Function at 0x140005940
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rax, qword [rbp + 0xe8]
mov r15, rcx
movzx edi, byte [rbp + 0xe0]
movabs rcx, 0xffffffff003c2bb3
movzx esi, byte [rbp + 0xd0]
add rax, rcx
cmp rax, 2
mov r13, r9
mov r10, r8
mov r14d, 0x7fff
mov r8, qword [0x140101f80]
setbe byte [rsp + 0x50]
xor r9d, r9d
test r8, r8
jne 0x1400059c2
lea r12, [rbp - 0x80]
mov qword [rsp + 0x68], r12
jmp 0x140005a88
movsxd rcx, dword [0x140101fe0]
imul r12, rcx, 0xd4
inc ecx
add r12, r8
cmp ecx, dword [0x1400fda60]
mov qword [rsp + 0x68], r12
cmovge ecx, r9d
mov dword [0x140101fe0], ecx
mov byte [r12], sil
mov byte [r12 + 6], dil
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov dword [0x140101f9c], eax
sub ecx, dword [0x140104488]
xorps xmm0, xmm0
mov dword [0x140104488], eax
cvtsi2ss xmm0, rcx
divss xmm0, dword [0x1400eb848]
movss dword [r12 + 8], xmm0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x140005a62
cmp rax, qword [0x140101fd8]
je 0x140005a57
mov rcx, qword [0x140101f68]
lea r8, [r12 + 0xc]
mov r9, rax
mov edx, 0x418
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x140005a71
xor r9d, r9d
mov word [r12 + 0xc], r9w
jmp 0x140005a74
movabs rax, 0x41002f004e
mov qword [r12 + 0xc], rax
xor r9d, r9d
mov r10, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
mov qword [0x140101fd8], rbx
cmp sil, 0xe7
jne 0x140005ad0
movzx eax, word [r13 + 4]
mov ecx, 0x55
mov qword [rsp + 0x40], r14
mov r9, r13
mov qword [rsp + 0x38], r12
mov r8, r10
mov word [r12 + 4], cx
mov rcx, r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
mov word [r12 + 2], ax
call fcn.140007670
jmp 0x140007441
movzx ecx, word [rbp + 0xd8]
lea eax, [rsi + 0x64]
mov dword [rsp + 0x58], ecx
mov word [r12 + 2], cx
cmp al, 3
ja 0x140005aef
mov ecx, r9d
mov dword [rsp + 0x58], ecx
cmp r15, qword [0x140101f88]
jne 0x140005b3b
movzx ebx, byte [rbp + 0xf0]
and bl, 1
jne 0x140005b2f
test dil, dil
movzx eax, sil
mov ecx, 0x80
lea r15, [0x140000000]
cmovne ecx, r9d
mov r9, qword [0x140102e68]
mov byte [rax + r15 + 0x102d30], cl
jmp 0x140005c88
mov r9, qword [0x140102e68]
jmp 0x140005c8f
mov r13d, dword [rbp + 0xf0]
lea r15, [0x140000000]
mov ebx, r13d
mov eax, 0x100
shr ebx, 4
and bl, 1
test ax, cx
jne case.0x140005b97.23
lea ecx, [rax - 0x70]
call qword [sym.imp.USER32.dll_GetKeyState]
test al, 1
je case.0x140005b97.23
movzx eax, sil
add eax, 0xfffffff4
cmp eax, 0x62
ja case.0x140005b97.23
cdqe
movzx eax, byte [r15 + rax + 0x7488]
mov ecx, dword [r15 + rax*4 + 0x7458]
add rcx, r15
jmp rcx
test dil, dil
sete byte [0x140105350]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105351]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105352]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105353]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105354]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105355]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105356]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105357]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105358]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x140105359]
jmp case.0x140005b97.23
test dil, dil
sete byte [0x14010535a]
mov r9, qword [0x140102e68]
movzx r12d, sil
lea rax, [r12 + r12*2]
cmp byte [r9 + rax*8 + 0xc], 0
jne 0x140005c7c
movzx r8d, dil
movzx edx, sil
mov ecx, r13d
call fcn.140008dc0
mov r9, qword [0x140102e68]
mov r13, qword [rbp + 0xc8]
test al, al
je 0x140005c83
test dil, dil
mov ecx, 0x80
mov r8d, 0
cmovne ecx, r8d
mov byte [r12 + r15 + 0x102d30], cl
mov r12, qword [rsp + 0x68]
mov r15, qword [rbp + 0xb0]
jmp 0x140005c92
mov r13, qword [rbp + 0xc8]
mov r12, qword [rsp + 0x68]
mov r15, qword [rbp + 0xb0]
xor r8d, r8d
movzx edx, byte [rsp + 0x50]
mov eax, 0x69
test dl, dl
jne 0x140005cb0
test bl, bl
mov eax, SafeArrayAllocDescriptor
mov ecx, 0x61
cmovne ax, cx
cmp byte [0x140102d2c], 0
mov word [r12 + 4], ax
je 0x140005cf5
lea eax, [rsi - 0x5b]
cmp al, 1
ja 0x140005cf5
test dil, dil
jne 0x140005cf5
mov r9d, dword [rsp + 0x58]
mov rdx, r13
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], dil
jmp 0x140007431
cmp byte [0x140105336], 0
je 0x140005dc9
cmp sil, 0x1b
jne 0x140005dc9
test dil, dil
jne 0x140005dc9
xor edx, edx
lea rcx, str.32771
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140005dbd
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
jne 0x140005dbd
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
xor ecx, ecx
call fcn.140011c80
movzx edx, byte [0x140102d2f]
xor r8d, r8d
shr dl, 3
xor r9d, r9d
and dl, 1
mov dword [rsp + 0x28], 0xffc3d44d
or dl, 0xa4
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 1]
call fcn.140011c80
mov r9d, dword [rsp + 0x58]
xor eax, eax
mov qword [rsp + 0x40], rax
movzx r8d, sil
mov qword [rsp + 0x38], 0x7fffffff
mov rdx, r13
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], al
jmp 0x140007435
mov r9, qword [0x140102e68]
movzx edx, byte [rsp + 0x50]
cmp r15, qword [0x140101f90]
mov r13d, dword [rsp + 0x58]
movzx eax, r13w
mov qword [rsp + 0x70], rax
lea rcx, [rax + rax*2]
mov rax, qword [0x140102e60]
lea rbx, [rax + rcx*8]
movzx eax, byte [rax + rcx*8 + 0x17]
mov byte [rsp + 0x5d], al
jne 0x140005dfc
test al, al
jne 0x140005e08
movzx eax, sil
lea rcx, [rax + rax*2]
lea rbx, [r9 + rcx*8]
test dl, dl
je 0x140005e74
mov eax, 0xffc3d44e
cmp qword [rbp + 0xe8], rax
jne 0x140005e39
test dil, dil
je 0x140005e39
cmp qword [0x140105338], rbx
jne 0x140005e39
xor eax, eax
mov byte [rbx + 0x11], 0
mov qword [0x140105338], rax
mov byte [rbx + 0x14], 0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r13w
mov byte [rsp + 0x20], sil
mov rcx, r15
mov edx, dword [rbp + 0xb8]
mov r8, qword [rbp + 0xc0]
mov r9, qword [rbp + 0xc8]
call fcn.140007670
jmp 0x140007441
test dil, dil
jne 0x140005e82
mov byte [rbx + 0x15], dil
mov word [rbx + 8], r14w
cmp r15, qword [0x140101f88]
jne 0x140005eea
test sil, sil
jne 0x140005eac
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r13w
mov byte [rsp + 0x20], sil
jmp 0x140005e53
lea eax, [rsi - 1]
cmp al, 1
ja 0x140005eea
cmp dword [0x140101bc4], 0
jne 0x140005f13
xor edx, edx
lea rcx, str.32768
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140005ee3
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x140104468]
je 0x140005f13
mov r9, qword [0x140102e68]
mov rax, qword [0x140105338]
test rax, rax
je 0x140005f3b
cmp rax, rbx
je 0x140005f3b
test dil, dil
jne 0x140005f3e
cmp r15, qword [0x140101f90]
jne 0x140005f21
xor eax, eax
cmp byte [rbx + 0xc], al
sete al
jmp 0x140005f2c
test dil, dil
sete al
mov byte [rbx + 0x11], al
jmp 0x140005e35
mov rax, qword [0x140105338]
movzx eax, byte [rax + 0xc]
test eax, eax
je 0x140005f3b
mov rax, qword [0x140105338]
mov byte [rax + 0x16], 1
test dil, dil
sete dl
cmp byte [rbx + 0xd], 0
mov byte [rsp + 0x5e], dl
mov byte [rbx + 0x11], dl
jne 0x140005f58
cmp byte [rbx + 0xe], 0
je 0x140005e39
xor ecx, ecx
mov word [rsp + 0x54], r14w
mov qword [rsp + 0x60], rcx
movzx r15d, r14w
test dil, dil
je 0x140005f96
movzx ecx, byte [rbx + 0x14]
movzx eax, word [rbx + 8]
mov byte [rsp + 0x5f], cl
xor ecx, ecx
mov byte [rbx + 0x14], 0
cmp ax, r14w
je 0x140005fac
movzx r15d, ax
mov word [rsp + 0x54], ax
mov word [rbx + 8], r14w
jmp 0x140005fac
movzx eax, byte [rbp + 0xd0]
mov byte [rsp + 0x5e], al
movzx eax, byte [rbp + 0xd0]
mov byte [rsp + 0x5f], al
mov rax, qword [rbp + 0xb0]
cmp rax, qword [0x140101f90]
mov byte [rbp + 0xd0], 0
jne 0x140006035
cmp byte [rbx + 0xc], 0
je 0x140006060
cmp byte [r9 + 0xf41], 0
jne 0x140005fe3
cmp byte [r9 + 0xf59], 0
mov eax, ecx
je 0x140005fe8
mov eax, 1
cmp byte [r9 + 0xf71], 0
mov byte [r9 + 0x1a9], al
jne 0x140006005
cmp byte [r9 + 0xf89], 0
mov eax, ecx
je 0x14000600a
mov eax, 1
cmp byte [r9 + 0xf11], 0
mov byte [r9 + 0x1c1], al
jne 0x140006027
cmp byte [r9 + 0xf29], 0
mov eax, ecx
je 0x14000602c
mov eax, 1
mov byte [r9 + 0x191], al
jmp 0x140006060
cmp qword [0x140101f90], 0
jne 0x140006060
mov cl, 1
call fcn.1400147a0
mov r9, qword [0x140102e68]
mov byte [0x140102d2e], al
mov byte [0x140102d2f], al
mov byte [rbp + 0xd0], 1
mov rax, qword [rbx]
test rax, rax
je 0x140006072
cmp dword [rax], 7
mov byte [rsp + 0x5c], 1
je 0x140006077
mov byte [rsp + 0x5c], 0
movzx ecx, byte [rbx + 0xd]
test cl, cl
je 0x140006260
test dil, dil
jne 0x140006260
mov rax, qword [0x140105338]
test rax, rax
je 0x1400060a7
cmp byte [rbx + 0xe], dil
je 0x1400060a7
cmp rbx, rax
jne 0x140006260
cmp cl, 1
jne 0x1400060d5
movzx eax, byte [rsp + 0x5d]
movzx ecx, r13w
test al, al
jne 0x1400060bd
movzx ecx, sil
movzx edx, al
call fcn.14000bb80
mov r9, qword [0x140102e68]
test al, al
je 0x1400060d5
mov r13b, 1
jmp 0x1400060ec
xor r13b, r13b
cmp rbx, qword [0x140105338]
je 0x1400060ec
mov qword [0x140105338], rbx
mov byte [rbx + 0x16], r13b
cmp byte [rbx + 0xe], 0
je 0x1400061bd
cmp byte [rbp + 0xd0], 0
jne 0x140006114
mov cl, 1
mov byte [rbp + 0xd0], 1
call fcn.1400147a0
mov r9, qword [0x140102e68]
movzx eax, byte [rbx + 0xc]
movzx ecx, byte [0x140102d2e]
test al, al
je 0x140006127
not al
and cl, al
test cl, cl
jne 0x14000613a
test r13b, r13b
jne 0x14000613a
test byte [rbx + 0x10], 1
je 0x1400061bd
mov r10, qword [rbp + 0xb0]
cmp r10, qword [0x140101f90]
jne 0x140006166
cmp byte [rsp + 0x5d], 0
je 0x140006166
mov rax, qword [0x140102e78]
movzx ecx, cl
shl rcx, 9
add rcx, qword [rsp + 0x70]
jmp 0x14000617b
movzx ecx, cl
movzx eax, sil
shl rcx, 8
add rcx, rax
mov rax, qword [0x140102e80]
movzx r15d, word [rax + rcx*2]
mov eax, 0x8000
mov word [rsp + 0x54], r15w
test ax, r15w
je 0x140006198
mov word [rbx + 8], r15w
jmp 0x1400061ce
movzx eax, r15w
and ax, r14w
cmp ax, word [0x140102ed4]
jae 0x1400061c4
movzx ecx, ax
mov rax, qword [0x140102e70]
movzx ecx, word [rax + rcx*2]
mov word [rbx + 8], cx
jmp 0x1400061c4
mov r10, qword [rbp + 0xb0]
cmp r15w, r14w
jne 0x14000625b
test r13b, r13b
je 0x1400061e2
or byte [rbx + 0x10], 8
mov eax, reloc.OLEAUT32.dll_SafeArrayAllocDescriptor
mov word [r12 + 4], ax
cmp byte [rbx + 0xc], 0
jne 0x140006234
test byte [rbx + 0x10], 1
jne 0x140006234
cmp byte [rsp + 0x5c], 0
jne 0x140006234
test r13b, r13b
jne 0x140006234
mov r9d, dword [rsp + 0x58]
xor eax, eax
mov rdx, qword [rbp + 0xc8]
movzx r8d, sil
mov qword [rsp + 0x40], rax
mov rcx, r10
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], al
mov byte [rbx + 0x15], 1
jmp 0x14000743c
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], 0
mov r15d, dword [rsp + 0x58]
mov rcx, r10
mov word [rsp + 0x28], r15w
mov byte [rsp + 0x20], sil
jmp 0x140005e56
mov r13d, dword [rsp + 0x58]
cmp byte [rbx + 0xe], 0
mov byte [rsp + 0x50], 0
je 0x1400062cd
test dil, dil
je 0x1400062cd
cmp qword [0x140105338], rbx
movzx edx, byte [rsp + 0x5f]
jne 0x14000628e
test dl, dl
je 0x1400062cd
xor r8d, r8d
mov qword [0x140105338], r8
jmp 0x140006291
xor r8d, r8d
cmp byte [rbx + 0xf], 0
jne 0x1400062c8
movzx eax, byte [rbx + 0x10]
test al, 8
je 0x1400062a8
xor cl, cl
and al, 0xf7
mov byte [rbx + 0x10], al
jmp 0x1400062aa
mov cl, 1
test dl, dl
je 0x140006368
test cl, cl
je 0x140006368
mov qword [rsp + 0x40], r8
movzx r9d, r13w
jmp 0x140007412
mov byte [rsp + 0x50], 1
cmp byte [rbx + 0xd], 0
je 0x1400064b8
test dil, dil
je 0x1400064b8
mov rax, qword [0x140105338]
mov ecx, 0
cmp rax, rbx
cmove rax, rcx
mov qword [0x140105338], rax
cmp byte [rbx + 0x12], cl
je 0x140006326
xor r8d, r8d
mov byte [rbx + 0x12], cl
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], cl
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
lea ecx, [r8 + 1]
call fcn.140011c80
mov r9, qword [0x140102e68]
cmp byte [rbx + 0x13], 0
je 0x140006355
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rbx + 0x13], 0
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 1]
call fcn.140011c80
mov r9, qword [0x140102e68]
cmp r15w, r14w
jne 0x14000638e
movzx eax, byte [rbx + 0x10]
test al, 8
je 0x14000638e
and al, 0xf7
mov byte [rbx + 0x10], al
mov rcx, qword [rbp + 0xb0]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r13w
mov byte [rsp + 0x20], sil
jmp 0x140005e56
movzx eax, byte [rsp + 0x5c]
test al, al
je 0x140006432
movzx eax, byte [rbx + 0x16]
cmp al, 2
jne 0x1400063ef
xor r9d, r9d
mov eax, 0xffc3d44e
mov dword [rsp + 0x28], eax
movzx r8d, r13w
movzx edx, sil
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 1]
call fcn.140011c80
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r13w
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 2]
call fcn.140011c80
movzx r9d, r13w
jmp 0x14000740b
cmp al, 1
je 0x140006368
movzx eax, byte [rsp + 0x5c]
cmp byte [rbx + 0xe], 0
jne 0x1400064a7
cmp byte [rbx + 0xc], 0
jne 0x140006368
test byte [rbx + 0x10], 1
jne 0x140006368
test al, al
jne 0x140006368
xor eax, eax
movzx r9d, r13w
mov qword [rsp + 0x40], rax
jmp 0x140007412
cmp byte [rbx + 0x16], 0
je 0x1400063fc
cmp r15w, r14w
jne 0x1400063fc
cmp byte [rbx + 0xc], 0
jne 0x140006368
test byte [rbx + 0x10], 1
mov rcx, qword [rbp + 0xb0]
je 0x140006474
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r13w
mov byte [rsp + 0x20], sil
jmp 0x140005e56
mov rdx, qword [rbp + 0xc8]
xor eax, eax
mov qword [rsp + 0x40], rax
movzx r9d, r13w
mov qword [rsp + 0x38], 0x7fffffff
movzx r8d, sil
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], dil
jmp 0x14000743c
cmp byte [rsp + 0x5e], 0
jne 0x1400064b8
cmp byte [rbx + 0xf], 0
je 0x140006368
cmp byte [rbp + 0xd0], 0
jne 0x1400064d5
cmp r15w, r14w
jne 0x1400064d5
mov cl, 1
call fcn.1400147a0
mov r9, qword [0x140102e68]
cmp qword [0x140105338], 0
mov r11d, 0x7ffa
mov byte [rbp + 0xd0], 0
lea r10d, [r11 + 3]
je 0x14000691c
test dil, dil
je 0x140006503
cmp byte [rbx + 0xf], 0
je 0x14000691c
cmp r15w, r14w
jne 0x140006c30
movzx r13d, word [rbx + 0xa]
xor eax, eax
mov r8d, eax
cmp r13w, r14w
je 0x14000670f
mov rax, qword [0x140102ec0]
movzx ecx, r13w
mov rdx, qword [rax + rcx*8]
movzx eax, byte [rdx + 0x11]
test al, al
je 0x140006545
movzx eax, al
lea rcx, [rax + rax*2]
lea rax, [r9 + rcx*8]
jmp 0x140006558
movzx eax, word [rdx + 0xa]
lea rcx, [rax + rax*2]
mov rax, qword [0x140102e60]
lea rax, [rax + rcx*8]
cmp byte [rax + 0x11], 0
je 0x140006584
cmp byte [rdx + 0x16], 0
je 0x140006578
test dil, dil
jne 0x140006591
movzx eax, word [rdx + 4]
mov word [rbx + 8], ax
test r8, r8
jne 0x14000659d
jmp 0x140006584
test dil, dil
jne 0x140006584
test r8, r8
cmove r8, rdx
movzx r13d, word [rdx + 0xc]
cmp r13w, r14w
jne 0x140006521
jmp 0x140006594
mov r8, rdx
test r8, r8
je 0x14000670f
movzx edx, byte [r8 + 0x11]
mov ecx, edx
test edx, edx
je 0x140006632
sub ecx, 0x10
je 0x140006611
sub ecx, 1
je 0x1400065f0
cmp ecx, 1
je 0x1400065cf
lea rcx, [rdx + rdx*2]
lea rax, [r9 + rcx*8]
mov qword [0x140105338], rax
jmp 0x14000664d
cmp byte [r9 + 0xf89], 0
mov eax, 0xf60
mov ecx, 0xf78
cmovne eax, ecx
add rax, r9
mov qword [0x140105338], rax
jmp 0x14000664d
cmp byte [r9 + 0xf59], 0
mov eax, 0xf30
mov ecx, 0xf48
cmovne eax, ecx
add rax, r9
mov qword [0x140105338], rax
jmp 0x14000664d
cmp byte [r9 + 0xf29], 0
mov eax, 0xf00
mov ecx, 0xf18
cmovne eax, ecx
add rax, r9
mov qword [0x140105338], rax
jmp 0x14000664d
movzx eax, word [r8 + 0xa]
lea rcx, [rax + rax*2]
mov rax, qword [0x140102e60]
lea rcx, [rax + rcx*8]
mov qword [0x140105338], rcx
movzx r15d, word [r8 + 6]
test r15w, r15w
je 0x140006663
mov word [rsp + 0x54], r15w
jmp 0x140006700
movzx eax, word [r8 + 4]
lea r15, [r12 + 4]
lea r8, [rbx + 0x10]
mov word [rsp + 0x54], ax
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], r15
movzx edx, dil
lea rcx, [rsp + 0x54]
call fcn.14000bd80
mov r8, rax
test rax, rax
je 0x1400073a6
mov rax, qword [rbp + 0xe8]
movabs rcx, 0xffffffff003c2c17
add rcx, rax
cmp rcx, 0x66
ja 0x1400066d8
movzx edx, byte [r8 + 0x24]
mov ecx, 0xffc3d44d
sub ecx, eax
cmp ecx, edx
jg 0x1400066d8
test r15, r15
je 0x1400066d4
mov eax, 0x69
mov word [r15], ax
xor al, al
jmp 0x1400066da
mov al, 1
xor ecx, ecx
test al, al
cmovne rcx, r8
mov qword [rsp + 0x60], rcx
test rcx, rcx
je 0x1400073a6
movzx r15d, word [rsp + 0x54]
mov r11d, 0x7ffa
lea r10d, [r11 + 3]
mov rax, qword [0x140105338]
movzx r13d, r15w
mov byte [rax + 0x16], 2
movzx eax, r13w
sub ax, r10w
cmp ax, 1
ja 0x14000691c
test dil, dil
jne 0x14000672a
mov byte [rbx + 0x14], 1
test byte [0x140102d2f], 0xc
jne 0x14000674f
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140011c80
mov r15d, dword [rsp + 0x58]
lea eax, [rsi + 0x5e]
cmp al, 1
ja 0x140006781
test dil, dil
jne 0x140006781
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r15w
mov byte [rsp + 0x20], dil
movzx edx, sil
lea ecx, [r9 + 1]
call fcn.140011c80
mov rax, qword [0x140105338]
mov byte [rax + 0x12], 1
mov eax, 0x7ffd
cmp r13w, ax
jne 0x1400067cc
test byte [0x140102d2f], 0x30
jne 0x1400067bc
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
xor ecx, ecx
call fcn.140011c80
mov rax, qword [0x140105338]
mov byte [rax + 0x13], 1
jmp 0x140006852
mov ecx, 0x7ffe
cmp r13w, cx
jne 0x140006852
lea eax, [rsi + 0x60]
cmp al, 1
ja 0x140006804
test dil, dil
jne 0x140006804
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r15w
mov byte [rsp + 0x20], dil
movzx edx, sil
lea ecx, [r9 + 1]
call fcn.140011c80
test byte [0x140102d2f], 0x10
je 0x14000682b
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa0
lea ecx, [r8 + 1]
call fcn.140011c80
test byte [0x140102d2f], 0x20
je 0x140006852
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa1
lea ecx, [r8 + 1]
call fcn.140011c80
test byte [0x140102d2f], 1
je 0x140006879
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa2
lea ecx, [r8 + 1]
call fcn.140011c80
test byte [0x140102d2f], 2
je 0x1400068a0
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa3
lea ecx, [r8 + 1]
call fcn.140011c80
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140011c80
mov eax, 0x7ffd
cmp r13w, ax
jne 0x14000690c
mov rax, qword [0x140105338]
cmp byte [rax + 0x13], 0
je 0x14000690c
lea eax, [rsi - 0x60]
cmp al, 9
jbe 0x1400068e3
cmp sil, 0x6e
jne 0x14000690c
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
lea ecx, [r8 + 1]
call fcn.140011c80
mov rax, qword [0x140105338]
mov byte [rax + 0x13], 0
mov eax, 0x68
mov word [r12 + 4], ax
jmp 0x1400073fe
cmp r15w, r14w
jne 0x140006c30
movzx eax, byte [rbx + 0xc]
movzx edx, byte [0x140102d2e]
test al, al
je 0x140006939
not al
and dl, al
mov r10, qword [rbp + 0xb0]
cmp r10, qword [0x140101f90]
movzx r8d, byte [rsp + 0x5d]
jne 0x14000696c
test r8b, r8b
je 0x14000696c
mov r9, qword [rsp + 0x70]
mov rax, qword [0x140102e78]
movzx ecx, dl
shl rcx, 9
add rcx, r9
jmp 0x140006986
mov r9, qword [rsp + 0x70]
movzx eax, sil
movzx ecx, dl
shl rcx, 8
add rcx, rax
mov rax, qword [0x140102e80]
movzx r15d, word [rax + rcx*2]
mov word [rsp + 0x54], r15w
cmp r15w, r14w
jne 0x140006a05
cmp byte [0x140105336], 0
je 0x140006a05
cmp sil, 9
je 0x140006a05
and dl, 0xf3
cmp r10, qword [0x140101f90]
jne 0x1400069ca
test r8b, r8b
je 0x1400069ca
mov rax, qword [0x140102e78]
movzx ecx, dl
shl rcx, 9
add rcx, r9
jmp 0x1400069df
movzx eax, sil
movzx ecx, dl
shl rcx, 8
add rcx, rax
mov rax, qword [0x140102e80]
movzx r15d, word [rax + rcx*2]
movzx eax, r15w
mov word [rsp + 0x54], r15w
and ax, r14w
sub ax, r11w
cmp ax, 4
jbe 0x140006a05
mov r15d, r14d
mov word [rsp + 0x54], r14w
mov eax, 0x8000
test ax, r15w
je 0x140006a7c
test dil, dil
jne 0x140006b81
mov word [rbx + 8], r15w
cmp word [rbx + 8], r14w
lea rcx, [rbx + 8]
je 0x140006234
lea r8, [rbx + 0x10]
mov dl, 1
xor ebx, ebx
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], rbx
call fcn.14000bd80
mov rcx, qword [rbp + 0xb0]
cmp byte [rbp + 0xd0], bl
je 0x140006bff
mov r15d, dword [rsp + 0x58]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], bl
mov word [rsp + 0x28], r15w
mov byte [rsp + 0x20], sil
jmp 0x140005e56
cmp r15w, r14w
je 0x140006b92
movzx eax, r15w
and ax, r14w
test dil, dil
je 0x140006b66
cmp ax, word [0x140102ed4]
jae 0x140006b5d
movzx r13d, ax
mov rax, qword [0x140102e70]
cmp word [rax + r13*2], r14w
je 0x140006b5d
cmp byte [rsp + 0x50], 0
jne 0x140006af1
lea r15, [r12 + 4]
movzx edx, dil
lea r8, [rbx + 0x10]
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0xd0]
lea rcx, [rsp + 0x54]
call fcn.14000bd80
mov rdx, rax
test rax, rax
jne 0x140006b05
mov qword [rsp + 0x60], rax
mov rax, qword [0x140102e70]
movzx r15d, word [rax + r13*2]
mov word [rsp + 0x54], r15w
jmp 0x140006b81
mov r8, qword [rbp + 0xe8]
movabs rax, 0xffffffff003c2c17
add rax, r8
cmp rax, 0x66
ja 0x140006b41
movzx ecx, byte [rdx + 0x24]
mov eax, 0xffc3d44d
sub eax, r8d
cmp eax, ecx
jg 0x140006b41
test r15, r15
je 0x140006b3d
mov eax, 0x69
mov word [r15], ax
xor al, al
jmp 0x140006b43
mov al, 1
xor ecx, ecx
test al, al
cmovne rcx, rdx
mov qword [rsp + 0x60], rcx
test rcx, rcx
je 0x140006af1
movzx r15d, word [rsp + 0x54]
jmp 0x140006b81
cmp byte [rsp + 0x50], 0
jne 0x140006b92
jmp 0x140006b81
cmp ax, word [0x140102ed4]
jae 0x140006b81
movzx ecx, ax
mov rax, qword [0x140102e70]
movzx ecx, word [rax + rcx*2]
mov word [rbx + 8], cx
cmp r15w, r14w
jne 0x140006c30
mov r10, qword [rbp + 0xb0]
test dil, dil
je 0x140006a1e
cmp byte [rbx + 0xc], 0
jne 0x140006beb
test byte [rbx + 0x10], 1
jne 0x140006beb
cmp byte [rbx + 0xd], 0
je 0x140006beb
cmp byte [rsp + 0x5c], 0
jne 0x140006beb
mov r9d, dword [rsp + 0x58]
xor eax, eax
mov rdx, qword [rbp + 0xc8]
movzx r8d, sil
mov qword [rsp + 0x40], rax
mov rcx, r10
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], dil
jmp 0x14000743c
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
jmp 0x140006243
mov r9d, dword [rsp + 0x58]
movzx r8d, sil
mov rdx, qword [rbp + 0xc8]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], bl
jmp 0x14000743c
movzx eax, byte [rbx + 0x10]
lea r13, [rbx + 0x10]
test al, 8
je 0x140006c4e
test dil, dil
je 0x140006c4e
and al, 0xf7
mov byte [rbp + 0xd0], 1
mov byte [r13], al
movzx eax, r15w
and ax, r14w
cmp ax, word [0x140102ed4]
jae 0x140006cfc
cmp qword [rsp + 0x60], 0
jne 0x140006cfc
lea r15, [r12 + 4]
mov r8, r13
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], r15
movzx edx, dil
lea rcx, [rsp + 0x54]
call fcn.14000bd80
mov rdx, rax
test rax, rax
je 0x140006d85
mov r8, qword [rbp + 0xe8]
movabs rax, 0xffffffff003c2c17
lea rcx, [r8 + rax]
cmp rcx, 0x66
ja 0x140006cda
movzx ecx, byte [rdx + 0x24]
mov eax, 0xffc3d44d
sub eax, r8d
cmp eax, ecx
jg 0x140006cda
test r15, r15
je 0x140006cd6
mov eax, 0x69
mov word [r15], ax
xor al, al
jmp 0x140006cdc
mov al, 1
xor r8d, r8d
test al, al
mov ecx, r8d
cmovne rcx, rdx
mov qword [rsp + 0x60], rcx
test rcx, rcx
je 0x140006d88
movzx r15d, word [rsp + 0x54]
and r15w, r14w
test byte [0x140102d2f], 0xcc
je 0x140006f37
cmp byte [rbp + 0xd0], 0
jne 0x140006f37
cmp byte [0x140105335], 0
jne 0x140006d37
mov rcx, qword [rbp + 0xb0]
cmp rcx, qword [0x140101f88]
jne 0x140006f3e
test byte [0x140102d2f], 0xc0
movzx edx, byte [0x140102d2d]
je 0x140006ebe
test dl, 0xc0
jne 0x140006d79
cmp r15w, word [0x140102ed4]
jae 0x140006ebe
mov rax, qword [0x140102ec0]
movzx ecx, r15w
mov rcx, qword [rax + rcx*8]
movzx eax, byte [rcx + 0xf]
and al, 0xc0
je 0x140006ebe
mov byte [0x140105334], 1
jmp 0x140006f37
xor r8d, r8d
cmp word [r15], 0x69
je 0x1400073a6
test dil, dil
je 0x140006dfb
cmp byte [rbx + 0x15], 0
mov rcx, qword [rbp + 0xb0]
je 0x140006dd7
mov qword [rsp + 0x40], r8
mov r9d, dword [rsp + 0x58]
movzx r8d, sil
mov rdx, qword [rbp + 0xc8]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], dil
jmp 0x14000743c
mov r15d, dword [rsp + 0x58]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r15w
mov byte [rsp + 0x20], sil
jmp 0x140005e56
cmp word [rbx + 8], r14w
lea rcx, [rbx + 8]
jne 0x140006e31
mov r15d, dword [rsp + 0x58]
mov rcx, qword [rbp + 0xb0]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], r15w
mov byte [rsp + 0x20], sil
jmp 0x140005e56
mov qword [rsp + 0x20], r8
lea r9, [rbp + 0xd0]
mov r8, r13
mov byte [rbp + 0xd0], 0
mov dl, 1
call fcn.14000bd80
cmp byte [rbp + 0xd0], 0
mov rcx, qword [rbp + 0xb0]
je 0x140006e82
mov r15d, dword [rsp + 0x58]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], r15w
mov byte [rsp + 0x20], sil
jmp 0x140005e56
and byte [r13], 0xf7
movzx r8d, sil
mov r9d, dword [rsp + 0x58]
xor eax, eax
mov rdx, qword [rbp + 0xc8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], al
mov byte [rbx + 0x15], 1
jmp 0x14000743c
cmp byte [0x140105334], 0
jne 0x140006f37
movzx eax, byte [0x140102d2f]
test al, 0xc
je 0x140006f37
test al, 3
jne 0x140006f37
test dl, 0xc
jne 0x140006efc
cmp r15w, word [0x140102ed4]
jae 0x140006f37
mov rax, qword [0x140102ec0]
movzx ecx, r15w
mov rcx, qword [rax + rcx*8]
movzx eax, byte [rcx + 0xf]
and al, 0xc
je 0x140006f37
cmp qword [0x140101f90], 0
je 0x140006f0f
mov byte [0x140105334], 1
jmp 0x140006f37
movzx r8d, word [0x1400ff3f0]
xor r9d, r9d
movzx edx, byte [reloc.OLEAUT32.dll_SafeArrayGetElemsize]
mov dword [rsp + 0x28], 0xffc3d44d
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 2]
call fcn.140011c80
mov rcx, qword [rbp + 0xb0]
movzx eax, r15w
cmp eax, 0x7ffa
je 0x140006f8f
jbe 0x140006f5f
cmp eax, 0x7ffc
jbe 0x140006f9c
mov ecx, 0x7ffe
cmp eax, ecx
jbe 0x140007043
mov rcx, qword [rsp + 0x60]
movzx r14d, r15w
mov rax, qword [rcx + 8]
test rax, rax
je 0x140007294
cmp byte [rax], 5
jb 0x140007294
movzx eax, word [rcx + 0x20]
shl eax, 0x10
cdqe
or r14, rax
jmp 0x140007294
cmp byte [0x140105336], 0
je 0x140006dd7
xor al, al
test byte [0x140102d2f], 4
je 0x140006fac
mov r13b, 0xa4
jmp 0x140006fc0
test byte [0x140102d2f], 8
movzx r13d, al
mov eax, 0xa5
cmovne r13d, eax
cmp byte [0x140105336], 0
je 0x14000712d
mov eax, 0x7ffb
cmp r15w, ax
je 0x140007043
movzx eax, r13b
test r13b, r13b
jne 0x140006fe6
mov eax, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, al
lea ecx, [r8 + 1]
call fcn.140011c80
cmp byte [rbx + 0xc], 0
je 0x140007037
lea eax, [rsi - 0x5b]
cmp al, 1
jbe 0x140007037
test dil, dil
jne 0x140007037
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
lea ecx, [r8 + 1]
call fcn.140011c80
mov byte [0x140105336], 0
jmp 0x140007290
cmp byte [0x140105336], 0
je 0x1400073a6
test dil, dil
jne 0x14000707c
lea eax, [rsi + 0x60]
cmp al, 3
ja 0x14000707c
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
lea ecx, [r8 + 1]
call fcn.140011c80
test byte [0x140102d2f], 0xc
je 0x140007091
test dil, dil
je 0x1400070ad
lea eax, [rsi + 0x5c]
cmp al, 1
ja 0x1400070ad
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140011c80
xor r13b, r13b
mov eax, 0x7ffd
cmp r15w, ax
jne 0x1400070e3
test byte [0x140102d2f], 0x30
jne 0x1400070e3
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
xor ecx, ecx
call fcn.140011c80
mov r13b, 1
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140011c80
test r13b, r13b
je 0x140007290
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
lea ecx, [r8 + 1]
call fcn.140011c80
jmp 0x140007290
lea eax, [rsi + 0x5c]
cmp al, 1
lea eax, [rsi + 0x60]
setbe byte [rsp + 0x5e]
cmp al, 1
lea eax, [rsi + 0x5e]
setbe dl
cmp al, 1
mov byte [rsp + 0x50], dl
setbe cl
xor r12b, r12b
test byte [0x140102d2f], 0x10
je 0x14000715c
mov r12b, 0xa0
jmp 0x14000717d
test byte [0x140102d2f], 0x20
je 0x14000716a
mov r12b, 0xa1
jmp 0x14000717d
test dil, dil
jne 0x14000717d
test dl, dl
movzx r12d, r12b
movzx eax, sil
cmovne r12d, eax
xor r15b, r15b
test byte [0x140102d2f], 1
je 0x14000718e
mov r15b, 0xa2
jmp 0x1400071af
test byte [0x140102d2f], 2
je 0x14000719c
mov r15b, 0xa3
jmp 0x1400071af
test dil, dil
jne 0x1400071af
test cl, cl
movzx r15d, r15b
movzx eax, sil
cmovne r15d, eax
mov byte [rbp + 0xe8], 0
test r12b, r12b
je 0x1400071e2
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r12b
lea ecx, [r8 + 1]
call fcn.140011c80
mov byte [rbp + 0xe8], 1
test r15b, r15b
je 0x140007207
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r15b
lea ecx, [r8 + 1]
call fcn.140011c80
cmp byte [rsp + 0x5e], 0
je 0x140007217
test dil, dil
jne 0x14000721c
movzx r13d, sil
test r13b, r13b
jne 0x140007238
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.140011c80
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.140011c80
cmp byte [rbp + 0xe8], 0
je 0x140007284
cmp byte [rsp + 0x50], 0
jne 0x140007284
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r12b
xor ecx, ecx
call fcn.140011c80
mov r12, qword [rsp + 0x68]
mov byte [0x140105336], 1
lea r13, [rbx + 0x10]
cmp byte [rsp + 0x5c], 0
mov eax, 0x68
mov word [r12 + 4], ax
je 0x140007302
test dil, dil
je 0x14000737e
cmp byte [rbx + 0xd], 0
je 0x140007302
mov r15d, dword [rsp + 0x58]
xor r9d, r9d
mov eax, 0xffc3d44e
movzx r8d, r15w
mov dword [rsp + 0x28], eax
movzx edx, sil
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 1]
call fcn.140011c80
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r15w
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 2]
call fcn.140011c80
jmp 0x140007407
test dil, dil
je 0x14000737e
cmp byte [rbx + 0xc], 0
je 0x14000732a
cmp byte [rbx + 0x15], 0
mov rcx, qword [rbp + 0xb0]
je 0x140006dd7
xor eax, eax
mov qword [rsp + 0x40], rax
jmp 0x140006daa
cmp byte [rbp + 0xd0], 0
mov r15d, dword [rsp + 0x58]
je 0x1400073fe
mov rax, qword [rbp + 0xb0]
mov r9, qword [rbp + 0xc8]
mov rcx, rax
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r15w
mov byte [rsp + 0x20], sil
call fcn.140007670
jmp 0x140007441
mov rax, qword [0x140105338]
mov byte [rbx + 0x14], 1
test rax, rax
je 0x140007398
cmp byte [rax + 0xc], 0
je 0x140007398
mov byte [rax + 0x16], 2
cmp byte [rbp + 0xd0], 0
je 0x1400073d1
or byte [r13], 8
mov r15d, dword [rsp + 0x58]
mov rcx, qword [rbp + 0xb0]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r12
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r15w
mov byte [rsp + 0x20], sil
jmp 0x140005e56
mov r15d, dword [rsp + 0x58]
lea eax, [rsi + 0x5c]
cmp al, 1
ja 0x1400073fe
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d450
movzx r8d, r15w
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 1]
call fcn.140011c80
test dil, dil
jne 0x140007407
mov byte [rbx + 0x15], 1
movzx r9d, r15w
xor eax, eax
mov qword [rsp + 0x40], rax
mov rdx, qword [rbp + 0xc8]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r12
mov byte [rsp + 0x20], dil
movzx r8d, sil
mov rcx, qword [rbp + 0xb0]
call fcn.1400074f0
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret