rax, qword [rbp + 0x128]
mov qword [0x140298df0], rax
mov rax, qword [0x14004f060]
mov rax, qword [rax]
mov rcx, rax
call fcn.140036c4c
mov qword [rbp + 0x120], rax
lea rax, [0x140298e18]
mov qword [rbp + 0x118], rax
mov rax, qword [0x14004f060]
mov rax, qword [rax]
mov rdx, qword [rbp + 0x118]
mov rcx, rax
call fcn.140036bd4
mov qword [rbp + 0x110], rax
cmp qword [rbp + 0x110], 0
je 0x140021098
mov rax, qword [0x140298e18]
mov rcx, rax
call fcn.140028704
mov qword [rbp + 0x108], rax
cmp qword [rbp + 0x108], 0
je 0x140021092
mov rax, qword [0x140298e18]
mov rcx, rax
call fcn.140028714
mov qword [rbp + 0x100], rax
lea rax, [0x140298de0]
mov qword [rbp + 0xf8], rax
mov r10, qword [0x140298df0]
mov rdx, qword [rbp + 0xf8]
mov rax, qword [rbp + 0x100]
mov r9d, 8
mov r8, rdx
mov edx, 0x14
mov rcx, rax
call r10
mov qword [rbp + 0xf0], rax
jmp 0x140020fe1
nop
jmp 0x140020fe1
nop
mov rax, qword [0x14004f060]
mov rax, qword [rax]
mov rcx, rax
call fcn.140036bc8
mov qword [rbp + 0xe8], rax
mov ecx, 0
call fcn.140023888
mov qword [rbp + 0xe0], rax
mov ecx, 1
call fcn.140008e3f
mov qword [rbp + 0xd8], rax
jmp 0x1400210da
nop
jmp 0x1400210da
nop
lea rax, [0x140299440]
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0xd0], rax
mov rax, qword [0x140298e20]
mov qword [rbp + 0xc8], rax
lea rax, [0x140291a5a]
mov qword [rbp + 0xc0], rax
mov rdx, qword [rbp + 0xc8]
mov rax, qword [rbp + 0xc0]
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x140021178
lea rax, [0x140290fa0]
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0xb8], rax
mov rax, qword [0x140298db8]
lea rdx, [0x140291ff0]
mov rcx, rax
call fcn.140026e90
mov qword [rbp + 0xb0], rax
mov rax, qword [0x140298e30]
lea rdx, [0x1402930b8]
mov rcx, rax
call fcn.140026e90
mov qword [rbp + 0xa8], rax
jmp 0x14002118f
nop
lea rax, [0x140291620]
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0xa0], rax
lea rax, str.OUninstall.exe__Uninstall___O2010____O2013_16____O2013_21C2R____Log____cmd_
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0x98], rax
lea rax, [0x140299440]
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0x90], rax
mov rax, qword [0x140298e20]
mov qword [rbp + 0x88], rax
lea rax, [0x140291a5a]
mov qword [rbp + 0x80], rax
mov rdx, qword [rbp + 0x88]
mov rax, qword [rbp + 0x80]
mov rcx, rax
call fcn.140038030
test eax, eax
je 0x140021206
lea rax, [0x140291610]
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0x78], rax
jmp 0x14002121a
nop
lea rax, str.Example:
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0x70], rax
lea rax, str.OUninstall.exe__Uninstall__O2010__O2013_16__O2013_21C2R__Log
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0x68], rax
lea rax, [0x140299440]
mov rcx, rax
call fcn.140011155
mov qword [rbp + 0x60], rax
call fcn.1400287dc
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x58]
mov qword [0x140298e38], rax
mov rax, qword [0x140298e38]
test rax, rax
je 0x140021303
mov rax, qword [0x140298e38]
mov qword [rbp + 0x50], rax
cmp qword [rbp + 0x50], 0x201
jne 0x1400212af
mov rax, qword [0x140298e60]
mov rcx, rax
call fcn.140028714
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x38]
mov r9d, 0
mov r8d, 2
mov edx, 0xa1
mov rcx, rax
call sub.USER32.dll_SendMessageW
mov qword [rbp + 0x30], rax
jmp 0x1400212cd
cmp qword [rbp + 0x50], 0x332c
jne 0x1400212cc
call fcn.14002b6fc
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x40], rax
jmp 0x1400212cd
nop
call fcn.14002b5d4
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x20], rax
mov rax, qword [0x140298e60]
cmp qword [rbp + 0x20], rax
jne 0x140021300
mov rax, qword [0x140298e38]
mov rcx, rax
call fcn.140007adb
mov qword [rbp + 0x18], rax
jmp 0x140021312
nop
jmp 0x140021312
nop
mov ecx, 5
call fcn.1400281f4
mov qword [rbp + 0x10], rax
mov rax, qword [0x140298da0]
mov rcx, rax
call fcn.140021e00
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
je 0x140021339
mov qword [0x140298e38], 0
jmp 0x14002133a
nop
mov rax, qword [0x140298e38]
cmp rax, 0x333c
je 0x14002134f
nop
jmp 0x140021240
nop
call fcn.140037c70
call fcn.140037c70
mov rax, qword [0x140298e80]
mov rcx, rax
call fcn.140037f90
lea rax, str._files
mov rcx, rax
call fcn.140037f90
call fcn.140037e20
mov qword [rbp], rax
mov rax, qword [rbp]
mov rcx, rax
call fcn.140029ddc
mov qword [rbp - 8], rax
call fcn.140037d40
cmp qword [rbp - 8], 0xfffffffffffffffe
jne 0x1400213f2
call fcn.140037c70
call fcn.140037c70
mov rax, qword [0x140298e80]
mov rcx, rax
call fcn.140037f90
lea rax, str._files
mov rcx, rax
call fcn.140037f90
call fcn.140037e20
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov r8d, 3
lea rdx, [0x140299440]
mov rcx, rax
call fcn.140029f58
mov qword [rbp - 0x18], rax
call fcn.140037d40
jmp 0x1400213f3
nop
call fcn.140037c70
call fcn.140037c70
call fcn.140037c70
call fcn.140037cd0
mov ecx, eax
call fcn.140022a4c
call fcn.140037e20
mov qword [rbp - 0x20], rax
mov rdx, qword [0x140298e80]
mov rax, qword [rbp - 0x20]
mov rcx, rax
call fcn.140035680
mov qword [rbp - 0x28], rax
call fcn.140037d40
cmp qword [rbp - 0x28], 0
jle 0x140021445
call fcn.140015153
mov qword [rbp - 0x30], rax
jmp 0x140021446
nop
call fcn.140021455
nop
add rsp, 0x300
pop rbp
ret