Function at 0x140048ba0
Capabilities:
Check for time delay via gettickcount
Get keyboard layout

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x8070]
mov eax, 0x8170
call fcn.1400d23b0
sub rsp, rax
xor r12d, r12d
cmp byte [rcx], 0x3e
mov rbx, rcx
jne 0x140048f2a
mov rcx, qword [0x1401196e0]
lea rdx, str.UseErrorLevel
call fcn.1400ad650
mov r9, qword [0x1401196d8]
mov rdx, qword [0x1401196d0]
test rax, rax
mov eax, r12d
setne dil
cmp byte [rbx + 1], 3
cmova rax, qword [0x140119648]
test dil, dil
mov qword [rsp + 0x48], rax
mov byte [rsp + 0x40], 1
sete cl
mov byte [rsp + 0x38], dil
lea rax, [rsp + 0x70]
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rax, qword [0x1401196e0]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], cl
lea rcx, [0x14011b1d0]
call fcn.140041b60
test eax, eax
jne 0x140048f2a
test dil, dil
je 0x140048f22
mov rdi, qword [0x14011a308]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140048c8b
mov rcx, qword [rdi + 0x10]
lea rdx, str.ERROR
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
mov esi, eax
jmp 0x140049dbd
lea r14, str.ERROR
cmp qword [rdi + 8], r14
jne 0x140048ca1
mov r13, qword [rdi + 0x10]
shr r13, 1
jmp 0x140048ca7
mov r13d, 5
lea rcx, [r13 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
jne 0x140048cc5
mov rdx, r13
mov rcx, r14
call fcn.1400060c0
mov esi, eax
jmp 0x140049dbd
mov r8, qword [0x140114480]
cmp rsi, r8
jbe 0x140048cf8
cmp rsi, qword [rdi + 0x18]
jbe 0x140048cf8
lea r8, [0x1400e346c]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x14011b1d0]
call fcn.140040740
mov esi, eax
jmp 0x140049dbd
cmp rcx, 2
jae 0x140048d17
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400b1b90
mov esi, 1
jmp 0x140049dbd
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140048d34
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140114480]
mov rcx, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp rsi, rcx
jbe 0x140048ead
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140048d69
cmp al, 2
je 0x140048da9
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbp + 0x80b0]
jmp 0x140048ea1
cmp rsi, 0x80
ja 0x140048da9
cmp rsi, 8
ja 0x140048d7f
mov ebx, 8
jmp 0x140048d8f
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
mov ebx, pe_nt_image_headers64
cmp rsi, rax
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400aa400
test rax, rax
je 0x140048f22
mov byte [rdi + 0x20], 1
jmp 0x140048ea1
cmp rsi, 0x20
jae 0x140048db9
mov ebx, SafeArrayAllocDescriptor
jmp 0x140048e68
cmp rsi, 0x208
jae 0x140048dcc
mov ebx, 0x208
jmp 0x140048e68
cmp rsi, 0x50000
jae 0x140048e24
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140048deb
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
movsd xmm1, qword [0x140101eb8]
xor eax, eax
comisd xmm0, xmm1
jbe 0x140048e1a
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140048e1a
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140048e68
cmp rsi, 0x320000
jae 0x140048e36
lea rbx, [rsi + 0x8000]
jmp 0x140048e68
cmp rsi, 0xc80000
jae 0x140048e61
movabs rax, 0x47ae147ae147ae15
mov rbx, rsi
mul rsi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rsi
jmp 0x140048e68
lea rbx, [rsi + 0x20000]
cmp rbx, r8
cmova rbx, r8
cmp r9b, 2
jne 0x140048e88
test rcx, rcx
je 0x140048e88
mov rcx, qword [rdi + 8]
mov sil, 1
call fcn.1400cb11c
jmp 0x140048e8b
xor sil, sil
test rbx, rbx
js 0x140048edf
mov rcx, rbx
call fcn.1400ca9a4
test rax, rax
je 0x140048edf
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r14
je 0x140048ec3
lea r8, [r13 + r13]
mov rdx, r14
call fcn.1400cb2e0
mov rax, qword [rdi + 8]
lea rcx, [r13 + r13]
mov esi, 1
mov word [rcx + rax], r12w
mov qword [rdi + 0x10], rcx
jmp 0x140049dbd
test sil, sil
je 0x140048ef5
lea rax, [0x14011b184]
mov qword [rdi + 0x18], r12
mov qword [rdi + 8], rax
jmp 0x140048efd
mov rax, qword [rdi + 8]
mov word [rax], r12w
lea r8, [0x1400e346c]
lea rdx, str.Out_of_memory.
lea rcx, [0x14011b1d0]
mov qword [rdi + 0x10], r12
call fcn.140040740
mov esi, eax
jmp 0x140049dbd
mov esi, r12d
jmp 0x140049dbd
movzx eax, byte [rbx]
mov esi, 1
mov qword [rsp + 0x8168], r15
movaps xmmword [rsp + 0x8150], xmm6
lea r14d, [rsi + 0xf]
cmp al, 0x5d
jne 0x14004930f
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetKeyboardLayout]
mov rcx, qword [0x1401196d0]
cmp word [rcx], r12w
jne 0x140048f6d
xor al, al
mov byte [rbp + 0x80c0], al
jmp 0x140048f8f
mov r9, rax
xor r8d, r8d
xor edx, edx
call fcn.14001ac30
mov byte [rbp + 0x80c0], al
test al, al
jne 0x140049218
mov rcx, qword [0x1401196d0]
lea rdx, [rsp + 0x64]
xor r8d, r8d
call fcn.140078e70
mov dword [rsp + 0x54], eax
test eax, eax
jne 0x1400491b3
mov rdi, qword [0x14011a308]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140048fc1
mov byte [rsp + 0x20], sil
jmp 0x140049b57
lea r14, [0x1400e619c]
cmp qword [rdi + 8], r14
jne 0x140048fd7
mov r15, qword [rdi + 0x10]
shr r15, 1
jmp 0x140048fda
mov r15, rsi
lea rdx, [r15 + 1]
lea r13, [rdx + rdx]
cmp al, 2
jne 0x140048ff8
mov rdx, r15
mov rcx, r14
call fcn.1400060c0
mov esi, eax
jmp 0x140049dad
mov rcx, qword [0x140114480]
cmp r13, rcx
jbe 0x14004902b
cmp r13, qword [rdi + 0x18]
jbe 0x14004902b
lea r8, [0x1400e346c]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x14011b1d0]
call fcn.140040740
mov esi, eax
jmp 0x140049dad
cmp rdx, 2
jb 0x140049be5
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140049052
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140114480]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r13, r8
jbe 0x140049d87
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, sil
jbe 0x140049088
cmp al, 2
je 0x1400490c8
mov rbx, qword [rbp + 0x80b0]
mov rax, qword [rbp + 0x80b0]
jmp 0x140049d7b
cmp r13, 0x80
ja 0x1400490c8
cmp r13, 8
ja 0x14004909e
mov ebx, 8
jmp 0x1400490ae
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
mov ebx, pe_nt_image_headers64
cmp r13, rax
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400aa400
test rax, rax
je 0x140049c7a
mov byte [rdi + 0x20], sil
jmp 0x140049d7b
cmp r13, 0x20
jae 0x1400490d8
mov ebx, SafeArrayAllocDescriptor
jmp 0x140049187
cmp r13, 0x208
jae 0x1400490eb
mov ebx, 0x208
jmp 0x140049187
cmp r13, 0x50000
jae 0x140049143
pxor xmm0, xmm0
cvtsi2sd xmm0, r13
test r13, r13
jns 0x14004910a
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
movsd xmm1, qword [0x140101eb8]
xor eax, eax
comisd xmm0, xmm1
jbe 0x140049139
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140049139
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140049187
cmp r13, 0x320000
jae 0x140049155
lea rbx, [r13 + 0x8000]
jmp 0x140049187
cmp r13, 0xc80000
jae 0x140049180
movabs rax, 0x47ae147ae147ae15
mov rbx, r13
mul r13
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r13
jmp 0x140049187
lea rbx, [r13 + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x140049d62
test r8, r8
je 0x140049d62
mov rcx, qword [rdi + 8]
movzx r13d, sil
call fcn.1400cb11c
jmp 0x140049d65
cmp eax, 0xc
jl 0x1400491bd
cmp eax, 0x2b
jle 0x140049222
mov rdi, qword [0x14011a308]
movzx eax, byte [rdi + 0x23]
test al, al
je 0x140048fb7
lea r14, [0x1400e619c]
cmp qword [rdi + 8], r14
jne 0x1400491e6
mov r15, qword [rdi + 0x10]
shr r15, 1
jmp 0x1400491e9
mov r15, rsi
lea rdx, [r15 + 1]
lea r13, [rdx + rdx]
cmp al, 2
je 0x140048fe6
mov rcx, qword [0x140114480]
cmp r13, rcx
jbe 0x14004902b
cmp r13, qword [rdi + 0x18]
ja 0x14004900a
jmp 0x14004902b
mov eax, dword [rbp + 0x80b0]
mov dword [rsp + 0x54], eax
mov r13, qword [0x1401196d8]
mov byte [rbp + 0x80b8], r12b
mov dword [rsp + 0x5c], esi
movzx eax, word [r13]
mov byte [rbp + 0x80c8], sil
mov dword [rsp + 0x58], r12d
test ax, ax
je 0x1400492fe
movsd xmm6, qword [0x140101ea8]
lea rbx, [r13 + 2]
nop word [rax + rax]
movzx edi, ax
test edi, 0xffffff80
jne 0x14004927e
mov edx, 2
mov ecx, edi
call fcn.1400cbb48
test eax, eax
je 0x14004927e
and edi, 0xffffffdf
movzx eax, di
cmp eax, 0x44
je 0x1400492e1
cmp eax, 0x4c
je 0x1400492da
cmp eax, 0x54
jne 0x1400492e8
mov rcx, rbx
mov byte [rbp + 0x80c8], r12b
call fcn.1400148a0
mov rcx, rbx
test al, al
je 0x1400492c7
mov r8d, r14d
xor edx, edx
call fcn.1400cc670
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
cvttsd2si ecx, xmm0
mov dword [rsp + 0x58], ecx
jmp 0x1400492e8
call fcn.1400cc778
mulsd xmm0, xmm6
cvttsd2si ecx, xmm0
mov dword [rsp + 0x58], ecx
jmp 0x1400492e8
mov dword [rsp + 0x5c], r12d
jmp 0x1400492e8
mov byte [rbp + 0x80b8], sil
movzx eax, word [r13 + 2]
add r13, 2
add rbx, 2
test ax, ax
jne 0x140049260
lea rax, [rbp + 0x40]
mov dword [rbp + 0x30], r12d
mov qword [rbp + 0x20], rax
jmp 0x1400493f9
mov rcx, qword [0x1401196d0]
mov rdi, qword [0x1401196e0]
cmp al, 0x3e
je 0x14004932b
cmp al, 0x5c
je 0x140049333
cmp word [rdi], r12w
jne 0x14004933d
cmp al, 0x5c
jne 0x1400493bf
cmp word [rcx], r12w
je 0x1400493bf
cmp al, 0x5c
mov byte [rbp + 0x80c8], r12b
cmove rdi, rcx
mov rcx, rdi
call fcn.1400148a0
mov rcx, rdi
test al, al
je 0x14004936e
mov r8d, r14d
xor edx, edx
call fcn.1400cc670
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
jmp 0x140049373
call fcn.1400cc778
mulsd xmm0, qword [0x140101ea8]
movzx ecx, byte [rbp + 0x80b0]
mov byte [rbp + 0x80c0], cl
cvttsd2si eax, xmm0
mov dword [rsp + 0x58], eax
cmp eax, esi
mov eax, dword [rbp + 0x80b0]
mov dword [rsp + 0x54], eax
movzx eax, byte [rbp + 0x80b0]
mov byte [rbp + 0x80b8], al
mov eax, dword [rbp + 0x80b0]
mov dword [rsp + 0x5c], eax
jge 0x1400493f9
mov dword [rsp + 0x58], 0x1f4
jmp 0x1400493f9
movzx eax, byte [rbp + 0x80b0]
mov byte [rbp + 0x80c8], sil
mov dword [rsp + 0x58], r12d
mov byte [rbp + 0x80c0], al
mov eax, dword [rbp + 0x80b0]
mov dword [rsp + 0x54], eax
movzx eax, byte [rbp + 0x80b0]
mov byte [rbp + 0x80b8], al
mov eax, dword [rbp + 0x80b0]
mov dword [rsp + 0x5c], eax
mov r13, qword [rbp + 0x80b0]
movsd xmm6, qword [0x140101eb8]
mov ebx, 8
cmp byte [r13], 0x3e
lea rdi, [0x1400e346c]
movabs rdx, 0x8000000000000000
mov qword [rsp + 0x68], rbx
movabs r10, 0x47ae147ae147ae15
je 0x1400496ca
mov rdi, qword [0x14011a308]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140049468
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400e350c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400b14e0
jmp 0x1400496c3
lea r13, [0x1400e350c]
cmp qword [rdi + 8], r13
jne 0x14004947e
mov r15, qword [rdi + 0x10]
shr r15, 1
jmp 0x140049481
mov r15, rsi
lea rcx, [r15 + 1]
lea r14, [rcx + rcx]
cmp al, 2
jne 0x14004949d
mov rdx, r15
mov rcx, r13
call fcn.1400060c0
jmp 0x1400496bc
mov r8, qword [0x140114480]
cmp r14, r8
jbe 0x1400494d8
cmp r14, qword [rdi + 0x18]
jbe 0x1400494d8
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rdi, [0x1400e346c]
lea rcx, [0x14011b1d0]
mov r8, rdi
call fcn.140040740
mov r13, qword [rbp + 0x80b0]
jmp 0x1400496ca
cmp rcx, 2
jae 0x1400494f2
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400b1b90
jmp 0x1400496bc
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140049523
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140114480]
movabs rdx, 0x8000000000000000
movabs r10, 0x47ae147ae147ae15
mov rcx, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r14, rcx
jbe 0x140049696
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, sil
jbe 0x140049559
cmp al, 2
je 0x140049599
mov r13, qword [rbp + 0x80b0]
mov rax, qword [rbp + 0x80b0]
jmp 0x140049683
cmp r14, 0x80
ja 0x140049599
cmp r14, rbx
ja 0x14004956c
mov r13, rbx
jmp 0x14004957f
mov r13d, pe_nt_image_headers64
cmp r14, 0x10
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmovbe r13d, eax
mov rcx, r13
call fcn.1400aa400
test rax, rax
je 0x1400496bc
mov byte [rdi + 0x20], sil
jmp 0x140049683
cmp r14, 0x20
jae 0x1400495aa
mov r13d, SafeArrayAllocDescriptor
jmp 0x140049641
cmp r14, 0x208
jae 0x1400495be
mov r13d, 0x208
jmp 0x140049641
cmp r14, 0x50000
jae 0x140049604
pxor xmm0, xmm0
cvtsi2sd xmm0, r14
test r14, r14
jns 0x1400495dd
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
xor eax, eax
comisd xmm0, xmm6
jbe 0x1400495fa
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x1400495fa
mov rax, rdx
cvttsd2si r13, xmm0
add r13, rax
jmp 0x140049641
cmp r14, 0x320000
jae 0x140049616
lea r13, [r14 + 0x8000]
jmp 0x140049641
cmp r14, 0xc80000
jae 0x14004963a
mov rax, r10
mov r13, r14
mul r14
sub r13, rdx
shr r13, 1
add r13, rdx
shr r13, 6
add r13, r14
jmp 0x140049641
lea r13, [r14 + 0x20000]
cmp r13, r8
cmova r13, r8
cmp r9b, 2
jne 0x140049662
test rcx, rcx
je 0x140049662
mov rcx, qword [rdi + 8]
movzx r14d, sil
call fcn.1400cb11c
jmp 0x140049665
xor r14b, r14b
test r13, r13
js 0x140049721
mov rcx, r13
call fcn.1400ca9a4
test rax, rax
je 0x140049721
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 0x18], r13
mov qword [rdi + 8], rax
lea r13, [0x1400e350c]
mov rcx, qword [rdi + 8]
cmp rcx, r13
je 0x1400496ab
lea r8, [r15 + r15]
mov rdx, r13
call fcn.1400cb2e0
mov rax, qword [rdi + 8]
lea rcx, [r15 + r15]
mov word [rcx + rax], r12w
mov qword [rdi + 0x10], rcx
mov r13, qword [rbp + 0x80b0]
lea rdi, [0x1400e346c]
cmp byte [r13], 0x5c
jne 0x1400496e4
mov edx, esi
mov rcx, r13
call fcn.14002dc40
mov byte [rsp + 0x50], sil
cmp eax, esi
je 0x1400496e9
mov byte [rsp + 0x50], r12b
mov rax, qword [rbp + 0x80b0]
mov r15d, r12d
mov ecx, 0x4001
lea r14, [rbp + 0x40]
cmp byte [rax + 1], r12b
jbe 0x1400497cb
mov r13, r12
mov rbx, rax
lea rsi, [0x140000000]
test ecx, ecx
jne 0x14004975d
mov qword [rbp + r13 - 0x80], rdi
jmp 0x1400497ad
test r14b, r14b
je 0x140049745
lea rax, [0x14011b184]
mov qword [rdi + 0x18], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 8], rax
lea rdx, str.Out_of_memory.
jmp 0x1400494b6
mov rax, qword [rdi + 8]
lea rdx, str.Out_of_memory.
mov word [rax], r12w
mov qword [rdi + 0x10], r12
jmp 0x1400494b6
mov rdx, qword [r13 + rsi + 0x1196d0]
movsxd rdi, ecx
mov rcx, r14
lea r8, [rdi - 1]
mov qword [rbp + r13 - 0x80], r14
call fcn.1400cd7f4
xor eax, eax
or rcx, 0xffffffffffffffff
mov word [r14 + rdi*2 - 2], r12w
mov rdi, r14
repne scasw ax, word [rdi]
lea rdi, [0x1400e346c]
not rcx
lea r14, [r14 + rcx*2]
lea rcx, [rbp + 0x40]
mov rax, r14
sub rax, rcx
mov ecx, 0x4001
sar rax, 1
sub ecx, eax
movzx eax, byte [rbx + 1]
inc r15d
add r13, 8
cmp r15d, eax
jl 0x140049713
mov rbx, qword [rsp + 0x68]
mov esi, 1
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r15, qword [rsp + 0x70]
mov r10, qword [0x1401144a8]
mov r14, qword [rbp + 0x80b0]
mov r13d, eax
lea r9, [0x140000000]
mov r11, qword [rbp - 0x78]
mov r8, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x60]
nop word [rax + rax]
movzx eax, byte [r14]
add eax, 0xffffffc2
cmp eax, 0x3e
ja case.0x140049826.69
cdqe
movzx eax, byte [r9 + rax + 0x49e34]
mov ecx, dword [r9 + rax*4 + 0x49e14]
add rcx, r9
jmp rcx
movzx eax, byte [r14 + 1]
mov byte [rsp + 0x30], 1
mov rcx, rdi
cmp al, 4
mov r9, rdi
mov byte [rsp + 0x28], r12b
cmova rcx, rdx
cmp al, 3
mov rdx, rdi
cmova r9, r8
cmp al, 1
mov qword [rsp + 0x20], rcx
mov r8, rdi
mov rcx, r10
cmova r8, r11
test al, al
cmovne rdx, qword [rbp - 0x80]
call fcn.1400b2c40
test rax, rax
je case.0x140049826.69
mov rcx, qword [0x1401144a8]
mov ecx, dword [rcx + 0x74]
cmp ecx, 0xffffffff
jle 0x140049dad
mov edx, esi
call fcn.140001a70
jmp 0x140049dad
movzx eax, byte [r14 + 1]
mov byte [rsp + 0x30], r12b
mov rcx, rdi
cmp al, 4
mov r9, rdi
mov byte [rsp + 0x28], r12b
cmova rcx, rdx
cmp al, 3
mov rdx, rdi
cmova r9, r8
cmp al, 1
mov qword [rsp + 0x20], rcx
mov r8, rdi
mov rcx, r10
cmova r8, r11
test al, al
cmovne rdx, qword [rbp - 0x80]
call fcn.1400b2c40
test rax, rax
jne case.0x140049826.69
mov rax, qword [0x1401144a8]
mov ecx, dword [rax + 0x74]
jmp 0x14004987c
movzx eax, byte [r14 + 1]
mov rcx, rdi
mov r9, rdi
cmp al, 4
mov byte [rsp + 0x28], 1
cmova rcx, rdx
cmp al, 3
mov rdx, rdi
cmova r9, r8
cmp al, 1
mov qword [rsp + 0x20], rcx
mov r8, rdi
mov rcx, r10
cmova r8, r11
test al, al
cmovne rdx, qword [rbp - 0x80]
call fcn.1400b2a40
test rax, rax
jne 0x1400498db
jmp case.0x140049826.69
movzx eax, byte [r14 + 1]
mov rcx, rdi
mov r9, rdi
cmp al, 4
mov byte [rsp + 0x28], 1
cmova rcx, rdx
cmp al, 3
mov rdx, rdi
cmova r9, r8
cmp al, 1
mov qword [rsp + 0x20], rcx
mov r8, rdi
mov rcx, r10
cmova r8, r11
test al, al
cmovne rdx, qword [rbp - 0x80]
call fcn.1400b2a40
test rax, rax
je 0x1400498db
jmp case.0x140049826.69
cmp byte [rsp + 0x50], r12b
je 0x140049991
call qword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x140049dad
jmp case.0x140049826.69
mov ecx, SafeArrayGetElemsize
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x140049dad
lea ecx, [rax + 0xf]
call qword [sym.imp.USER32.dll_IsClipboardFormatAvailable]
test eax, eax
jne 0x140049dad
jmp case.0x140049826.69
movzx eax, byte [rbp + 0x80c0]
test al, al
je 0x1400499df
mov edx, dword [rsp + 0x5c]
movzx ecx, al
call fcn.1400791d0
cmp al, byte [rbp + 0x80b8]
je 0x140049dad
jmp case.0x140049826.69
mov rax, qword [rbp + 0x20]
mov word [rax], r12w
mov eax, dword [rsp + 0x54]
test eax, eax
je 0x140049a11
mov edx, dword [rsp + 0x64]
lea r8, [rbp + 0x20]
xor r9d, r9d
mov ecx, eax
call fcn.140079290
ucomisd xmm0, qword [0x140101fb8]
jp 0x140049a0d
je 0x140049a11
mov al, 1
jmp 0x140049a13
xor eax, eax
cmp al, byte [rbp + 0x80b8]
je 0x140049dad
jmp case.0x140049826.69
test r15, r15
je 0x140049b27
lea rdx, [rsp + 0x60]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [rsp + 0x60], 0x103
jne 0x140049b17
cmp byte [rbp + 0x80c8], r12b
jne 0x140049a67
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [rsp + 0x58]
add ecx, r13d
sub ecx, eax
cmp ecx, 5
jle 0x140049b43
mov edx, esi
mov ecx, 0x8000012f
call fcn.140001a70
mov r10, qword [0x1401144a8]
mov rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x68]
mov r11, qword [rbp - 0x78]
lea r9, [0x140000000]
test al, al
je 0x140049800
cmp byte [r10 + 0x139], r12b
je 0x140049800
movsxd rcx, dword [0x14011a464]
mov eax, 0x190
lea r9, [0x140000000]
test ecx, ecx
cmovne eax, ecx
dec eax
movsxd rdx, eax
cmp qword [r9 + rdx*8 + 0x11a470], r14
jne 0x140049adb
cmp dword [r9 + rdx*4 + 0x118ff0], r13d
mov rdx, qword [rbp - 0x60]
je 0x140049800
mov rdx, qword [rbp - 0x60]
mov r8, qword [rbp - 0x68]
mov r11, qword [rbp - 0x78]
mov qword [r9 + rcx*8 + 0x11a470], r14
mov dword [r9 + rcx*4 + 0x118ff0], r13d
inc ecx
mov dword [0x14011a464], ecx
cmp ecx, 0x190
jl 0x140049800
mov dword [0x14011a464], r12d
jmp 0x1400497ee
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r12d, dword [rsp + 0x60]
jmp 0x140049b2c
mov dword [rsp + 0x60], r12d
mov rcx, qword [0x14011a308]
movsxd rdx, r12d
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.140001090
jmp 0x140049dad
mov rdi, qword [0x14011a308]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140049b75
mov byte [rsp + 0x20], 1
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400e619c]
xor r9d, r9d
or r8, 0xffffffffffffffff
call fcn.1400b14e0
mov esi, eax
jmp 0x140049dad
lea r14, [0x1400e619c]
cmp qword [rdi + 8], r14
jne 0x140049b8b
mov r15, qword [rdi + 0x10]
shr r15, 1
jmp 0x140049b8e
mov r15, rsi
lea rdx, [r15 + 1]
lea r13, [rdx + rdx]
cmp al, 2
jne 0x140049bac
mov rdx, r15
mov rcx, r14
call fcn.1400060c0
mov esi, eax
jmp 0x140049dad
mov rcx, qword [0x140114480]
cmp r13, rcx
jbe 0x140049bdf
cmp r13, qword [rdi + 0x18]
jbe 0x140049bdf
lea r8, [0x1400e346c]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x14011b1d0]
call fcn.140040740
mov esi, eax
jmp 0x140049dad
cmp rdx, 2
jae 0x140049bf9
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400b1b90
jmp 0x140049dad
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140049c16
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140114480]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r13, r8
jbe 0x140049d87
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140049c4d
cmp al, 2
je 0x140049c8b
mov rbx, qword [rbp + 0x80b0]
mov rax, qword [rbp + 0x80b0]
jmp 0x140049d7b
cmp r13, 0x80
ja 0x140049c8b
cmp r13, 8
jbe 0x140049c6d
mov ebx, pe_nt_image_headers64
cmp r13, 0x10
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400aa400
test rax, rax
jne 0x140049c82
mov esi, r12d
jmp 0x140049dad
mov byte [rdi + 0x20], 1
jmp 0x140049d7b
cmp r13, 0x20
jae 0x140049c9b
mov ebx, SafeArrayAllocDescriptor
jmp 0x140049d42
cmp r13, 0x208
jae 0x140049cae
mov ebx, 0x208
jmp 0x140049d42
cmp r13, 0x50000
jae 0x140049cfe
pxor xmm0, xmm0
cvtsi2sd xmm0, r13
test r13, r13
jns 0x140049ccd
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
xor eax, eax
comisd xmm0, xmm6
jbe 0x140049cf4
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x140049cf4
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140049d42
cmp r13, 0x320000
jae 0x140049d10
lea rbx, [r13 + 0x8000]
jmp 0x140049d42
cmp r13, 0xc80000
jae 0x140049d3b
movabs rax, 0x47ae147ae147ae15
mov rbx, r13
mul r13
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r13
jmp 0x140049d42
lea rbx, [r13 + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x140049d62
test r8, r8
je 0x140049d62
mov rcx, qword [rdi + 8]
mov r13b, 1
call fcn.1400cb11c
jmp 0x140049d65
xor r13b, r13b
test rbx, rbx
js 0x140049dd1
mov rcx, rbx
call fcn.1400ca9a4
test rax, rax
je 0x140049dd1
mov byte [rdi + 0x20], 2
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
and byte [rdi + 0x21], 0x7f
mov rcx, qword [rdi + 8]
cmp rcx, r14
je 0x140049d9c
lea r8, [r15 + r15]
mov rdx, r14
call fcn.1400cb2e0
mov rax, qword [rdi + 8]
lea rcx, [r15 + r15]
mov word [rcx + rax], r12w
mov qword [rdi + 0x10], rcx
mov r15, qword [rsp + 0x8168]
movaps xmm6, xmmword [rsp + 0x8150]
mov eax, esi
add rsp, 0x8170
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
test r13b, r13b
je 0x140049de7
lea rax, [0x14011b184]
mov qword [rdi + 0x18], r12
mov qword [rdi + 8], rax
jmp 0x140049def
mov rax, qword [rdi + 8]
mov word [rax], r12w
lea r8, [0x1400e346c]
lea rdx, str.Out_of_memory.
lea rcx, [0x14011b1d0]
mov qword [rdi + 0x10], r12
call fcn.140040740
mov esi, eax
jmp 0x140049dad