Function at 0x140005d00
Capabilities:
Log keystrokes via polling

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov rax, qword [rbp + 0xe8]
mov r14, rcx
movzx edi, byte [rbp + 0xe0]
movabs rcx, 0xffffffff003c2bb3
movzx esi, byte [rbp + 0xd0]
add rax, rcx
cmp rax, 2
mov r10, r8
mov r8, qword [0x140134440]
mov r12d, 0x3fff
setbe r13b
xor r11d, r11d
test r8, r8
jne 0x140005d7e
lea r15, [rbp - 0x80]
mov qword [rsp + 0x60], r15
jmp 0x140005e45
movsxd rcx, dword [0x1401344d0]
imul r15, rcx, 0xd4
inc ecx
add r15, r8
cmp ecx, dword [0x14012fa60]
mov qword [rsp + 0x60], r15
cmovge ecx, r11d
mov dword [0x1401344d0], ecx
mov byte [r15], sil
mov byte [r15 + 6], dil
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov dword [0x14013445c], eax
sub ecx, dword [0x14013a3b8]
xorps xmm0, xmm0
mov dword [0x14013a3b8], eax
cvtsi2ss xmm0, rcx
divss xmm0, dword [0x14011bbe8]
movss dword [r15 + 8], xmm0
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rbx, rax
test rax, rax
je 0x140005e19
cmp rax, qword [0x1401344c8]
je 0x140005e0f
mov rcx, qword [0x140134420]
lea r8, [r15 + 0xc]
mov r9, rax
mov edx, 0x418
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x140005e27
xor r11d, r11d
mov word [r15 + 0xc], r11w
jmp 0x140005e2a
movabs rax, 0x41002f004e
mov qword [r15 + 0xc], rax
xor r11d, r11d
mov r9, qword [rbp + 0xc8]
mov r10, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
mov qword [0x1401344c8], rbx
cmp sil, 0xe7
jne 0x140005e8d
movzx eax, word [r9 + 4]
mov ecx, 0x55
mov byte [rsp + 0x48], 0
mov r8, r10
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [r15 + 4], cx
mov rcx, r14
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
mov word [r15 + 2], ax
call fcn.140007ea0
jmp 0x140007c60
movzx ecx, word [rbp + 0xd8]
lea eax, [rsi + 0x64]
mov dword [rsp + 0x54], ecx
mov word [r15 + 2], cx
cmp al, 3
ja 0x140005eab
mov ecx, r11d
mov dword [rsp + 0x54], ecx
cmp r14, qword [0x140134448]
lea rdx, sym.MZ_kiv9nMDWjqg_I7rrTcpI88_u4Z_bB_FPuaQ9q_
jne 0x140005eee
movzx ebx, byte [rbp + 0xf0]
mov r8, qword [0x140135380]
and bl, 1
jne 0x14000603a
test dil, dil
movzx eax, sil
mov ecx, 0x80
cmovne ecx, r11d
mov byte [rax + rdx + 0x135230], cl
jmp 0x14000603a
mov r15d, dword [rbp + 0xf0]
mov eax, 0x100
mov ebx, r15d
shr ebx, 4
and bl, 1
test ax, cx
jne case.0x140005f48.13
lea ecx, [rax - 0x70]
call qword [sym.imp.USER32.dll_GetKeyState]
test al, 1
je case.0x140005f48.13
movzx eax, sil
add eax, 0xfffffff4
cmp eax, 0x62
ja case.0x140005f48.13
lea rdx, sym.MZ_kiv9nMDWjqg_I7rrTcpI88_u4Z_bB_FPuaQ9q_
cdqe
movzx eax, byte [rdx + rax + 0x7ca4]
mov ecx, dword [rdx + rax*4 + 0x7c74]
add rcx, rdx
jmp rcx
test dil, dil
sete byte [0x14013a460]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a461]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a462]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a463]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a464]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a465]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a466]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a467]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a468]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a469]
jmp case.0x140005f48.13
test dil, dil
sete byte [0x14013a46a]
mov r8, qword [0x140135380]
movzx r14d, sil
imul rax, r14, 0x128
cmp byte [rax + r8 + 8], 0
jne 0x14000602e
movzx r8d, dil
movzx edx, sil
mov ecx, r15d
call fcn.140009570
mov r8, qword [0x140135380]
mov r15, qword [rsp + 0x60]
test al, al
je 0x140006033
test dil, dil
lea rax, sym.MZ_kiv9nMDWjqg_I7rrTcpI88_u4Z_bB_FPuaQ9q_
mov ecx, 0x80
mov edx, 0
cmovne ecx, edx
mov byte [r14 + rax + 0x135230], cl
mov r14, qword [rbp + 0xb0]
jmp 0x14000603c
mov r15, qword [rsp + 0x60]
mov r14, qword [rbp + 0xb0]
xor edx, edx
mov eax, 0x69
test r13b, r13b
jne 0x140006056
test bl, bl
mov eax, SafeArrayAllocDescriptor
mov ecx, 0x61
cmovne ax, cx
cmp byte [0x1401344ff], 0
lea rcx, [r15 + 4]
mov qword [rsp + 0x70], rcx
mov word [rcx], ax
je 0x1400060a2
lea eax, [rsi - 0x5b]
cmp al, 1
ja 0x1400060a2
test dil, dil
jne 0x1400060a2
movzx r9d, word [rsp + 0x54]
mov rcx, r14
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], dil
jmp 0x140007c50
cmp byte [0x14013a448], 0
je 0x140006172
cmp sil, 0x1b
jne 0x140006172
test dil, dil
jne 0x140006172
xor edx, edx
lea rcx, str.32771
