Function at 0x140044c90
Capabilities:
Get file version info
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb20]
sub rsp, 0xc20
mov rax, qword [0x14030b918]
xor rax, rsp
mov qword [rbp + 0xb10], rax
mov r12, rcx
mov byte [rbp - 0x10], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e5e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 8], rax
mov r8d, 2
lea rdx, [0x1402bb100]
lea rcx, [rbp - 8]
call fcn.140002aa8
mov rbx, qword [rbp - 8]
mov r9, rbx
xor r8d, r8d
mov edx, 0x1175e
mov rcx, qword [r12]
call fcn.14001dde0
nop
lea rdx, [rbx - 0x18]
mov r15, 0xffffffffffffffff
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140044d3e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x58], rax
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e53
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [0x1402c0228]
cmp rdx, 0x10000
jae 0x140044d87
movzx edx, dx
lea rcx, [rsp + 0x78]
call fcn.140010ac0
jmp 0x140044da8
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140044d90
mov r8d, eax
lea rcx, [rsp + 0x78]
call fcn.140002aa8
nop
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e53
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x80]
call fcn.140002bd8
mov edx, 0x2c
lea rcx, [rbp - 0x80]
call fcn.14003f120
mov r9, qword [rbp - 0x80]
xor r8d, r8d
mov edx, 0x1175f
mov rcx, qword [r12]
call fcn.14001dde0
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140044e17
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140044e36
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e5e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e69
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, str.C:Program_Files__x86_MicrosoftEdgeApplicationmsedge.exe
cmp rdx, 0x10000
jae 0x140044e95
movzx edx, dx
lea rcx, [rsp + 0x68]
call fcn.140010ac0
jmp 0x140044eb8
mov rax, r15
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140044ea0
mov r8d, eax
lea rcx, [rsp + 0x68]
call fcn.140002aa8
nop
lea rdx, [rbp - 0x78]
mov rbx, qword [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoSizeW]
mov edi, eax
test eax, eax
jne 0x140044edb
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400453df
mov rcx, rdi
call fcn.140221170
mov r13, rax
test rax, rax
je 0x1400453df
mov r9, rax
mov r8d, edi
mov edx, dword [rbp - 0x78]
mov rcx, rbx
call qword [sym.imp.VERSION.dll_GetFileVersionInfoW]
mov rcx, r13
test eax, eax
je 0x1400453da
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x18]
lea rdx, [0x1402c035c]
call qword [sym.imp.VERSION.dll_VerQueryValueW]
test eax, eax
je 0x1400453d7
mov rdx, qword [rbp - 0x18]
mov ecx, dword [rdx + 8]
mov r14d, ecx
shr r14d, 0x10
movzx esi, cx
mov ecx, dword [rdx + 0xc]
mov edi, ecx
shr edi, 0x10
movzx ebx, cx
mov rcx, r13
call fcn.14021e060
mov r9d, esi
mov r8d, r14d
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], edi
lea rdx, str._d._d._d._d
lea rcx, [rsp + 0x70]
call fcn.140041e20
mov rdi, qword [rsp + 0x70]
lea rcx, [rdi - 0x18]
call fcn.140002c68
add rax, 0x18
mov qword [rbp - 0x60], rax
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x58]
call fcn.140002bd8
mov edx, 0x2c
lea rcx, [rbp - 0x58]
call fcn.14003f120
mov rbx, qword [rbp - 0x58]
mov r9, rbx
xor r8d, r8d
mov edx, 0x1175f
mov rcx, qword [r12]
call fcn.14001dde0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140044fef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004500d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp], 1
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 8], rax
mov r8d, 3
lea rdx, [0x1402c52b8]
lea rcx, [rbp + 8]
call fcn.140002aa8
mov rbx, qword [rbp + 8]
mov r9, rbx
xor r8d, r8d
mov edx, 0x1175e
mov rcx, qword [r12]
call fcn.14001dde0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045079
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.Edge
cmp rdx, 0x10000
jae 0x1400450b6
movzx edx, dx
lea rcx, [rbp - 0x70]
call fcn.140010ac0
jmp 0x1400450d7
mov rax, r15
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400450c0
mov r8d, eax
lea rcx, [rbp - 0x70]
call fcn.140002aa8
nop
mov rbx, qword [rbp - 0x70]
mov r9, rbx
mov r8d, dword [0x14031aca0]
mov edx, 0x116b9
mov rcx, qword [r12]
call fcn.14001dde0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004510e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rdi - 0x18]
call fcn.140002c68
add rax, 0x18
mov qword [rbp - 0x50], rax
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov edi, dword [0x14031aca0]
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x48]
call fcn.140002bd8
mov edx, 0x2c
lea rcx, [rbp - 0x48]
call fcn.14003f120
mov rbx, qword [rbp - 0x48]
mov r9, rbx
mov r8d, edi
mov edx, 0x116b8
mov rcx, qword [r12]
call fcn.14001dde0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045192
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400451b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x10], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x18], rax
lea r9, [rbp + 0x10]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177b
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14004520a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x20], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x28], rax
lea r9, [rbp + 0x20]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177e
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045264
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x30], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x38], rax
lea r9, [rbp + 0x30]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177c
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400452be
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x40], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x48], rax
lea r9, [rbp + 0x40]
mov r8d, dword [0x14031aca0]
mov edx, 0x11780
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045318
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x50], 1
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
lea r9, [rbp + 0x50]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177f
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045372
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x60], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e74
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
lea r9, [rbp + 0x60]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177d
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400453cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc dword [0x14031aca0]
jmp 0x140045629
mov rcx, r13
call fcn.14021e060
lea rdx, [rbp + 0xe0]
lea rcx, str.windows_systemappsmicrosoft.microsoftedge_
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
jne 0x140045462
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045414
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r15d
sub r15d, 1
jg 0x140045432
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp + 0xb10]
xor rcx, rsp
call fcn.140211970
lea r11, [rsp + 0xc20]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140010210
nop
mov rcx, rax
test rax, rax
je 0x140045e7f
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, str.windows_systemapps_
cmp rdx, 0x10000
jae 0x1400454a2
movzx edx, dx
lea rcx, [rsp + 0x48]
call fcn.140010ac0
jmp 0x1400454bd
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400454a5
mov r8d, eax
lea rcx, [rsp + 0x48]
call fcn.140002aa8
nop
lea rcx, [rbp + 0x10c]
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400454d0
lea r13, [rbp + 0x10c]
lea rsi, [rbp + 0x10c]
mov rbx, qword [rsp + 0x48]
sub rsi, rbx
sar rsi, 1
mov r14d, dword [rbx - 0x10]
test eax, eax
js 0x140045eb1
movsxd rdx, eax
lea rcx, [rbp + 0x10c]
call fcn.14021de88
mov rdx, rax
mov qword [rsp + 0x58], rax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, r14d
jl 0x140045eb1
lea edi, [rax + r14]
test edi, edi
js 0x140045eb1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x140045559
mov edx, edi
lea rcx, [rsp + 0x48]
call fcn.140002a48
mov rbx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
cmp rsi, r14
ja 0x140045562
lea r13, [rbx + rsi*2]
lea rcx, [rbx + r14*2]
movsxd r8, edx
add r8, r8
je 0x140045599
test rcx, rcx
je 0x140045589
test r13, r13
je 0x140045582
mov rdx, r13
call fcn.1402160f0
jmp 0x140045599
xor edx, edx
call fcn.1402167a0
call fcn.14021aadc
mov dword [rax], 0x16
call fcn.14021a98c
cmp edi, dword [rbx - 0xc]
jg 0x140045eb1
mov dword [rbx - 0x10], edi
movsxd rax, edi
xor edi, edi
mov word [rbx + rax*2], di
lea rdx, str._appxmanifest.xml
mov rax, r15
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], di
jne 0x1400455c0
mov r8d, eax
lea rcx, [rsp + 0x48]
call fcn.140005abc
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rbx, qword [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140045637
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045629
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
jmp 0x1400453fd
mov dword [rsp + 0x60], edi
mov qword [rsp + 0x20], rdi
lea r9, [rsp + 0x60]
mov r8d, 0x7d0
lea rdx, [rbp + 0x330]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140045e45
mov eax, dword [rsp + 0x60]
cmp rax, 0x7d2
jae 0x140045eab
mov byte [rbp + rax + 0x330], dil
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e8a
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x330]
lea rcx, [rsp + 0x50]
cmp rax, 0x10000
jae 0x1400456c0
lea rax, [rbp + 0x330]
movzx edx, ax
call fcn.140010ac0
jmp 0x1400456cd
lea rdx, [rbp + 0x330]
call fcn.140012ad0
nop
mov rbx, qword [rsp + 0x50]
cmp dword [rbx - 0x10], 0
jl 0x140045e26
lea rdx, str.Version
mov rcx, rbx
call fcn.140215c28
mov rdi, rax
test rax, rax
je 0x140045e26
sub rdi, rbx
sar rdi, 1
test edi, edi
js 0x140045e26
cmp dword [rbx - 0x10], 0
jle 0x140045e26
mov edx, 0x22
mov rcx, rbx
call fcn.140216044
test rax, rax
je 0x140045e26
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140045e26
lea r8d, [rdi + 9]
mov r9d, eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400128c0
nop
mov rbx, qword [rsp + 0x40]
cmp dword [rbx - 0x10], 0
jle 0x140045e07
lea rdx, str.20.10240
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x140045790
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140045790
lea rdx, str.12.10240
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x140045781
jmp 0x14004599a
cmp dword [rbx - 0x10], 0
jl 0x1400459ac
lea rdx, str.25.10586
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x1400457d1
sub rax, rbx
sar rax, 1
test eax, eax
js 0x1400457d1
lea rdx, str.13.10586
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400457c2
jmp 0x14004599a
cmp dword [rbx - 0x10], 0
jl 0x1400459ac
lea rdx, str.38.14393
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x140045812
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140045812
lea rdx, str.14.14393
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x140045803
jmp 0x14004599a
cmp dword [rbx - 0x10], 0
jl 0x1400459ac
lea rdx, str.40.15063
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x140045853
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140045853
lea rdx, str.15.15063
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x140045844
jmp 0x14004599a
cmp dword [rbx - 0x10], 0
jl 0x1400459ac
lea rdx, str.41.16299
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x140045894
sub rax, rbx
sar rax, 1
test eax, eax
js 0x140045894
lea rdx, str.16.16299
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x140045885
jmp 0x14004599a
cmp dword [rbx - 0x10], 0
jl 0x1400459ac
lea rdx, str.42.17134
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x1400458d5
sub rax, rbx
sar rax, 1
test eax, eax
js 0x1400458d5
lea rdx, str.17.17134
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400458c6
jmp 0x14004599a
cmp dword [rbx - 0x10], 0
jl 0x1400459ac
lea rdx, str.44.17763
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x14004591c
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14004591c
lea rdx, str.18.17763
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140045910
jmp 0x14004599a
cmp dword [rbx - 0x10], 0
jl 0x1400459ac
lea rdx, str.44.18362
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x14004595c
sub rax, rbx
sar rax, 1
test eax, eax
js 0x14004595c
lea rdx, str.18.18363
mov rax, r15
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x140045950
jmp 0x14004599a
cmp dword [rbx - 0x10], 0
jl 0x1400459ac
lea rdx, str.44.19041
mov rcx, rbx
call fcn.140215c28
test rax, rax
je 0x1400459ac
sub rax, rbx
sar rax, 1
test eax, eax
js 0x1400459ac
lea rdx, str.18.19041
mov rax, r15
nop word [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140045990
mov r8d, eax
lea rcx, [rsp + 0x40]
call fcn.140002aa8
mov rbx, qword [rsp + 0x40]
lea rdi, [rbx - 0x18]
mov rcx, rdi
call fcn.140002c68
add rax, 0x18
mov qword [rbp - 0x40], rax
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045ea0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x40]
xor r8d, r8d
mov edx, 0x1175f
mov rcx, r12
call fcn.14006e2f0
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045a12
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045a30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x70], 1
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045ea0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x78], rax
lea r9, [rbp + 0x70]
xor r8d, r8d
mov edx, 0x1175e
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045a86
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045ea0
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.Edge
cmp rdx, 0x10000
jae 0x140045ac3
movzx edx, dx
lea rcx, [rbp - 0x68]
call fcn.140010ac0
jmp 0x140045add
mov rax, r15
inc rax
cmp word [rdx + rax*2], 0
jne 0x140045ac6
mov r8d, eax
lea rcx, [rbp - 0x68]
call fcn.140002aa8
nop
mov rbx, qword [rbp - 0x68]
mov r9, rbx
mov r8d, dword [0x14031aca0]
mov edx, 0x116b9
mov rcx, qword [r12]
call fcn.14001dde0
nop
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045b14
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rdi
call fcn.140002c68
add rax, 0x18
mov qword [rbp - 0x30], rax
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e95
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
lea r9, [rbp - 0x30]
mov r8d, dword [0x14031aca0]
mov edx, 0x116b8
mov rcx, r12
call fcn.14006e2f0
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045b7a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045b98
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x80], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e95
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x88], rax
lea r9, [rbp + 0x80]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177b
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045bfe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0x90], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e95
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x98], rax
lea r9, [rbp + 0x90]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177e
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045c64
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0xa0], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e95
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xa8], rax
lea r9, [rbp + 0xa0]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177c
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045cca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0xb0], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e95
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xb8], rax
lea r9, [rbp + 0xb0]
mov r8d, dword [0x14031aca0]
mov edx, 0x11780
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045d30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0xc0], 1
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e95
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xc8], rax
lea r9, [rbp + 0xc0]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177f
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045d96
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov byte [rbp + 0xd0], 0
call fcn.140010210
mov rcx, rax
test rax, rax
je 0x140045e95
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0xd8], rax
lea r9, [rbp + 0xd0]
mov r8d, dword [0x14031aca0]
mov edx, 0x1177d
mov rcx, r12
call fcn.14006e270
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045dfc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc dword [0x14031aca0]
mov rbx, qword [rsp + 0x40]
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045e21
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x50]
lea rdx, [rbx - 0x18]
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140045e40
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rsp + 0x48]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14004560e
mov ecx, 0x80004005
call fcn.140002d2c
int3
mov ecx, 0x80004005
call fcn.140002d2c
nop
mov ecx, 0x80004005
call fcn.140002d2c
nop
mov ecx, 0x80004005
call fcn.140002d2c
int3
mov ecx, 0x80004005
call fcn.140002d2c
nop
mov ecx, 0x80004005
call fcn.140002d2c
nop
mov ecx, 0x80004005
call fcn.140002d2c
int3
mov ecx, 0x80004005
call fcn.140002d2c
nop
call fcn.140211fac
int3
mov ecx, 0x80070057
call fcn.140002d2c
int3