Function at 0x140097ee0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7c0]
sub rsp, 0x8c0
mov rbx, rdx
mov qword [rsp + 0x48], rdx
lea rdx, [0x1400fdec8]
mov rcx, r9
mov rsi, r9
mov r14, r8
call fcn.1400c900c
lea r12, [0x140000000]
test eax, eax
movzx eax, byte [r14 + 8]
sete dil
add eax, 0xfffffff3
cmp eax, 5
ja case.default.0x140097f4c
cdqe
mov ecx, dword [r12 + rax*4 + 0x99d98]
add rcx, r12
jmp rcx
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
test byte [r14 + 9], 0x80
je 0x140097f6b
mov edx, 0x472
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140097f77
mov edx, 0x468
call qword [sym.imp.USER32.dll_SendMessageW]
cwde
mov rcx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, eax
call fcn.140001090
mov eax, 1
jmp 0x140099d7d
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x400
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, r14
mov rdx, rax
call fcn.14009c7b0
jmp 0x140097f77
test dil, dil
jne 0x140097f85
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140097f77
mov rcx, qword [r14]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
lea r13, [0x1400e14ec]
test eax, eax
jne 0x140098032
movzx ecx, word [rsp + 0x5a]
movzx edx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5c]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
lea rdx, [0x1400ff6c8]
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400c96bc
lea r14, [rbp - 0x40]
jmp 0x140098035
mov r14, r13
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x14009805d
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r14
mov byte [rsp + 0x20], 1
call fcn.1400afc70
mov r12d, eax
jmp 0x140099d7a
xor esi, esi
mov r9b, 1
test r14, r14
jne 0x140098072
xor r9b, r9b
mov r15d, esi
mov r14, r13
jmp 0x140098094
cmp qword [rbx + 8], r14
jne 0x140098081
mov r15, qword [rbx + 0x10]
shr r15, 1
jmp 0x140098094
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r14
repne scasw ax, word [rdi]
not rcx
lea r15, [rcx - 1]
lea rax, [r15 + 1]
lea r12, [rax + rax]
cmp dl, 2
jne 0x1400980b4
mov rdx, r15
mov rcx, r14
call fcn.1400060a0
mov r12d, eax
jmp 0x140099d7a
mov r8, qword [0x140111460]
cmp r12, r8
jbe 0x1400980e4
cmp r12, qword [rbx + 0x18]
jbe 0x1400980e4
mov r8, r13
lea rdx, [0x1400fddf0]
lea rcx, [0x1401181e0]
call fcn.1400401e0
mov r12d, eax
jmp 0x140099d7a
cmp rax, 2
jae 0x14009810a
test r9b, r9b
mov rcx, rbx
setne sil
xor r8d, r8d
lea edx, [rsi + 3]
call fcn.1400b0320
mov r12d, 1
jmp 0x140099d7a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140098127
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140111460]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r12, r9
jbe 0x14009829d
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x14009815e
cmp al, 2
je 0x14009819c
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140098291
mov edi, 0x80
cmp r12, rdi
ja 0x14009819c
cmp r12, 8
ja 0x140098175
mov edi, 8
jmp 0x140098182
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r12, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a8f20
test rax, rax
je 0x1400988ab
mov byte [rbx + 0x20], 1
jmp 0x140098291
cmp r12, 0x20
jae 0x1400981ac
mov edi, SafeArrayAllocDescriptor
jmp 0x140098258
mov edi, 0x208
cmp r12, rdi
jb 0x140098258
cmp r12, 0x50000
jae 0x140098212
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x1400981d9
addsd xmm0, qword [0x1400ffd58]
mulsd xmm0, qword [0x1400ffd90]
movsd xmm1, qword [0x1400ffd88]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x140098208
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140098208
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x140098258
cmp r12, 0x320000
jae 0x140098225
lea rdi, [r12 + 0x8000]
jmp 0x140098258
cmp r12, 0xc80000
jae 0x140098250
movabs rax, 0x47ae147ae147ae15
mov rdi, r12
mul r12
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r12
jmp 0x140098258
lea rdi, [r12 + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x140098278
test r9, r9
je 0x140098278
mov rcx, qword [rbx + 8]
mov r12b, 1
call fcn.1400c9b30
jmp 0x14009827b
xor r12b, r12b
test rdi, rdi
js 0x1400982cd
mov rcx, rdi
call fcn.1400c9094
test rax, rax
je 0x1400982cd
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, r14
je 0x1400982b2
lea r8, [r15 + r15]
mov rdx, r14
call fcn.1400c9cf0
lea rcx, [r15 + r15]
mov rax, qword [rbx + 8]
mov r12d, 1
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x140099d7a
test r12b, r12b
je 0x1400982e3
lea rax, [0x140118198]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x1400982ea
mov rax, qword [rbx + 8]
mov word [rax], si
lea rdx, [0x1400e4580]
lea rcx, [0x1401181e0]
mov r8, r13
mov qword [rbx + 0x10], rsi
call fcn.1400401e0
mov r12d, eax
jmp 0x140099d7a
mov rcx, qword [r14]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r14]
xor r8d, r8d
lea r9, [rsp + 0x50]
test al, 2
je 0x14009854c
mov edx, 0x1005
call qword [sym.imp.USER32.dll_SendMessageW]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5a]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rdx, [0x1400ff6c8]
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400c96bc
mov edx, 0x2d
mov word [rbp - 0x30], dx
lea rcx, [rbp - 0x2e]
lea rdx, [rsp + 0x60]
call fcn.1400ab9e0
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x1400983b7
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea r8d, [r9 + 0x11]
mov byte [rsp + 0x20], 1
call fcn.1400afc70
mov esi, eax
jmp 0x140099d7d
cmp dl, 2
jne 0x1400983d1
lea rcx, [rbp - 0x40]
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElemsize
call fcn.1400060a0
mov esi, eax
jmp 0x140099d7d
mov rcx, qword [0x140111460]
cmp rcx, 0x24
jae 0x140098406
cmp qword [rbx + 0x18], 0x24
jae 0x140098406
lea r8, [0x1400e14ec]
lea rdx, [0x1400fddf0]
lea rcx, [0x1401181e0]
call fcn.1400401e0
mov esi, eax
jmp 0x140099d7d
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140098423
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140111460]
mov rax, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rax, 0x24
jae 0x140098512
movzx r8d, byte [rbx + 0x20]
movzx edx, r8b
cmp r8b, 1
jbe 0x1400984e6
cmp dl, 2
je 0x140098460
mov rsi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140098506
mov edi, 0x208
cmp rcx, rdi
mov esi, edi
cmovb rsi, rcx
cmp r8b, 2
jne 0x140098487
test rax, rax
je 0x140098487
mov rcx, qword [rbx + 8]
mov dil, 1
call fcn.1400c9b30
jmp 0x14009848a
xor dil, dil
test rsi, rsi
js 0x1400984a2
mov rcx, rsi
call fcn.1400c9094
test rax, rax
je 0x1400984a2
mov byte [rbx + 0x20], 2
jmp 0x140098506
xor esi, esi
test dil, dil
je 0x1400984ba
lea rax, [0x140118198]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x1400984c1
mov rax, qword [rbx + 8]
mov word [rax], si
lea r8, [0x1400e14ec]
lea rdx, [0x1400e4580]
lea rcx, [0x1401181e0]
mov qword [rbx + 0x10], rsi
call fcn.1400401e0
mov esi, eax
jmp 0x140099d7d
mov edi, 0x80
mov ecx, edi
mov esi, edi
call fcn.1400a8f20
test rax, rax
jne 0x140098502
xor esi, esi
mov eax, esi
jmp 0x140099d7d
mov byte [rbx + 0x20], 1
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x14009852e
lea rdx, [rbp - 0x40]
mov r8d, SafeArrayAllocDescriptor
call fcn.1400c9cf0
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax + 0x22], si
mov esi, 1
mov qword [rbx + 0x10], SafeArrayAllocDescriptor
mov eax, esi
jmp 0x140099d7d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5a]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rdx, [0x1400ff6c8]
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400c96bc
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x1400985bf
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea r8d, [r9 + 8]
mov byte [rsp + 0x20], 1
call fcn.1400afc70
mov esi, eax
jmp 0x140099d7d
cmp dl, 2
jne 0x1400985d9
lea rcx, [rbp - 0x40]
mov edx, 8
call fcn.1400060a0
mov esi, eax
jmp 0x140099d7d
mov rcx, qword [0x140111460]
cmp rcx, 0x12
jae 0x14009860e
cmp qword [rbx + 0x18], 0x12
jae 0x14009860e
lea r8, [0x1400e14ec]
lea rdx, [0x1400fddf0]
lea rcx, [0x1401181e0]
call fcn.1400401e0
mov esi, eax
jmp 0x140099d7d
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009862b
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140111460]
mov rax, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rax, 0x12
jae 0x140098718
movzx r8d, byte [rbx + 0x20]
movzx edx, r8b
cmp r8b, 1
jbe 0x1400986ee
cmp dl, 2
je 0x140098668
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14009870c
mov edi, SafeArrayAllocDescriptor
cmp rcx, rdi
cmovb rdi, rcx
cmp r8b, 2
jne 0x14009868d
test rax, rax
je 0x14009868d
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400c9b30
jmp 0x140098690
xor sil, sil
test rdi, rdi
js 0x1400986a8
mov rcx, rdi
call fcn.1400c9094
test rax, rax
je 0x1400986a8
mov byte [rbx + 0x20], 2
jmp 0x14009870c
test sil, sil
je 0x1400986c0
lea rax, [0x140118198]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x1400986c9
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1400e14ec]
lea rdx, [0x1400e4580]
lea rcx, [0x1401181e0]
mov qword [rbx + 0x10], rsi
call fcn.1400401e0
mov esi, eax
jmp 0x140099d7d
mov edi, 0x80
mov ecx, edi
call fcn.1400a8f20
test rax, rax
jne 0x140098708
xor esi, esi
mov eax, esi
jmp 0x140099d7d
mov byte [rbx + 0x20], 1
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rcx, rax
je 0x140098737
lea rdx, [rbp - 0x40]
mov r8d, r13d
call fcn.1400c9cf0
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax + 0x10], si
mov esi, 1
mov qword [rbx + 0x10], r13
mov eax, esi
jmp 0x140099d7d
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.14009c520
movzx r11d, byte [rbx + 0x23]
test r11b, r11b
jne 0x14009879c
mov rcx, qword [rbx + 0x10]
lea rdx, [rbp - 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400afc70
mov r12d, eax
jmp 0x140099d7a
lea rax, [rbp - 0x40]
cmp qword [rbx + 8], rax
jne 0x1400987af
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x1400987c3
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rsi, [rax + rax]
cmp r11b, 2
jne 0x1400987e6
lea rcx, [rbp - 0x40]
mov rdx, r12
call fcn.1400060a0
mov r12d, eax
jmp 0x140099d7a
mov rcx, qword [0x140111460]
cmp rsi, rcx
jbe 0x140098804
cmp rsi, qword [rbx + 0x18]
jbe 0x140098804
lea r8, [0x1400e14ec]
jmp 0x1400980c9
cmp rax, 2
jae 0x140098824
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400b0320
mov r12d, 1
jmp 0x140099d7a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140098841
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140111460]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x1400989bb
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140098878
cmp al, 2
je 0x1400988bc
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x1400989af
mov edi, 0x80
cmp rsi, rdi
ja 0x1400988bc
cmp rsi, 8
ja 0x14009888f
mov edi, 8
jmp 0x14009889c
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a8f20
test rax, rax
jne 0x1400988b3
xor esi, esi
mov r12d, esi
jmp 0x140099d7a
mov byte [rbx + 0x20], 1
jmp 0x1400989af
cmp rsi, 0x20
jae 0x1400988cc
mov edi, SafeArrayAllocDescriptor
jmp 0x140098976
mov edi, 0x208
cmp rsi, rdi
jb 0x140098976
cmp rsi, 0x50000
jae 0x140098932
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x1400988f9
addsd xmm0, qword [0x1400ffd58]
mulsd xmm0, qword [0x1400ffd90]
movsd xmm1, qword [0x1400ffd88]
xor edx, edx
comisd xmm0, xmm1
jbe 0x140098928
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140098928
movabs rax, 0x8000000000000000
mov rdx, rax
cvttsd2si rdi, xmm0
add rdi, rdx
jmp 0x140098976
cmp rsi, 0x320000
jae 0x140098944
lea rdi, [rsi + 0x8000]
jmp 0x140098976
cmp rsi, 0xc80000
jae 0x14009896f
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140098976
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x140098996
test r8, r8
je 0x140098996
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400c9b30
jmp 0x140098999
xor sil, sil
test rdi, rdi
js 0x1400989e0
mov rcx, rdi
call fcn.1400c9094
test rax, rax
je 0x1400989e0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x1400989d5
lea rdx, [rbp - 0x40]
lea r8, [r12 + r12]
call fcn.1400c9cf0
lea rcx, [r12 + r12]
xor esi, esi
jmp 0x1400982b6
test sil, sil
je 0x1400989f8
lea rax, [0x140118198]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x140098a01
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1400e14ec]
lea rdx, [0x1400e4580]
lea rcx, [0x1401181e0]
mov qword [rbx + 0x10], rsi
call fcn.1400401e0
mov r12d, eax
jmp 0x140099d7a
lea rdx, [0x1400e4de0]
mov rcx, rsi
call fcn.1400c900c
test eax, eax
je case.0x140098a5b.12
movzx eax, byte [r14 + 8]
dec eax
cmp eax, 0x16
ja case.0x140098a5b.12
cdqe
mov ecx, dword [r12 + rax*4 + 0x99db0]
add rcx, r12
jmp rcx
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, pe_nt_image_headers64
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x140098f21
dec rax
je 0x140098cc2
dec rax
jne 0x140099a32
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140098ab8
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e41c8]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400afc70
mov r12d, eax
jmp 0x140099d7a
lea r14, [0x1400e41c8]
cmp qword [rbx + 8], r14
jne 0x140098ace
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x140098ad4
mov r12d, 2
lea rdx, [r12 + 1]
lea rsi, [rdx + rdx]
cmp al, 2
jne 0x140098af4
mov rdx, r12
mov rcx, r14
call fcn.1400060a0
mov r12d, eax
jmp 0x140099d7a
mov rcx, qword [0x140111460]
cmp rsi, rcx
jbe 0x140098b0a
cmp rsi, qword [rbx + 0x18]
ja 0x1400987f8
cmp rdx, 2
jb 0x14009880a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140098b31
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140111460]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x140098cad
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140098b68
cmp al, 2
je 0x140098ba6
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140098ca1
mov edi, 0x80
cmp rsi, rdi
ja 0x140098ba6
cmp rsi, 8
ja 0x140098b7f
mov edi, 8
jmp 0x140098b8c
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a8f20
test rax, rax
je 0x1400988a9
mov byte [rbx + 0x20], 1
jmp 0x140098ca1
cmp rsi, 0x20
jae 0x140098bb6
mov edi, SafeArrayAllocDescriptor
jmp 0x140098c60
mov edi, 0x208
cmp rsi, rdi
jb 0x140098c60
cmp rsi, 0x50000
jae 0x140098c1c
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140098be3
addsd xmm0, qword [0x1400ffd58]
mulsd xmm0, qword [0x1400ffd90]
movsd xmm1, qword [0x1400ffd88]
xor edx, edx
comisd xmm0, xmm1
jbe 0x140098c12
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140098c12
movabs rax, 0x8000000000000000
mov rdx, rax
cvttsd2si rdi, xmm0
add rdi, rdx
jmp 0x140098c60
cmp rsi, 0x320000
jae 0x140098c2e
lea rdi, [rsi + 0x8000]
jmp 0x140098c60
cmp rsi, 0xc80000
jae 0x140098c59
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140098c60
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x140098c80
test r8, r8
je 0x140098c80
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400c9b30
jmp 0x140098c83
xor sil, sil
test rdi, rdi
js 0x1400989e0
mov rcx, rdi
call fcn.1400c9094
test rax, rax
je 0x1400989e0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, r14
je 0x1400989d5
mov rdx, r14
jmp 0x1400989cc
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140098cee
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e41ac]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400afc70
mov r12d, eax
jmp 0x140099d7a
lea r15, [0x1400e41ac]
mov r12d, 1
cmp qword [rbx + 8], r15
jne 0x140098d0a
mov r14, qword [rbx + 0x10]
shr r14, 1
jmp 0x140098d0d
mov r14, r12
lea rcx, [r14 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
jne 0x140098d2c
mov rdx, r14
mov rcx, r15
call fcn.1400060a0
mov r12d, eax
jmp 0x140099d7a
mov r8, qword [0x140111460]
cmp rsi, r8
jbe 0x140098d42
cmp rsi, qword [rbx + 0x18]
ja 0x1400987f8
cmp rcx, 2
jae 0x140098d5c
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400b0320
jmp 0x140099d7a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140098d79
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140111460]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r9
jbe 0x140098ef5
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, r12b
jbe 0x140098daf
cmp al, 2
je 0x140098ded
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140098ee9
mov edi, 0x80
cmp rsi, rdi
ja 0x140098ded
cmp rsi, 8
ja 0x140098dc6
mov edi, 8
jmp 0x140098dd3
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a8f20
test rax, rax
je 0x1400988a9
mov byte [rbx + 0x20], r12b
jmp 0x140098ee9
cmp rsi, 0x20
jae 0x140098dfd
mov edi, SafeArrayAllocDescriptor
jmp 0x140098ea7
mov edi, 0x208
cmp rsi, rdi
jb 0x140098ea7
cmp rsi, 0x50000
jae 0x140098e63
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140098e2a
addsd xmm0, qword [0x1400ffd58]
mulsd xmm0, qword [0x1400ffd90]
movsd xmm1, qword [0x1400ffd88]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x140098e59
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140098e59
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x140098ea7
cmp rsi, 0x320000
jae 0x140098e75
lea rdi, [rsi + 0x8000]
jmp 0x140098ea7
cmp rsi, 0xc80000
jae 0x140098ea0
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140098ea7
lea rdi, [rsi + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x140098ec8
test r9, r9
je 0x140098ec8
mov rcx, qword [rbx + 8]
movzx esi, r12b
call fcn.1400c9b30
jmp 0x140098ecb
xor sil, sil
test rdi, rdi
js 0x1400989e0
mov rcx, rdi
call fcn.1400c9094
test rax, rax
je 0x1400989e0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 0x18], rdi
mov qword [rbx + 8], rax
mov rcx, qword [rbx + 8]
cmp rcx, r15
je 0x140098f0a
lea r8, [r14 + r14]
mov rdx, r15
call fcn.1400c9cf0
mov rax, qword [rbx + 8]
lea rcx, [r14 + r14]
xor esi, esi
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x140099d7a
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140098f4d
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e14fc]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400afc70
mov r12d, eax
jmp 0x140099d7a
lea r15, [0x1400e14fc]
mov r12d, 1
cmp qword [rbx + 8], r15
jne 0x140098f69
mov r14, qword [rbx + 0x10]
shr r14, 1
jmp 0x140098f6c
mov r14, r12
lea rcx, [r14 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
je 0x140098d19
mov r8, qword [0x140111460]
cmp rsi, r8
jbe 0x140098f92
cmp rsi, qword [rbx + 0x18]
ja 0x1400987f8
cmp rcx, 2
jb 0x140098d48
jmp 0x140098d5c
test byte [r14 + 9], 2
je case.0x140098a5b.12
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x1400990e6
inc eax
jmp 0x140097f7a
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14009902e
mov rcx, qword [r14]
lea rdx, [rbp - 0x40]
mov r8d, 0x400
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je case.0x140098a5b.12
mov rcx, qword [r14]
lea r9, [rbp - 0x40]
or r8, rdi
mov edx, 0x158
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je case.0x140098a5b.12
test byte [r14 + 9], 2
je 0x14009903d
lea eax, [rdi + 1]
jmp 0x140097f77
mov rcx, qword [r14]
xor r9d, r9d
mov r8, rdi
mov edx, 0x149
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x1400990e6
xor r9d, r9d
mov r8, rax
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400afc70
cmp eax, 1
jne 0x140099a32
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
mov rcx, qword [r14]
mov r8, rdi
mov r9, rax
mov edx, 0x148
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
jne 0x1400990f0
cmp byte [rbx + 0x23], 0
jne 0x1400990b3
mov rax, qword [rbx + 0x10]
jmp 0x1400990b6
mov rax, rbx
cmp byte [rax + 0x23], 2
jne 0x1400990df
cmp qword [0x140118e48], 0
je 0x1400990df
lea rcx, [0x140118e30]
call fcn.140006220
mov rcx, rbx
call fcn.14001bbe0
jmp 0x140099d7d
and byte [rax + 0x21], 0x86
mov rcx, rbx
call fcn.14001bbe0
jmp 0x140099d7d
mov rdx, rax
jmp 0x140099d43
mov rcx, qword [r14]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
test eax, 0x808
je 0x14009932b
mov edx, 0x190
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 1
jl 0x1400990e3
lea rcx, [rax*4]
call fcn.1400c9094
mov r12, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400990e3
mov rcx, qword [r14]
mov r9, rax
mov r8, rdi
mov edx, 0x191
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
mov qword [rbp + 0x810], rax
cmp rax, 1
jge 0x140099181
mov rcx, r12
call fcn.1400c9b30
mov rcx, rbx
call fcn.14001bbe0
jmp 0x140099d7d
xor esi, esi
test byte [r14 + 9], 2
lea r15, [rax - 1]
mov r13d, esi
je 0x1400991e1
test rax, rax
jle 0x14009921a
mov rbx, rax
nop dword [rax]
mov ecx, dword [r12 + r13*4]
lea rdx, [rbp - 0x40]
mov r8d, 0xa
inc ecx
call fcn.1400c8d60
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rbp - 0x40]
inc r13
repne scasw ax, word [rdi]
not rcx
dec rcx
add r15, rcx
cmp r13, rbx
jl 0x1400991a0
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rbp + 0x810]
jmp 0x14009921a
test rax, rax
jle 0x14009921a
nop word [rax + rax]
movsxd r8, dword [r12 + r13*4]
mov rcx, qword [r14]
xor r9d, r9d
mov edx, 0x18a
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
je 0x14009916c
inc r13
add r15, rax
cmp r13, rdi
jl 0x1400991f0
xor r9d, r9d
mov r8, r15
xor edx, edx
mov rcx, rbx
mov byte [rsp + 0x20], 1
call fcn.1400afc70
cmp eax, 1
jne 0x140099a32
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
test byte [r14 + 9], 2
mov r13, rax
je 0x1400992b7
test rdi, rdi
jle 0x140099319
mov r14, qword [rbp + 0x810]
mov rbx, qword [rsp + 0x40]
mov r12, qword [rbp + 0x800]
test rsi, rsi
je 0x140099286
movzx ecx, word [r12 + 0x6e]
add r13, 2
mov word [r13 - 2], cx
mov ecx, dword [rbx + rsi*4]
mov r8d, 0xa
mov rdx, r13
inc ecx
call fcn.1400c8d60
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r13
inc rsi
repne scasw ax, word [rdi]
not rcx
lea r13, [r13 + rcx*2 - 2]
cmp rsi, r14
jl 0x140099272
jmp 0x14009930e
lea r15, [rdi - 1]
test rdi, rdi
jle 0x140099319
mov rbx, qword [rsp + 0x40]
mov r12, qword [rbp + 0x800]
nop dword [rax]
test rsi, rsi
je 0x1400992e4
movzx eax, word [r12 + 0x6e]
add r13, 2
mov word [r13 - 2], ax
movsxd r8, dword [rbx + rsi*4]
mov rcx, qword [r14]
mov r9, r13
mov edx, 0x189
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
jle 0x140099306
add r15, rax
lea r13, [r13 + rax*2]
inc rsi
cmp rsi, rdi
jl 0x1400992d0
mov rbx, qword [rsp + 0x48]
mov r12d, 1
mov rcx, qword [rsp + 0x40]
call fcn.1400c9b30
mov rdx, r15
jmp 0x140099d43
mov edx, 0x188
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400990e3
test byte [r14 + 9], 2
je 0x140099351
inc eax
jmp 0x140097f77
mov rcx, qword [r14]
xor r9d, r9d
mov r8, rax
mov edx, 0x18a
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x1400990e6
xor r9d, r9d
mov r8, rax
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400afc70
cmp eax, 1
jne 0x140099a32
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
mov rcx, qword [r14]
mov r8, rdi
mov r9, rax
mov edx, 0x189
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x140099323
cmp byte [rbx + 0x23], 0
jne 0x1400990b3
mov rax, qword [rbx + 0x10]
jmp 0x1400990b6
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x130b
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rcx, eax
cmp rcx, 0xffffffffffffffff
je 0x1400990e3
test byte [r14 + 9], 2
je 0x140099405
lea eax, [rcx + 1]
jmp 0x140097f77
mov r8, rcx
mov rcx, qword [r14]
lea rax, [rbp - 0x40]
lea r9, [rbp - 0x70]
mov r12d, 1
mov edx, 0x133c
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 0x3ff
mov dword [rbp - 0x70], r12d
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x1400990e3
movzx edx, byte [rbx + 0x23]
mov r15, qword [rbp - 0x60]
test dl, dl
jne 0x140099467
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r15
mov byte [rsp + 0x20], r12b
call fcn.1400afc70
mov r12d, eax
jmp 0x140099d7a
xor esi, esi
movzx r8d, r12b
lea r13, [0x1400e14ec]
test r15, r15
jne 0x14009948a
xor r8b, r8b
mov edi, esi
mov qword [rbp + 0x810], rsi
mov r15, r13
jmp 0x1400994b3
cmp qword [rbx + 8], r15
jne 0x140099499
mov rdi, qword [rbx + 0x10]
shr rdi, 1
jmp 0x1400994ac
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
lea rdi, [rcx - 1]
mov qword [rbp + 0x810], rdi
lea rax, [rdi + 1]
lea r14, [rax + rax]
cmp dl, 2
jne 0x1400994d3
mov rdx, rdi
mov rcx, r15
call fcn.1400060a0
mov r12d, eax
jmp 0x140099d7a
mov r9, qword [0x140111460]
cmp r14, r9
jbe 0x140099503
cmp r14, qword [rbx + 0x18]
jbe 0x140099503
lea rdx, [0x1400fddf0]
lea rcx, [0x1401181e0]
mov r8, r13
call fcn.1400401e0
mov r12d, eax
jmp 0x140099d7a
cmp rax, 2
jae 0x140099523
test r8b, r8b
mov rcx, rbx
setne sil
xor r8d, r8d
lea edx, [rsi + 3]
call fcn.1400b0320
jmp 0x140099d7a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140099540
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r9, qword [0x140111460]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r14, r8
jbe 0x1400996bb
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, r12b
jbe 0x140099576
cmp al, 2
je 0x1400995b4
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x1400996a8
mov edi, 0x80
cmp r14, rdi
ja 0x1400995b4
cmp r14, 8
ja 0x14009958d
mov edi, 8
jmp 0x14009959a
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r14, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a8f20
test rax, rax
je 0x1400988ab
mov byte [rbx + 0x20], r12b
jmp 0x1400996a8
cmp r14, 0x20
jae 0x1400995c4
mov edi, SafeArrayAllocDescriptor
jmp 0x14009966e
mov edi, 0x208
cmp r14, rdi
jb 0x14009966e
cmp r14, 0x50000
jae 0x14009962a
pxor xmm0, xmm0
cvtsi2sd xmm0, r14
test r14, r14
jns 0x1400995f1
addsd xmm0, qword [0x1400ffd58]
mulsd xmm0, qword [0x1400ffd90]
movsd xmm1, qword [0x1400ffd88]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x140099620
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140099620
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x14009966e
cmp r14, 0x320000
jae 0x14009963c
lea rdi, [r14 + 0x8000]
jmp 0x14009966e
cmp r14, 0xc80000
jae 0x140099667
movabs rax, 0x47ae147ae147ae15
mov rdi, r14
mul r14
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r14
jmp 0x14009966e
lea rdi, [r14 + 0x20000]
cmp rdi, r9
cmova rdi, r9
cmp r10b, 2
jne 0x14009968f
test r8, r8
je 0x14009968f
mov rcx, qword [rbx + 8]
movzx r14d, r12b
call fcn.1400c9b30
jmp 0x140099692
xor r14b, r14b
test rdi, rdi
js 0x1400996e5
mov rcx, rdi
call fcn.1400c9094
test rax, rax
je 0x1400996e5
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 0x18], rdi
mov rdi, qword [rbp + 0x810]
mov qword [rbx + 8], rax
mov rcx, qword [rbx + 8]
cmp rcx, r15
je 0x1400996d0
lea r8, [rdi + rdi]
mov rdx, r15
call fcn.1400c9cf0
mov rax, qword [rbx + 8]
lea rcx, [rdi + rdi]
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x140099d7a
test r14b, r14b
je 0x1400996fb
lea rax, [0x140118198]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x140099702
mov rax, qword [rbx + 8]
mov word [rax], si
lea rdx, [0x1400e4580]
lea rcx, [0x1401181e0]
mov r8, r13
mov qword [rbx + 0x10], rsi
call fcn.1400401e0
mov r12d, eax
jmp 0x140099d7a
test dil, dil
jne 0x140097f85
mov rcx, qword [r14]
call fcn.1400848d0
mov rcx, rbx
test rax, rax
je 0x1400990e6
mov rdx, rax
call fcn.1400afff0
jmp 0x140099d7d
test dil, dil
jne 0x140097f85
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
movzx ecx, byte [rbx + 0x23]
xor esi, esi
mov dword [rsp + 0x40], eax
movsxd r15, eax
test cl, cl
jne 0x14009978c
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
mov r8, r15
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400afc70
jmp 0x140099a2b
mov dl, 1
mov byte [rbp + 0x810], dl
movzx edi, dl
cmp r15, 0xffffffffffffffff
jne 0x1400997a5
xor dil, dil
mov r15, rsi
jmp 0x1400997ad
xor dl, dl
mov byte [rbp + 0x810], dl
lea rax, [r15 + 1]
lea r12, [rax + rax]
cmp cl, 2
jne 0x1400997ee
test dl, dl
je 0x1400997d2
lea rcx, [0x1400e14ec]
mov rdx, r15
call fcn.1400060a0
jmp 0x140099a2b
lea rcx, [0x140118e30]
mov rdx, rax
call fcn.140006160
mov edx, esi
test rax, rax
setne dl
jmp 0x140099a2d
mov r8, qword [0x140111460]
cmp r12, r8
jbe 0x14009980c
cmp r12, qword [rbx + 0x18]
jbe 0x14009980c
lea rdx, [0x1400fddf0]
jmp 0x140099a18
cmp rax, 2
jae 0x14009982d
mov edx, esi
test dil, dil
mov rcx, rbx
setne dl
xor r8d, r8d
add edx, 3
call fcn.1400b0320
jmp 0x140099a48
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009984a
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140111460]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r12, r9
jbe 0x1400999c0
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x140099881
cmp al, 2
je 0x1400998bf
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x1400999b4
mov edi, 0x80
cmp r12, rdi
ja 0x1400998bf
cmp r12, 8
ja 0x140099898
mov edi, 8
jmp 0x1400998a5
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r12, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a8f20
test rax, rax
je 0x140099a32
mov byte [rbx + 0x20], 1
jmp 0x1400999b4
cmp r12, 0x20
jae 0x1400998cf
mov edi, SafeArrayAllocDescriptor
jmp 0x14009997b
mov edi, 0x208
cmp r12, rdi
jb 0x14009997b
cmp r12, 0x50000
jae 0x140099935
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x1400998fc
addsd xmm0, qword [0x1400ffd58]
mulsd xmm0, qword [0x1400ffd90]
movsd xmm1, qword [0x1400ffd88]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14009992b
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14009992b
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x14009997b
cmp r12, 0x320000
jae 0x140099948
lea rdi, [r12 + 0x8000]
jmp 0x14009997b
cmp r12, 0xc80000
jae 0x140099973
movabs rax, 0x47ae147ae147ae15
mov rdi, r12
mul r12
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r12
jmp 0x14009997b
lea rdi, [r12 + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x14009999b
test r9, r9
je 0x14009999b
mov rcx, qword [rbx + 8]
mov r12b, 1
call fcn.1400c9b30
jmp 0x14009999e
xor r12b, r12b
test rdi, rdi
js 0x1400999f0
mov rcx, rdi
call fcn.1400c9094
test rax, rax
je 0x1400999f0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
cmp byte [rbp + 0x810], sil
je 0x140099a39
mov rcx, qword [rbx + 8]
lea r13, [0x1400e14ec]
cmp rcx, r13
je 0x1400999e5
lea r8, [r15 + r15]
mov rdx, r13
call fcn.1400c9cf0
mov rax, qword [rbx + 8]
mov word [rax + r15*2], si
jmp 0x140099a40
test r12b, r12b
je 0x140099a06
lea rax, [0x140118198]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x140099a0d
mov rax, qword [rbx + 8]
mov word [rax], si
mov qword [rbx + 0x10], rsi
lea rdx, [0x1400e4580]
lea r8, [0x1400e14ec]
lea rcx, [0x1401181e0]
call fcn.1400401e0
mov edx, eax
cmp edx, 1
je 0x140099a48
xor eax, eax
jmp 0x140099d7d
mov rax, qword [rbx + 8]
mov word [rax], si
lea rax, [r15 + r15]
mov qword [rbx + 0x10], rax
mov edi, dword [rsp + 0x40]
mov r12d, 1
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
mov rcx, qword [r14]
lea r8d, [rdi + 1]
mov rdx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
movsxd r13, eax
cmp byte [rbx + 0x23], sil
jne 0x140099a7f
mov rdi, qword [rbx + 0x10]
jmp 0x140099a82
mov rdi, rbx
cmp byte [rdi + 0x23], r12b
jne 0x140099a9c
test byte [rdi + 0x21], 8
je 0x140099a96
mov rcx, rdi
call fcn.140001130
add rdi, 0x10
jmp 0x140099aa3
lea rdi, [0x140119008]
lea rax, [r13 + r13]
mov qword [rdi], rax
test r13, r13
jne 0x140099ac6
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
mov word [rax], si
jmp 0x140099d4b
cmp byte [r14 + 8], 0xc
jne 0x140099d4b
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
or r15d, 0xffffffff
call fcn.140001820
or rcx, 0xffffffffffffffff
mov rdx, rax
mov qword [rsp + 0x40], rax
xor eax, eax
mov rdi, rdx
mov r14, rsi
mov r13, rsi
repne scasw ax, word [rdi]
mov qword [rsp + 0x70], rsi
not rcx
dec rcx
mov rax, rcx
mov qword [rsp + 0x78], rcx
cmp word [rdx], si
je 0x140099d22
cmp rax, 0x1388
jb 0x140099cba
mov dword [rbp + 0x810], esi
mov rdi, rdx
mov qword [rsp + 0x48], rdx
nop word [rax + rax]
lea rdx, [0x1400ebc68]
mov rcx, rdi
call fcn.1400ca044
mov rcx, rax
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140099c22
mov r10d, dword [rbp + 0x810]
mov rdi, rax
mov rax, qword [rsp + 0x48]
sub rdi, rax
inc r10d
dec r15d
sar rdi, 1
mov dword [rbp + 0x810], r10d
lea rdx, [rdi + r13]
mov qword [rbp - 0x80], rdx
inc rdx
cmp rdx, qword [rsp + 0x70]
jb 0x140099be3
movsxd r9, dword [rsp + 0x78]
mov rax, rcx
movsxd rcx, edx
sub rax, qword [rsp + 0x40]
mov r8d, r15d
mov edx, r10d
sar rax, 1
cdqe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
or rcx, 0xffffffffffffffff
call fcn.1400ac9f0
mov rcx, r14
lea rdx, [rax + rax]
mov qword [rsp + 0x70], rax
call fcn.1400ca594
test rax, rax
je 0x140099c69
mov r14, rax
mov rax, qword [rsp + 0x48]
test rdi, rdi
je 0x140099bfc
lea r8, [rdi + rdi]
lea rcx, [r14 + r13*2]
mov rdx, rax
call fcn.1400c9cf0
mov r13, qword [rbp - 0x80]
movzx eax, word [0x1400ec844]
mov rdi, qword [rbp - 0x78]
inc r13
add rdi, 4
mov word [r14 + r13*2 - 2], ax
mov qword [rsp + 0x48], rdi
test r15d, r15d
jne 0x140099b40
mov eax, dword [rbp + 0x810]
test eax, eax
je 0x140099d22
mov r15, qword [rsp + 0x78]
mov rax, rdi
sub rax, qword [rsp + 0x40]
sar rax, 1
sub r15, rax
je 0x140099c99
lea rax, [r15 + r13]
mov qword [rbp + 0x810], rax
cmp rax, qword [rsp + 0x70]
jb 0x140099c82
lea rdx, [rax + rax + 2]
mov rcx, r14
call fcn.1400ca594
test rax, rax
jne 0x140099c7f
test r14, r14
je 0x140099d22
mov rcx, r14
call fcn.1400c9b30
jmp 0x140099d22
mov r14, rax
lea r8, [r15 + r15]
lea rcx, [r14 + r13*2]
mov rdx, rdi
call fcn.1400c9cf0
mov r13, qword [rbp + 0x810]
mov rcx, qword [rsp + 0x40]
lea r8, [r13 + r13 + 2]
mov rdx, r14
mov word [r14 + r13*2], si
call fcn.1400c9cf0
mov rcx, r14
call fcn.1400c9b30
jmp 0x140099d22
mov r13, qword [rsp + 0x78]
mov rsi, rdx
mov rbx, rdx
nop word [rax + rax]
lea rdx, [0x1400ebc68]
mov rcx, rsi
call fcn.1400ca044
mov rdi, rax
test rax, rax
je 0x140099d1d
mov rcx, rax
lea rsi, [rax + 2]
mov r8, r13
sub rcx, rbx
lea rdx, [rax + 4]
sar rcx, 1
sub r8, rcx
mov rcx, rsi
lea r8, [r8 + r8 - 2]
call fcn.1400c9cf0
movzx eax, word [0x1400ec844]
dec r13
dec r15d
mov word [rdi], ax
jne 0x140099cd0
mov rbx, qword [rsp + 0x48]
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
or rcx, 0xffffffffffffffff
mov rdi, rax
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea rdx, [rcx - 1]
mov rcx, rbx
call fcn.14001c080
cmp byte [rbx + 0x23], 0
jne 0x140099d55
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x23], 2
jne 0x140099d76
cmp qword [0x140118e48], 0
je 0x140099d76
lea rcx, [0x140118e30]
call fcn.140006220
mov r12d, eax
jmp 0x140099d7a
and byte [rbx + 0x21], 0x86
mov eax, r12d
mov rbx, qword [rsp + 0x908]
add rsp, 0x8c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret