Function at 0x1400993b0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7c0]
sub rsp, 0x8c0
mov rbx, rdx
mov qword [rsp + 0x48], rdx
lea rdx, [0x1400fffb8]
mov rcx, r9
mov rsi, r9
mov r14, r8
call fcn.1400ca91c
lea r12, [0x140000000]
test eax, eax
movzx eax, byte [r14 + 8]
sete dil
add eax, 0xfffffff3
cmp eax, 5
ja case.default.0x14009941c
cdqe
mov ecx, dword [r12 + rax*4 + 0x9b268]
add rcx, r12
jmp rcx
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
test byte [r14 + 9], 0x80
je 0x14009943b
mov edx, 0x472
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140099447
mov edx, 0x468
call qword [sym.imp.USER32.dll_SendMessageW]
cwde
mov rcx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, eax
call fcn.140001090
mov eax, 1
jmp 0x14009b24d
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x400
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, r14
mov rdx, rax
call fcn.14009dcb0
jmp 0x140099447
test dil, dil
jne 0x140099455
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140099447
mov rcx, qword [r14]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
lea r13, [0x1400e346c]
test eax, eax
jne 0x140099502
movzx ecx, word [rsp + 0x5a]
movzx edx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5c]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
lea rdx, [0x1401017f8]
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400cafcc
lea r14, [rbp - 0x40]
jmp 0x140099505
mov r14, r13
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x14009952d
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r14
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
mov r12d, eax
jmp 0x14009b24a
xor esi, esi
mov r9b, 1
test r14, r14
jne 0x140099542
xor r9b, r9b
mov r15d, esi
mov r14, r13
jmp 0x140099564
cmp qword [rbx + 8], r14
jne 0x140099551
mov r15, qword [rbx + 0x10]
shr r15, 1
jmp 0x140099564
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r14
repne scasw ax, word [rdi]
not rcx
lea r15, [rcx - 1]
lea rax, [r15 + 1]
lea r12, [rax + rax]
cmp dl, 2
jne 0x140099584
mov rdx, r15
mov rcx, r14
call fcn.1400060c0
mov r12d, eax
jmp 0x14009b24a
mov r8, qword [0x140114480]
cmp r12, r8
jbe 0x1400995b4
cmp r12, qword [rbx + 0x18]
jbe 0x1400995b4
mov r8, r13
lea rdx, [0x1400ffee0]
lea rcx, [0x14011b1d0]
call fcn.140040740
mov r12d, eax
jmp 0x14009b24a
cmp rax, 2
jae 0x1400995da
test r9b, r9b
mov rcx, rbx
setne sil
xor r8d, r8d
lea edx, [rsi + 3]
call fcn.1400b1b90
mov r12d, 1
jmp 0x14009b24a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x1400995f7
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140114480]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r12, r9
jbe 0x14009976d
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x14009962e
cmp al, 2
je 0x14009966c
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140099761
mov edi, 0x80
cmp r12, rdi
ja 0x14009966c
cmp r12, 8
ja 0x140099645
mov edi, 8
jmp 0x140099652
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r12, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400aa400
test rax, rax
je 0x140099d7b
mov byte [rbx + 0x20], 1
jmp 0x140099761
cmp r12, 0x20
jae 0x14009967c
mov edi, SafeArrayAllocDescriptor
jmp 0x140099728
mov edi, 0x208
cmp r12, rdi
jb 0x140099728
cmp r12, 0x50000
jae 0x1400996e2
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x1400996a9
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
movsd xmm1, qword [0x140101eb8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x1400996d8
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400996d8
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x140099728
cmp r12, 0x320000
jae 0x1400996f5
lea rdi, [r12 + 0x8000]
jmp 0x140099728
cmp r12, 0xc80000
jae 0x140099720
movabs rax, 0x47ae147ae147ae15
mov rdi, r12
mul r12
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r12
jmp 0x140099728
lea rdi, [r12 + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x140099748
test r9, r9
je 0x140099748
mov rcx, qword [rbx + 8]
mov r12b, 1
call fcn.1400cb11c
jmp 0x14009974b
xor r12b, r12b
test rdi, rdi
js 0x14009979d
mov rcx, rdi
call fcn.1400ca9a4
test rax, rax
je 0x14009979d
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, r14
je 0x140099782
lea r8, [r15 + r15]
mov rdx, r14
call fcn.1400cb2e0
lea rcx, [r15 + r15]
mov rax, qword [rbx + 8]
mov r12d, 1
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x14009b24a
test r12b, r12b
je 0x1400997b3
lea rax, [0x14011b184]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x1400997ba
mov rax, qword [rbx + 8]
mov word [rax], si
lea rdx, [0x1400e6570]
lea rcx, [0x14011b1d0]
mov r8, r13
mov qword [rbx + 0x10], rsi
call fcn.140040740
mov r12d, eax
jmp 0x14009b24a
mov rcx, qword [r14]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r14]
xor r8d, r8d
lea r9, [rsp + 0x50]
test al, 2
je 0x140099a1c
mov edx, 0x1005
call qword [sym.imp.USER32.dll_SendMessageW]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5a]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rdx, [0x1401017f8]
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400cafcc
mov edx, 0x2d
mov word [rbp - 0x30], dx
lea rcx, [rbp - 0x2e]
lea rdx, [rsp + 0x60]
call fcn.1400acee0
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x140099887
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea r8d, [r9 + 0x11]
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
mov esi, eax
jmp 0x14009b24d
cmp dl, 2
jne 0x1400998a1
lea rcx, [rbp - 0x40]
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElemsize
call fcn.1400060c0
mov esi, eax
jmp 0x14009b24d
mov rcx, qword [0x140114480]
cmp rcx, 0x24
jae 0x1400998d6
cmp qword [rbx + 0x18], 0x24
jae 0x1400998d6
lea r8, [0x1400e346c]
lea rdx, [0x1400ffee0]
lea rcx, [0x14011b1d0]
call fcn.140040740
mov esi, eax
jmp 0x14009b24d
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x1400998f3
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140114480]
mov rax, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rax, 0x24
jae 0x1400999e2
movzx r8d, byte [rbx + 0x20]
movzx edx, r8b
cmp r8b, 1
jbe 0x1400999b6
cmp dl, 2
je 0x140099930
mov rsi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x1400999d6
mov edi, 0x208
cmp rcx, rdi
mov esi, edi
cmovb rsi, rcx
cmp r8b, 2
jne 0x140099957
test rax, rax
je 0x140099957
mov rcx, qword [rbx + 8]
mov dil, 1
call fcn.1400cb11c
jmp 0x14009995a
xor dil, dil
test rsi, rsi
js 0x140099972
mov rcx, rsi
call fcn.1400ca9a4
test rax, rax
je 0x140099972
mov byte [rbx + 0x20], 2
jmp 0x1400999d6
xor esi, esi
test dil, dil
je 0x14009998a
lea rax, [0x14011b184]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x140099991
mov rax, qword [rbx + 8]
mov word [rax], si
lea r8, [0x1400e346c]
lea rdx, [0x1400e6570]
lea rcx, [0x14011b1d0]
mov qword [rbx + 0x10], rsi
call fcn.140040740
mov esi, eax
jmp 0x14009b24d
mov edi, 0x80
mov ecx, edi
mov esi, edi
call fcn.1400aa400
test rax, rax
jne 0x1400999d2
xor esi, esi
mov eax, esi
jmp 0x14009b24d
mov byte [rbx + 0x20], 1
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x1400999fe
lea rdx, [rbp - 0x40]
mov r8d, SafeArrayAllocDescriptor
call fcn.1400cb2e0
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax + 0x22], si
mov esi, 1
mov qword [rbx + 0x10], SafeArrayAllocDescriptor
mov eax, esi
jmp 0x14009b24d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5a]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rdx, [0x1401017f8]
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400cafcc
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x140099a8f
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea r8d, [r9 + 8]
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
mov esi, eax
jmp 0x14009b24d
cmp dl, 2
jne 0x140099aa9
lea rcx, [rbp - 0x40]
mov edx, 8
call fcn.1400060c0
mov esi, eax
jmp 0x14009b24d
mov rcx, qword [0x140114480]
cmp rcx, 0x12
jae 0x140099ade
cmp qword [rbx + 0x18], 0x12
jae 0x140099ade
lea r8, [0x1400e346c]
lea rdx, [0x1400ffee0]
lea rcx, [0x14011b1d0]
call fcn.140040740
mov esi, eax
jmp 0x14009b24d
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140099afb
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140114480]
mov rax, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rax, 0x12
jae 0x140099be8
movzx r8d, byte [rbx + 0x20]
movzx edx, r8b
cmp r8b, 1
jbe 0x140099bbe
cmp dl, 2
je 0x140099b38
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140099bdc
mov edi, SafeArrayAllocDescriptor
cmp rcx, rdi
cmovb rdi, rcx
cmp r8b, 2
jne 0x140099b5d
test rax, rax
je 0x140099b5d
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400cb11c
jmp 0x140099b60
xor sil, sil
test rdi, rdi
js 0x140099b78
mov rcx, rdi
call fcn.1400ca9a4
test rax, rax
je 0x140099b78
mov byte [rbx + 0x20], 2
jmp 0x140099bdc
test sil, sil
je 0x140099b90
lea rax, [0x14011b184]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x140099b99
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1400e346c]
lea rdx, [0x1400e6570]
lea rcx, [0x14011b1d0]
mov qword [rbx + 0x10], rsi
call fcn.140040740
mov esi, eax
jmp 0x14009b24d
mov edi, 0x80
mov ecx, edi
call fcn.1400aa400
test rax, rax
jne 0x140099bd8
xor esi, esi
mov eax, esi
jmp 0x14009b24d
mov byte [rbx + 0x20], 1
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rcx, rax
je 0x140099c07
lea rdx, [rbp - 0x40]
mov r8d, r13d
call fcn.1400cb2e0
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax + 0x10], si
mov esi, 1
mov qword [rbx + 0x10], r13
mov eax, esi
jmp 0x14009b24d
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.14009da20
movzx r11d, byte [rbx + 0x23]
test r11b, r11b
jne 0x140099c6c
mov rcx, qword [rbx + 0x10]
lea rdx, [rbp - 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
mov r12d, eax
jmp 0x14009b24a
lea rax, [rbp - 0x40]
cmp qword [rbx + 8], rax
jne 0x140099c7f
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x140099c93
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rsi, [rax + rax]
cmp r11b, 2
jne 0x140099cb6
lea rcx, [rbp - 0x40]
mov rdx, r12
call fcn.1400060c0
mov r12d, eax
jmp 0x14009b24a
mov rcx, qword [0x140114480]
cmp rsi, rcx
jbe 0x140099cd4
cmp rsi, qword [rbx + 0x18]
jbe 0x140099cd4
lea r8, [0x1400e346c]
jmp 0x140099599
cmp rax, 2
jae 0x140099cf4
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400b1b90
mov r12d, 1
jmp 0x14009b24a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140099d11
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140114480]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x140099e8b
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140099d48
cmp al, 2
je 0x140099d8c
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140099e7f
mov edi, 0x80
cmp rsi, rdi
ja 0x140099d8c
cmp rsi, 8
ja 0x140099d5f
mov edi, 8
jmp 0x140099d6c
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400aa400
test rax, rax
jne 0x140099d83
xor esi, esi
mov r12d, esi
jmp 0x14009b24a
mov byte [rbx + 0x20], 1
jmp 0x140099e7f
cmp rsi, 0x20
jae 0x140099d9c
mov edi, SafeArrayAllocDescriptor
jmp 0x140099e46
mov edi, 0x208
cmp rsi, rdi
jb 0x140099e46
cmp rsi, 0x50000
jae 0x140099e02
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140099dc9
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
movsd xmm1, qword [0x140101eb8]
xor edx, edx
comisd xmm0, xmm1
jbe 0x140099df8
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140099df8
movabs rax, 0x8000000000000000
mov rdx, rax
cvttsd2si rdi, xmm0
add rdi, rdx
jmp 0x140099e46
cmp rsi, 0x320000
jae 0x140099e14
lea rdi, [rsi + 0x8000]
jmp 0x140099e46
cmp rsi, 0xc80000
jae 0x140099e3f
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140099e46
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x140099e66
test r8, r8
je 0x140099e66
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400cb11c
jmp 0x140099e69
xor sil, sil
test rdi, rdi
js 0x140099eb0
mov rcx, rdi
call fcn.1400ca9a4
test rax, rax
je 0x140099eb0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x140099ea5
lea rdx, [rbp - 0x40]
lea r8, [r12 + r12]
call fcn.1400cb2e0
lea rcx, [r12 + r12]
xor esi, esi
jmp 0x140099786
test sil, sil
je 0x140099ec8
lea rax, [0x14011b184]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x140099ed1
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1400e346c]
lea rdx, [0x1400e6570]
lea rcx, [0x14011b1d0]
mov qword [rbx + 0x10], rsi
call fcn.140040740
mov r12d, eax
jmp 0x14009b24a
lea rdx, [0x1400e6dd0]
mov rcx, rsi
call fcn.1400ca91c
test eax, eax
je case.0x140099f2b.12
movzx eax, byte [r14 + 8]
dec eax
cmp eax, 0x16
ja case.0x140099f2b.12
cdqe
mov ecx, dword [r12 + rax*4 + 0x9b280]
add rcx, r12
jmp rcx
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, pe_nt_image_headers64
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x14009a3f1
dec rax
je 0x14009a192
dec rax
jne 0x14009af02
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140099f88
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e61b8]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
mov r12d, eax
jmp 0x14009b24a
lea r14, [0x1400e61b8]
cmp qword [rbx + 8], r14
jne 0x140099f9e
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x140099fa4
mov r12d, 2
lea rdx, [r12 + 1]
lea rsi, [rdx + rdx]
cmp al, 2
jne 0x140099fc4
mov rdx, r12
mov rcx, r14
call fcn.1400060c0
mov r12d, eax
jmp 0x14009b24a
mov rcx, qword [0x140114480]
cmp rsi, rcx
jbe 0x140099fda
cmp rsi, qword [rbx + 0x18]
ja 0x140099cc8
cmp rdx, 2
jb 0x140099cda
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009a001
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140114480]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x14009a17d
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14009a038
cmp al, 2
je 0x14009a076
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14009a171
mov edi, 0x80
cmp rsi, rdi
ja 0x14009a076
cmp rsi, 8
ja 0x14009a04f
mov edi, 8
jmp 0x14009a05c
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400aa400
test rax, rax
je 0x140099d79
mov byte [rbx + 0x20], 1
jmp 0x14009a171
cmp rsi, 0x20
jae 0x14009a086
mov edi, SafeArrayAllocDescriptor
jmp 0x14009a130
mov edi, 0x208
cmp rsi, rdi
jb 0x14009a130
cmp rsi, 0x50000
jae 0x14009a0ec
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14009a0b3
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
movsd xmm1, qword [0x140101eb8]
xor edx, edx
comisd xmm0, xmm1
jbe 0x14009a0e2
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14009a0e2
movabs rax, 0x8000000000000000
mov rdx, rax
cvttsd2si rdi, xmm0
add rdi, rdx
jmp 0x14009a130
cmp rsi, 0x320000
jae 0x14009a0fe
lea rdi, [rsi + 0x8000]
jmp 0x14009a130
cmp rsi, 0xc80000
jae 0x14009a129
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x14009a130
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x14009a150
test r8, r8
je 0x14009a150
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400cb11c
jmp 0x14009a153
xor sil, sil
test rdi, rdi
js 0x140099eb0
mov rcx, rdi
call fcn.1400ca9a4
test rax, rax
je 0x140099eb0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, r14
je 0x140099ea5
mov rdx, r14
jmp 0x140099e9c
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x14009a1be
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e619c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
mov r12d, eax
jmp 0x14009b24a
lea r15, [0x1400e619c]
mov r12d, 1
cmp qword [rbx + 8], r15
jne 0x14009a1da
mov r14, qword [rbx + 0x10]
shr r14, 1
jmp 0x14009a1dd
mov r14, r12
lea rcx, [r14 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
jne 0x14009a1fc
mov rdx, r14
mov rcx, r15
call fcn.1400060c0
mov r12d, eax
jmp 0x14009b24a
mov r8, qword [0x140114480]
cmp rsi, r8
jbe 0x14009a212
cmp rsi, qword [rbx + 0x18]
ja 0x140099cc8
cmp rcx, 2
jae 0x14009a22c
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400b1b90
jmp 0x14009b24a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009a249
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140114480]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r9
jbe 0x14009a3c5
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, r12b
jbe 0x14009a27f
cmp al, 2
je 0x14009a2bd
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14009a3b9
mov edi, 0x80
cmp rsi, rdi
ja 0x14009a2bd
cmp rsi, 8
ja 0x14009a296
mov edi, 8
jmp 0x14009a2a3
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400aa400
test rax, rax
je 0x140099d79
mov byte [rbx + 0x20], r12b
jmp 0x14009a3b9
cmp rsi, 0x20
jae 0x14009a2cd
mov edi, SafeArrayAllocDescriptor
jmp 0x14009a377
mov edi, 0x208
cmp rsi, rdi
jb 0x14009a377
cmp rsi, 0x50000
jae 0x14009a333
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14009a2fa
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
movsd xmm1, qword [0x140101eb8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14009a329
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14009a329
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x14009a377
cmp rsi, 0x320000
jae 0x14009a345
lea rdi, [rsi + 0x8000]
jmp 0x14009a377
cmp rsi, 0xc80000
jae 0x14009a370
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x14009a377
lea rdi, [rsi + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x14009a398
test r9, r9
je 0x14009a398
mov rcx, qword [rbx + 8]
movzx esi, r12b
call fcn.1400cb11c
jmp 0x14009a39b
xor sil, sil
test rdi, rdi
js 0x140099eb0
mov rcx, rdi
call fcn.1400ca9a4
test rax, rax
je 0x140099eb0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 0x18], rdi
mov qword [rbx + 8], rax
mov rcx, qword [rbx + 8]
cmp rcx, r15
je 0x14009a3da
lea r8, [r14 + r14]
mov rdx, r15
call fcn.1400cb2e0
mov rax, qword [rbx + 8]
lea rcx, [r14 + r14]
xor esi, esi
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x14009b24a
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x14009a41d
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e350c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
mov r12d, eax
jmp 0x14009b24a
lea r15, [0x1400e350c]
mov r12d, 1
cmp qword [rbx + 8], r15
jne 0x14009a439
mov r14, qword [rbx + 0x10]
shr r14, 1
jmp 0x14009a43c
mov r14, r12
lea rcx, [r14 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
je 0x14009a1e9
mov r8, qword [0x140114480]
cmp rsi, r8
jbe 0x14009a462
cmp rsi, qword [rbx + 0x18]
ja 0x140099cc8
cmp rcx, 2
jb 0x14009a218
jmp 0x14009a22c
test byte [r14 + 9], 2
je case.0x140099f2b.12
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x14009a5b6
inc eax
jmp 0x14009944a
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14009a4fe
mov rcx, qword [r14]
lea rdx, [rbp - 0x40]
mov r8d, 0x400
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je case.0x140099f2b.12
mov rcx, qword [r14]
lea r9, [rbp - 0x40]
or r8, rdi
mov edx, 0x158
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je case.0x140099f2b.12
test byte [r14 + 9], 2
je 0x14009a50d
lea eax, [rdi + 1]
jmp 0x140099447
mov rcx, qword [r14]
xor r9d, r9d
mov r8, rdi
mov edx, 0x149
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x14009a5b6
xor r9d, r9d
mov r8, rax
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
cmp eax, 1
jne 0x14009af02
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
mov rcx, qword [r14]
mov r8, rdi
mov r9, rax
mov edx, 0x148
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
jne 0x14009a5c0
cmp byte [rbx + 0x23], 0
jne 0x14009a583
mov rax, qword [rbx + 0x10]
jmp 0x14009a586
mov rax, rbx
cmp byte [rax + 0x23], 2
jne 0x14009a5af
cmp qword [0x14011be40], 0
je 0x14009a5af
lea rcx, [0x14011be28]
call fcn.140006240
mov rcx, rbx
call fcn.14001c090
jmp 0x14009b24d
and byte [rax + 0x21], 0x86
mov rcx, rbx
call fcn.14001c090
jmp 0x14009b24d
mov rdx, rax
jmp 0x14009b213
mov rcx, qword [r14]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
test eax, 0x808
je 0x14009a7fb
mov edx, 0x190
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 1
jl 0x14009a5b3
lea rcx, [rax*4]
call fcn.1400ca9a4
mov r12, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14009a5b3
mov rcx, qword [r14]
mov r9, rax
mov r8, rdi
mov edx, 0x191
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
mov qword [rbp + 0x810], rax
cmp rax, 1
jge 0x14009a651
mov rcx, r12
call fcn.1400cb11c
mov rcx, rbx
call fcn.14001c090
jmp 0x14009b24d
xor esi, esi
test byte [r14 + 9], 2
lea r15, [rax - 1]
mov r13d, esi
je 0x14009a6b1
test rax, rax
jle 0x14009a6ea
mov rbx, rax
nop dword [rax]
mov ecx, dword [r12 + r13*4]
lea rdx, [rbp - 0x40]
mov r8d, 0xa
inc ecx
call fcn.1400ca670
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rbp - 0x40]
inc r13
repne scasw ax, word [rdi]
not rcx
dec rcx
add r15, rcx
cmp r13, rbx
jl 0x14009a670
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rbp + 0x810]
jmp 0x14009a6ea
test rax, rax
jle 0x14009a6ea
nop word [rax + rax]
movsxd r8, dword [r12 + r13*4]
mov rcx, qword [r14]
xor r9d, r9d
mov edx, 0x18a
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
je 0x14009a63c
inc r13
add r15, rax
cmp r13, rdi
jl 0x14009a6c0
xor r9d, r9d
mov r8, r15
xor edx, edx
mov rcx, rbx
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
cmp eax, 1
jne 0x14009af02
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
test byte [r14 + 9], 2
mov r13, rax
je 0x14009a787
test rdi, rdi
jle 0x14009a7e9
mov r14, qword [rbp + 0x810]
mov rbx, qword [rsp + 0x40]
mov r12, qword [rbp + 0x800]
test rsi, rsi
je 0x14009a756
movzx ecx, word [r12 + 0x6e]
add r13, 2
mov word [r13 - 2], cx
mov ecx, dword [rbx + rsi*4]
mov r8d, 0xa
mov rdx, r13
inc ecx
call fcn.1400ca670
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r13
inc rsi
repne scasw ax, word [rdi]
not rcx
lea r13, [r13 + rcx*2 - 2]
cmp rsi, r14
jl 0x14009a742
jmp 0x14009a7de
lea r15, [rdi - 1]
test rdi, rdi
jle 0x14009a7e9
mov rbx, qword [rsp + 0x40]
mov r12, qword [rbp + 0x800]
nop dword [rax]
test rsi, rsi
je 0x14009a7b4
movzx eax, word [r12 + 0x6e]
add r13, 2
mov word [r13 - 2], ax
movsxd r8, dword [rbx + rsi*4]
mov rcx, qword [r14]
mov r9, r13
mov edx, 0x189
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
jle 0x14009a7d6
add r15, rax
lea r13, [r13 + rax*2]
inc rsi
cmp rsi, rdi
jl 0x14009a7a0
mov rbx, qword [rsp + 0x48]
mov r12d, 1
mov rcx, qword [rsp + 0x40]
call fcn.1400cb11c
mov rdx, r15
jmp 0x14009b213
mov edx, 0x188
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14009a5b3
test byte [r14 + 9], 2
je 0x14009a821
inc eax
jmp 0x140099447
mov rcx, qword [r14]
xor r9d, r9d
mov r8, rax
mov edx, 0x18a
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x14009a5b6
xor r9d, r9d
mov r8, rax
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
cmp eax, 1
jne 0x14009af02
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
mov rcx, qword [r14]
mov r8, rdi
mov r9, rax
mov edx, 0x189
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x14009a7f3
cmp byte [rbx + 0x23], 0
jne 0x14009a583
mov rax, qword [rbx + 0x10]
jmp 0x14009a586
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x130b
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rcx, eax
cmp rcx, 0xffffffffffffffff
je 0x14009a5b3
test byte [r14 + 9], 2
je 0x14009a8d5
lea eax, [rcx + 1]
jmp 0x140099447
mov r8, rcx
mov rcx, qword [r14]
lea rax, [rbp - 0x40]
lea r9, [rbp - 0x70]
mov r12d, 1
mov edx, 0x133c
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 0x3ff
mov dword [rbp - 0x70], r12d
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x14009a5b3
movzx edx, byte [rbx + 0x23]
mov r15, qword [rbp - 0x60]
test dl, dl
jne 0x14009a937
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r15
mov byte [rsp + 0x20], r12b
call fcn.1400b14e0
mov r12d, eax
jmp 0x14009b24a
xor esi, esi
movzx r8d, r12b
lea r13, [0x1400e346c]
test r15, r15
jne 0x14009a95a
xor r8b, r8b
mov edi, esi
mov qword [rbp + 0x810], rsi
mov r15, r13
jmp 0x14009a983
cmp qword [rbx + 8], r15
jne 0x14009a969
mov rdi, qword [rbx + 0x10]
shr rdi, 1
jmp 0x14009a97c
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
lea rdi, [rcx - 1]
mov qword [rbp + 0x810], rdi
lea rax, [rdi + 1]
lea r14, [rax + rax]
cmp dl, 2
jne 0x14009a9a3
mov rdx, rdi
mov rcx, r15
call fcn.1400060c0
mov r12d, eax
jmp 0x14009b24a
mov r9, qword [0x140114480]
cmp r14, r9
jbe 0x14009a9d3
cmp r14, qword [rbx + 0x18]
jbe 0x14009a9d3
lea rdx, [0x1400ffee0]
lea rcx, [0x14011b1d0]
mov r8, r13
call fcn.140040740
mov r12d, eax
jmp 0x14009b24a
cmp rax, 2
jae 0x14009a9f3
test r8b, r8b
mov rcx, rbx
setne sil
xor r8d, r8d
lea edx, [rsi + 3]
call fcn.1400b1b90
jmp 0x14009b24a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009aa10
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r9, qword [0x140114480]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r14, r8
jbe 0x14009ab8b
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, r12b
jbe 0x14009aa46
cmp al, 2
je 0x14009aa84
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14009ab78
mov edi, 0x80
cmp r14, rdi
ja 0x14009aa84
cmp r14, 8
ja 0x14009aa5d
mov edi, 8
jmp 0x14009aa6a
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r14, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400aa400
test rax, rax
je 0x140099d7b
mov byte [rbx + 0x20], r12b
jmp 0x14009ab78
cmp r14, 0x20
jae 0x14009aa94
mov edi, SafeArrayAllocDescriptor
jmp 0x14009ab3e
mov edi, 0x208
cmp r14, rdi
jb 0x14009ab3e
cmp r14, 0x50000
jae 0x14009aafa
pxor xmm0, xmm0
cvtsi2sd xmm0, r14
test r14, r14
jns 0x14009aac1
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
movsd xmm1, qword [0x140101eb8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14009aaf0
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14009aaf0
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x14009ab3e
cmp r14, 0x320000
jae 0x14009ab0c
lea rdi, [r14 + 0x8000]
jmp 0x14009ab3e
cmp r14, 0xc80000
jae 0x14009ab37
movabs rax, 0x47ae147ae147ae15
mov rdi, r14
mul r14
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r14
jmp 0x14009ab3e
lea rdi, [r14 + 0x20000]
cmp rdi, r9
cmova rdi, r9
cmp r10b, 2
jne 0x14009ab5f
test r8, r8
je 0x14009ab5f
mov rcx, qword [rbx + 8]
movzx r14d, r12b
call fcn.1400cb11c
jmp 0x14009ab62
xor r14b, r14b
test rdi, rdi
js 0x14009abb5
mov rcx, rdi
call fcn.1400ca9a4
test rax, rax
je 0x14009abb5
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 0x18], rdi
mov rdi, qword [rbp + 0x810]
mov qword [rbx + 8], rax
mov rcx, qword [rbx + 8]
cmp rcx, r15
je 0x14009aba0
lea r8, [rdi + rdi]
mov rdx, r15
call fcn.1400cb2e0
mov rax, qword [rbx + 8]
lea rcx, [rdi + rdi]
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x14009b24a
test r14b, r14b
je 0x14009abcb
lea rax, [0x14011b184]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x14009abd2
mov rax, qword [rbx + 8]
mov word [rax], si
lea rdx, [0x1400e6570]
lea rcx, [0x14011b1d0]
mov r8, r13
mov qword [rbx + 0x10], rsi
call fcn.140040740
mov r12d, eax
jmp 0x14009b24a
test dil, dil
jne 0x140099455
mov rcx, qword [r14]
call fcn.140085af0
mov rcx, rbx
test rax, rax
je 0x14009a5b6
mov rdx, rax
call fcn.1400b1860
jmp 0x14009b24d
test dil, dil
jne 0x140099455
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
movzx ecx, byte [rbx + 0x23]
xor esi, esi
mov dword [rsp + 0x40], eax
movsxd r15, eax
test cl, cl
jne 0x14009ac5c
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
mov r8, r15
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400b14e0
jmp 0x14009aefb
mov dl, 1
mov byte [rbp + 0x810], dl
movzx edi, dl
cmp r15, 0xffffffffffffffff
jne 0x14009ac75
xor dil, dil
mov r15, rsi
jmp 0x14009ac7d
xor dl, dl
mov byte [rbp + 0x810], dl
lea rax, [r15 + 1]
lea r12, [rax + rax]
cmp cl, 2
jne 0x14009acbe
test dl, dl
je 0x14009aca2
lea rcx, [0x1400e346c]
mov rdx, r15
call fcn.1400060c0
jmp 0x14009aefb
lea rcx, [0x14011be28]
mov rdx, rax
call fcn.140006180
mov edx, esi
test rax, rax
setne dl
jmp 0x14009aefd
mov r8, qword [0x140114480]
cmp r12, r8
jbe 0x14009acdc
cmp r12, qword [rbx + 0x18]
jbe 0x14009acdc
lea rdx, [0x1400ffee0]
jmp 0x14009aee8
cmp rax, 2
jae 0x14009acfd
mov edx, esi
test dil, dil
mov rcx, rbx
setne dl
xor r8d, r8d
add edx, 3
call fcn.1400b1b90
jmp 0x14009af18
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009ad1a
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140114480]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r12, r9
jbe 0x14009ae90
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x14009ad51
cmp al, 2
je 0x14009ad8f
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14009ae84
mov edi, 0x80
cmp r12, rdi
ja 0x14009ad8f
cmp r12, 8
ja 0x14009ad68
mov edi, 8
jmp 0x14009ad75
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r12, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400aa400
test rax, rax
je 0x14009af02
mov byte [rbx + 0x20], 1
jmp 0x14009ae84
cmp r12, 0x20
jae 0x14009ad9f
mov edi, SafeArrayAllocDescriptor
jmp 0x14009ae4b
mov edi, 0x208
cmp r12, rdi
jb 0x14009ae4b
cmp r12, 0x50000
jae 0x14009ae05
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x14009adcc
addsd xmm0, qword [0x140101e88]
mulsd xmm0, qword [0x140101ec0]
movsd xmm1, qword [0x140101eb8]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14009adfb
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14009adfb
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x14009ae4b
cmp r12, 0x320000
jae 0x14009ae18
lea rdi, [r12 + 0x8000]
jmp 0x14009ae4b
cmp r12, 0xc80000
jae 0x14009ae43
movabs rax, 0x47ae147ae147ae15
mov rdi, r12
mul r12
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r12
jmp 0x14009ae4b
lea rdi, [r12 + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x14009ae6b
test r9, r9
je 0x14009ae6b
mov rcx, qword [rbx + 8]
mov r12b, 1
call fcn.1400cb11c
jmp 0x14009ae6e
xor r12b, r12b
test rdi, rdi
js 0x14009aec0
mov rcx, rdi
call fcn.1400ca9a4
test rax, rax
je 0x14009aec0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
cmp byte [rbp + 0x810], sil
je 0x14009af09
mov rcx, qword [rbx + 8]
lea r13, [0x1400e346c]
cmp rcx, r13
je 0x14009aeb5
lea r8, [r15 + r15]
mov rdx, r13
call fcn.1400cb2e0
mov rax, qword [rbx + 8]
mov word [rax + r15*2], si
jmp 0x14009af10
test r12b, r12b
je 0x14009aed6
lea rax, [0x14011b184]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x14009aedd
mov rax, qword [rbx + 8]
mov word [rax], si
mov qword [rbx + 0x10], rsi
lea rdx, [0x1400e6570]
lea r8, [0x1400e346c]
lea rcx, [0x14011b1d0]
call fcn.140040740
mov edx, eax
cmp edx, 1
je 0x14009af18
xor eax, eax
jmp 0x14009b24d
mov rax, qword [rbx + 8]
mov word [rax], si
lea rax, [r15 + r15]
mov qword [rbx + 0x10], rax
mov edi, dword [rsp + 0x40]
mov r12d, 1
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
mov rcx, qword [r14]
lea r8d, [rdi + 1]
mov rdx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
movsxd r13, eax
cmp byte [rbx + 0x23], sil
jne 0x14009af4f
mov rdi, qword [rbx + 0x10]
jmp 0x14009af52
mov rdi, rbx
cmp byte [rdi + 0x23], r12b
jne 0x14009af6c
test byte [rdi + 0x21], 8
je 0x14009af66
mov rcx, rdi
call fcn.140001130
add rdi, 0x10
jmp 0x14009af73
lea rdi, [0x14011c000]
lea rax, [r13 + r13]
mov qword [rdi], rax
test r13, r13
jne 0x14009af96
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
mov word [rax], si
jmp 0x14009b21b
cmp byte [r14 + 8], 0xc
jne 0x14009b21b
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
or r15d, 0xffffffff
call fcn.140001820
or rcx, 0xffffffffffffffff
mov rdx, rax
mov qword [rsp + 0x40], rax
xor eax, eax
mov rdi, rdx
mov r14, rsi
mov r13, rsi
repne scasw ax, word [rdi]
mov qword [rsp + 0x70], rsi
not rcx
dec rcx
mov rax, rcx
mov qword [rsp + 0x78], rcx
cmp word [rdx], si
je 0x14009b1f2
cmp rax, 0x1388
jb 0x14009b18a
mov dword [rbp + 0x810], esi
mov rdi, rdx
mov qword [rsp + 0x48], rdx
nop word [rax + rax]
lea rdx, [0x1400edd18]
mov rcx, rdi
call fcn.1400cb634
mov rcx, rax
mov qword [rbp - 0x78], rax
test rax, rax
je 0x14009b0f2
mov r10d, dword [rbp + 0x810]
mov rdi, rax
mov rax, qword [rsp + 0x48]
sub rdi, rax
inc r10d
dec r15d
sar rdi, 1
mov dword [rbp + 0x810], r10d
lea rdx, [rdi + r13]
mov qword [rbp - 0x80], rdx
inc rdx
cmp rdx, qword [rsp + 0x70]
jb 0x14009b0b3
movsxd r9, dword [rsp + 0x78]
mov rax, rcx
movsxd rcx, edx
sub rax, qword [rsp + 0x40]
mov r8d, r15d
mov edx, r10d
sar rax, 1
cdqe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
or rcx, 0xffffffffffffffff
call fcn.1400adef0
mov rcx, r14
lea rdx, [rax + rax]
mov qword [rsp + 0x70], rax
call fcn.1400cbb84
test rax, rax
je 0x14009b139
mov r14, rax
mov rax, qword [rsp + 0x48]
test rdi, rdi
je 0x14009b0cc
lea r8, [rdi + rdi]
lea rcx, [r14 + r13*2]
mov rdx, rax
call fcn.1400cb2e0
mov r13, qword [rbp - 0x80]
movzx eax, word [0x1400ee8c4]
mov rdi, qword [rbp - 0x78]
inc r13
add rdi, 4
mov word [r14 + r13*2 - 2], ax
mov qword [rsp + 0x48], rdi
test r15d, r15d
jne 0x14009b010
mov eax, dword [rbp + 0x810]
test eax, eax
je 0x14009b1f2
mov r15, qword [rsp + 0x78]
mov rax, rdi
sub rax, qword [rsp + 0x40]
sar rax, 1
sub r15, rax
je 0x14009b169
lea rax, [r15 + r13]
mov qword [rbp + 0x810], rax
cmp rax, qword [rsp + 0x70]
jb 0x14009b152
lea rdx, [rax + rax + 2]
mov rcx, r14
call fcn.1400cbb84
test rax, rax
jne 0x14009b14f
test r14, r14
je 0x14009b1f2
mov rcx, r14
call fcn.1400cb11c
jmp 0x14009b1f2
mov r14, rax
lea r8, [r15 + r15]
lea rcx, [r14 + r13*2]
mov rdx, rdi
call fcn.1400cb2e0
mov r13, qword [rbp + 0x810]
mov rcx, qword [rsp + 0x40]
lea r8, [r13 + r13 + 2]
mov rdx, r14
mov word [r14 + r13*2], si
call fcn.1400cb2e0
mov rcx, r14
call fcn.1400cb11c
jmp 0x14009b1f2
mov r13, qword [rsp + 0x78]
mov rsi, rdx
mov rbx, rdx
nop word [rax + rax]
lea rdx, [0x1400edd18]
mov rcx, rsi
call fcn.1400cb634
mov rdi, rax
test rax, rax
je 0x14009b1ed
mov rcx, rax
lea rsi, [rax + 2]
mov r8, r13
sub rcx, rbx
lea rdx, [rax + 4]
sar rcx, 1
sub r8, rcx
mov rcx, rsi
lea r8, [r8 + r8 - 2]
call fcn.1400cb2e0
movzx eax, word [0x1400ee8c4]
dec r13
dec r15d
mov word [rdi], ax
jne 0x14009b1a0
mov rbx, qword [rsp + 0x48]
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
or rcx, 0xffffffffffffffff
mov rdi, rax
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea rdx, [rcx - 1]
mov rcx, rbx
call fcn.14001c570
cmp byte [rbx + 0x23], 0
jne 0x14009b225
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x23], 2
jne 0x14009b246
cmp qword [0x14011be40], 0
je 0x14009b246
lea rcx, [0x14011be28]
call fcn.140006240
mov r12d, eax
jmp 0x14009b24a
and byte [rbx + 0x21], 0x86
mov eax, r12d
mov rbx, qword [rsp + 0x908]
add rsp, 0x8c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret