Function at 0x140006033
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rax, qword [rbp + 0xe8]
mov r14, rcx
movzx edi, byte [rbp + 0xe0]
movabs rcx, 0xffffffff003c2bb3
movzx esi, byte [rbp + 0xd0]
add rax, rcx
cmp rax, 2
mov r10, r8
mov r8, qword [0x140189ec8]
mov r12d, 0x3fff
setbe r13b
xor r11d, r11d
test r8, r8
jne 0x1400060b5
lea r15, [rbp - 0x80]
mov qword [rsp + 0x60], r15
jmp 0x14000618a
movsxd rcx, dword [0x140189f28]
imul r15, rcx, 0xd4
inc ecx
add r15, r8
cmp ecx, dword [0x140185a60]
mov qword [rsp + 0x60], r15
cmovge ecx, r11d
mov dword [0x140189f28], ecx
mov byte [r15], sil
mov byte [r15 + 6], dil
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov dword [0x140189ee4], eax
sub ecx, dword [0x14018f118]
xorps xmm0, xmm0
mov dword [0x14018f118], eax
cvtsi2ss xmm0, rcx
divss xmm0, dword [0x14010f338]
movss dword [r15 + 8], xmm0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x14000615e
cmp rax, qword [0x140189f20]
je 0x140006151
mov rcx, qword [0x140189eb0]
lea r8, [r15 + 0xc]
mov r9, rax
mov edx, 0x418
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x14000616c
xor r11d, r11d
mov word [r15 + 0xc], r11w
jmp 0x14000616f
movabs rax, 0x41002f004e
mov qword [r15 + 0xc], rax
xor r11d, r11d
mov r9, qword [rbp + 0xc8]
mov r10, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
mov qword [0x140189f20], rbx
cmp sil, 0xe7
jne 0x1400061d6
movzx eax, word [r9 + 4]
mov ecx, 0x55
mov byte [rsp + 0x48], 0
mov r8, r10
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [r15 + 4], cx
mov rcx, r14
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
mov word [r15 + 2], ax
call fcn.140008621
jmp 0x1400083c1
movzx ecx, word [rbp + 0xd8]
lea eax, [rsi + 0x64]
mov dword [rsp + 0x54], ecx
mov word [r15 + 2], cx
cmp al, 3
ja 0x1400061f8
mov ecx, r11d
mov dword [rsp + 0x54], ecx
cmp r14, qword [0x140189ed0]
lea rdx, [0x140000000]
jne 0x14000623f
movzx ebx, byte [rbp + 0xf0]
mov r8, qword [0x14018adb0]
and bl, 1
jne 0x1400063b4
test dil, dil
movzx eax, sil
mov ecx, 0x80
cmovne ecx, r11d
mov byte [rax + rdx + 0xffc80], cl
jmp 0x1400063b4
mov r15d, dword [rbp + 0xf0]
mov eax, 0x100
mov ebx, r15d
shr ebx, 4
and bl, 1
test ax, cx
jne case.0x140006299.13
lea ecx, [rax - 0x70]
call qword [sym.imp.USER32.dll_GetKeyState]
test al, 1
je case.0x140006299.13
movzx eax, sil
add eax, 0xfffffff4
cmp eax, 0x62
ja case.0x140006299.13
lea rdx, [0x140000000]
cdqe
movzx eax, byte [rdx + rax + 0x8405]
mov ecx, dword [rdx + rax*4 + 0x83d5]
add rcx, rdx
jmp rcx
test dil, dil
sete byte [0x14018f198]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f199]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f19a]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f19b]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f19c]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f19d]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f19e]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f19f]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f1a0]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f1a1]
jmp case.0x140006299.13
test dil, dil
sete byte [0x14018f1a2]
mov r8, qword [0x14018adb0]
movzx r14d, sil
imul rax, r14, 0x128
cmp byte [rax + r8 + 8], 0
jne 0x1400063a8
movzx r8d, dil
movzx edx, sil
mov ecx, r15d
call fcn.140009fcb
mov r8, qword [0x14018adb0]
mov r15, qword [rsp + 0x60]
test al, al
je 0x1400063ad
test dil, dil
lea rax, [0x140000000]
mov ecx, 0x80
mov edx, 0
cmovne ecx, edx
mov byte [r14 + rax + 0xffc80], cl
mov r14, qword [rbp + 0xb0]
jmp 0x1400063b6
mov r15, qword [rsp + 0x60]
mov r14, qword [rbp + 0xb0]
xor edx, edx
mov eax, 0x69
test r13b, r13b
jne 0x1400063d4
test bl, bl
mov eax, SafeArrayAllocDescriptor
mov ecx, 0x61
cmovne ax, cx
cmp byte [0x14018ac70], 0
lea rcx, [r15 + 4]
mov qword [rsp + 0x70], rcx
mov word [rcx], ax
je 0x14000642c
lea eax, [rsi - 0x5b]
cmp al, 1
ja 0x14000642c
test dil, dil
jne 0x14000642c
movzx r9d, word [rsp + 0x54]
mov rcx, r14
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], dil
jmp 0x1400083b1
cmp byte [0x14018f180], 0
je 0x140006500
cmp sil, 0x1b
jne 0x140006500
test dil, dil
jne 0x140006500
xor edx, edx
lea rcx, str.32771
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x1400064f9
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
jne 0x1400064f9
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
xor ecx, ecx
call fcn.140012c46
movzx edx, byte [0x14018ac73]
xor r8d, r8d
shr dl, 3
xor r9d, r9d
and dl, 1
mov dword [rsp + 0x28], 0xffc3d44d
or dl, 0xa4
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 1]
call fcn.140012c46
movzx r9d, word [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
movzx r8d, sil
mov qword [rsp + 0x38], 0x7fffffff
mov rcx, r14
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], al
jmp 0x1400083b5
mov r8, qword [0x14018adb0]
mov r14d, dword [rsp + 0x54]
mov r10, qword [rbp + 0xb0]
movzx eax, r14w
imul rbx, rax, 0x128
mov qword [rsp + 0x78], rax
mov rax, qword [0x14018ada8]
add rbx, rax
cmp r10, qword [0x140189ed8]
movzx eax, byte [rbx + 0x16]
mov byte [rsp + 0x59], al
jne 0x140006543
test al, al
jne 0x140006551
movzx eax, sil
imul rbx, rax, 0x128
add rbx, r8
test r13b, r13b
je 0x1400065d3
mov eax, 0xffc3d44e
cmp qword [rbp + 0xe8], rax
jne 0x140006593
test dil, dil
je 0x140006593
cmp qword [0x14018f188], rbx
jne 0x140006593
xor eax, eax
mov byte [rbx + 0x10], 0
mov qword [0x14018f188], rax
mov byte [rbx + 0x13], 0
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r14w
mov byte [rsp + 0x20], sil
mov rcx, r10
mov r9, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
call fcn.140008621
jmp 0x1400083c1
test dil, dil
jne 0x1400065e5
mov byte [rbx + 0x14], dil
mov word [rbx + 0xa], r12w
cmp r10, qword [0x140189ed8]
jne 0x140006724
test dil, dil
je 0x1400066e8
cmp byte [0x14018f13c], 0
je 0x140006612
cmp sil, 0x5b
je 0x140006657
cmp byte [0x14018f13d], 0
je 0x140006629
cmp sil, 0x5c
je 0x140006657
cmp byte [0x14018f13e], 0
je 0x140006640
cmp sil, 0xa4
je 0x140006657
cmp byte [0x14018f13f], 0
je 0x1400066e8
cmp sil, 0xa5
jne 0x1400066e8
movzx ecx, sil
sub ecx, 0x5b
je 0x1400066a3
sub ecx, 1
je 0x140006697
sub ecx, 0x48
je 0x14000668b
cmp ecx, 1
jne 0x1400066aa
mov byte [0x14018f13f], 0
jmp 0x1400066aa
mov byte [0x14018f13e], 0
jmp 0x1400066aa
mov byte [0x14018f13d], 0
jmp 0x1400066aa
mov byte [0x14018f13c], 0
test byte [0x14018ac73], 3
jne 0x1400066e8
movzx edx, byte [reloc.OLEAUT32.dll_SafeArrayGetElemsize]
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 2]
call fcn.140012c46
mov r8, qword [0x14018adb0]
mov r10, qword [rbp + 0xb0]
mov rax, qword [0x14018f188]
test rax, rax
je 0x1400067d7
cmp rax, rbx
je 0x1400067d7
test dil, dil
jne 0x1400067d7
cmp r10, qword [0x140189ed8]
jne 0x1400067b9
xor eax, eax
cmp byte [rbx + 8], al
sete al
jmp 0x1400067c4
test sil, sil
jne 0x140006751
mov byte [rsp + 0x48], sil
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r14w
mov byte [rsp + 0x20], sil
jmp 0x1400065b2
lea eax, [rsi - 1]
cmp al, 1
ja 0x1400066e8
cmp dword [0x140189b04], 0
jne 0x1400067ab
xor edx, edx
lea rcx, str.32768
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x1400066da
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x14018e2d0]
mov r10, qword [rbp + 0xb0]
je 0x1400067ab
mov r8, qword [0x14018adb0]
jmp 0x1400066e8
test dil, dil
sete al
mov byte [rbx + 0x10], al
jmp 0x14000658f
mov rax, qword [0x14018f188]
movzx eax, byte [rax + 8]
test eax, eax
je 0x1400067d7
mov rax, qword [0x14018f188]
mov byte [rax + 0x15], 1
cmp byte [rbx + 0xc], 0
jne 0x1400067eb
cmp byte [rbx + 0xd], 0
je 0x140006593
xor edx, edx
mov word [rsp + 0x50], r12w
mov qword [rsp + 0x68], rdx
movzx r14d, r12w
test dil, dil
je 0x140006836
movzx eax, word [rbx + 0xa]
movzx ecx, byte [rbx + 0x10]
movzx r13d, byte [rbx + 0x13]
mov byte [rsp + 0x58], cl
mov byte [rbx + 0x13], dl
cmp ax, r12w
je 0x140006849
movzx r14d, ax
mov word [rsp + 0x50], ax
mov word [rbx + 0xa], r12w
jmp 0x140006849
movzx eax, byte [rbp + 0xd0]
movzx r13d, byte [rbp + 0xd0]
mov byte [rsp + 0x58], al
test dil, dil
mov byte [rbp + 0xd0], dl
mov ecx, 1
sete al
cmp r10, qword [0x140189ed8]
mov byte [rbx + 0x10], al
jne 0x1400068e7
cmp byte [rbx + 8], dl
je 0x140006913
cmp byte [r8 + 0xbb60], dl
jne 0x14000688f
mov eax, edx
cmp byte [r8 + 0xbc88], dl
je 0x140006891
mov eax, ecx
mov byte [r8 + 0x13b8], al
cmp byte [r8 + 0xbdb0], dl
jne 0x1400068b4
mov eax, edx
cmp byte [r8 + 0xbed8], dl
je 0x1400068b6
mov eax, ecx
mov byte [r8 + 0x14e0], al
cmp byte [r8 + 0xb910], dl
jne 0x1400068d9
mov eax, edx
cmp byte [r8 + 0xba38], dl
je 0x1400068db
mov eax, ecx
mov byte [r8 + 0x1290], al
jmp 0x140006913
cmp qword [0x140189ed8], rdx
jne 0x140006913
call fcn.140015dbe
mov r8, qword [0x14018adb0]
mov byte [0x14018ac72], al
mov byte [0x14018ac73], al
mov byte [rbp + 0xd0], 1
mov rax, qword [rbx]
test rax, rax
je 0x14000692d
cmp dword [rax], 7
mov byte [rsp + 0x5a], 1
je 0x140006932
mov byte [rsp + 0x5a], 0
movzx ecx, byte [rbx + 0xc]
test cl, cl
je 0x140006b72
test dil, dil
jne 0x140006b72
mov rax, qword [0x14018f188]
test rax, rax
je 0x14000696a
cmp byte [rbx + 0xd], dil
je 0x14000696a
cmp rbx, rax
jne 0x140006b72
cmp cl, 1
jne 0x1400069a8
movzx eax, byte [rsp + 0x59]
movzx ecx, word [rsp + 0x54]
test al, al
jne 0x140006989
movzx ecx, sil
movzx edx, al
call fcn.14000ce89
mov r8, qword [0x14018adb0]
test al, al
je 0x1400069a8
mov r15b, 1
jmp 0x1400069c3
xor r15b, r15b
cmp rbx, qword [0x14018f188]
je 0x1400069c3
mov qword [0x14018f188], rbx
mov byte [rbx + 0x15], r15b
cmp byte [rbx + 0xd], 0
je 0x140006abd
cmp byte [rbp + 0xd0], 0
jne 0x1400069ef
mov cl, 1
mov byte [rbp + 0xd0], 1
call fcn.140015dbe
mov r8, qword [0x14018adb0]
movzx eax, byte [rbx + 8]
movzx ecx, byte [0x14018ac72]
test al, al
je 0x140006a06
not al
and cl, al
test cl, cl
jne 0x140006a21
test r15b, r15b
jne 0x140006a21
test byte [rbx + 0xf], 1
je 0x140006abd
mov r10, qword [rbp + 0xb0]
cmp r10, qword [0x140189ed8]
jne 0x140006a58
cmp byte [rsp + 0x59], 0
je 0x140006a58
mov rax, qword [0x14018adc0]
movzx ecx, cl
shl rcx, 9
add rcx, qword [rsp + 0x78]
jmp 0x140006a6d
movzx ecx, cl
movzx eax, sil
shl rcx, 8
add rcx, rax
mov rax, qword [0x14018adc8]
movzx r14d, word [rax + rcx*2]
mov eax, 0x4000
mov word [rsp + 0x50], r14w
test ax, r14w
je 0x140006a91
mov word [rbx + 0xa], r14w
jmp 0x140006ace
movzx eax, r14w
and ax, r12w
cmp ax, word [0x14018cd40]
jae 0x140006ac4
movzx ecx, ax
mov rax, qword [0x14018adb8]
movzx ecx, word [rax + rcx*2]
mov word [rbx + 0xa], cx
jmp 0x140006ac4
mov r10, qword [rbp + 0xb0]
cmp r14w, r12w
jne 0x140006b6d
test r15b, r15b
je 0x140006ae8
mov rcx, qword [rsp + 0x70]
mov eax, reloc.OLEAUT32.dll_SafeArrayAllocDescriptor
or byte [rbx + 0xf], 8
mov word [rcx], ax
cmp byte [rbx + 8], 0
jne 0x140006b46
test byte [rbx + 0xf], 1
jne 0x140006b46
cmp byte [rsp + 0x5a], 0
jne 0x140006b46
test r15b, r15b
jne 0x140006b46
movzx r9d, word [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
mov rcx, r10
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], r15b
mov byte [rbx + 0x14], 1
jmp 0x1400083b1
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], ax
jmp 0x1400065ad
mov r15, qword [rsp + 0x60]
cmp byte [rbx + 0xd], 0
mov byte [rsp + 0x5b], 0
je 0x140006c0d
test dil, dil
je 0x140006c0d
cmp qword [0x14018f188], rbx
jne 0x140006bae
test r13b, r13b
je 0x140006c0d
xor edx, edx
mov qword [0x14018f188], rdx
jmp 0x140006bb0
xor edx, edx
cmp byte [rbx + 0xe], 0
jne 0x140006c08
movzx eax, byte [rbx + 0xf]
test al, 8
je 0x140006bd2
xor cl, cl
and al, 0xf7
mov byte [rbx + 0xf], al
jmp 0x140006bd4
mov cl, 1
test r13b, r13b
je 0x140006cba
test cl, cl
je 0x140006cba
mov qword [rsp + 0x40], rdx
movzx r9d, word [rsp + 0x54]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
jmp 0x1400083a5
mov byte [rsp + 0x5b], 1
cmp byte [rbx + 0xc], 0
je 0x140006e9f
test dil, dil
je 0x140006e9f
mov rax, qword [0x14018f188]
mov ecx, 0
cmp rax, rbx
cmove rax, rcx
lea r13d, [rcx + 1]
mov qword [0x14018f188], rax
cmp byte [rbx + 0x11], cl
je 0x140006c6d
mov byte [rbx + 0x11], cl
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], cl
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
mov ecx, r13d
call fcn.140012c46
mov r8, qword [0x14018adb0]
cmp byte [rbx + 0x12], 0
je 0x140006c9f
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
mov byte [rbx + 0x12], 0
mov ecx, r13d
call fcn.140012c46
mov r8, qword [0x14018adb0]
cmp r14w, r12w
jne 0x140006ce8
movzx eax, byte [rbx + 0xf]
test al, 8
je 0x140006ce8
and al, 0xf7
mov byte [rbx + 0xf], al
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov eax, dword [rsp + 0x54]
mov rcx, qword [rbp + 0xb0]
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x1400065b5
movzx ecx, byte [rsp + 0x5a]
movzx eax, byte [rbx + 0x15]
test cl, cl
je 0x140006da0
cmp al, 2
jne 0x140006d6a
mov ebx, dword [rsp + 0x54]
mov eax, 0xffc3d44e
mov dword [rsp + 0x28], eax
xor r9d, r9d
movzx r8d, bx
mov byte [rsp + 0x20], 0
movzx edx, sil
mov ecx, r13d
call fcn.140012c46
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, bx
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 2]
call fcn.140012c46
xor eax, eax
movzx r9d, bx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
jmp 0x1400083a5
cmp al, 1
jne 0x140006e58
mov eax, dword [rsp + 0x54]
mov rcx, qword [rbp + 0xb0]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x1400065b5
test al, al
je 0x140006e58
cmp r14w, r12w
jne 0x140006e58
cmp byte [rbx + 8], 0
mov rcx, qword [rbp + 0xb0]
je 0x140006e15
mov r9, qword [rbp + 0xc8]
cmp al, 2
mov eax, dword [rsp + 0x54]
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
jne 0x140006ded
mov byte [rsp + 0x48], 1
jmp 0x140006df2
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
call fcn.140008621
jmp 0x1400083c1
test byte [rbx + 0xf], 1
je 0x140006e33
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
jmp 0x140007c2f
movzx r9d, word [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
jmp 0x1400083ac
cmp byte [rbx + 0xd], 0
jne 0x140006e8a
cmp byte [rbx + 8], 0
jne 0x140006cba
test byte [rbx + 0xf], 1
jne 0x140006cba
test cl, cl
jne 0x140006cba
xor eax, eax
mov qword [rsp + 0x40], rax
jmp 0x140006bea
cmp byte [rsp + 0x58], 0
jne 0x140006e9f
cmp byte [rbx + 0xe], 0
je 0x140006cba
cmp byte [rbp + 0xd0], 0
jne 0x140006ec4
cmp r14w, r12w
jne 0x140006ec4
mov cl, 1
call fcn.140015dbe
mov r8, qword [0x14018adb0]
cmp qword [0x14018f188], 0
mov r11d, 0x3ffa
mov byte [rbp + 0xd0], 0
je 0x1400076d6
test dil, dil
je 0x140006ef2
cmp byte [rbx + 0xe], 0
je 0x1400076d6
cmp r14w, r12w
jne 0x140007a83
movzx r9d, byte [rbx + 0x17]
xor r10d, r10d
mov r15, qword [0x14018adb0]
mov r8d, r10d
test r9d, r9d
je 0x140007070
movzx r11d, byte [rbp + 0xd0]
lea rdx, [rbx + 0x1a]
mov byte [rsp + 0x58], r11b
nop word [rax + rax]
movzx ecx, byte [rdx]
imul rax, rcx, 0x128
cmp byte [rax + r15 + 0x10], r10b
je 0x140006f91
movzx eax, word [rdx + 2]
mov r13d, 0x4000
test r13w, ax
je 0x140006f77
test dil, dil
jne 0x140006fa6
mov word [rbx + 0xa], ax
cmp r14w, r12w
jne 0x140006fc4
jmp 0x140006f91
test dil, dil
jne 0x140006f91
movzx r14d, ax
mov word [rsp + 0x50], ax
movzx r11d, cl
mov byte [rsp + 0x58], cl
inc r8d
add rdx, 4
cmp r8d, r9d
jl 0x140006f32
jmp 0x140006fba
movzx r14d, word [rdx + 2]
movzx r11d, byte [rdx]
mov word [rsp + 0x50], r14w
mov byte [rsp + 0x58], r11b
cmp r14w, r12w
je 0x14000707b
movzx ecx, r11b
sub ecx, 0x10
je 0x14000703f
sub ecx, 1
je 0x140007027
movzx r13d, word [rbp + 0xd0]
cmp ecx, 1
je 0x140006ffe
movzx eax, r11b
imul rcx, rax, 0x128
add rcx, r15
jmp 0x140007141
mov rax, r10
cmp byte [r15 + 0xbed8], al
setne al
add rax, 0xa4
imul rax, rax, 0x128
add rax, r15
mov qword [0x14018f188], rax
jmp 0x140007148
mov rax, r10
cmp byte [r15 + 0xbc88], al
setne al
add rax, 0xa2
jmp 0x140007052
mov rax, r10
cmp byte [r15 + 0xba38], al
setne al
add rax, 0xa0
movzx r13d, word [rbp + 0xd0]
imul rax, rax, 0x128
add rax, r15
mov qword [0x14018f188], rax
jmp 0x140007148
movzx eax, byte [rbp + 0xd0]
mov byte [rsp + 0x58], al
movzx r13d, word [rbp + 0xd0]
mov r9d, r10d
movzx r10d, byte [rbx + 0x18]
test r10d, r10d
je 0x140007152
lea r8, [rbx + 0xe2]
nop dword [rax]
movzx edx, word [r8]
mov rax, qword [0x14018ada8]
imul rcx, rdx, 0x128
cmp byte [rcx + rax + 0x10], 0
je 0x140007101
movzx eax, word [r8 + 2]
mov ecx, 0x4000
test cx, ax
je 0x1400070eb
test dil, dil
jne 0x140007116
mov word [rbx + 0xa], ax
cmp r14w, r12w
jne 0x14000712f
jmp 0x140007101
test dil, dil
jne 0x140007101
movzx r14d, ax
mov word [rsp + 0x50], ax
movzx r13d, dx
inc r9d
add r8, 4
cmp r9d, r10d
jl 0x14000709f
jmp 0x140007125
movzx r14d, word [r8 + 2]
movzx r13d, word [r8]
mov word [rsp + 0x50], r14w
cmp r14w, r12w
je 0x140007152
movzx eax, r13w
imul rcx, rax, 0x128
add rcx, qword [0x14018ada8]
mov qword [0x14018f188], rcx
cmp r14w, r12w
jne case.default.0x140007177
movzx eax, sil
add eax, 0xffffff60
cmp eax, 5
ja case.default.0x140007177
lea rdx, [0x140000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x8469]
add rcx, rdx
jmp rcx
mov al, reloc.OLEAUT32.dll_SafeArrayGetElemsize
jmp 0x140007189
mov al, reloc.OLEAUT32.dll_SafeArrayGetUBound
jmp 0x140007189
mov al, reloc.OLEAUT32.dll_SafeArrayGetDim
xor r10d, r10d
movzx eax, al
imul r11, rax, 0x128
mov r8d, r10d
movzx r9d, byte [r11 + r15 + 0x17]
test r9, r9
je 0x140007244
lea rdx, [r15 + 0x1a]
add rdx, r11
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rdx]
imul rax, rcx, 0x128
cmp byte [rax + r15 + 0x10], 0
je 0x14000721d
movzx eax, word [rdx + 2]
mov r10d, 0x4000
test r10w, ax
mov r10d, 0
je 0x140007207
test dil, dil
jne 0x140007232
mov word [rbx + 0xa], ax
cmp r14w, r12w
jne 0x14000724e
jmp 0x14000721d
test dil, dil
jne 0x14000721d
movzx r14d, ax
mov word [rsp + 0x50], ax
mov byte [rsp + 0x58], cl
inc r8
add rdx, 4
cmp r8, r9
jl 0x1400071bb
jmp 0x140007244
movzx r14d, word [rdx + 2]
movzx eax, byte [rdx]
mov word [rsp + 0x50], r14w
mov byte [rsp + 0x58], al
cmp r14w, r12w
je 0x1400072de
movzx edx, byte [rsp + 0x58]
mov ecx, edx
sub ecx, 0x10
je 0x1400072b4
sub ecx, 1
je 0x14000729b
cmp ecx, 1
je 0x140007282
movzx eax, dl
imul rcx, rax, 0x128
add rcx, r15
jmp 0x1400073a0
cmp byte [r15 + 0xbed8], 0
mov rax, r10
setne al
add rax, 0xa4
jmp 0x1400072c8
cmp byte [r15 + 0xbc88], 0
mov rax, r10
setne al
add rax, 0xa2
jmp 0x1400072c8
cmp byte [r15 + 0xba38], 0
mov rax, r10
setne al
add rax, 0xa0
imul rax, rax, 0x128
add rax, r15
mov qword [0x14018f188], rax
jmp case.default.0x140007177
movzx r10d, byte [r11 + r15 + 0x18]
xor eax, eax
mov r9d, eax
test r10, r10
je case.default.0x140007177
lea rdx, [r15 + 0xe2]
add rdx, r11
nop dword [rax]
movzx r8d, word [rdx]
mov rax, qword [0x14018ada8]
imul rcx, r8, 0x128
cmp byte [rcx + rax + 0x10], 0
je 0x140007360
movzx eax, word [rdx + 2]
mov ecx, 0x4000
test cx, ax
je 0x14000734a
test dil, dil
jne 0x140007375
mov word [rbx + 0xa], ax
cmp r14w, r12w
jne 0x14000738e
jmp 0x140007360
test dil, dil
jne 0x140007360
movzx r14d, ax
mov word [rsp + 0x50], ax
movzx r13d, r8w
inc r9
add rdx, 4
cmp r9, r10
jl 0x1400072ff
jmp 0x140007384
movzx r14d, word [rdx + 2]
movzx r13d, word [rdx]
mov word [rsp + 0x50], r14w
cmp r14w, r12w
je case.default.0x140007177
movzx eax, r13w
imul rcx, rax, 0x128
add rcx, qword [0x14018ada8]
mov qword [0x14018f188], rcx
movzx r15d, r14w
and r15w, r12w
cmp r14w, r12w
je 0x140007472
cmp r15w, word [0x14018cd40]
jae 0x140007467
mov r14, qword [rsp + 0x70]
lea r8, [rbx + 0xf]
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], r14
movzx edx, dil
lea rcx, [rsp + 0x50]
call fcn.14000d16b
mov r8, rax
test rax, rax
je 0x1400082e7
mov rax, qword [rbp + 0xe8]
movabs rcx, 0xffffffff003c2c17
add rcx, rax
cmp rcx, 0x66
ja 0x140007441
movzx edx, byte [r8 + 0x39]
mov ecx, 0xffc3d44d
sub ecx, eax
cmp ecx, edx
jg 0x140007441
test r14, r14
je 0x14000743a
mov eax, 0x69
mov word [r14], ax
xor al, al
jmp 0x140007443
mov al, 1
xor ecx, ecx
test al, al
cmovne rcx, r8
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x1400082e7
movzx r14d, word [rsp + 0x50]
movzx r15d, r14w
and r15w, r12w
mov rax, qword [0x14018f188]
mov byte [rax + 0x15], 2
movzx eax, r15w
mov ecx, 0x3ffd
sub ax, cx
cmp ax, 1
ja 0x1400076c9
test dil, dil
jne 0x140007495
mov byte [rbx + 0x13], 1
test byte [0x14018ac73], 0xc
jne 0x1400074be
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140012c46
mov r14d, dword [rsp + 0x54]
lea eax, [rsi + 0x5e]
mov r13d, 1
cmp al, r13b
ja 0x1400074fe
test dil, dil
jne 0x1400074fe
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
movzx r8d, r14w
mov byte [rsp + 0x20], dil
movzx edx, sil
mov ecx, r13d
call fcn.140012c46
mov rax, qword [0x14018f188]
mov byte [rax + 0x11], 1
mov eax, 0x3ffd
cmp r15w, ax
jne 0x140007551
test byte [0x14018ac73], 0x30
jne 0x140007541
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
xor ecx, ecx
call fcn.140012c46
mov rax, qword [0x14018f188]
mov byte [rax + 0x12], 1
jmp 0x1400075e8
mov ecx, 0x3ffe
cmp r15w, cx
jne 0x1400075e8
lea eax, [rsi + 0x60]
cmp al, 1
ja 0x140007594
test dil, dil
jne 0x140007594
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
movzx r8d, r14w
mov byte [rsp + 0x20], dil
movzx edx, sil
mov ecx, r13d
call fcn.140012c46
test byte [0x14018ac73], 0x10
je 0x1400075be
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa0
mov ecx, r13d
call fcn.140012c46
test byte [0x14018ac73], 0x20
je 0x1400075e8
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa1
mov ecx, r13d
call fcn.140012c46
test byte [0x14018ac73], 1
je 0x140007612
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa2
mov ecx, r13d
call fcn.140012c46
test byte [0x14018ac73], 2
je 0x14000763c
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa3
mov ecx, r13d
call fcn.140012c46
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140012c46
mov eax, 0x3ffd
cmp r15w, ax
jne 0x1400076b7
mov rax, qword [0x14018f188]
cmp byte [rax + 0x12], 0
je 0x1400076b7
lea eax, [rsi - 0x60]
cmp al, 9
jbe 0x14000768f
cmp sil, 0x6e
jne 0x1400076b7
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
mov ecx, r13d
call fcn.140012c46
mov rax, qword [0x14018f188]
mov byte [rax + 0x12], 0
mov rcx, qword [rsp + 0x70]
mov eax, 0x68
mov word [rcx], ax
jmp 0x140008375
mov r8, qword [0x14018adb0]
mov r11d, 0x3ffa
cmp r14w, r12w
jne 0x140007a83
movzx eax, byte [rbx + 8]
movzx edx, byte [0x14018ac72]
test al, al
je 0x1400076f7
not al
and dl, al
mov r13, qword [rbp + 0xb0]
cmp r13, qword [0x140189ed8]
movzx r9d, byte [rsp + 0x59]
jne 0x140007735
test r9b, r9b
je 0x140007735
mov r10, qword [rsp + 0x78]
mov rax, qword [0x14018adc0]
movzx ecx, dl
shl rcx, 9
add rcx, r10
jmp 0x14000774f
mov r10, qword [rsp + 0x78]
movzx eax, sil
movzx ecx, dl
shl rcx, 8
add rcx, rax
mov rax, qword [0x14018adc8]
movzx r14d, word [rax + rcx*2]
mov word [rsp + 0x50], r14w
cmp r14w, r12w
jne 0x1400077e9
cmp byte [0x14018f180], 0
je 0x1400077e9
cmp sil, 9
je 0x1400077e9
and dl, 0xf3
cmp r13, qword [0x140189ed8]
jne 0x1400077aa
test r9b, r9b
je 0x1400077aa
mov rax, qword [0x14018adc0]
movzx ecx, dl
shl rcx, 9
add rcx, r10
jmp 0x1400077bf
movzx eax, sil
movzx ecx, dl
shl rcx, 8
add rcx, rax
mov rax, qword [0x14018adc8]
movzx r14d, word [rax + rcx*2]
movzx eax, r14w
mov word [rsp + 0x50], r14w
and ax, r12w
sub ax, r11w
cmp ax, 4
jbe 0x1400077e9
mov r14d, r12d
mov word [rsp + 0x50], r12w
mov eax, 0x4000
test ax, r14w
je 0x140007833
test dil, dil
jne 0x140007972
mov word [rbx + 0xa], r14w
cmp word [rbx + 0xa], r12w
lea rcx, [rbx + 0xa]
jne 0x140007a0a
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x30], 0
jmp 0x1400079f4
cmp r14w, r12w
je 0x14000797c
movzx eax, r14w
and ax, r12w
test dil, dil
je 0x140007953
cmp ax, word [0x14018cd40]
jae 0x140007943
movzx r15d, ax
mov rax, qword [0x14018adb8]
cmp word [rax + r15*2], r12w
je 0x140007943
cmp byte [rsp + 0x5b], 0
jne 0x1400078b7
mov r14, qword [rsp + 0x70]
lea r8, [rbx + 0xf]
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], r14
movzx edx, dil
lea rcx, [rsp + 0x50]
call fcn.14000d16b
mov rdx, rax
test rax, rax
jne 0x1400078ce
mov r8, qword [0x14018adb0]
mov qword [rsp + 0x68], rax
mov rax, qword [0x14018adb8]
movzx r14d, word [rax + r15*2]
mov word [rsp + 0x50], r14w
jmp 0x140007972
mov r8, qword [rbp + 0xe8]
movabs rax, 0xffffffff003c2c17
add rax, r8
cmp rax, 0x66
ja 0x140007919
movzx ecx, byte [rdx + 0x39]
mov eax, 0xffc3d44d
sub eax, r8d
cmp eax, ecx
jg 0x140007919
test r14, r14
je 0x140007912
mov eax, 0x69
mov word [r14], ax
xor al, al
jmp 0x14000791b
mov al, 1
mov r8, qword [0x14018adb0]
xor ecx, ecx
test al, al
cmovne rcx, rdx
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x1400078b7
movzx r14d, word [rsp + 0x50]
jmp 0x140007972
cmp byte [rsp + 0x5b], 0
jne 0x14000797c
jmp 0x140007972
cmp ax, word [0x14018cd40]
jae 0x140007972
movzx ecx, ax
mov rax, qword [0x14018adb8]
movzx ecx, word [rax + rcx*2]
mov word [rbx + 0xa], cx
cmp r14w, r12w
jne 0x140007a8a
test dil, dil
je 0x140007806
cmp byte [rbx + 8], 0
jne 0x1400079db
test byte [rbx + 0xf], 1
jne 0x1400079db
cmp byte [rbx + 0xc], 0
je 0x1400079db
cmp byte [rsp + 0x5a], 0
jne 0x1400079db
movzx r9d, word [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
mov rcx, r13
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
jmp 0x1400083ac
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x30], dil
mov eax, dword [rsp + 0x54]
mov rcx, r13
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x1400065b5
lea r8, [rbx + 0xf]
mov dl, 1
xor ebx, ebx
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], rbx
call fcn.14000d16b
mov rcx, r13
mov rax, qword [rsp + 0x60]
cmp byte [rbp + 0xd0], bl
je 0x140007a5c
mov byte [rsp + 0x48], bl
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], bl
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x1400065b5
movzx r9d, word [rsp + 0x54]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], bl
jmp 0x1400083b1
mov r13, qword [rbp + 0xb0]
movzx eax, byte [rbx + 0xf]
lea r15, [rbx + 0xf]
test al, 8
je 0x140007aaf
test dil, dil
je 0x140007aaf
and al, 0xf7
mov byte [rbp + 0xd0], 1
mov byte [r15], al
movzx eax, r14w
and ax, r12w
cmp ax, word [0x14018cd40]
jae 0x140007b73
cmp qword [rsp + 0x68], 0
jne 0x140007b73
mov r14, qword [rsp + 0x70]
lea r9, [rbp + 0xd0]
mov r8, r15
mov qword [rsp + 0x20], r14
movzx edx, dil
lea rcx, [rsp + 0x50]
call fcn.14000d16b
mov rdx, rax
test rax, rax
je 0x140007bdf
mov r8, qword [rbp + 0xe8]
movabs rax, 0xffffffff003c2c17
lea rcx, [r8 + rax]
cmp rcx, 0x66
ja 0x140007b4a
movzx ecx, byte [rdx + 0x39]
mov eax, 0xffc3d44d
sub eax, r8d
cmp eax, ecx
jg 0x140007b4a
test r14, r14
je 0x140007b43
mov eax, 0x69
mov word [r14], ax
xor al, al
jmp 0x140007b4c
mov al, 1
xor r14d, r14d
test al, al
mov ecx, r14d
cmovne rcx, rdx
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x140007be2
movzx r14d, word [rsp + 0x50]
mov r8, qword [0x14018adb0]
movzx eax, byte [0x14018ac73]
and r14w, r12w
cmp r13, qword [0x140189ed8]
jne 0x140007cdf
test al, 0x3f
jne 0x140007d33
test al, 0x40
je 0x140007bb8
movzx eax, byte [0x14018f13c]
mov ecx, 1
cmp byte [r8 + 0x6944], 0
cmove eax, ecx
mov byte [0x14018f13c], al
test byte [0x14018ac73], 0x80
je 0x140007d33
cmp byte [r8 + 0x6a6c], 0
jne 0x140007d33
mov byte [0x14018f13d], 1
jmp 0x140007d33
xor r14d, r14d
test dil, dil
je 0x140007c47
cmp byte [rbx + 0x14], 0
mov rcx, r13
mov rax, qword [rsp + 0x60]
je 0x140007c20
mov qword [rsp + 0x40], r14
movzx r9d, word [rsp + 0x54]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
jmp 0x1400083ac
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x1400065b5
cmp word [rbx + 0xa], r12w
lea rcx, [rbx + 0xa]
je 0x140007815
lea r9, [rbp + 0xd0]
mov byte [rbp + 0xd0], 0
mov r8, r15
mov qword [rsp + 0x20], r14
mov dl, 1
call fcn.14000d16b
cmp byte [rbp + 0xd0], 0
mov rcx, r13
mov rax, qword [rsp + 0x60]
je 0x140007caf
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x1400065b5
and byte [r15], 0xf7
movzx r9d, word [rsp + 0x54]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], 0
mov byte [rbx + 0x14], 1
jmp 0x1400083b1
test al, 0xc
jne 0x140007d33
test al, 0x40
je 0x140007d09
cmp byte [r8 + 0x6944], 0
jne 0x140007d09
mov byte [0x14018f13c], 1
jmp 0x140007d33
test byte [0x14018ac73], 0x80
je 0x140007d33
movzx eax, byte [0x14018f13d]
mov ecx, 1
cmp byte [r8 + 0x6a6c], 0
cmove eax, ecx
mov byte [0x14018f13d], al
test byte [0x14018ac73], 4
je 0x140007d68
cmp byte [r8 + 0xbdac], 0
jne 0x140007d68
cmp qword [0x140189ed8], 0
je 0x140007daa
mov byte [0x14018f13e], 1
jmp 0x140007dcd
test byte [0x14018ac73], 8
je 0x140007dcd
cmp byte [r8 + 0xbed4], 0
jne 0x140007dcd
call fcn.1400163cc
test al, al
jne 0x140007dcd
cmp qword [0x140189ed8], 0
je 0x140007daa
mov byte [0x14018f13f], 1
jmp 0x140007dcd
movzx edx, byte [reloc.OLEAUT32.dll_SafeArrayGetElemsize]
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 2]
call fcn.140012c46
movzx eax, r14w
cmp eax, 0x3ffa
je 0x140007e1e
jbe 0x140007dfa
cmp eax, 0x3ffc
jbe 0x140007e2b
mov ecx, 0x3ffe
cmp eax, ecx
jbe 0x140007ef4
mov rax, qword [rsp + 0x68]
movzx r12d, r14w
cmp byte [rax + 0x36], 5
jne 0x14000819c
movzx eax, word [rax + 0x34]
shl eax, 0x10
cdqe
or r12, rax
jmp 0x14000819c
cmp byte [0x14018f180], 0
je 0x1400079db
xor al, al
test byte [0x14018ac73], 4
je 0x140007e42
mov r13b, 0xa4
jmp 0x140007e56
test byte [0x14018ac73], 8
movzx r13d, al
mov eax, 0xa5
cmovne r13d, eax
cmp byte [0x14018f180], 0
je 0x140007ffa
mov eax, 0x3ffb
cmp r14w, ax
je 0x140007eed
movzx eax, r13b
test r13b, r13b
jne 0x140007e84
mov eax, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, al
lea ecx, [r8 + 1]
call fcn.140012c46
cmp byte [rbx + 8], 0
je 0x140007ee1
lea eax, [rsi - 0x5b]
cmp al, 1
jbe 0x140007ee1
test dil, dil
jne 0x140007ee1
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
lea ecx, [r8 + 1]
call fcn.140012c46
mov byte [0x14018f180], 0
jmp 0x14000819c
mov r13, qword [rbp + 0xb0]
cmp byte [0x14018f180], 0
je 0x1400079db
test dil, dil
jne 0x140007f35
lea eax, [rsi + 0x60]
cmp al, 3
ja 0x140007f35
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
lea ecx, [r8 + 1]
call fcn.140012c46
test byte [0x14018ac73], 0xc
je 0x140007f56
test dil, dil
je 0x140007f72
lea eax, [rsi + 0x5c]
cmp al, 1
ja 0x140007f72
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140012c46
xor r15b, r15b
mov eax, 0x3ffd
cmp r14w, ax
jne 0x140007fb0
test byte [0x14018ac73], 0x30
jne 0x140007fb0
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
xor ecx, ecx
call fcn.140012c46
mov r15b, 1
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140012c46
test r15b, r15b
je 0x140008198
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
lea ecx, [r8 + 1]
call fcn.140012c46
jmp 0x140008198
lea eax, [rsi + 0x5c]
cmp al, 1
lea eax, [rsi + 0x60]
setbe byte [rsp + 0x5b]
cmp al, 1
lea eax, [rsi + 0x5e]
setbe dl
cmp al, 1
mov byte [rsp + 0x59], dl
setbe cl
xor r15b, r15b
test byte [0x14018ac73], 0x10
je 0x140008030
mov r15b, 0xa0
jmp 0x14000805c
test byte [0x14018ac73], 0x20
je 0x140008045
mov r15b, 0xa1
jmp 0x14000805c
test dil, dil
jne 0x14000805c
test dl, dl
movzx r15d, r15b
movzx eax, sil
cmovne r15d, eax
xor r14b, r14b
test byte [0x14018ac73], 1
je 0x140008074
mov r14b, 0xa2
jmp 0x1400080a0
test byte [0x14018ac73], 2
je 0x140008089
mov r14b, 0xa3
jmp 0x1400080a0
test dil, dil
jne 0x1400080a0
test cl, cl
movzx r14d, r14b
movzx eax, sil
cmovne r14d, eax
mov byte [rbp + 0xe8], 0
test r15b, r15b
je 0x1400080d7
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r15b
lea ecx, [r8 + 1]
call fcn.140012c46
mov byte [rbp + 0xe8], 1
test r14b, r14b
je 0x140008100
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r14b
lea ecx, [r8 + 1]
call fcn.140012c46
cmp byte [rsp + 0x5b], 0
je 0x140008118
test dil, dil
jne 0x140008121
movzx r13d, sil
test r13b, r13b
jne 0x14000813d
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140012c46
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140012c46
cmp byte [rbp + 0xe8], 0
je 0x140008191
cmp byte [rsp + 0x59], 0
jne 0x140008191
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r15b
xor ecx, ecx
call fcn.140012c46
mov byte [0x14018f180], 1
lea r15, [rbx + 0xf]
cmp byte [rsp + 0x5a], 0
mov eax, 0x68
mov rcx, qword [rsp + 0x70]
mov word [rcx], ax
je 0x140008217
test dil, dil
je 0x1400082b4
cmp byte [rbx + 0xc], 0
je 0x140008217
mov ebx, dword [rsp + 0x54]
xor r9d, r9d
mov eax, 0xffc3d44e
movzx r8d, bx
mov dword [rsp + 0x28], eax
movzx edx, sil
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 1]
call fcn.140012c46
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, bx
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 2]
call fcn.140012c46
movzx r9d, bx
jmp 0x140008386
test dil, dil
je 0x1400082b4
cmp byte [rbx + 8], 0
je 0x14000825b
cmp byte [rbx + 0x14], 0
mov rcx, qword [rbp + 0xb0]
je 0x14000824c
xor eax, eax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x60]
jmp 0x140007c02
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 1
jmp 0x140007c25
cmp byte [rbp + 0xd0], 0
je 0x140008370
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp + 0xb0]
mov r9, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
call fcn.140008621
jmp 0x1400083c1
mov rax, qword [0x14018f188]
mov byte [rbx + 0x13], 1
test rax, rax
je 0x1400082d6
cmp byte [rax + 8], 0
je 0x1400082d6
mov byte [rax + 0x15], 2
cmp byte [rbp + 0xd0], 0
je 0x140008300
or byte [r15], 8
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
jmp 0x140006cc9
lea eax, [rsi + 0x5c]
cmp al, 1
ja 0x140008370
movzx eax, byte [0x14018ac73]
test al, 0xc0
je 0x140008345
test al, 0x33
jne 0x140008345
movzx edx, byte [reloc.OLEAUT32.dll_SafeArrayGetElemsize]
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 2]
call fcn.140012c46
mov r14d, dword [rsp + 0x54]
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r14w
movzx edx, sil
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 1]
call fcn.140012c46
jmp 0x140008375
mov r14d, dword [rsp + 0x54]
test dil, dil
jne 0x140008382
mov byte [rbx + 0x14], 1
movzx r9d, r14w
xor eax, eax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov rcx, qword [rbp + 0xb0]
mov byte [rsp + 0x20], dil
movzx r8d, sil
mov rdx, qword [rbp + 0xc8]
call fcn.140008481
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret