Function at 0x14002fcf0
Capabilities:
Check os version

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x780]
sub rsp, 0x880
mov rax, qword [0x14031a940]
xor rax, rsp
mov qword [rbp + 0x770], rax
xor esi, esi
xor edx, edx
mov r8d, 0x118
lea rcx, [rbp + 0x204]
call fcn.140225cd0
mov dword [rbp + 0x200], 0x11c
lea rcx, [rbp + 0x200]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
lea rdi, [rsi - 1]
lea r15, vtable.srl::GroupID.0
lea r12, vtable.srl::Name.0
test eax, eax
je 0x140030f88
cmp dword [rbp + 0x204], 6
jb 0x14002fdbb
lea r8, [rsp + 0x20]
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x28]
call fcn.14002e530
mov eax, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x28]
cmp dword [rbp + 0x204], ecx
jne 0x14002fda5
cmp dword [rbp + 0x208], eax
je 0x14002fdbb
mov dword [rbp + 0x204], ecx
mov dword [rbp + 0x208], eax
mov eax, dword [rsp + 0x20]
mov dword [rbp + 0x20c], eax
lea rcx, [rbp - 0x20]
call fcn.140019550
nop
movzx ebx, word [rbp + 0x20c]
mov edx, dword [rbp + 0x204]
lea rcx, [rbp - 0x10]
call fcn.140019750
mov rcx, rax
mov dl, 0x2e
call fcn.14002aac0
mov rcx, rax
mov edx, dword [rbp + 0x208]
call fcn.140019750
mov rcx, rax
mov dl, 0x2e
call fcn.14002aac0
mov rcx, rax
mov edx, ebx
call fcn.140019750
lea rdx, [rbp + 0x520]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
lea rdx, [rbp + 0x520]
lea rcx, [rbp - 0x40]
call fcn.1400778b0
mov rbx, rax
mov edx, 0x1168d
lea rcx, [rbp + 0x6e0]
call fcn.140022830
nop
xor r9d, r9d
mov r8, rbx
mov rdx, rax
call fcn.140050f90
nop
lea rcx, [rbp + 0x6e0]
call fcn.1400229c0
nop
lea rbx, vtable.srl::Version.0
mov qword [rbp - 0x40], rbx
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002fe81
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r14, vtable.srl::Value.0
mov qword [rbp - 0x40], r14
mov rdx, qword [rbp + 0x538]
cmp rdx, 8
jb 0x14002fed2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x520]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002fecd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031153
call fcn.1400041d4
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
mov qword [rsp + 0x50], rbx
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x140031159
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x4c0]
cmp qword [rbp + 0x4d8], 8
jb 0x14002ff2a
mov rdx, qword [rbp + 0x4c0]
test rdx, rdx
jne 0x14002ff2a
mov r8d, esi
jmp 0x14002ff3b
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14002ff30
lea rcx, [rsp + 0x58]
call fcn.140002b2c
nop
mov edx, 0x115a0
lea rcx, [rbp + 0x680]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rsp + 0x50]
mov rdx, rax
call fcn.140050f90
nop
mov qword [rbp + 0x680], r15
mov rdx, qword [rbp + 0x6a0]
cmp rdx, 8
jb 0x14002ffb6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x688]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ffb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031164
call fcn.1400041d4
movdqa xmm0, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x698], xmm0
mov word [rbp + 0x688], si
mov qword [rsp + 0x50], rbx
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x14002fff0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x50], r14
mov rdx, qword [rbp + 0x4d8]
cmp rdx, 8
jb 0x14003003b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030036
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003116a
call fcn.1400041d4
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x320]
call fcn.1400095cc
nop
lea rcx, [rbp - 8]
call fcn.14001b010
lea rdx, [rbp + 0x320]
cmp qword [rbp + 0x338], 8
cmovae rdx, qword [rbp + 0x320]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x330]
lea rcx, [rbp - 8]
call fcn.140021ee0
nop
mov rdx, qword [rbp + 0x338]
cmp rdx, 8
jb 0x1400300ca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x320]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400300c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311fa
call fcn.1400041d4
mov edx, dword [rbp + 0x204]
lea rcx, [rbp - 0x10]
call fcn.140019750
lea rdx, [rbp + 0x4e0]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
mov qword [rsp + 0x60], rbx
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x140031170
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, [rbp + 0x4e0]
cmp qword [rbp + 0x4f8], 8
jb 0x140030131
mov rdx, qword [rbp + 0x4e0]
test rdx, rdx
jne 0x140030131
mov r8d, esi
jmp 0x14003013f
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030134
lea rcx, [rsp + 0x68]
call fcn.140002b2c
nop
mov edx, 0x116c7
lea rcx, [rbp + 0x630]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rsp + 0x60]
mov rdx, rax
call fcn.140050f90
nop
mov qword [rbp + 0x630], r15
mov rdx, qword [rbp + 0x650]
cmp rdx, 8
jb 0x1400301ba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x638]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400301b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003117b
call fcn.1400041d4
movdqa xmm0, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x648], xmm0
mov word [rbp + 0x638], si
mov qword [rsp + 0x60], rbx
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400301f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x60], r14
mov rdx, qword [rbp + 0x4f8]
cmp rdx, 8
jb 0x14003023f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003023a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031181
call fcn.1400041d4
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x340]
call fcn.1400095cc
nop
lea rcx, [rbp - 8]
call fcn.14001b010
lea rdx, [rbp + 0x340]
cmp qword [rbp + 0x358], 8
cmovae rdx, qword [rbp + 0x340]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x350]
lea rcx, [rbp - 8]
call fcn.140021ee0
nop
mov rdx, qword [rbp + 0x358]
cmp rdx, 8
jb 0x1400302ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x340]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400302c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311fa
call fcn.1400041d4
mov edx, dword [rbp + 0x208]
lea rcx, [rbp - 0x10]
call fcn.140019750
lea rdx, [rbp + 0x500]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
mov qword [rsp + 0x70], rbx
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x140031187
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [rbp + 0x500]
cmp qword [rbp + 0x518], 8
jb 0x140030335
mov rdx, qword [rbp + 0x500]
test rdx, rdx
jne 0x140030335
mov r8d, esi
jmp 0x14003034b
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030340
lea rcx, [rsp + 0x78]
call fcn.140002b2c
nop
mov edx, 0x116c8
lea rcx, [rbp + 0x540]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rsp + 0x70]
mov rdx, rax
call fcn.140050f90
nop
mov qword [rbp + 0x540], r15
mov rdx, qword [rbp + 0x560]
cmp rdx, 8
jb 0x1400303c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x548]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400303c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031192
call fcn.1400041d4
movdqa xmm0, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x558], xmm0
mov word [rbp + 0x548], si
mov qword [rsp + 0x70], rbx
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030400
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x70], r14
mov rdx, qword [rbp + 0x518]
cmp rdx, 8
jb 0x14003044b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x500]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030446
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031198
call fcn.1400041d4
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x360]
call fcn.1400095cc
nop
lea rcx, [rbp - 8]
call fcn.14001b010
lea rdx, [rbp + 0x360]
cmp qword [rbp + 0x378], 8
cmovae rdx, qword [rbp + 0x360]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x370]
lea rcx, [rbp - 8]
call fcn.140021ee0
nop
mov rdx, qword [rbp + 0x378]
cmp rdx, 8
jb 0x1400304da
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x360]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400304d5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311fa
call fcn.1400041d4
movzx edx, word [rbp + 0x20c]
lea rcx, [rbp - 0x10]
call fcn.140019750
lea rdx, [rbp + 0x400]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
mov qword [rbp - 0x80], rbx
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x14003119e
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, [rbp + 0x400]
cmp qword [rbp + 0x418], 8
jb 0x140030540
mov rdx, qword [rbp + 0x400]
test rdx, rdx
jne 0x140030540
mov r8d, esi
jmp 0x14003054e
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030543
lea rcx, [rbp - 0x78]
call fcn.140002b2c
nop
mov edx, 0x116c6
lea rcx, [rbp + 0x570]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rbp - 0x80]
mov rdx, rax
call fcn.140050f90
nop
mov qword [rbp + 0x570], r15
mov rdx, qword [rbp + 0x590]
cmp rdx, 8
jb 0x1400305c7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x578]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400305c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311a9
call fcn.1400041d4
movdqa xmm0, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x588], xmm0
mov word [rbp + 0x578], si
mov qword [rbp - 0x80], rbx
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400305ff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x80], r14
mov rdx, qword [rbp + 0x418]
cmp rdx, 8
jb 0x140030649
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x400]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030644
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311af
call fcn.1400041d4
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x380]
call fcn.1400095cc
nop
lea rcx, [rbp - 8]
call fcn.14001b010
lea rdx, [rbp + 0x380]
cmp qword [rbp + 0x398], 8
cmovae rdx, qword [rbp + 0x380]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x390]
lea rcx, [rbp - 8]
call fcn.140021ee0
nop
mov rdx, qword [rbp + 0x398]
cmp rdx, 8
jb 0x1400306d8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400306d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311fa
call fcn.1400041d4
movzx edx, word [rbp + 0x314]
lea rcx, [rbp - 0x10]
call fcn.140034230
lea rdx, [rbp + 0x420]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
mov qword [rbp - 0x70], rbx
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x1400311b5
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, [rbp + 0x420]
cmp qword [rbp + 0x438], 8
jb 0x14003073e
mov rdx, qword [rbp + 0x420]
test rdx, rdx
jne 0x14003073e
mov r8d, esi
jmp 0x14003074c
mov r8, rdi
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030741
lea rcx, [rbp - 0x68]
call fcn.140002b2c
nop
mov edx, 0x116c4
lea rcx, [rbp + 0x5a0]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rbp - 0x70]
mov rdx, rax
call fcn.140050f90
nop
mov qword [rbp + 0x5a0], r15
mov rdx, qword [rbp + 0x5c0]
cmp rdx, 8
jb 0x1400307c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400307c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311c0
call fcn.1400041d4
movdqa xmm0, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x5b8], xmm0
mov word [rbp + 0x5a8], si
mov qword [rbp - 0x70], rbx
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400307fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x70], r14
mov rdx, qword [rbp + 0x438]
cmp rdx, 8
jb 0x140030847
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x420]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030842
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311c6
call fcn.1400041d4
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x3a0]
call fcn.1400095cc
nop
lea rcx, [rbp - 8]
call fcn.14001b010
lea rdx, [rbp + 0x3a0]
cmp qword [rbp + 0x3b8], 8
cmovae rdx, qword [rbp + 0x3a0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3b0]
lea rcx, [rbp - 8]
call fcn.140021ee0
nop
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 8
jb 0x1400308d6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400308d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311fa
call fcn.1400041d4
movzx edx, word [rbp + 0x316]
lea rcx, [rbp - 0x10]
call fcn.140034230
lea rdx, [rbp + 0x440]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
mov qword [rbp - 0x60], rbx
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x1400311cc
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, [rbp + 0x440]
cmp qword [rbp + 0x458], 8
jb 0x14003093c
mov rdx, qword [rbp + 0x440]
test rdx, rdx
jne 0x14003093c
mov r8d, esi
jmp 0x14003094b
mov r8, rdi
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030940
lea rcx, [rbp - 0x58]
call fcn.140002b2c
nop
mov edx, 0x116c5
lea rcx, [rbp + 0x5d0]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rbp - 0x60]
mov rdx, rax
call fcn.140050f90
nop
mov qword [rbp + 0x5d0], r15
mov rdx, qword [rbp + 0x5f0]
cmp rdx, 8
jb 0x1400309c4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x5d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400309bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311d7
call fcn.1400041d4
movdqa xmm0, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x5e8], xmm0
mov word [rbp + 0x5d8], si
mov qword [rbp - 0x60], rbx
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400309fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp + 0x458]
cmp rdx, 8
jb 0x140030a46
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030a41
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311dd
call fcn.1400041d4
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x3c0]
call fcn.1400095cc
nop
lea rcx, [rbp - 8]
call fcn.14001b010
lea rdx, [rbp + 0x3c0]
cmp qword [rbp + 0x3d8], 8
cmovae rdx, qword [rbp + 0x3c0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3d0]
lea rcx, [rbp - 8]
call fcn.140021ee0
nop
mov rdx, qword [rbp + 0x3d8]
cmp rdx, 8
jb 0x140030ad5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030ad0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311fa
call fcn.1400041d4
movzx edx, word [rbp + 0x318]
lea rcx, [rbp - 0x10]
call fcn.140034230
lea rdx, [rbp + 0x460]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
mov qword [rsp + 0x30], r12
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x1400311e3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x460]
cmp qword [rbp + 0x478], 8
jb 0x140030b44
mov rdx, qword [rbp + 0x460]
test rdx, rdx
jne 0x140030b44
lea rcx, [rsp + 0x38]
call fcn.140002944
jmp 0x140030b66
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030b50
lea rcx, [rsp + 0x38]
call fcn.140002b2c
nop
mov edx, 0x116c3
lea rcx, [rbp + 0x600]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rsp + 0x30]
mov rdx, rax
call fcn.140050f90
nop
mov qword [rbp + 0x600], r15
mov rdx, qword [rbp + 0x620]
cmp rdx, 8
jb 0x140030bd6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x608]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030bd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311ee
call fcn.1400041d4
movdqa xmm0, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x618], xmm0
mov word [rbp + 0x608], si
mov qword [rsp + 0x30], r12
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030c10
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x30], r14
mov rdx, qword [rbp + 0x478]
cmp rdx, 8
jb 0x140030c5b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x460]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030c56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311f4
call fcn.1400041d4
lea rdx, [0x1402c7950]
lea rcx, [rbp + 0x3e0]
call fcn.1400095cc
nop
lea rcx, [rbp - 8]
call fcn.14001b010
lea rdx, [rbp + 0x3e0]
cmp qword [rbp + 0x3f8], 8
cmovae rdx, qword [rbp + 0x3e0]
mov r9d, dword [rbp + 0x68]
mov r8, qword [rbp + 0x3f0]
lea rcx, [rbp - 8]
call fcn.140021ee0
nop
mov rdx, qword [rbp + 0x3f8]
cmp rdx, 8
jb 0x140030cea
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030ce5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311fa
call fcn.1400041d4
movzx edx, byte [rbp + 0x31a]
lea rcx, [rbp - 0x10]
call fcn.140013030
lea rdx, [rbp + 0x480]
lea rcx, [rbp - 8]
call fcn.14001a150
nop
mov qword [rsp + 0x40], r12
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x140031200
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x480]
cmp qword [rbp + 0x498], 8
jb 0x140030d59
mov rdx, qword [rbp + 0x480]
test rdx, rdx
jne 0x140030d59
lea rcx, [rsp + 0x48]
call fcn.140002944
jmp 0x140030d76
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140030d60
lea rcx, [rsp + 0x48]
call fcn.140002b2c
nop
mov edx, 0x116c2
lea rcx, [rbp + 0x710]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rsp + 0x40]
mov rdx, rax
call fcn.140050f90
nop
lea rcx, [rbp + 0x710]
call fcn.1400229c0
nop
mov qword [rsp + 0x40], r12
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030dc9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x40], r14
mov rdx, qword [rbp + 0x498]
cmp rdx, 8
jb 0x140030e14
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x480]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030e0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003120b
call fcn.1400041d4
call qword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov ebx, eax
lea rcx, [rbp + 0x100]
call fcn.140019550
nop
mov rcx, qword [rbp + 0x110]
movsxd rdx, dword [rcx + 4]
mov ecx, dword [rbp + rdx + 0x128]
and ecx, 0xfffff9ff
bts ecx, 0xb
mov dword [rbp + rdx + 0x128], ecx
mov edx, 4
lea rcx, [rbp + 0xe8]
call fcn.1402237e0
mov rcx, qword [rbp + 0x110]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x110]
add rcx, rdx
mov rdx, qword [rax + 8]
call qword [rax]
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
mov eax, 0x30
mov word [rbp + rcx + 0x168], ax
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
or dword [rbp + rcx + 0x128], 4
mov edx, ebx
lea rcx, [rbp + 0x110]
call fcn.140019750
lea rdx, [rbp + 0x660]
lea rcx, [rbp + 0x118]
call fcn.14001a150
nop
lea rdx, [rbp + 0x660]
lea rcx, [rbp - 0x30]
call fcn.14004c420
mov rbx, rax
mov edx, 0x116dc
lea rcx, [rbp + 0x740]
call fcn.140022830
nop
xor r9d, r9d
mov r8, rbx
mov rdx, rax
call fcn.140050f90
nop
lea rcx, [rbp + 0x740]
call fcn.1400229c0
nop
mov qword [rbp - 0x30], r12
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140030f27
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x30], r14
mov rdx, qword [rbp + 0x678]
cmp rdx, 8
jb 0x140030f72
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x660]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030f6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031211
call fcn.1400041d4
nop
lea rcx, [rbp + 0x100]
call fcn.140019440
nop
lea rcx, [rbp - 0x20]
call fcn.140019440
mov rax, qword [0x140329c68]
test rax, rax
jne 0x140030fbe
mov ecx, 0xd8
call fcn.1400850d8
mov qword [rbp + 0xe0], rax
test rax, rax
je 0x140030fb4
mov rcx, rax
call fcn.140010cc0
jmp 0x140030fb7
mov rax, rsi
mov qword [0x140329c68], rax
mov rdx, qword [rax + 0x10]
lea rcx, [rbp + 0x4a0]
call fcn.1400095cc
nop
mov qword [rbp - 0x50], r12
call fcn.1400102e4
mov rcx, rax
test rax, rax
je 0x140031217
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rdx, [rbp + 0x4a0]
cmp qword [rbp + 0x4b8], 8
jb 0x14003101a
mov rdx, qword [rbp + 0x4a0]
test rdx, rdx
jne 0x14003101a
lea rcx, [rbp - 0x48]
call fcn.140002944
jmp 0x140031035
mov r8, rdi
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140031020
lea rcx, [rbp - 0x48]
call fcn.140002b2c
nop
mov edx, 0x11627
lea rcx, [rbp + 0x6b0]
call fcn.140022830
nop
xor r9d, r9d
lea r8, [rbp - 0x50]
mov rdx, rax
call fcn.140050f90
nop
mov qword [rbp + 0x6b0], r15
mov rdx, qword [rbp + 0x6d0]
cmp rdx, 8
jb 0x1400310a4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x6b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003109f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140031222
call fcn.1400041d4
movdqa xmm0, xmmword [0x1402d3620]
movdqu xmmword [rbp + 0x6c8], xmm0
mov word [rbp + 0x6b8], si
mov qword [rbp - 0x50], r12
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], edi
sub edi, 1
jg 0x1400310db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x4b8]
cmp rdx, 8
jb 0x14003111d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140031118
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003114d
call fcn.1400041d4
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.140220e50
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14022a144
nop
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
nop
call fcn.14022a144
int3
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
nop
call fcn.14022a144
nop
mov ecx, 0x80004005
call fcn.140002dfc
nop
call fcn.14022a144
int3