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x14000616b
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp ebx, eax
jne 0x14000616b
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
xor ecx, ecx
call fcn.1400113e0
movzx edx, byte [0x14013522e]
xor r8d, r8d
shr dl, 3
xor r9d, r9d
and dl, 1
mov dword [rsp + 0x28], 0xffc3d44d
or dl, 0xa4
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 1]
call fcn.1400113e0
movzx r9d, word [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
movzx r8d, sil
mov qword [rsp + 0x38], 0x7fffffff
mov rcx, r14
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
mov byte [rsp + 0x20], al
jmp 0x140007c54
mov r8, qword [0x140135380]
mov r14d, dword [rsp + 0x54]
mov r10, qword [rbp + 0xb0]
movzx eax, r14w
imul rbx, rax, 0x128
mov qword [rsp + 0x78], rax
mov rax, qword [0x140135378]
add rbx, rax
cmp r10, qword [0x140134450]
movzx eax, byte [rbx + 0x16]
mov byte [rsp + 0x59], al
jne 0x1400061ad
test al, al
jne 0x1400061bb
movzx eax, sil
imul rbx, rax, 0x128
add rbx, r8
test r13b, r13b
je 0x14000622d
mov eax, 0xffc3d44e
cmp qword [rbp + 0xe8], rax
jne 0x1400061ed
test dil, dil
je 0x1400061ed
cmp qword [0x14013a450], rbx
jne 0x1400061ed
xor eax, eax
mov byte [rbx + 0x10], 0
mov qword [0x14013a450], rax
mov byte [rbx + 0x13], 0
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r14w
mov byte [rsp + 0x20], sil
mov rcx, r10
mov r9, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
call fcn.140007ea0
jmp 0x140007c60
test dil, dil
jne 0x14000623b
mov byte [rbx + 0x14], dil
mov word [rbx + 0xa], r12w
cmp r10, qword [0x140134450]
jne 0x14000633d
test dil, dil
je 0x140006301
cmp byte [0x14013a444], 0
je 0x140006260
cmp sil, 0x5b
je 0x14000628d
cmp byte [0x14013a445], 0
je 0x14000626f
cmp sil, 0x5c
je 0x14000628d
cmp byte [0x14013a446], 0
je 0x14000627e
cmp sil, 0xa4
je 0x14000628d
cmp byte [0x14013a447], 0
je 0x140006301
cmp sil, 0xa5
jne 0x140006301
movzx ecx, sil
sub ecx, 0x5b
je 0x1400062c0
sub ecx, 1
je 0x1400062b7
sub ecx, 0x48
je 0x1400062ae
cmp ecx, 1
jne 0x1400062c7
mov byte [0x14013a447], 0
jmp 0x1400062c7
mov byte [0x14013a446], 0
jmp 0x1400062c7
mov byte [0x14013a445], 0
jmp 0x1400062c7
mov byte [0x14013a444], 0
test byte [0x14013522e], 3
jne 0x140006301
movzx edx, byte [reloc.OLEAUT32.dll_SafeArrayGetElemsize]
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 2]
call fcn.1400113e0
mov r8, qword [0x140135380]
mov r10, qword [rbp + 0xb0]
mov rax, qword [0x14013a450]
test rax, rax
je 0x1400063dc
cmp rax, rbx
je 0x1400063dc
test dil, dil
jne 0x1400063dc
cmp r10, qword [0x140134450]
jne 0x1400063c2
xor eax, eax
cmp byte [rbx + 8], al
sete al
jmp 0x1400063cd
test sil, sil
jne 0x140006366
mov byte [rsp + 0x48], sil
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], r14w
mov byte [rsp + 0x20], sil
jmp 0x14000620c
lea eax, [rsi - 1]
cmp al, 1
ja 0x140006301
cmp dword [0x140134074], 0
jne 0x1400063b4
xor edx, edx
lea rcx, str.32768
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x1400062f3
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
cmp eax, dword [0x140139538]
mov r10, qword [rbp + 0xb0]
je 0x1400063b4
mov r8, qword [0x140135380]
jmp 0x140006301
test dil, dil
sete al
mov byte [rbx + 0x10], al
jmp 0x1400061e9
mov rax, qword [0x14013a450]
movzx eax, byte [rax + 8]
test eax, eax
je 0x1400063dc
mov rax, qword [0x14013a450]
mov byte [rax + 0x15], 1
cmp byte [rbx + 0xc], 0
jne 0x1400063ec
cmp byte [rbx + 0xd], 0
je 0x1400061ed
xor edx, edx
mov word [rsp + 0x50], r12w
mov qword [rsp + 0x68], rdx
movzx r14d, r12w
test dil, dil
je 0x14000642c
movzx eax, word [rbx + 0xa]
movzx ecx, byte [rbx + 0x10]
movzx r13d, byte [rbx + 0x13]
mov byte [rsp + 0x58], cl
mov byte [rbx + 0x13], dl
cmp ax, r12w
je 0x14000643f
movzx r14d, ax
mov word [rsp + 0x50], ax
mov word [rbx + 0xa], r12w
jmp 0x14000643f
movzx eax, byte [rbp + 0xd0]
movzx r13d, byte [rbp + 0xd0]
mov byte [rsp + 0x58], al
test dil, dil
mov byte [rbp + 0xd0], dl
mov ecx, 1
sete al
cmp r10, qword [0x140134450]
mov byte [rbx + 0x10], al
jne 0x1400064be
cmp byte [rbx + 8], dl
je 0x1400064e6
cmp byte [r8 + 0xbb60], dl
jne 0x140006479
mov eax, edx
cmp byte [r8 + 0xbc88], dl
je 0x14000647b
mov eax, ecx
mov byte [r8 + 0x13b8], al
cmp byte [r8 + 0xbdb0], dl
jne 0x140006496
mov eax, edx
cmp byte [r8 + 0xbed8], dl
je 0x140006498
mov eax, ecx
mov byte [r8 + 0x14e0], al
cmp byte [r8 + 0xb910], dl
jne 0x1400064b3
mov eax, edx
cmp byte [r8 + 0xba38], dl
je 0x1400064b5
mov eax, ecx
mov byte [r8 + 0x1290], al
jmp 0x1400064e6
cmp qword [0x140134450], rdx
jne 0x1400064e6
call fcn.140014120
mov r8, qword [0x140135380]
mov byte [0x14013522d], al
mov byte [0x14013522e], al
mov byte [rbp + 0xd0], 1
mov rax, qword [rbx]
test rax, rax
je 0x1400064f8
cmp dword [rax], 7
mov byte [rsp + 0x5a], 1
je 0x1400064fd
mov byte [rsp + 0x5a], 0
movzx ecx, byte [rbx + 0xc]
test cl, cl
je 0x1400066e5
test dil, dil
jne 0x1400066e5
mov rax, qword [0x14013a450]
test rax, rax
je 0x14000652d
cmp byte [rbx + 0xd], dil
je 0x14000652d
cmp rbx, rax
jne 0x1400066e5
cmp cl, 1
jne 0x14000655c
movzx eax, byte [rsp + 0x59]
movzx ecx, word [rsp + 0x54]
test al, al
jne 0x140006544
movzx ecx, sil
movzx edx, al
call fcn.14000bf10
mov r8, qword [0x140135380]
test al, al
je 0x14000655c
mov r15b, 1
jmp 0x140006573
xor r15b, r15b
cmp rbx, qword [0x14013a450]
je 0x140006573
mov qword [0x14013a450], rbx
mov byte [rbx + 0x15], r15b
cmp byte [rbx + 0xd], 0
je 0x140006644
cmp byte [rbp + 0xd0], 0
jne 0x14000659b
mov cl, 1
mov byte [rbp + 0xd0], 1
call fcn.140014120
mov r8, qword [0x140135380]
movzx eax, byte [rbx + 8]
movzx ecx, byte [0x14013522d]
test al, al
je 0x1400065ae
not al
and cl, al
test cl, cl
jne 0x1400065c1
test r15b, r15b
jne 0x1400065c1
test byte [rbx + 0xf], 1
je 0x140006644
mov r10, qword [rbp + 0xb0]
cmp r10, qword [0x140134450]
jne 0x1400065ed
cmp byte [rsp + 0x59], 0
je 0x1400065ed
mov rax, qword [0x140135390]
movzx ecx, cl
shl rcx, 9
add rcx, qword [rsp + 0x78]
jmp 0x140006602
movzx ecx, cl
movzx eax, sil
shl rcx, 8
add rcx, rax
mov rax, qword [0x140135398]
movzx r14d, word [rax + rcx*2]
mov eax, 0x4000
mov word [rsp + 0x50], r14w
test ax, r14w
je 0x14000661f
mov word [rbx + 0xa], r14w
jmp 0x140006655
movzx eax, r14w
and ax, r12w
cmp ax, word [0x140137314]
jae 0x14000664b
movzx ecx, ax
mov rax, qword [0x140135388]
movzx ecx, word [rax + rcx*2]
mov word [rbx + 0xa], cx
jmp 0x14000664b
mov r10, qword [rbp + 0xb0]
cmp r14w, r12w
jne 0x1400066e0
test r15b, r15b
je 0x14000666b
mov rcx, qword [rsp + 0x70]
mov eax, reloc.OLEAUT32.dll_SafeArrayAllocDescriptor
or byte [rbx + 0xf], 8
mov word [rcx], ax
cmp byte [rbx + 8], 0
jne 0x1400066b9
test byte [rbx + 0xf], 1
jne 0x1400066b9
cmp byte [rsp + 0x5a], 0
jne 0x1400066b9
test r15b, r15b
jne 0x1400066b9
movzx r9d, word [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
mov rcx, r10
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], r15b
mov byte [rbx + 0x14], 1
jmp 0x140007c50
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], ax
jmp 0x140006207
mov r15, qword [rsp + 0x60]
cmp byte [rbx + 0xd], 0
mov byte [rsp + 0x5b], 0
je 0x140006762
test dil, dil
je 0x140006762
cmp qword [0x14013a450], rbx
jne 0x14000670e
test r13b, r13b
je 0x140006762
xor edx, edx
mov qword [0x14013a450], rdx
jmp 0x140006710
xor edx, edx
cmp byte [rbx + 0xe], 0
jne 0x14000675d
movzx eax, byte [rbx + 0xf]
test al, 8
je 0x140006727
xor cl, cl
and al, 0xf7
mov byte [rbx + 0xf], al
jmp 0x140006729
mov cl, 1
test r13b, r13b
je 0x1400067ff
test cl, cl
je 0x1400067ff
mov qword [rsp + 0x40], rdx
movzx r9d, word [rsp + 0x54]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
jmp 0x140007c44
mov byte [rsp + 0x5b], 1
cmp byte [rbx + 0xc], 0
je 0x1400069c9
test dil, dil
je 0x1400069c9
mov rax, qword [0x14013a450]
mov ecx, 0
cmp rax, rbx
cmove rax, rcx
lea r13d, [rcx + 1]
mov qword [0x14013a450], rax
cmp byte [rbx + 0x11], cl
je 0x1400067be
mov byte [rbx + 0x11], cl
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], cl
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
mov ecx, r13d
call fcn.1400113e0
mov r8, qword [0x140135380]
cmp byte [rbx + 0x12], 0
je 0x1400067ec
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
mov byte [rbx + 0x12], 0
mov ecx, r13d
call fcn.1400113e0
mov r8, qword [0x140135380]
cmp r14w, r12w
jne 0x14000682d
movzx eax, byte [rbx + 0xf]
test al, 8
je 0x14000682d
and al, 0xf7
mov byte [rbx + 0xf], al
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov eax, dword [rsp + 0x54]
mov rcx, qword [rbp + 0xb0]
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x14000620f
movzx ecx, byte [rsp + 0x5a]
movzx eax, byte [rbx + 0x15]
test cl, cl
je 0x1400068e1
cmp al, 2
jne 0x1400068ab
mov ebx, dword [rsp + 0x54]
mov eax, 0xffc3d44e
mov dword [rsp + 0x28], eax
xor r9d, r9d
movzx r8d, bx
mov byte [rsp + 0x20], 0
movzx edx, sil
mov ecx, r13d
call fcn.1400113e0
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, bx
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 2]
call fcn.1400113e0
xor eax, eax
movzx r9d, bx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
jmp 0x140007c44
cmp al, 1
jne 0x14000698a
mov eax, dword [rsp + 0x54]
mov rcx, qword [rbp + 0xb0]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x14000620f
test al, al
je 0x14000698a
cmp r14w, r12w
jne 0x14000698a
cmp byte [rbx + 8], 0
mov rcx, qword [rbp + 0xb0]
je 0x14000694b
mov r9, qword [rbp + 0xc8]
cmp al, 2
mov eax, dword [rsp + 0x54]
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
jne 0x140006923
mov byte [rsp + 0x48], 1
jmp 0x140006928
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
call fcn.140007ea0
jmp 0x140007c60
test byte [rbx + 0xf], 1
je 0x140006965
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r15
jmp 0x1400075b9
movzx r9d, word [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r15
jmp 0x140007c4b
cmp byte [rbx + 0xd], 0
jne 0x1400069b8
cmp byte [rbx + 8], 0
jne 0x1400067ff
test byte [rbx + 0xf], 1
jne 0x1400067ff
test cl, cl
jne 0x1400067ff
xor eax, eax
mov qword [rsp + 0x40], rax
jmp 0x14000673f
cmp byte [rsp + 0x58], 0
jne 0x1400069c9
cmp byte [rbx + 0xe], 0
je 0x1400067ff
cmp byte [rbp + 0xd0], 0
jne 0x1400069e6
cmp r14w, r12w
jne 0x1400069e6
mov cl, 1
call fcn.140014120
mov r8, qword [0x140135380]
cmp qword [0x14013a450], 0
mov r11d, 0x3ffa
mov byte [rbp + 0xd0], 0
je 0x1400070f2
test dil, dil
je 0x140006a10
cmp byte [rbx + 0xe], 0
je 0x1400070f2
cmp r14w, r12w
jne 0x140007434
movzx r9d, byte [rbx + 0x17]
xor r10d, r10d
mov r15, qword [0x140135380]
mov r8d, r10d
test r9d, r9d
je 0x140006b61
movzx r11d, byte [rbp + 0xd0]
lea rdx, [rbx + 0x1a]
mov byte [rsp + 0x58], r11b
nop word [rax + rax]
movzx ecx, byte [rdx]
imul rax, rcx, 0x128
cmp byte [rax + r15 + 0x10], r10b
je 0x140006a98
movzx eax, word [rdx + 2]
mov r13d, 0x4000
test r13w, ax
je 0x140006a82
test dil, dil
jne 0x140006aa6
mov word [rbx + 0xa], ax
cmp r14w, r12w
jne 0x140006ac4
jmp 0x140006a98
test dil, dil
jne 0x140006a98
movzx r14d, ax
mov word [rsp + 0x50], ax
movzx r11d, cl
mov byte [rsp + 0x58], cl
inc r8d
add rdx, 4
cmp r8d, r9d
jl 0x140006a50
jmp 0x140006aba
movzx r14d, word [rdx + 2]
movzx r11d, byte [rdx]
mov word [rsp + 0x50], r14w
mov byte [rsp + 0x58], r11b
cmp r14w, r12w
je 0x140006b6c
movzx ecx, r11b
sub ecx, 0x10
je 0x140006b30
sub ecx, 1
je 0x140006b1b
movzx r13d, word [rbp + 0xd0]
cmp ecx, 1
je 0x140006af2
movzx eax, r11b
imul rcx, rax, 0x128
add rcx, r15
jmp 0x140006c10
mov rax, r10
cmp byte [r15 + 0xbed8], al
setne al
add rax, 0xa4
imul rax, rax, 0x128
add rax, r15
mov qword [0x14013a450], rax
jmp 0x140006c17
mov rax, r10
cmp byte [r15 + 0xbc88], al
setne al
add rax, 0xa2
jmp 0x140006b43
mov rax, r10
cmp byte [r15 + 0xba38], al
setne al
add rax, 0xa0
movzx r13d, word [rbp + 0xd0]
imul rax, rax, 0x128
add rax, r15
mov qword [0x14013a450], rax
jmp 0x140006c17
movzx eax, byte [rbp + 0xd0]
mov byte [rsp + 0x58], al
movzx r13d, word [rbp + 0xd0]
mov r9d, r10d
movzx r10d, byte [rbx + 0x18]
test r10d, r10d
je 0x140006c21
lea r8, [rbx + 0xe2]
nop dword [rax]
movzx edx, word [r8]
mov rax, qword [0x140135378]
imul rcx, rdx, 0x128
cmp byte [rcx + rax + 0x10], 0
je 0x140006bdb
movzx eax, word [r8 + 2]
mov ecx, 0x4000
test cx, ax
je 0x140006bc9
test dil, dil
jne 0x140006be9
mov word [rbx + 0xa], ax
cmp r14w, r12w
jne 0x140006bfe
jmp 0x140006bdb
test dil, dil
jne 0x140006bdb
movzx r14d, ax
mov word [rsp + 0x50], ax
movzx r13d, dx
inc r9d
add r8, 4
cmp r9d, r10d
jl 0x140006b90
jmp 0x140006bf8
movzx r14d, word [r8 + 2]
movzx r13d, word [r8]
mov word [rsp + 0x50], r14w
cmp r14w, r12w
je 0x140006c21
movzx eax, r13w
imul rcx, rax, 0x128
add rcx, qword [0x140135378]
mov qword [0x14013a450], rcx
cmp r14w, r12w
jne case.default.0x140006c46
movzx eax, sil
add eax, 0xffffff60
cmp eax, 5
ja case.default.0x140006c46
lea rdx, sym.MZ_kiv9nMDWjqg_I7rrTcpI88_u4Z_bB_FPuaQ9q_
cdqe
mov ecx, dword [rdx + rax*4 + 0x7d08]
add rcx, rdx
jmp rcx
mov al, reloc.OLEAUT32.dll_SafeArrayGetElemsize
jmp 0x140006c52
mov al, reloc.OLEAUT32.dll_SafeArrayGetUBound
jmp 0x140006c52
mov al, reloc.OLEAUT32.dll_SafeArrayGetDim
xor r10d, r10d
movzx eax, al
imul r11, rax, 0x128
mov r8d, r10d
movzx r9d, byte [r11 + r15 + 0x17]
test r9, r9
je 0x140006ceb
lea rdx, [r15 + 0x1a]
add rdx, r11
nop dword [rax]
nop dword [rax + rax]
movzx ecx, byte [rdx]
imul rax, rcx, 0x128
cmp byte [rax + r15 + 0x10], 0
je 0x140006ccb
movzx eax, word [rdx + 2]
mov r10d, 0x4000
test r10w, ax
mov r10d, 0
je 0x140006cb9
test dil, dil
jne 0x140006cd9
mov word [rbx + 0xa], ax
cmp r14w, r12w
jne 0x140006cf1
jmp 0x140006ccb
test dil, dil
jne 0x140006ccb
movzx r14d, ax
mov word [rsp + 0x50], ax
mov byte [rsp + 0x58], cl
inc r8
add rdx, 4
cmp r8, r9
jl 0x140006c80
jmp 0x140006ceb
movzx r14d, word [rdx + 2]
movzx eax, byte [rdx]
mov word [rsp + 0x50], r14w
mov byte [rsp + 0x58], al
cmp r14w, r12w
je 0x140006d6f
movzx edx, byte [rsp + 0x58]
mov ecx, edx
sub ecx, 0x10
je 0x140006d45
sub ecx, 1
je 0x140006d2f
cmp ecx, 1
je 0x140006d19
movzx eax, dl
imul rcx, rax, 0x128
add rcx, r15
jmp 0x140006e0f
cmp byte [r15 + 0xbed8], 0
mov rax, r10
setne al
add rax, 0xa4
jmp 0x140006d59
cmp byte [r15 + 0xbc88], 0
mov rax, r10
setne al
add rax, 0xa2
jmp 0x140006d59
cmp byte [r15 + 0xba38], 0
mov rax, r10
setne al
add rax, 0xa0
imul rax, rax, 0x128
add rax, r15
mov qword [0x14013a450], rax
jmp case.default.0x140006c46
movzx r10d, byte [r11 + r15 + 0x18]
xor eax, eax
mov r9d, eax
test r10, r10
je case.default.0x140006c46
lea rdx, [r15 + 0xe2]
add rdx, r11
nop dword [rax]
movzx r8d, word [rdx]
mov rax, qword [0x140135378]
imul rcx, r8, 0x128
cmp byte [rcx + rax + 0x10], 0
je 0x140006dda
movzx eax, word [rdx + 2]
mov ecx, 0x4000
test cx, ax
je 0x140006dc8
test dil, dil
jne 0x140006de8
mov word [rbx + 0xa], ax
cmp r14w, r12w
jne 0x140006dfd
jmp 0x140006dda
test dil, dil
jne 0x140006dda
movzx r14d, ax
mov word [rsp + 0x50], ax
movzx r13d, r8w
inc r9
add rdx, 4
cmp r9, r10
jl 0x140006d90
jmp 0x140006df7
movzx r14d, word [rdx + 2]
movzx r13d, word [rdx]
mov word [rsp + 0x50], r14w
cmp r14w, r12w
je case.default.0x140006c46
movzx eax, r13w
imul rcx, rax, 0x128
add rcx, qword [0x140135378]
mov qword [0x14013a450], rcx
movzx r15d, r14w
and r15w, r12w
cmp r14w, r12w
je 0x140006ed2
cmp r15w, word [0x140137314]
jae 0x140006ec7
mov r14, qword [rsp + 0x70]
lea r8, [rbx + 0xf]
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], r14
movzx edx, dil
lea rcx, [rsp + 0x50]
call fcn.14000c180
mov r8, rax
test rax, rax
je 0x140007b99
mov rax, qword [rbp + 0xe8]
movabs rcx, 0xffffffff003c2c17
add rcx, rax
cmp rcx, 0x66
ja 0x140006ea1
movzx edx, byte [r8 + 0x39]
mov ecx, 0xffc3d44d
sub ecx, eax
cmp ecx, edx
jg 0x140006ea1
test r14, r14
je 0x140006e9d
mov eax, 0x69
mov word [r14], ax
xor al, al
jmp 0x140006ea3
mov al, 1
xor ecx, ecx
test al, al
cmovne rcx, r8
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x140007b99
movzx r14d, word [rsp + 0x50]
movzx r15d, r14w
and r15w, r12w
mov rax, qword [0x14013a450]
mov byte [rax + 0x15], 2
movzx eax, r15w
mov ecx, 0x3ffd
sub ax, cx
cmp ax, 1
ja 0x1400070e5
test dil, dil
jne 0x140006ef1
mov byte [rbx + 0x13], 1
test byte [0x14013522e], 0xc
jne 0x140006f16
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.1400113e0
mov r14d, dword [rsp + 0x54]
lea eax, [rsi + 0x5e]
mov r13d, 1
cmp al, r13b
ja 0x140006f4e
test dil, dil
jne 0x140006f4e
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
movzx r8d, r14w
mov byte [rsp + 0x20], dil
movzx edx, sil
mov ecx, r13d
call fcn.1400113e0
mov rax, qword [0x14013a450]
mov byte [rax + 0x11], 1
mov eax, 0x3ffd
cmp r15w, ax
jne 0x140006f99
test byte [0x14013522e], 0x30
jne 0x140006f89
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
xor ecx, ecx
call fcn.1400113e0
mov rax, qword [0x14013a450]
mov byte [rax + 0x12], 1
jmp 0x14000701c
mov ecx, 0x3ffe
cmp r15w, cx
jne 0x14000701c
lea eax, [rsi + 0x60]
cmp al, 1
ja 0x140006fd0
test dil, dil
jne 0x140006fd0
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
movzx r8d, r14w
mov byte [rsp + 0x20], dil
movzx edx, sil
mov ecx, r13d
call fcn.1400113e0
test byte [0x14013522e], 0x10
je 0x140006ff6
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa0
mov ecx, r13d
call fcn.1400113e0
test byte [0x14013522e], 0x20
je 0x14000701c
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa1
mov ecx, r13d
call fcn.1400113e0
test byte [0x14013522e], 1
je 0x140007042
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa2
mov ecx, r13d
call fcn.1400113e0
test byte [0x14013522e], 2
je 0x140007068
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 0xa3
mov ecx, r13d
call fcn.1400113e0
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.1400113e0
mov eax, 0x3ffd
cmp r15w, ax
jne 0x1400070d3
mov rax, qword [0x14013a450]
cmp byte [rax + 0x12], 0
je 0x1400070d3
lea eax, [rsi - 0x60]
cmp al, 9
jbe 0x1400070ab
cmp sil, 0x6e
jne 0x1400070d3
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
mov ecx, r13d
call fcn.1400113e0
mov rax, qword [0x14013a450]
mov byte [rax + 0x12], 0
mov rcx, qword [rsp + 0x70]
mov eax, 0x68
mov word [rcx], ax
jmp 0x140007c18
mov r8, qword [0x140135380]
mov r11d, 0x3ffa
cmp r14w, r12w
jne 0x140007434
movzx eax, byte [rbx + 8]
movzx edx, byte [0x14013522d]
test al, al
je 0x14000710f
not al
and dl, al
mov r13, qword [rbp + 0xb0]
cmp r13, qword [0x140134450]
movzx r9d, byte [rsp + 0x59]
jne 0x140007142
test r9b, r9b
je 0x140007142
mov r10, qword [rsp + 0x78]
mov rax, qword [0x140135390]
movzx ecx, dl
shl rcx, 9
add rcx, r10
jmp 0x14000715c
mov r10, qword [rsp + 0x78]
movzx eax, sil
movzx ecx, dl
shl rcx, 8
add rcx, rax
mov rax, qword [0x140135398]
movzx r14d, word [rax + rcx*2]
mov word [rsp + 0x50], r14w
cmp r14w, r12w
jne 0x1400071db
cmp byte [0x14013a448], 0
je 0x1400071db
cmp sil, 9
je 0x1400071db
and dl, 0xf3
cmp r13, qword [0x140134450]
jne 0x1400071a0
test r9b, r9b
je 0x1400071a0
mov rax, qword [0x140135390]
movzx ecx, dl
shl rcx, 9
add rcx, r10
jmp 0x1400071b5
movzx eax, sil
movzx ecx, dl
shl rcx, 8
add rcx, rax
mov rax, qword [0x140135398]
movzx r14d, word [rax + rcx*2]
movzx eax, r14w
mov word [rsp + 0x50], r14w
and ax, r12w
sub ax, r11w
cmp ax, 4
jbe 0x1400071db
mov r14d, r12d
mov word [rsp + 0x50], r12w
mov eax, 0x4000
test ax, r14w
je 0x140007221
test dil, dil
jne 0x140007337
mov word [rbx + 0xa], r14w
cmp word [rbx + 0xa], r12w
lea rcx, [rbx + 0xa]
jne 0x1400073bf
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x30], 0
jmp 0x1400073a9
cmp r14w, r12w
je 0x140007341
movzx eax, r14w
and ax, r12w
test dil, dil
je 0x14000731c
cmp ax, word [0x140137314]
jae 0x140007313
movzx r15d, ax
mov rax, qword [0x140135388]
cmp word [rax + r15*2], r12w
je 0x140007313
cmp byte [rsp + 0x5b], 0
jne 0x14000729d
mov r14, qword [rsp + 0x70]
lea r8, [rbx + 0xf]
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], r14
movzx edx, dil
lea rcx, [rsp + 0x50]
call fcn.14000c180
mov rdx, rax
test rax, rax
jne 0x1400072b4
mov r8, qword [0x140135380]
mov qword [rsp + 0x68], rax
mov rax, qword [0x140135388]
movzx r14d, word [rax + r15*2]
mov word [rsp + 0x50], r14w
jmp 0x140007337
mov r8, qword [rbp + 0xe8]
movabs rax, 0xffffffff003c2c17
add rax, r8
cmp rax, 0x66
ja 0x1400072f0
movzx ecx, byte [rdx + 0x39]
mov eax, 0xffc3d44d
sub eax, r8d
cmp eax, ecx
jg 0x1400072f0
test r14, r14
je 0x1400072ec
mov eax, 0x69
mov word [r14], ax
xor al, al
jmp 0x1400072f2
mov al, 1
mov r8, qword [0x140135380]
xor ecx, ecx
test al, al
cmovne rcx, rdx
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x14000729d
movzx r14d, word [rsp + 0x50]
jmp 0x140007337
cmp byte [rsp + 0x5b], 0
jne 0x140007341
jmp 0x140007337
cmp ax, word [0x140137314]
jae 0x140007337
movzx ecx, ax
mov rax, qword [0x140135388]
movzx ecx, word [rax + rcx*2]
mov word [rbx + 0xa], cx
cmp r14w, r12w
jne 0x14000743b
test dil, dil
je 0x1400071f4
cmp byte [rbx + 8], 0
jne 0x140007390
test byte [rbx + 0xf], 1
jne 0x140007390
cmp byte [rbx + 0xc], 0
je 0x140007390
cmp byte [rsp + 0x5a], 0
jne 0x140007390
movzx r9d, word [rsp + 0x54]
xor eax, eax
mov qword [rsp + 0x40], rax
mov rcx, r13
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
jmp 0x140007c4b
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov byte [rsp + 0x30], dil
mov eax, dword [rsp + 0x54]
mov rcx, r13
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x14000620f
lea r8, [rbx + 0xf]
mov dl, 1
xor ebx, ebx
lea r9, [rbp + 0xd0]
mov qword [rsp + 0x20], rbx
call fcn.14000c180
mov rcx, r13
mov rax, qword [rsp + 0x60]
cmp byte [rbp + 0xd0], bl
je 0x14000740d
mov byte [rsp + 0x48], bl
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], bl
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x14000620f
movzx r9d, word [rsp + 0x54]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], bl
jmp 0x140007c50
mov r13, qword [rbp + 0xb0]
movzx eax, byte [rbx + 0xf]
lea r15, [rbx + 0xf]
test al, 8
je 0x140007458
test dil, dil
je 0x140007458
and al, 0xf7
mov byte [rbp + 0xd0], 1
mov byte [r15], al
movzx eax, r14w
and ax, r12w
cmp ax, word [0x140137314]
jae 0x140007509
cmp qword [rsp + 0x68], 0
jne 0x140007509
mov r14, qword [rsp + 0x70]
lea r9, [rbp + 0xd0]
mov r8, r15
mov qword [rsp + 0x20], r14
movzx edx, dil
lea rcx, [rsp + 0x50]
call fcn.14000c180
mov rdx, rax
test rax, rax
je 0x140007571
mov r8, qword [rbp + 0xe8]
movabs rax, 0xffffffff003c2c17
lea rcx, [r8 + rax]
cmp rcx, 0x66
ja 0x1400074e4
movzx ecx, byte [rdx + 0x39]
mov eax, 0xffc3d44d
sub eax, r8d
cmp eax, ecx
jg 0x1400074e4
test r14, r14
je 0x1400074e0
mov eax, 0x69
mov word [r14], ax
xor al, al
jmp 0x1400074e6
mov al, 1
xor r14d, r14d
test al, al
mov ecx, r14d
cmovne rcx, rdx
mov qword [rsp + 0x68], rcx
test rcx, rcx
je 0x140007574
movzx r14d, word [rsp + 0x50]
mov r8, qword [0x140135380]
movzx eax, byte [0x14013522e]
and r14w, r12w
cmp r13, qword [0x140134450]
jne 0x140007665
test al, 0x3f
jne 0x1400076a6
test al, 0x40
je 0x14000754a
movzx eax, byte [0x14013a444]
mov ecx, 1
cmp byte [r8 + 0x6944], 0
cmove eax, ecx
mov byte [0x14013a444], al
test byte [0x14013522e], 0x80
je 0x1400076a6
cmp byte [r8 + 0x6a6c], 0
jne 0x1400076a6
mov byte [0x14013a445], 1
jmp 0x1400076a6
xor r14d, r14d
test dil, dil
je 0x1400075d1
cmp byte [rbx + 0x14], 0
mov rcx, r13
mov rax, qword [rsp + 0x60]
je 0x1400075aa
mov qword [rsp + 0x40], r14
movzx r9d, word [rsp + 0x54]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
jmp 0x140007c4b
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x14000620f
cmp word [rbx + 0xa], r12w
lea rcx, [rbx + 0xa]
je 0x140007203
lea r9, [rbp + 0xd0]
mov byte [rbp + 0xd0], 0
mov r8, r15
mov qword [rsp + 0x20], r14
mov dl, 1
call fcn.14000c180
cmp byte [rbp + 0xd0], 0
mov rcx, r13
mov rax, qword [rsp + 0x60]
je 0x140007635
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], 0
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
jmp 0x14000620f
and byte [r15], 0xf7
movzx r9d, word [rsp + 0x54]
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], 0
mov byte [rbx + 0x14], 1
jmp 0x140007c50
test al, 0xc
jne 0x1400076a6
test al, 0x40
je 0x140007680
cmp byte [r8 + 0x6944], 0
jne 0x140007680
mov byte [0x14013a444], 1
jmp 0x1400076a6
test byte [0x14013522e], 0x80
je 0x1400076a6
movzx eax, byte [0x14013a445]
mov ecx, 1
cmp byte [r8 + 0x6a6c], 0
cmove eax, ecx
mov byte [0x14013a445], al
test byte [0x14013522e], 4
je 0x1400076cc
cmp byte [r8 + 0xbdac], 0
jne 0x1400076cc
cmp qword [0x140134450], 0
je 0x1400076fb
mov byte [0x14013a446], 1
jmp 0x14000771e
test byte [0x14013522e], 8
je 0x14000771e
cmp byte [r8 + 0xbed4], 0
jne 0x14000771e
call fcn.140014690
test al, al
jne 0x14000771e
cmp qword [0x140134450], 0
je 0x1400076fb
mov byte [0x14013a447], 1
jmp 0x14000771e
movzx edx, byte [reloc.OLEAUT32.dll_SafeArrayGetElemsize]
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 2]
call fcn.1400113e0
movzx eax, r14w
cmp eax, 0x3ffa
je 0x140007763
jbe 0x14000773f
cmp eax, 0x3ffc
jbe 0x140007770
mov ecx, 0x3ffe
cmp eax, ecx
jbe 0x14000781e
mov rax, qword [rsp + 0x68]
movzx r12d, r14w
cmp byte [rax + 0x36], 5
jne 0x140007a6a
movzx eax, word [rax + 0x34]
shl eax, 0x10
cdqe
or r12, rax
jmp 0x140007a6a
cmp byte [0x14013a448], 0
je 0x140007390
xor al, al
test byte [0x14013522e], 4
je 0x140007780
mov r13b, 0xa4
jmp 0x140007794
test byte [0x14013522e], 8
movzx r13d, al
mov eax, 0xa5
cmovne r13d, eax
cmp byte [0x14013a448], 0
je 0x140007908
mov eax, 0x3ffb
cmp r14w, ax
je 0x140007817
movzx eax, r13b
test r13b, r13b
jne 0x1400077ba
mov eax, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, al
lea ecx, [r8 + 1]
call fcn.1400113e0
cmp byte [rbx + 8], 0
je 0x14000780b
lea eax, [rsi - 0x5b]
cmp al, 1
jbe 0x14000780b
test dil, dil
jne 0x14000780b
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
lea ecx, [r8 + 1]
call fcn.1400113e0
mov byte [0x14013a448], 0
jmp 0x140007a6a
mov r13, qword [rbp + 0xb0]
cmp byte [0x14013a448], 0
je 0x140007390
test dil, dil
jne 0x140007857
lea eax, [rsi + 0x60]
cmp al, 3
ja 0x140007857
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, sil
lea ecx, [r8 + 1]
call fcn.1400113e0
test byte [0x14013522e], 0xc
je 0x14000786c
test dil, dil
je 0x140007888
lea eax, [rsi + 0x5c]
cmp al, 1
ja 0x140007888
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.1400113e0
xor r15b, r15b
mov eax, 0x3ffd
cmp r14w, ax
jne 0x1400078be
test byte [0x14013522e], 0x30
jne 0x1400078be
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
xor ecx, ecx
call fcn.1400113e0
mov r15b, 1
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.1400113e0
test r15b, r15b
je 0x140007a66
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetDim
lea ecx, [r8 + 1]
call fcn.1400113e0
jmp 0x140007a66
lea eax, [rsi + 0x5c]
cmp al, 1
lea eax, [rsi + 0x60]
setbe byte [rsp + 0x5b]
cmp al, 1
lea eax, [rsi + 0x5e]
setbe dl
cmp al, 1
mov byte [rsp + 0x59], dl
setbe cl
xor r15b, r15b
test byte [0x14013522e], 0x10
je 0x140007937
mov r15b, 0xa0
jmp 0x140007958
test byte [0x14013522e], 0x20
je 0x140007945
mov r15b, 0xa1
jmp 0x140007958
test dil, dil
jne 0x140007958
test dl, dl
movzx r15d, r15b
movzx eax, sil
cmovne r15d, eax
xor r14b, r14b
test byte [0x14013522e], 1
je 0x140007969
mov r14b, 0xa2
jmp 0x14000798a
test byte [0x14013522e], 2
je 0x140007977
mov r14b, 0xa3
jmp 0x14000798a
test dil, dil
jne 0x14000798a
test cl, cl
movzx r14d, r14b
movzx eax, sil
cmovne r14d, eax
mov byte [rbp + 0xe8], 0
test r15b, r15b
je 0x1400079bd
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r15b
lea ecx, [r8 + 1]
call fcn.1400113e0
mov byte [rbp + 0xe8], 1
test r14b, r14b
je 0x1400079e2
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r14b
lea ecx, [r8 + 1]
call fcn.1400113e0
cmp byte [rsp + 0x5b], 0
je 0x1400079f2
test dil, dil
jne 0x1400079f7
movzx r13d, sil
test r13b, r13b
jne 0x140007a13
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, reloc.OLEAUT32.dll_SafeArrayGetUBound
xor ecx, ecx
call fcn.1400113e0
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
mov dl, 9
lea ecx, [r8 + 2]
call fcn.1400113e0
cmp byte [rbp + 0xe8], 0
je 0x140007a5f
cmp byte [rsp + 0x59], 0
jne 0x140007a5f
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
movzx edx, r15b
xor ecx, ecx
call fcn.1400113e0
mov byte [0x14013a448], 1
lea r15, [rbx + 0xf]
cmp byte [rsp + 0x5a], 0
mov eax, 0x68
mov rcx, qword [rsp + 0x70]
mov word [rcx], ax
je 0x140007add
test dil, dil
je 0x140007b72
cmp byte [rbx + 0xc], 0
je 0x140007add
mov ebx, dword [rsp + 0x54]
xor r9d, r9d
mov eax, 0xffc3d44e
movzx r8d, bx
mov dword [rsp + 0x28], eax
movzx edx, sil
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 1]
call fcn.1400113e0
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, bx
mov byte [rsp + 0x20], 0
movzx edx, sil
lea ecx, [r9 + 2]
call fcn.1400113e0
movzx r9d, bx
jmp 0x140007c25
test dil, dil
je 0x140007b72
cmp byte [rbx + 8], 0
je 0x140007b19
cmp byte [rbx + 0x14], 0
mov rcx, qword [rbp + 0xb0]
je 0x140007b0a
xor eax, eax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x60]
jmp 0x14000758c
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 1
jmp 0x1400075af
cmp byte [rbp + 0xd0], 0
je 0x140007c13
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp + 0xb0]
mov r9, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xc0]
mov edx, dword [rbp + 0xb8]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov eax, dword [rsp + 0x54]
mov byte [rsp + 0x30], dil
mov word [rsp + 0x28], ax
mov byte [rsp + 0x20], sil
call fcn.140007ea0
jmp 0x140007c60
mov rax, qword [0x14013a450]
mov byte [rbx + 0x13], 1
test rax, rax
je 0x140007b8c
cmp byte [rax + 8], 0
je 0x140007b8c
mov byte [rax + 0x15], 2
cmp byte [rbp + 0xd0], 0
je 0x140007bb2
or byte [r15], 8
mov rax, qword [rsp + 0x60]
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
jmp 0x14000680e
lea eax, [rsi + 0x5c]
cmp al, 1
ja 0x140007c13
movzx eax, byte [0x14013522e]
test al, 0xc0
je 0x140007beb
test al, 0x33
jne 0x140007beb
movzx edx, byte [reloc.OLEAUT32.dll_SafeArrayGetElemsize]
xor r8d, r8d
mov dword [rsp + 0x28], 0xffc3d44d
xor r9d, r9d
mov byte [rsp + 0x20], r8b
lea ecx, [r8 + 2]
call fcn.1400113e0
mov r14d, dword [rsp + 0x54]
xor r9d, r9d
mov dword [rsp + 0x28], 0xffc3d44d
movzx r8d, r14w
movzx edx, sil
mov byte [rsp + 0x20], 0
lea ecx, [r9 + 1]
call fcn.1400113e0
jmp 0x140007c18
mov r14d, dword [rsp + 0x54]
test dil, dil
jne 0x140007c21
mov byte [rbx + 0x14], 1
movzx r9d, r14w
xor eax, eax
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x38], 0x7fffffff
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rax
mov rcx, qword [rbp + 0xb0]
mov byte [rsp + 0x20], dil
movzx r8d, sil
mov rdx, qword [rbp + 0xc8]
call fcn.140007d20
add rsp, 0x168
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret