Function at 0x140060a30
Capabilities:
Capture screenshot

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
lea rbp, [rsp - 0x48]
sub rsp, 0x148
movzx esi, byte [rbp + 0xc0]
mov rdi, qword [rbp + 0xb8]
mov ebx, edx
mov r12, rcx
test sil, sil
jne 0x140060a84
lea rdx, [0x1400f9fe8]
mov rcx, rdi
call fcn.1400b9750
mov byte [rsp + 0x50], sil
test rax, rax
je 0x140060a89
mov byte [rsp + 0x50], 1
lea rdx, [0x1400fe3a8]
mov rcx, rdi
mov qword [rsp + 0x140], r13
mov qword [rsp + 0x138], r15
call fcn.1400b9750
test rax, rax
setne al
mov byte [rsp + 0x51], al
test al, al
je 0x140060ae5
mov r15d, dword [rbp + 0xa8]
movzx eax, r15w
shr ax, 8
movzx r13d, al
mov eax, r15d
shr eax, 0x10
shl r13d, 8
movzx ecx, al
movzx eax, r15b
shl eax, 0x10
or r13d, ecx
or r13d, eax
jmp 0x140060b12
mov r13d, dword [rbp + 0xa8]
movzx eax, r13w
shr ax, 8
movzx r15d, al
mov eax, r13d
shr eax, 0x10
shl r15d, 8
movzx ecx, al
movzx eax, r13b
shl eax, 0x10
or r15d, ecx
or r15d, eax
mov rax, qword [0x14012a950]
xor r14d, r14d
mov qword [rsp + 0x70], rax
mov edi, r14d
test sil, sil
jne 0x140060b37
cmp byte [r12 + 1], 1
cmova rdi, qword [0x14012a958]
mov qword [rbp - 0x60], rdi
test rax, rax
je 0x140060b48
mov rcx, rax
call fcn.1400243d0
test rdi, rdi
je 0x140060b55
mov rcx, rdi
call fcn.1400243d0
xor eax, eax
mov r12d, r14d
mov dword [rsp + 0x7c], r14d
mov qword [rbp - 0x78], rax
mov rax, qword [0x1401255c8]
movzx edi, word [rax + 0x130]
and edi, 3
cmp edi, 2
je 0x140060be6
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, rax
test rax, rax
je 0x140060be6
mov rcx, rax
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x140060be6
mov rcx, rsi
test edi, edi
jne 0x140060bb7
lea rdx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x140060be6
mov r8, qword [rbp - 0x78]
add r12d, dword [rbp - 0x70]
add r8d, dword [rbp - 0x6c]
jmp 0x140060bdd
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x60], 0
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x140060be6
mov r8, qword [rbp - 0x78]
add r12d, dword [rsp + 0x60]
add r8d, dword [rsp + 0x64]
mov qword [rbp - 0x78], r8
mov dword [rsp + 0x7c], r12d
mov edi, dword [rbp + 0x98]
mov r8d, dword [rbp + 0x90]
mov rax, qword [rbp - 0x78]
add edi, r12d
add ebx, r12d
mov r12d, dword [rbp + 0xa0]
add r8d, eax
add r12d, eax
cmp ebx, edi
setg r9b
cmp r8d, r12d
mov dword [rbp + 0x98], edi
setg dl
mov dword [rbp + 0x90], r8d
mov dword [rsp + 0x78], ebx
mov byte [rsp + 0x52], r9b
mov dword [rbp - 0x80], r8d
mov dword [rsp + 0x58], edi
mov byte [rbp + 0x88], dl
mov dword [rsp + 0x54], r12d
test r9b, r9b
je 0x140060c4c
mov dword [rsp + 0x78], edi
mov dword [rsp + 0x58], ebx
test dl, dl
je 0x140060c59
mov dword [rbp - 0x80], r12d
mov dword [rsp + 0x54], r8d
mov edi, dword [rbp + 0xb0]
mov eax, 0xff
test edi, edi
jns 0x140060db4
mov edi, r14d
movzx eax, byte [rbp + 0xc0]
movzx esi, byte [rbp + 0xc0]
mov byte [rbp + 0xb0], al
movzx eax, byte [rbp + 0xc0]
movaps xmmword [rsp + 0x120], xmm6
xor ecx, ecx
movaps xmmword [rsp + 0x110], xmm7
mov dword [rsp + 0x68], eax
movaps xmmword [rsp + 0x100], xmm8
call qword [sym.imp.USER32.dll_GetDC]
mov r9, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140061f43
cmp byte [rsp + 0x50], 0
mov byte [rbp + 0xa0], 0
je 0x140061790
mov r13d, dword [rsp + 0x54]
mov r12d, dword [rsp + 0x58]
mov rcx, rax
sub r13d, dword [rbp - 0x80]
sub r12d, dword [rsp + 0x78]
mov qword [rbp - 0x58], r14
inc r13d
mov qword [rbp - 0x70], r14
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
movsd xmm7, qword [0x140112018]
movsd xmm8, qword [0x140112050]
movsd xmm6, qword [0x140112048]
mov qword [rbp - 0x50], rax
mov ebx, 8
test rax, rax
je 0x140060da5
mov rcx, qword [rsp + 0x60]
lea edx, [r12 + 1]
mov r8d, r13d
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov qword [rbp - 0x58], rax
test rax, rax
je 0x140060da5
mov rcx, qword [rbp - 0x50]
mov rdx, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140060da5
mov eax, dword [rbp - 0x80]
mov dword [rsp + 0x40], 0xcc0020
lea r9d, [r12 + 1]
mov r12, qword [rbp - 0x50]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
mov rcx, r12
mov dword [rsp + 0x20], r13d
call qword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x140060da5
mov rcx, r12
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
test rax, rax
jne 0x140060dde
mov r13, r14
mov r12d, dword [rbp + 0xc0]
jmp 0x1400613d5
cmp edi, eax
jle 0x140060dbc
mov edi, eax
jmp 0x140060dc4
test edi, edi
jle 0x140060c6f
movzx esi, r13w
mov eax, r13d
mov byte [rbp + 0xb0], r13b
shr si, 8
shr eax, 0x10
jmp 0x140060c8a
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x98]
lea r8, [rsp + 0x54]
lea rdx, [rbp + 0x90]
mov dword [rsp + 0x20], ebx
call fcn.1400607b0
mov r13, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140060da8
mov ecx, dword [rbp + 0x90]
movzx edx, byte [rbp + 0x98]
mov r9d, ecx
imul r9d, dword [rsp + 0x54]
mov dword [rsp + 0x54], r9d
test dl, dl
je 0x140060ef1
mov r12d, r14d
mov rcx, r14
movsxd rax, r9d
test r9d, r9d
jle 0x140060e61
mov r12d, eax
nop word [rax + rax]
and dword [r13 + rcx*4], 0xf8f8f8f8
inc rcx
cmp rcx, rax
jl 0x140060e50
mov ecx, dword [rbp + 0x90]
cmp byte [rbp + 0xc0], 0
je 0x1400611d3
mov r8d, dword [r13]
and r8d, 0xffffff
cmp byte [rsp + 0x51], 0
jne 0x140060eaa
movzx eax, r8w
shr ax, 8
movzx edx, al
mov eax, r8d
movzx r8d, r8b
shr eax, 0x10
shl edx, 8
shl r8d, 0x10
movzx ecx, al
or edx, ecx
or r8d, edx
lea rdx, [0x1400fe348]
lea rcx, [rbp - 0x40]
call fcn.1400d77e8
mov r15, qword [rsp + 0x70]
movzx r11d, byte [r15 + 0x23]
test r11b, r11b
jne 0x140060efd
mov rcx, qword [r15 + 0x10]
lea rdx, [rbp - 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bd640
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400613dd
mov r12d, dword [rbp + 0xc0]
jmp 0x140060e67
lea rax, [rbp - 0x40]
cmp qword [r15 + 8], rax
jne 0x140060f10
mov r13, qword [r15 + 0x10]
shr r13, 1
jmp 0x140060f24
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r13, [rcx - 1]
lea rax, [r13 + 1]
lea rsi, [rax + rax]
cmp r11b, 2
jne 0x140060f52
lea rcx, [rbp - 0x40]
mov rdx, r13
call fcn.140006da0
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400613dd
mov rcx, qword [0x1401255a0]
cmp rsi, rcx
jbe 0x140060f92
cmp rsi, qword [r15 + 0x18]
jbe 0x140060f92
lea r8, [0x1400f1524]
lea rdx, [0x140110420]
lea rcx, [0x14012c5c0]
call fcn.14004e590
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400613dd
cmp rax, 2
jae 0x140060fbb
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 4]
call fcn.1400bdcf0
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400613dd
movzx eax, byte [r15 + 0x21]
test al, 2
je 0x140060fda
mov rcx, qword [r15]
and al, 0x3d
mov byte [r15 + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r9, qword [r15 + 0x18]
and byte [r15 + 0x21], 0x82
cmp rsi, r9
jbe 0x140061142
movzx r8d, byte [r15 + 0x20]
movzx eax, r8b
cmp r8b, 1
jbe 0x14006100c
cmp al, 2
je 0x14006104b
mov rdi, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140061135
cmp rsi, 0x80
ja 0x14006104b
cmp rsi, rbx
ja 0x14006101f
mov rdi, rbx
jmp 0x140061030
mov edi, 0x80
cmp rsi, 0x10
mov eax, reloc.WSOCK32.dll_recv
cmovbe edi, eax
mov rcx, rdi
call fcn.1400b60a0
test rax, rax
je 0x14006116f
mov byte [r15 + 0x20], 1
jmp 0x140061135
cmp rsi, 0x20
jae 0x14006105b
mov edi, SafeArrayAllocDescriptor
jmp 0x1400610fb
cmp rsi, 0x208
jae 0x14006106e
mov edi, 0x208
jmp 0x1400610fb
cmp rsi, 0x50000
jae 0x1400610b7
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140061089
addsd xmm0, xmm7
mulsd xmm0, xmm8
xor eax, eax
comisd xmm0, xmm6
jbe 0x1400610ad
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x1400610ad
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rdi, xmm0
add rdi, rax
jmp 0x1400610fb
cmp rsi, 0x320000
jae 0x1400610c9
lea rdi, [rsi + 0x8000]
jmp 0x1400610fb
cmp rsi, 0xc80000
jae 0x1400610f4
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x1400610fb
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r8b, 2
jne 0x14006111b
test r9, r9
je 0x14006111b
mov rcx, qword [r15 + 8]
mov sil, 1
call fcn.1400d6fc8
jmp 0x14006111e
xor sil, sil
test rdi, rdi
js 0x140061183
mov rcx, rdi
call fcn.1400d6f08
test rax, rax
je 0x140061183
mov byte [r15 + 0x20], 2
and byte [r15 + 0x21], 0x7f
mov qword [r15 + 8], rax
mov qword [r15 + 0x18], rdi
mov rcx, qword [r15 + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x14006115d
lea r8, [r13 + r13]
lea rdx, [rbp - 0x40]
call fcn.1400d7a30
mov rax, qword [r15 + 8]
lea rcx, [r13 + r13]
mov word [rcx + rax], r14w
mov qword [r15 + 0x10], rcx
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400613dd
test sil, sil
je 0x140061199
lea rax, [0x14012c4b8]
mov qword [r15 + 0x18], r14
mov qword [r15 + 8], rax
jmp 0x1400611a1
mov rax, qword [r15 + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, [0x1400f5a40]
lea rcx, [0x14012c5c0]
mov qword [r15 + 0x10], r14
call fcn.14004e590
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400613dd
cmp edi, 1
jge 0x14006127f
test dl, dl
je 0x1400611e7
and r15d, 0xf8f8f8f8
mov edi, r14d
test r9d, r9d
jle 0x1400613d5
movzx r10d, byte [rbp + 0x88]
movzx r11d, byte [rsp + 0x52]
lea r8d, [r9 - 1]
test r11b, r11b
je 0x140061229
test r10b, r10b
je 0x140061214
mov r12d, r8d
jmp 0x140061248
mov eax, edi
cdq
idiv ecx
lea r12d, [rax + 1]
imul r12d, ecx
sub r12d, edx
dec r12d
jmp 0x140061248
test r10b, r10b
je 0x140061245
mov eax, r8d
cdq
idiv ecx
mov r12d, eax
mov eax, edi
cdq
imul r12d, ecx
idiv ecx
add r12d, edx
jmp 0x140061248
mov r12d, edi
movsxd rax, r12d
mov ecx, dword [r13 + rax*4]
and ecx, 0xffffff
cmp ecx, r15d
je 0x140061270
mov ecx, dword [rbp + 0x90]
inc edi
dec r8d
cmp edi, r9d
jl 0x140061205
jmp 0x1400613d5
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400613d8
mov eax, dword [rsp + 0x68]
test dl, dl
je 0x140061294
and byte [rbp + 0xb0], 0xf8
and sil, 0xf8
and al, 0xf8
movzx edx, byte [rbp + 0xb0]
cmp edi, edx
jle 0x1400612a8
mov byte [rbp + 0x98], 0
jmp 0x1400612b4
movzx ecx, dl
sub cl, dil
mov byte [rbp + 0x98], cl
movzx r8d, sil
cmp edi, r8d
jle 0x1400612c2
xor r15b, r15b
jmp 0x1400612c9
movzx r15d, r8b
sub r15b, dil
movzx r9d, al
cmp edi, r9d
jle 0x1400612d7
xor r13b, r13b
jmp 0x1400612de
movzx r13d, r9b
sub r13b, dil
mov ecx, 0xff
mov eax, ecx
sub eax, edx
cmp edi, eax
jle 0x1400612f0
movzx esi, cl
jmp 0x1400612f3
lea esi, [rdx + rdi]
mov eax, ecx
sub eax, r8d
cmp edi, eax
jle 0x140061302
movzx r11d, cl
jmp 0x140061306
lea r11d, [r8 + rdi]
sub ecx, r9d
cmp edi, ecx
jle 0x140061312
mov dil, 0xff
jmp 0x140061315
add dil, r9b
mov eax, dword [rsp + 0x54]
mov r8d, r14d
test eax, eax
jle 0x1400613d0
movzx r10d, byte [rbp + 0x88]
lea r9d, [rax - 1]
cmp byte [rsp + 0x52], 0
je 0x14006135d
test r10b, r10b
je 0x140061341
mov r12d, r9d
jmp 0x140061383
mov ecx, dword [rbp + 0x90]
mov eax, r8d
cdq
idiv ecx
lea r12d, [rax + 1]
imul r12d, ecx
sub r12d, edx
dec r12d
jmp 0x140061383
test r10b, r10b
je 0x140061380
mov ecx, dword [rbp + 0x90]
mov eax, r9d
cdq
idiv ecx
mov r12d, eax
mov eax, r8d
cdq
imul r12d, ecx
idiv ecx
add r12d, edx
jmp 0x140061383
mov r12d, r8d
mov rcx, qword [rsp + 0x58]
movsxd rax, r12d
mov edx, dword [rcx + rax*4]
mov eax, edx
movzx ecx, dx
shr eax, 0x10
shr cx, 8
cmp al, byte [rbp + 0x98]
jb 0x1400613bf
cmp al, sil
ja 0x1400613bf
cmp cl, r15b
jb 0x1400613bf
cmp cl, r11b
ja 0x1400613bf
cmp dl, r13b
jb 0x1400613bf
cmp dl, dil
jbe 0x1400614d2
inc r8d
dec r9d
cmp r8d, dword [rsp + 0x54]
jl 0x140061330
mov r13, qword [rsp + 0x58]
xor sil, sil
mov r15, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rdi, qword [rbp - 0x50]
test rdi, rdi
je 0x140061411
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x140061408
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rax, qword [rbp - 0x58]
test rax, rax
je 0x140061423
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteObject]
test r13, r13
je 0x140061f43
mov rcx, r13
call fcn.1400d6fc8
cmp byte [rbp + 0xc0], 0
jne 0x140061489
test sil, sil
je 0x140061489
mov edi, dword [rbp + 0x90]
test r15, r15
je 0x140061469
mov eax, r12d
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, r15
cdq
idiv edi
sub edx, dword [rsp + 0x7c]
add edx, dword [rsp + 0x78]
movsxd rdx, edx
call fcn.140001090
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140061489
mov eax, r12d
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
cdq
idiv edi
sub eax, dword [rbp - 0x78]
add eax, dword [rbp - 0x80]
movsxd rdx, eax
call fcn.140001090
cmp byte [rbp + 0xa0], 0
mov rsi, qword [0x14012b628]
lea r15, [0x1400f1614]
movzx r9d, byte [rsi + 0x23]
lea r13, [0x1400f566c]
cmovne r13, r15
test r9b, r9b
jne 0x1400614e6
mov rcx, qword [rsi + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r13
mov byte [rsp + 0x20], 1
call fcn.1400bd640
mov esi, eax
jmp 0x140061f68
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400613d8
mov dl, 1
test r13, r13
jne 0x1400614fb
xor dl, dl
mov r12, r14
lea r13, [0x1400f1524]
jmp 0x14006151d
cmp qword [rsi + 8], r13
jne 0x14006150a
mov r12, qword [rsi + 0x10]
shr r12, 1
jmp 0x14006151d
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rdi, [rax + rax]
cmp r9b, 2
jne 0x14006153e
mov rdx, r12
mov rcx, r13
call fcn.140006da0
mov esi, eax
jmp 0x140061f68
mov r9, qword [0x1401255a0]
cmp rdi, r9
jbe 0x140061571
cmp rdi, qword [rsi + 0x18]
jbe 0x140061571
lea r8, [0x1400f1524]
lea rdx, [0x140110420]
lea rcx, [0x14012c5c0]
call fcn.14004e590
mov esi, eax
jmp 0x140061f68
cmp rax, 2
jae 0x140061598
test dl, dl
mov rcx, rsi
setne r14b
xor r8d, r8d
lea edx, [r14 + 3]
call fcn.1400bdcf0
mov esi, 1
mov eax, esi
jmp 0x140061f68
movzx eax, byte [rsi + 0x21]
test al, 2
je 0x1400615b5
mov rcx, qword [rsi]
and al, 0x3d
mov byte [rsi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r9, qword [0x1401255a0]
mov rcx, qword [rsi + 0x18]
and byte [rsi + 0x21], 0x82
cmp rdi, rcx
jbe 0x14006171b
movzx r8d, byte [rsi + 0x20]
movzx eax, r8b
cmp r8b, 1
jbe 0x1400615e6
cmp al, 2
je 0x140061626
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x14006170f
cmp rdi, 0x80
ja 0x140061626
cmp rdi, rbx
jbe 0x140061605
mov ebx, 0x80
cmp rdi, 0x10
mov eax, reloc.WSOCK32.dll_recv
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b60a0
test rax, rax
jne 0x14006161d
mov esi, r14d
mov eax, r14d
jmp 0x140061f68
mov byte [rsi + 0x20], 1
jmp 0x14006170f
cmp rdi, 0x20
jae 0x140061636
mov ebx, SafeArrayAllocDescriptor
jmp 0x1400616d6
cmp rdi, 0x208
jae 0x140061649
mov ebx, 0x208
jmp 0x1400616d6
cmp rdi, 0x50000
jae 0x140061692
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x140061664
addsd xmm0, xmm7
mulsd xmm0, xmm8
xor eax, eax
comisd xmm0, xmm6
jbe 0x140061688
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x140061688
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x1400616d6
cmp rdi, 0x320000
jae 0x1400616a4
lea rbx, [rdi + 0x8000]
jmp 0x1400616d6
cmp rdi, 0xc80000
jae 0x1400616cf
movabs rax, 0x47ae147ae147ae15
mov rbx, rdi
mul rdi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rdi
jmp 0x1400616d6
lea rbx, [rdi + 0x20000]
cmp rbx, r9
cmova rbx, r9
cmp r8b, 2
jne 0x1400616f6
test rcx, rcx
je 0x1400616f6
mov rcx, qword [rsi + 8]
mov dil, 1
call fcn.1400d6fc8
jmp 0x1400616f9
xor dil, dil
test rbx, rbx
js 0x14006174d
mov rcx, rbx
call fcn.1400d6f08
test rax, rax
je 0x14006174d
mov byte [rsi + 0x20], 2
and byte [rsi + 0x21], 0x7f
mov qword [rsi + 8], rax
mov qword [rsi + 0x18], rbx
mov rcx, qword [rsi + 8]
cmp rcx, r13
je 0x140061730
lea r8, [r12 + r12]
mov rdx, r13
call fcn.1400d7a30
mov rax, qword [rsi + 8]
lea rcx, [r12 + r12]
mov word [rcx + rax], r14w
mov qword [rsi + 0x10], rcx
mov esi, 1
mov eax, esi
jmp 0x140061f68
test dil, dil
je 0x140061763
lea rax, [0x14012c4b8]
mov qword [rsi + 0x18], r14
mov qword [rsi + 8], rax
jmp 0x14006176b
mov rax, qword [rsi + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, [0x1400f5a40]
lea rcx, [0x14012c5c0]
mov qword [rsi + 0x10], r14
call fcn.14004e590
mov esi, eax
jmp 0x140061f68
test edi, edi
jle 0x140061833
movzx ecx, byte [rbp + 0xb0]
cmp edi, ecx
jle 0x1400617a7
xor al, al
jmp 0x1400617ad
movzx eax, cl
sub al, dil
movzx edx, sil
mov byte [rbp + 0xc0], al
cmp edi, edx
jle 0x1400617bf
xor al, al
jmp 0x1400617c5
movzx eax, dl
sub al, dil
movzx r8d, byte [rsp + 0x68]
mov byte [rsp + 0x53], al
cmp edi, r8d
jle 0x1400617d8
xor al, al
jmp 0x1400617df
movzx eax, r8b
sub al, dil
mov byte [rsp + 0x50], al
mov r9d, 0xff
mov eax, r9d
sub eax, ecx
cmp edi, eax
jle 0x1400617fb
mov byte [rbp + 0xb0], r9b
jmp 0x140061804
lea eax, [rcx + rdi]
mov byte [rbp + 0xb0], al
mov eax, r9d
sub eax, edx
cmp edi, eax
jle 0x140061814
mov byte [rsp + 0x51], r9b
jmp 0x14006181b
lea eax, [rdx + rdi]
mov byte [rsp + 0x51], al
sub r9d, r8d
cmp edi, r9d
mov r9, qword [rsp + 0x60]
jle 0x14006182d
mov r15b, 0xff
jmp 0x140061876
lea r15d, [r8 + rdi]
jmp 0x140061876
movzx eax, byte [rbp + 0xc0]
mov byte [rbp + 0xc0], al
movzx eax, byte [rbp + 0xc0]
movzx r15d, byte [rbp + 0xc0]
mov byte [rsp + 0x53], al
movzx eax, byte [rbp + 0xc0]
mov byte [rsp + 0x50], al
movzx eax, byte [rbp + 0xc0]
mov byte [rbp + 0xb0], al
movzx eax, byte [rbp + 0xc0]
mov byte [rsp + 0x51], al
movzx edx, byte [rsp + 0x52]
movsxd rax, edi
mov edi, dword [rbp + 0xc0]
or rcx, 0xffffffffffffffff
mov qword [rbp - 0x70], rax
lea esi, [rcx + 2]
nop
mov eax, r14d
test dl, dl
je 0x1400618a2
cmp ebx, dword [rbp + 0x98]
setge al
jmp 0x1400618ab
cmp ebx, dword [rbp + 0x98]
setle al
test eax, eax
je 0x140061906
mov edi, dword [rbp + 0x90]
nop word [rax + rax]
cmp byte [rbp + 0x88], 0
mov eax, r14d
je 0x1400618d4
cmp edi, r12d
setge al
jmp 0x1400618da
cmp edi, r12d
setle al
test eax, eax
je 0x1400619b0
mov r8d, edi
mov edx, ebx
mov rcx, r9
call qword [sym.imp.GDI32.dll_GetPixel]
cmp qword [rbp - 0x70], rsi
jge 0x140061956
cmp eax, r13d
jne 0x14006198d
mov byte [rbp + 0xa0], sil
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
cmp byte [rbp + 0xa0], 0
jne 0x140061c54
mov rdi, qword [0x14012b628]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x1400619c3
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f566c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400bd640
mov esi, eax
jmp 0x140061f68
movzx ecx, ax
mov edx, eax
shr cx, 8
shr edx, 0x10
cmp al, byte [rbp + 0xc0]
jb 0x14006198d
cmp al, byte [rbp + 0xb0]
ja 0x14006198d
cmp cl, byte [rsp + 0x53]
jb 0x14006198d
cmp cl, byte [rsp + 0x51]
ja 0x14006198d
cmp dl, byte [rsp + 0x50]
jb 0x14006198d
cmp dl, r15b
jbe 0x1400618ff
movzx r10d, byte [rbp + 0x88]
mov r9, qword [rsp + 0x60]
mov eax, esi
test r10b, r10b
mov rcx, 0xffffffffffffffff
cmovne eax, ecx
add edi, eax
jmp 0x1400618c0
movzx edx, byte [rsp + 0x52]
mov eax, esi
test dl, dl
cmovne eax, ecx
add ebx, eax
jmp 0x140061890
lea r13, [0x1400f566c]
cmp qword [rdi + 8], r13
jne 0x1400619d9
mov r15, qword [rdi + 0x10]
shr r15, 1
jmp 0x1400619dc
mov r15, rsi
lea rdx, [r15 + 1]
lea r12, [rdx + rdx]
cmp al, 2
jne 0x1400619fa
mov rdx, r15
mov rcx, r13
call fcn.140006da0
mov esi, eax
jmp 0x140061f68
mov rcx, qword [0x1401255a0]
cmp r12, rcx
jbe 0x140061a2d
cmp r12, qword [rdi + 0x18]
jbe 0x140061a2d
lea r8, [0x1400f1524]
lea rdx, [0x140110420]
lea rcx, [0x14012c5c0]
call fcn.14004e590
mov esi, eax
jmp 0x140061f68
cmp rdx, 2
jae 0x140061a49
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bdcf0
mov eax, esi
jmp 0x140061f68
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140061a66
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r12, r8
jbe 0x140061be4
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, sil
jbe 0x140061a96
cmp al, 2
je 0x140061add
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140061bd8
cmp r12, 0x80
ja 0x140061add
cmp r12, 8
ja 0x140061aac
mov ebx, 8
jmp 0x140061abc
mov eax, reloc.WSOCK32.dll_recv
mov ebx, 0x80
cmp r12, rax
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b60a0
test rax, rax
jne 0x140061ad4
mov esi, r14d
mov eax, r14d
jmp 0x140061f68
mov byte [rdi + 0x20], sil
jmp 0x140061bd8
cmp r12, 0x20
jae 0x140061aed
mov ebx, SafeArrayAllocDescriptor
jmp 0x140061b9e
cmp r12, 0x208
jae 0x140061b00
mov ebx, 0x208
jmp 0x140061b9e
cmp r12, 0x50000
jae 0x140061b58
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x140061b1f
addsd xmm0, qword [0x140112018]
mulsd xmm0, qword [0x140112050]
movsd xmm1, qword [0x140112048]
xor eax, eax
comisd xmm0, xmm1
jbe 0x140061b4e
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140061b4e
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140061b9e
cmp r12, 0x320000
jae 0x140061b6b
lea rbx, [r12 + 0x8000]
jmp 0x140061b9e
cmp r12, 0xc80000
jae 0x140061b96
movabs rax, 0x47ae147ae147ae15
mov rbx, r12
mul r12
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r12
jmp 0x140061b9e
lea rbx, [r12 + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x140061bbf
test r8, r8
je 0x140061bbf
mov rcx, qword [rdi + 8]
movzx r12d, sil
call fcn.1400d6fc8
jmp 0x140061bc2
xor r12b, r12b
test rbx, rbx
js 0x140061c11
mov rcx, rbx
call fcn.1400d6f08
test rax, rax
je 0x140061c11
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r13
je 0x140061bf9
lea r8, [r15 + r15]
mov rdx, r13
call fcn.1400d7a30
mov rax, qword [rdi + 8]
lea rcx, [r15 + r15]
mov word [rcx + rax], r14w
mov qword [rdi + 0x10], rcx
mov eax, esi
jmp 0x140061f68
test r12b, r12b
je 0x140061c27
lea rax, [0x14012c4b8]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x140061c2f
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, [0x1400f5a40]
lea rcx, [0x14012c5c0]
mov qword [rdi + 0x10], r14
call fcn.14004e590
mov esi, eax
jmp 0x140061f68
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140061c6d
sub ebx, dword [rsp + 0x7c]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, ebx
call fcn.140001090
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140061c84
sub edi, dword [rbp - 0x78]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, edi
call fcn.140001090
mov rdi, qword [0x14012b628]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140061cb6
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f1614]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400bd640
mov esi, eax
jmp 0x140061f68
lea r15, [0x1400f1614]
cmp qword [rdi + 8], r15
jne 0x140061ccc
mov r13, qword [rdi + 0x10]
shr r13, 1
jmp 0x140061ccf
mov r13, rsi
lea rdx, [r13 + 1]
lea r12, [rdx + rdx]
cmp al, 2
jne 0x140061ced
mov rdx, r13
mov rcx, r15
call fcn.140006da0
mov esi, eax
jmp 0x140061f68
mov rcx, qword [0x1401255a0]
cmp r12, rcx
jbe 0x140061d20
cmp r12, qword [rdi + 0x18]
jbe 0x140061d20
lea r8, [0x1400f1524]
lea rdx, [0x140110420]
lea rcx, [0x14012c5c0]
call fcn.14004e590
mov esi, eax
jmp 0x140061f68
cmp rdx, 2
jae 0x140061d3c
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bdcf0
mov eax, esi
jmp 0x140061f68
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140061d59
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r12, r8
jbe 0x140061ed7
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, sil
jbe 0x140061d89
cmp al, 2
je 0x140061dd0
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140061ecb
cmp r12, 0x80
ja 0x140061dd0
cmp r12, 8
ja 0x140061d9f
mov ebx, 8
jmp 0x140061daf
mov eax, reloc.WSOCK32.dll_recv
mov ebx, 0x80
cmp r12, rax
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b60a0
test rax, rax
jne 0x140061dc7
mov esi, r14d
mov eax, r14d
jmp 0x140061f68
mov byte [rdi + 0x20], sil
jmp 0x140061ecb
cmp r12, 0x20
jae 0x140061de0
mov ebx, SafeArrayAllocDescriptor
jmp 0x140061e91
cmp r12, 0x208
jae 0x140061df3
mov ebx, 0x208
jmp 0x140061e91
cmp r12, 0x50000
jae 0x140061e4b
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x140061e12
addsd xmm0, qword [0x140112018]
mulsd xmm0, qword [0x140112050]
movsd xmm1, qword [0x140112048]
xor eax, eax
comisd xmm0, xmm1
jbe 0x140061e41
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140061e41
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140061e91
cmp r12, 0x320000
jae 0x140061e5e
lea rbx, [r12 + 0x8000]
jmp 0x140061e91
cmp r12, 0xc80000
jae 0x140061e89
movabs rax, 0x47ae147ae147ae15
mov rbx, r12
mul r12
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r12
jmp 0x140061e91
lea rbx, [r12 + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x140061eb2
test r8, r8
je 0x140061eb2
mov rcx, qword [rdi + 8]
movzx r12d, sil
call fcn.1400d6fc8
jmp 0x140061eb5
xor r12b, r12b
test rbx, rbx
js 0x140061f03
mov rcx, rbx
call fcn.1400d6f08
test rax, rax
je 0x140061f03
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r15
je 0x140061eed
lea r8, [r13 + r13]
mov rdx, r15
call fcn.1400d7a30
mov rax, qword [rdi + 8]
lea rcx, [r13 + r13]
mov word [rcx + rax], r14w
mov qword [rdi + 0x10], rcx
mov eax, esi
jmp 0x140061f68
test r12b, r12b
je 0x140061f19
lea rax, [0x14012c4b8]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x140061f21
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, [0x1400f5a40]
lea rcx, [0x14012c5c0]
mov qword [rdi + 0x10], r14
call fcn.14004e590
mov esi, eax
jmp 0x140061f68
cmp byte [rbp + 0xc0], 0
mov rcx, qword [rbp + 0x80]
lea r13, [0x1400f566c]
lea rdx, [0x1400f5bf4]
cmovne rdx, r13
call fcn.14004d440
movaps xmm8, xmmword [rsp + 0x100]
movaps xmm7, xmmword [rsp + 0x110]
movaps xmm6, xmmword [rsp + 0x120]
mov r15, qword [rsp + 0x138]
mov r13, qword [rsp + 0x140]
add rsp, 0x148
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret