Function at 0x140005910
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rax, qword [rbp + 0xe8]
mov r13, rcx
movzx edi, byte [rbp + 0xe0]
movabs rcx, 0xffffffff003c2bb3
movzx esi, byte [rbp + 0xd0]
add rax, rcx
cmp rax, 2
mov r10, r8
mov r8, qword [0x140101f80]
mov r14d, 0x7fff
setbe byte [rsp + 0x59]
xor r15d, r15d
test r8, r8
jne 0x14000598f
lea r12, [rbp - 0x80]
mov qword [rsp + 0x60], r12
jmp 0x140005a56
movsxd rcx, dword [0x140101fe0]
imul r12, rcx, 0xd4
inc ecx
add r12, r8
cmp ecx, dword [0x1400fda60]
mov qword [rsp + 0x60], r12
cmovge ecx, r15d
mov dword [0x140101fe0], ecx
mov byte [r12], sil
mov byte [r12 + 6], dil
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov dword [0x140101f9c], eax
sub ecx, dword [0x140104488]
xorps xmm0, xmm0
mov dword [0x140104488], eax
cvtsi2ss xmm0, rcx
divss xmm0, dword [0x1400eb848]
movss dword [r12 + 8], xmm0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x140005a2c
cmp rax, qword [0x140101fd8]
je 0x140005a24
mov rcx, qword [0x140101f68]
lea r8, [r12 + 0xc]
mov r9, rax
mov edx, 0x418
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x140005a3b
mov word [r12 + 0xc], r15w
jmp 0x140005a3b
movabs rax, 0x41002f004e
mov qword [r12 + 0xc], rax
mov r9, qword [rbp + 0xc8]
mov r10, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
mov qword [0x140101fd8], rbx
cmp sil, 0xe7
jne 0x140005a9b
movzx eax, word [r9 + 4]
mov ecx, 0x55
mov qword [rsp + 0x40], r14
mov r8, r10
mov qword [rsp + 0x38], r12
mov word [r12 + 4], cx
mov rcx, r13
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
mov word [r12 + 2], ax
call fcn.140007570
jmp 0x140007348
movzx ecx, word [rbp + 0xd8]
lea eax, [rsi + 0x64]
mov dword [rsp + 0x54], ecx
mov word [r12 + 2], cx
cmp al, 3
ja 0x140005aba
mov ecx, r15d
mov dword [rsp + 0x54], ecx
cmp r13, qword [0x140101f88]
jne 0x140005afe
movzx ebx, byte [rbp + 0xf0]
mov r9, qword [0x140102e68]
and bl, 1
jne 0x140005c42
test dil, dil
movzx eax, sil
mov ecx, 0x80
cmovne ecx, r15d
lea r15, [0x140000000]
mov byte [rax + r15 + 0x102d30], cl
jmp 0x140005c42
mov r13d, dword [rbp + 0xf0]
lea r15, [0x140000000]
mov ebx, r13d
mov eax, 0x100
shr ebx, 4
and bl, 1
test ax, cx
jne case.0x140005b5a.23
lea ecx, [rax - 0x70]
call qword [sym.imp.USER32.dll_GetKeyState]
test al, 1
je case.0x140005b5a.23
movzx eax, sil
add eax, 0xfffffff4
cmp eax, 0x62
ja case.0x140005b5a.23
cdqe
movzx eax, byte [r15 + rax + 0x738c]
mov ecx, dword [r15 + rax*4 + 0x735c]
add rcx, r15
jmp rcx
test dil, dil
sete byte [0x140105350]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105351]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105352]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105353]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105354]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105355]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105356]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105357]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105358]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x140105359]
jmp case.0x140005b5a.23
test dil, dil
sete byte [0x14010535a]
mov r9, qword [0x140102e68]
movzx r12d, sil
lea rax, [r12 + r12*2]
cmp byte [r9 + rax*8 + 0xc], 0
jne 0x140005c36
movzx r8d, dil
movzx edx, sil
mov ecx, r13d
call fcn.140008cc0
mov r9, qword [0x140102e68]
mov r13, qword [rbp + 0xb0]
test al, al
je 0x140005c3d
test dil, dil
mov ecx, 0x80
mov edx, 0
cmovne ecx, edx
mov byte [r12 + r15 + 0x102d30], cl
mov r12, qword [rsp + 0x60]
jmp 0x140005c44
mov r13, qword [rbp + 0xb0]
mov r12, qword [rsp + 0x60]
xor edx, edx
movzx r15d, byte [rsp + 0x59]
mov eax, 0x69
test r15b, r15b
jne 0x140005c64
test bl, bl
mov eax, SafeArrayAllocDescriptor
mov ecx, 0x61
cmovne ax, cx
cmp byte [0x140102d2c], 0
mov word [r12 + 4], ax
je 0x140005ca9
lea eax, [rsi - 0x5b]
cmp al, 1
ja 0x140005ca9
test dil, dil
jne 0x140005ca9
mov r9d, dword [rsp + 0x54]
mov rcx, r13
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], dil
jmp 0x140007338
cmp byte [0x140105336], 0
je 0x140005d78
cmp sil, 0x1b
jne 0x140005d78
test dil, dil
jne 0x140005d78
xor edx, edx
lea rcx, str.32771
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140005d71
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
jne 0x140005d71
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
xor ecx, ecx
call fcn.140011b10
movzx edx, byte [0x140102d2f]
xor r8d, r8d
shr dl, 3
xor r9d, r9d
and dl, 1
mov dword [rsp + 0x28], 0xffc3d44d
or dl, 0xa4
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 1]
call fcn.140011b10
mov r9d, dword [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
movzx r8d, sil
mov qword [rsp + 0x38], 0x7fffffff
mov rcx, r13
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], al
jmp 0x14000733c
mov r9, qword [0x140102e68]
mov r13d, dword [rsp + 0x54]
movzx eax, r13w
mov qword [rsp + 0x70], rax
lea rcx, [rax + rax*2]
mov rax, qword [0x140102e60]
lea rbx, [rax + rcx*8]
mov rcx, qword [rbp + 0xb0]
cmp rcx, qword [0x140101f90]
movzx eax, byte [rbx + 0x17]
mov byte [rsp + 0x5b], al
jne 0x140005db1
test al, al
jne 0x140005dc4
movzx eax, sil
lea rcx, [rax + rax*2]
lea rbx, [r9 + rcx*8]
mov rcx, qword [rbp + 0xb0]
test r15b, r15b
je 0x140005e2e
mov eax, 0xffc3d44e
cmp qword [rbp + 0xe8], rax
jne 0x140005df6
test dil, dil
je 0x140005df6
cmp qword [0x140105338], rbx
jne 0x140005df6
xor eax, eax
mov byte [rbx + 0x11], 0
mov qword [0x140105338], rax
mov byte [rbx + 0x14], 0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r13w
mov byte [rsp + 0x20], sil
mov r9, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
call fcn.140007570
jmp 0x140007348
test dil, dil
jne 0x140005e3c
mov byte [rbx + 0x15], dil
mov word [rbx + 8], r14w
cmp rcx, qword [0x140101f88]
jne 0x140005eab
test sil, sil
jne 0x140005e66
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r13w
mov byte [rsp + 0x20], sil
jmp 0x140005e10
lea eax, [rsi - 1]
cmp al, 1
ja 0x140005eab
cmp dword [0x140101bc4], 0
jne 0x140005edb
xor edx, edx
lea rcx, str.32768
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140005e9d
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x140104468]
je 0x140005ed4
mov r9, qword [0x140102e68]
mov rcx, qword [rbp + 0xb0]
mov rax, qword [0x140105338]
test rax, rax
je 0x140005f03
cmp rax, rbx
je 0x140005f03
test dil, dil
jne 0x140005f03
cmp rcx, qword [0x140101f90]
jne 0x140005ee9
xor eax, eax
cmp byte [rbx + 0xc], al
sete al
jmp 0x140005ef4
mov rcx, qword [rbp + 0xb0]
test dil, dil
sete al
mov byte [rbx + 0x11], al
jmp 0x140005df2
mov rax, qword [0x140105338]
movzx eax, byte [rax + 0xc]
test eax, eax
je 0x140005f03
mov rax, qword [0x140105338]
mov byte [rax + 0x16], 1
cmp byte [rbx + 0xd], 0
jne 0x140005f13
cmp byte [rbx + 0xe], 0
je 0x140005df6
xor edx, edx
mov word [rsp + 0x50], r14w
mov qword [rsp + 0x68], rdx
movzx r15d, r14w
test dil, dil
je 0x140005f5b
movzx edx, byte [rbx + 0x14]
movzx eax, word [rbx + 8]
movzx r8d, byte [rbx + 0x11]
mov byte [rsp + 0x5c], dl
xor edx, edx
mov byte [rsp + 0x59], r8b
mov byte [rbx + 0x14], 0
cmp ax, r14w
je 0x140005f71
movzx r15d, ax
mov word [rsp + 0x50], ax
mov word [rbx + 8], r14w
jmp 0x140005f71
movzx eax, byte [rbp + 0xd0]
mov byte [rsp + 0x59], al
movzx eax, byte [rbp + 0xd0]
mov byte [rsp + 0x5c], al
test dil, dil
mov byte [rbp + 0xd0], 0
sete al
cmp rcx, qword [0x140101f90]
mov byte [rbx + 0x11], al
jne 0x140005ffc
cmp byte [rbx + 0xc], 0
je 0x140006027
cmp byte [r9 + 0xf41], 0
jne 0x140005faa
cmp byte [r9 + 0xf59], 0
mov eax, edx
je 0x140005faf
mov eax, 1
cmp byte [r9 + 0xf71], 0
mov byte [r9 + 0x1a9], al
jne 0x140005fcc
cmp byte [r9 + 0xf89], 0
mov eax, edx
je 0x140005fd1
mov eax, 1
cmp byte [r9 + 0xf11], 0
mov byte [r9 + 0x1c1], al
jne 0x140005fee
cmp byte [r9 + 0xf29], 0
mov eax, edx
je 0x140005ff3
mov eax, 1
mov byte [r9 + 0x191], al
jmp 0x140006027
cmp qword [0x140101f90], 0
jne 0x140006027
mov cl, 1
call fcn.140014630
mov r9, qword [0x140102e68]
mov byte [0x140102d2e], al
mov byte [0x140102d2f], al
mov byte [rbp + 0xd0], 1
mov rax, qword [rbx]
test rax, rax
je 0x140006039
cmp dword [rax], 7
mov byte [rsp + 0x58], 1
je 0x14000603e
mov byte [rsp + 0x58], 0
movzx ecx, byte [rbx + 0xd]
test cl, cl
je 0x140006213
test dil, dil
jne 0x140006213
mov rax, qword [0x140105338]
test rax, rax
je 0x14000606e
cmp byte [rbx + 0xe], dil
je 0x14000606e
cmp rbx, rax
jne 0x140006213
cmp cl, 1
jne 0x14000609c
movzx eax, byte [rsp + 0x5b]
movzx ecx, r13w
test al, al
jne 0x140006084
movzx ecx, sil
movzx edx, al
call fcn.14000ba80
mov r9, qword [0x140102e68]
test al, al
je 0x14000609c
mov r13b, 1
jmp 0x1400060b3
xor r13b, r13b
cmp rbx, qword [0x140105338]
je 0x1400060b3
mov qword [0x140105338], rbx
mov byte [rbx + 0x16], r13b
cmp byte [rbx + 0xe], 0
je 0x140006184
cmp byte [rbp + 0xd0], 0
jne 0x1400060db
mov cl, 1
mov byte [rbp + 0xd0], 1
call fcn.140014630
mov r9, qword [0x140102e68]
movzx eax, byte [rbx + 0xc]
movzx ecx, byte [0x140102d2e]
test al, al
je 0x1400060ee
not al
and cl, al
test cl, cl
jne 0x140006101
test r13b, r13b
jne 0x140006101
test byte [rbx + 0x10], 1
je 0x140006184
mov r10, qword [rbp + 0xb0]
cmp r10, qword [0x140101f90]
jne 0x14000612d
cmp byte [rsp + 0x5b], 0
je 0x14000612d
mov rax, qword [0x140102e78]
movzx ecx, cl
shl rcx, 9
add rcx, qword [rsp + 0x70]
jmp 0x140006142
movzx ecx, cl
movzx eax, sil
shl rcx, 8
add rcx, rax
mov rax, qword [0x140102e80]
movzx r15d, word [rax + rcx*2]
mov eax, 0x8000
mov word [rsp + 0x50], r15w
test ax, r15w
je 0x14000615f
mov word [rbx + 8], r15w
jmp 0x140006191
movzx eax, r15w
and ax, r14w
cmp ax, word [0x140102ed4]
jae 0x14000618b
movzx ecx, ax
mov rax, qword [0x140102e70]
movzx ecx, word [rax + rcx*2]
mov word [rbx + 8], cx
jmp 0x14000618b
mov r10, qword [rbp + 0xb0]
cmp r15w, r14w
jne 0x14000620e
test r13b, r13b
je 0x1400061a5
or byte [rbx + 0x10], 8
mov eax, reloc.OLEAUT32.dll_SafeArrayAllocDescriptor
mov word [r12 + 4], ax
cmp byte [rbx + 0xc], 0
jne 0x1400061ec
test byte [rbx + 0x10], 1
jne 0x1400061ec
cmp byte [rsp + 0x58], 0
jne 0x1400061ec
test r13b, r13b
jne 0x1400061ec
mov r9d, dword [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
mov rcx, r10
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], al
mov byte [rbx + 0x15], 1
jmp 0x140007338
mov r15d, dword [rsp + 0x54]
mov rcx, r10
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], r15w
jmp 0x140005e0b
mov r13d, dword [rsp + 0x54]
cmp byte [rbx + 0xe], 0
mov byte [rsp + 0x5a], 0
je 0x140006287
test dil, dil
je 0x140006287
cmp qword [0x140105338], rbx
movzx edx, byte [rsp + 0x5c]
jne 0x140006241
test dl, dl
je 0x140006287
xor r8d, r8d
mov qword [0x140105338], r8
jmp 0x140006244
xor r8d, r8d
cmp byte [rbx + 0xf], 0
jne 0x140006282
movzx eax, byte [rbx + 0x10]
test al, 8
je 0x14000625b
xor cl, cl
and al, 0xf7
mov byte [rbx + 0x10], al
jmp 0x14000625d
mov cl, 1
test dl, dl
je 0x140006322
test cl, cl
je 0x140006322
mov rcx, qword [rbp + 0xb0]
movzx r9d, r13w
mov qword [rsp + 0x40], r8
jmp 0x140007320
mov byte [rsp + 0x5a], 1
cmp byte [rbx + 0xd], 0
je 0x14000642b
test dil, dil
je 0x14000642b
mov rax, qword [0x140105338]
mov ecx, 0
cmp rax, rbx
cmove rax, rcx
mov qword [0x140105338], rax
cmp byte [rbx + 0x12], cl
je 0x1400062e0
xor r8d, r8d
mov byte [rbx + 0x12], cl
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], cl
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
lea ecx, [r8 + 1]
call fcn.140011b10
mov r9, qword [0x140102e68]
cmp byte [rbx + 0x13], 0
je 0x14000630f
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rbx + 0x13], 0
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 1]
call fcn.140011b10
mov r9, qword [0x140102e68]
cmp r15w, r14w
jne 0x140006343
movzx eax, byte [rbx + 0x10]
test al, 8
je 0x140006343
and al, 0xf7
mov byte [rbx + 0x10], al
mov rcx, qword [rbp + 0xb0]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r13w
jmp 0x140005e0b
movzx eax, byte [rsp + 0x58]
test al, al
je 0x1400063ea
movzx eax, byte [rbx + 0x16]
cmp al, 2
jne 0x1400063a4
xor r9d, r9d
mov eax, 0xffc3d44e
mov dword [rsp + 0x28], eax
movzx r8d, r13w
movzx edx, sil
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 1]
call fcn.140011b10
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r13w
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 2]
call fcn.140011b10
movzx r9d, r13w
jmp 0x140007312
cmp al, 1
je 0x140006322
movzx eax, byte [rsp + 0x58]
cmp byte [rbx + 0xe], 0
jne 0x14000641a
cmp byte [rbx + 0xc], 0
jne 0x140006322
test byte [rbx + 0x10], 1
jne 0x140006322
test al, al
jne 0x140006322
mov rcx, qword [rbp + 0xb0]
xor eax, eax
mov qword [rsp + 0x40], rax
movzx r9d, r13w
jmp 0x140007320
cmp byte [rbx + 0x16], 0
je 0x1400063b1
cmp r15w, r14w
jne 0x1400063b1
cmp byte [rbx + 0xc], 0
jne 0x140006322
test byte [rbx + 0x10], 1
mov rcx, qword [rbp + 0xb0]
jne 0x140005df6
movzx r9d, r13w
jmp 0x140007319
cmp byte [rsp + 0x59], 0
jne 0x14000642b
cmp byte [rbx + 0xf], 0
je 0x140006322
cmp byte [rbp + 0xd0], 0
jne 0x140006448
cmp r15w, r14w
jne 0x140006448
mov cl, 1
call fcn.140014630
mov r9, qword [0x140102e68]
cmp qword [0x140105338], 0
mov r11d, 0x7ffa
mov byte [rbp + 0xd0], 0
lea r10d, [r11 + 3]
je 0x140006898
test dil, dil
je 0x140006476
cmp byte [rbx + 0xf], 0
je 0x140006898
cmp r15w, r14w
jne 0x140006b7c
movzx r13d, word [rbx + 0xa]
xor eax, eax
mov r8d, eax
cmp r13w, r14w
je 0x14000668b
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [0x140102ec0]
movzx ecx, r13w
mov rdx, qword [rax + rcx*8]
movzx eax, byte [rdx + 0x11]
test al, al
je 0x1400064c4
movzx eax, al
lea rcx, [rax + rax*2]
lea rax, [r9 + rcx*8]
jmp 0x1400064d7
movzx eax, word [rdx + 0xa]
lea rcx, [rax + rax*2]
mov rax, qword [0x140102e60]
lea rax, [rax + rcx*8]
cmp byte [rax + 0x11], 0
je 0x140006503
cmp byte [rdx + 0x16], 0
je 0x1400064f7
test dil, dil
jne 0x140006510
movzx eax, word [rdx + 4]
mov word [rbx + 8], ax
test r8, r8
jne 0x14000651c
jmp 0x140006503
test dil, dil
jne 0x140006503
test r8, r8
cmove r8, rdx
movzx r13d, word [rdx + 0xc]
cmp r13w, r14w
jne 0x1400064a0
jmp 0x140006513
mov r8, rdx
test r8, r8
je 0x14000668b
movzx edx, byte [r8 + 0x11]
mov ecx, edx
test edx, edx
je 0x1400065ae
sub ecx, 0x10
je 0x14000658d
sub ecx, 1
je 0x14000656c
cmp ecx, 1
je 0x14000654b
lea rcx, [rdx + rdx*2]
lea rax, [r9 + rcx*8]
mov qword [0x140105338], rax
jmp 0x1400065c9
cmp byte [r9 + 0xf89], 0
mov eax, 0xf60
mov ecx, 0xf78
cmovne eax, ecx
add rax, r9
mov qword [0x140105338], rax
jmp 0x1400065c9
cmp byte [r9 + 0xf59], 0
mov eax, 0xf30
mov ecx, 0xf48
cmovne eax, ecx
add rax, r9
mov qword [0x140105338], rax
jmp 0x1400065c9
cmp byte [r9 + 0xf29], 0
mov eax, 0xf00
mov ecx, 0xf18
cmovne eax, ecx
add rax, r9
mov qword [0x140105338], rax
jmp 0x1400065c9
movzx eax, word [r8 + 0xa]
lea rcx, [rax + rax*2]
mov rax, qword [0x140102e60]
lea rcx, [rax + rcx*8]
mov qword [0x140105338], rcx
movzx r15d, word [r8 + 6]
test r15w, r15w
je 0x1400065df
mov word [rsp + 0x50], r15w
jmp 0x14000667c
movzx eax, word [r8 + 4]
lea r15, [r12 + 4]
lea r8, [rbx + 0x10]
mov word [rsp + 0x50], ax
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], r15
movzx edx, dil
lea rcx, [rsp + 0x50]
call fcn.14000bc80
mov r8, rax
test rax, rax
je 0x1400072b2
mov rax, qword [rbp + 0xe8]
movabs rcx, 0xffffffff003c2c17
add rcx, rax
cmp rcx, 0x66
ja 0x140006654
movzx edx, byte [r8 + 0x24]
mov ecx, 0xffc3d44d
sub ecx, eax
cmp ecx, edx
jg 0x140006654
test r15, r15
je 0x140006650
mov eax, 0x69
mov word [r15], ax
xor al, al
jmp 0x140006656
mov al, 1
xor ecx, ecx
test al, al
cmovne rcx, r8
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x1400072b2
movzx r15d, word [rsp + 0x50]
mov r11d, 0x7ffa
lea r10d, [r11 + 3]
mov rax, qword [0x140105338]
movzx r13d, r15w
mov byte [rax + 0x16], 2
movzx eax, r13w
sub ax, r10w
cmp ax, 1
ja 0x140006898
test dil, dil
jne 0x1400066a6
mov byte [rbx + 0x14], 1
test byte [0x140102d2f], 0xc
jne 0x1400066cb
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140011b10
mov r15d, dword [rsp + 0x54]
lea eax, [rsi + 0x5e]
cmp al, 1
ja 0x1400066fd
test dil, dil
jne 0x1400066fd
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r15w
mov byte [rsp + 0x20], dil
movzx edx, sil
lea ecx, [r9 + 1]
call fcn.140011b10
mov rax, qword [0x140105338]
mov byte [rax + 0x12], 1
mov eax, 0x7ffd
cmp r13w, ax
jne 0x140006748
test byte [0x140102d2f], 0x30
jne 0x140006738
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
xor ecx, ecx
call fcn.140011b10
mov rax, qword [0x140105338]
mov byte [rax + 0x13], 1
jmp 0x1400067ce
mov ecx, 0x7ffe
cmp r13w, cx
jne 0x1400067ce
lea eax, [rsi + 0x60]
cmp al, 1
ja 0x140006780
test dil, dil
jne 0x140006780
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r15w
mov byte [rsp + 0x20], dil
movzx edx, sil
lea ecx, [r9 + 1]
call fcn.140011b10
test byte [0x140102d2f], 0x10
je 0x1400067a7
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa0
lea ecx, [r8 + 1]
call fcn.140011b10
test byte [0x140102d2f], 0x20
je 0x1400067ce
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa1
lea ecx, [r8 + 1]
call fcn.140011b10
test byte [0x140102d2f], 1
je 0x1400067f5
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa2
lea ecx, [r8 + 1]
call fcn.140011b10
test byte [0x140102d2f], 2
je 0x14000681c
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa3
lea ecx, [r8 + 1]
call fcn.140011b10
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140011b10
mov eax, 0x7ffd
cmp r13w, ax
jne 0x140006888
mov rax, qword [0x140105338]
cmp byte [rax + 0x13], 0
je 0x140006888
lea eax, [rsi - 0x60]
cmp al, 9
jbe 0x14000685f
cmp sil, 0x6e
jne 0x140006888
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
lea ecx, [r8 + 1]
call fcn.140011b10
mov rax, qword [0x140105338]
mov byte [rax + 0x13], 0
mov eax, 0x68
mov word [r12 + 4], ax
jmp 0x140007305
cmp r15w, r14w
jne 0x140006b7c
movzx eax, byte [rbx + 0xc]
movzx edx, byte [0x140102d2e]
test al, al
je 0x1400068b5
not al
and dl, al
mov r10, qword [rbp + 0xb0]
cmp r10, qword [0x140101f90]
movzx r8d, byte [rsp + 0x5b]
jne 0x1400068e8
test r8b, r8b
je 0x1400068e8
mov r9, qword [rsp + 0x70]
mov rax, qword [0x140102e78]
movzx ecx, dl
shl rcx, 9
add rcx, r9
jmp 0x140006902
mov r9, qword [rsp + 0x70]
movzx eax, sil
movzx ecx, dl
shl rcx, 8
add rcx, rax
mov rax, qword [0x140102e80]
movzx r15d, word [rax + rcx*2]
mov word [rsp + 0x50], r15w
cmp r15w, r14w
jne 0x140006981
cmp byte [0x140105336], 0
je 0x140006981
cmp sil, 9
je 0x140006981
and dl, 0xf3
cmp r10, qword [0x140101f90]
jne 0x140006946
test r8b, r8b
je 0x140006946
mov rax, qword [0x140102e78]
movzx ecx, dl
shl rcx, 9
add rcx, r9
jmp 0x14000695b
movzx eax, sil
movzx ecx, dl
shl rcx, 8
add rcx, rax
mov rax, qword [0x140102e80]
movzx r15d, word [rax + rcx*2]
movzx eax, r15w
mov word [rsp + 0x50], r15w
and ax, r14w
sub ax, r11w
cmp ax, 4
jbe 0x140006981
mov r15d, r14d
mov word [rsp + 0x50], r14w
mov eax, 0x8000
test ax, r15w
je 0x1400069f3
test dil, dil
jne 0x140006af8
mov word [rbx + 8], r15w
cmp word [rbx + 8], r14w
lea rcx, [rbx + 8]
je 0x1400061ec
lea r8, [rbx + 0x10]
mov dl, 1
xor ebx, ebx
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], rbx
call fcn.14000bc80
mov rcx, qword [rbp + 0xb0]
cmp byte [rbp + 0xd0], bl
je 0x140006b56
mov r15d, dword [rsp + 0x54]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], bl
mov word [rsp + 0x28], r15w
jmp 0x140005e0b
cmp r15w, r14w
je 0x140006b05
movzx eax, r15w
and ax, r14w
test dil, dil
je 0x140006add
cmp ax, word [0x140102ed4]
jae 0x140006ad4
movzx r13d, ax
mov rax, qword [0x140102e70]
cmp word [rax + r13*2], r14w
je 0x140006ad4
cmp byte [rsp + 0x5a], 0
jne 0x140006a68
lea r15, [r12 + 4]
movzx edx, dil
lea r8, [rbx + 0x10]
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.14000bc80
mov rdx, rax
test rax, rax
jne 0x140006a7c
mov qword [rsp + 0x68], rax
mov rax, qword [0x140102e70]
movzx r15d, word [rax + r13*2]
mov word [rsp + 0x50], r15w
jmp 0x140006af8
mov r8, qword [rbp + 0xe8]
movabs rax, 0xffffffff003c2c17
add rax, r8
cmp rax, 0x66
ja 0x140006ab8
movzx ecx, byte [rdx + 0x24]
mov eax, 0xffc3d44d
sub eax, r8d
cmp eax, ecx
jg 0x140006ab8
test r15, r15
je 0x140006ab4
mov eax, 0x69
mov word [r15], ax
xor al, al
jmp 0x140006aba
mov al, 1
xor ecx, ecx
test al, al
cmovne rcx, rdx
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x140006a68
movzx r15d, word [rsp + 0x50]
jmp 0x140006af8
cmp byte [rsp + 0x5a], 0
jne 0x140006b05
jmp 0x140006af8
cmp ax, word [0x140102ed4]
jae 0x140006af8
movzx ecx, ax
mov rax, qword [0x140102e70]
movzx ecx, word [rax + rcx*2]
mov word [rbx + 8], cx
cmp r15w, r14w
jne 0x140006b7c
mov r10, qword [rbp + 0xb0]
test dil, dil
je 0x14000699a
cmp byte [rbx + 0xc], 0
jne 0x140006b34
test byte [rbx + 0x10], 1
jne 0x140006b34
cmp byte [rbx + 0xd], 0
je 0x140006b34
cmp byte [rsp + 0x58], 0
jne 0x140006b34
mov r9d, dword [rsp + 0x54]
mov rcx, r10
jmp 0x140007319
mov r15d, dword [rsp + 0x54]
mov rcx, r10
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r15w
jmp 0x140005e0b
mov r9d, dword [rsp + 0x54]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], bl
jmp 0x140007338
movzx eax, byte [rbx + 0x10]
lea r13, [rbx + 0x10]
mov qword [rsp + 0x70], r13
test al, 8
je 0x140006b9f
test dil, dil
je 0x140006b9f
and al, 0xf7
mov byte [rbp + 0xd0], 1
mov byte [r13], al
movzx eax, r15w
and ax, r14w
cmp ax, word [0x140102ed4]
jae 0x140006c4d
cmp qword [rsp + 0x68], 0
jne 0x140006c4d
lea r15, [r12 + 4]
mov r8, r13
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], r15
movzx edx, dil
lea rcx, [rsp + 0x50]
call fcn.14000bc80
mov rdx, rax
test rax, rax
je 0x140006cd6
mov r8, qword [rbp + 0xe8]
movabs rax, 0xffffffff003c2c17
lea rcx, [r8 + rax]
cmp rcx, 0x66
ja 0x140006c2b
movzx ecx, byte [rdx + 0x24]
mov eax, 0xffc3d44d
sub eax, r8d
cmp eax, ecx
jg 0x140006c2b
test r15, r15
je 0x140006c27
mov eax, 0x69
mov word [r15], ax
xor al, al
jmp 0x140006c2d
mov al, 1
xor r15d, r15d
test al, al
mov ecx, r15d
cmovne rcx, rdx
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x140006cd9
movzx r15d, word [rsp + 0x50]
and r15w, r14w
test byte [0x140102d2f], 0xcc
je 0x140006e3f
cmp byte [rbp + 0xd0], 0
jne 0x140006e3f
cmp byte [0x140105335], 0
jne 0x140006c88
mov rcx, qword [rbp + 0xb0]
cmp rcx, qword [0x140101f88]
jne 0x140006e46
test byte [0x140102d2f], 0xc0
movzx edx, byte [0x140102d2d]
je 0x140006dc6
test dl, 0xc0
jne 0x140006cca
cmp r15w, word [0x140102ed4]
jae 0x140006dc6
mov rax, qword [0x140102ec0]
movzx ecx, r15w
mov rcx, qword [rax + rcx*8]
movzx eax, byte [rcx + 0xf]
and al, 0xc0
je 0x140006dc6
mov byte [0x140105334], 1
jmp 0x140006e3f
xor r15d, r15d
test dil, dil
je 0x140006d19
cmp byte [rbx + 0x15], 0
mov rcx, qword [rbp + 0xb0]
je 0x140006cfa
mov r9d, dword [rsp + 0x54]
mov qword [rsp + 0x40], r15
jmp 0x140007320
mov r15d, dword [rsp + 0x54]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r15w
jmp 0x140005e0b
cmp word [rbx + 8], r14w
lea rcx, [rbx + 8]
jne 0x140006d4a
mov r15d, dword [rsp + 0x54]
mov rcx, qword [rbp + 0xb0]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], r15w
jmp 0x140005e0b
lea r9, [rbp + 0xd0]
mov byte [rbp + 0xd0], 0
mov r8, r13
mov qword [rsp + 0x20], r15
mov dl, 1
call fcn.14000bc80
cmp byte [rbp + 0xd0], 0
mov rcx, qword [rbp + 0xb0]
je 0x140006d96
mov r15d, dword [rsp + 0x54]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], r15w
jmp 0x140005e0b
and byte [r13], 0xf7
mov r9d, dword [rsp + 0x54]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], 0
mov byte [rbx + 0x15], 1
jmp 0x140007338
cmp byte [0x140105334], 0
jne 0x140006e3f
movzx eax, byte [0x140102d2f]
test al, 0xc
je 0x140006e3f
test al, 3
jne 0x140006e3f
test dl, 0xc
jne 0x140006e04
cmp r15w, word [0x140102ed4]
jae 0x140006e3f
mov rax, qword [0x140102ec0]
movzx ecx, r15w
mov rcx, qword [rax + rcx*8]
movzx eax, byte [rcx + 0xf]
and al, 0xc
je 0x140006e3f
cmp qword [0x140101f90], 0
je 0x140006e17
mov byte [0x140105334], 1
jmp 0x140006e3f
movzx r8d, word [0x1400ff3f0]
xor r9d, r9d
movzx edx, byte [reloc.OLEAUT32.dll_SafeArrayGetElemsize]
mov dword [rsp + 0x28], 0xffc3d44d
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 2]
call fcn.140011b10
mov rcx, qword [rbp + 0xb0]
movzx eax, r15w
cmp eax, 0x7ffa
je 0x140006e97
jbe 0x140006e67
cmp eax, 0x7ffc
jbe 0x140006ea4
mov ecx, 0x7ffe
cmp eax, ecx
jbe 0x140006f4b
mov rcx, qword [rsp + 0x68]
movzx r14d, r15w
mov rax, qword [rcx + 8]
test rax, rax
je 0x140007198
cmp byte [rax], 5
jb 0x140007198
movzx eax, word [rcx + 0x20]
shl eax, 0x10
cdqe
or r14, rax
jmp 0x140007198
cmp byte [0x140105336], 0
je 0x140006cfa
xor al, al
test byte [0x140102d2f], 4
je 0x140006eb4
mov r13b, 0xa4
jmp 0x140006ec8
test byte [0x140102d2f], 8
movzx r13d, al
mov eax, 0xa5
cmovne r13d, eax
cmp byte [0x140105336], 0
je 0x140007035
mov eax, 0x7ffb
cmp r15w, ax
je 0x140006f4b
movzx eax, r13b
test r13b, r13b
jne 0x140006eee
mov eax, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, al
lea ecx, [r8 + 1]
call fcn.140011b10
cmp byte [rbx + 0xc], 0
je 0x140006f3f
lea eax, [rsi - 0x5b]
cmp al, 1
jbe 0x140006f3f
test dil, dil
jne 0x140006f3f
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
lea ecx, [r8 + 1]
call fcn.140011b10
mov byte [0x140105336], 0
jmp 0x140007198
cmp byte [0x140105336], 0
je 0x1400072b2
test dil, dil
jne 0x140006f84
lea eax, [rsi + 0x60]
cmp al, 3
ja 0x140006f84
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
lea ecx, [r8 + 1]
call fcn.140011b10
test byte [0x140102d2f], 0xc
je 0x140006f99
test dil, dil
je 0x140006fb5
lea eax, [rsi + 0x5c]
cmp al, 1
ja 0x140006fb5
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140011b10
xor r12b, r12b
mov eax, 0x7ffd
cmp r15w, ax
jne 0x140006feb
test byte [0x140102d2f], 0x30
jne 0x140006feb
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
xor ecx, ecx
call fcn.140011b10
mov r12b, 1
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140011b10
test r12b, r12b
je 0x140007193
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
lea ecx, [r8 + 1]
call fcn.140011b10
jmp 0x140007193
lea eax, [rsi + 0x5c]
cmp al, 1
lea eax, [rsi + 0x60]
setbe byte [rsp + 0x59]
cmp al, 1
lea eax, [rsi + 0x5e]
setbe dl
cmp al, 1
mov byte [rsp + 0x5a], dl
setbe cl
xor r12b, r12b
test byte [0x140102d2f], 0x10
je 0x140007064
mov r12b, 0xa0
jmp 0x140007085
test byte [0x140102d2f], 0x20
je 0x140007072
mov r12b, 0xa1
jmp 0x140007085
test dil, dil
jne 0x140007085
test dl, dl
movzx r12d, r12b
movzx eax, sil
cmovne r12d, eax
xor r15b, r15b
test byte [0x140102d2f], 1
je 0x140007096
mov r15b, 0xa2
jmp 0x1400070b7
test byte [0x140102d2f], 2
je 0x1400070a4
mov r15b, 0xa3
jmp 0x1400070b7
test dil, dil
jne 0x1400070b7
test cl, cl
movzx r15d, r15b
movzx eax, sil
cmovne r15d, eax
mov byte [rbp + 0xe8], 0
test r12b, r12b
je 0x1400070ea
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r12b
lea ecx, [r8 + 1]
call fcn.140011b10
mov byte [rbp + 0xe8], 1
test r15b, r15b
je 0x14000710f
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r15b
lea ecx, [r8 + 1]
call fcn.140011b10
cmp byte [rsp + 0x59], 0
je 0x14000711f
test dil, dil
jne 0x140007124
movzx r13d, sil
test r13b, r13b
jne 0x140007140
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140011b10
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140011b10
cmp byte [rbp + 0xe8], 0
je 0x14000718c
cmp byte [rsp + 0x5a], 0
jne 0x14000718c
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r12b
xor ecx, ecx
call fcn.140011b10
mov byte [0x140105336], 1
mov r12, qword [rsp + 0x60]
cmp byte [rsp + 0x58], 0
mov eax, 0x68
mov word [r12 + 4], ax
je 0x140007206
test dil, dil
je 0x140007287
cmp byte [rbx + 0xd], 0
je 0x140007206
mov r15d, dword [rsp + 0x54]
xor r9d, r9d
mov eax, 0xffc3d44e
movzx r8d, r15w
mov dword [rsp + 0x28], eax
movzx edx, sil
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 1]
call fcn.140011b10
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r15w
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 2]
call fcn.140011b10
jmp 0x14000730e
test dil, dil
je 0x140007287
cmp byte [rbx + 0xc], 0
je 0x140007233
cmp byte [rbx + 0x15], 0
mov rcx, qword [rbp + 0xb0]
je 0x140006cfa
mov r9d, dword [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
jmp 0x140007320
cmp byte [rbp + 0xd0], 0
mov r15d, dword [rsp + 0x54]
je 0x140007305
mov rax, qword [rbp + 0xb0]
mov r9, qword [rbp + 0xc8]
mov rcx, rax
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r15w
mov byte [rsp + 0x20], sil
call fcn.140007570
jmp 0x140007348
mov rax, qword [0x140105338]
mov byte [rbx + 0x14], 1
test rax, rax
je 0x1400072a1
cmp byte [rax + 0xc], 0
je 0x1400072a1
mov byte [rax + 0x16], 2
cmp byte [rbp + 0xd0], 0
je 0x1400072d8
mov rax, qword [rsp + 0x70]
or byte [rax], 8
mov r15d, dword [rsp + 0x54]
mov rcx, qword [rbp + 0xb0]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r15w
jmp 0x140005e0b
mov r15d, dword [rsp + 0x54]
lea eax, [rsi + 0x5c]
cmp al, 1
ja 0x140007305
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d450
movzx r8d, r15w
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 1]
call fcn.140011b10
test dil, dil
jne 0x14000730e
mov byte [rbx + 0x15], 1
movzx r9d, r15w
mov rcx, qword [rbp + 0xb0]
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], dil
movzx r8d, sil
mov rdx, qword [rbp + 0xc8]
call fcn.1400073f0
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret