Function at 0x1400989a0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7c0]
sub rsp, 0x8c0
mov rbx, rdx
mov qword [rsp + 0x48], rdx
lea rdx, str.Submit
mov rcx, r9
mov rsi, r9
mov r14, r8
call fcn.1400c9c7c
lea r12, [0x140000000]
test eax, eax
movzx eax, byte [r14 + 8]
sete dil
add eax, 0xfffffff3
cmp eax, 5
ja case.default.0x140098a0c
cdqe
mov ecx, dword [r12 + rax*4 + 0x9a858]
add rcx, r12
jmp rcx
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
test byte [r14 + 9], 0x80
je 0x140098a2b
mov edx, 0x472
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140098a37
mov edx, 0x468
call qword [sym.imp.USER32.dll_SendMessageW]
cwde
mov rcx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, eax
call fcn.140001090
mov eax, 1
jmp 0x14009a83d
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x400
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, r14
mov rdx, rax
call fcn.14009d270
jmp 0x140098a37
test dil, dil
jne 0x140098a45
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x140098a37
mov rcx, qword [r14]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
lea r13, [0x1400e246c]
test eax, eax
jne 0x140098af2
movzx ecx, word [rsp + 0x5a]
movzx edx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5c]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
lea rdx, str._04d_02d_02d_02d_02d_02d
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400ca650
lea r14, [rbp - 0x40]
jmp 0x140098af5
mov r14, r13
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x140098b1d
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r14
mov byte [rsp + 0x20], 1
call fcn.1400b0840
mov r12d, eax
jmp 0x14009a83a
xor esi, esi
mov r9b, 1
test r14, r14
jne 0x140098b32
xor r9b, r9b
mov r15d, esi
mov r14, r13
jmp 0x140098b54
cmp qword [rbx + 8], r14
jne 0x140098b41
mov r15, qword [rbx + 0x10]
shr r15, 1
jmp 0x140098b54
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r14
repne scasw ax, word [rdi]
not rcx
lea r15, [rcx - 1]
lea rax, [r15 + 1]
lea r12, [rax + rax]
cmp dl, 2
jne 0x140098b74
mov rdx, r15
mov rcx, r14
call fcn.140006100
mov r12d, eax
jmp 0x14009a83a
mov r8, qword [0x140112480]
cmp r12, r8
jbe 0x140098ba4
cmp r12, qword [rbx + 0x18]
jbe 0x140098ba4
mov r8, r13
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x140119170]
call fcn.140040620
mov r12d, eax
jmp 0x14009a83a
cmp rax, 2
jae 0x140098bca
test r9b, r9b
mov rcx, rbx
setne sil
xor r8d, r8d
lea edx, [rsi + 3]
call fcn.1400b0ef0
mov r12d, 1
jmp 0x14009a83a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140098be7
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140112480]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r12, r9
jbe 0x140098d5d
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x140098c1e
cmp al, 2
je 0x140098c5c
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140098d51
mov edi, 0x80
cmp r12, rdi
ja 0x140098c5c
cmp r12, 8
ja 0x140098c35
mov edi, 8
jmp 0x140098c42
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r12, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a99c0
test rax, rax
je 0x14009936b
mov byte [rbx + 0x20], 1
jmp 0x140098d51
cmp r12, 0x20
jae 0x140098c6c
mov edi, SafeArrayAllocDescriptor
jmp 0x140098d18
mov edi, 0x208
cmp r12, rdi
jb 0x140098d18
cmp r12, 0x50000
jae 0x140098cd2
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x140098c99
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x140098cc8
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140098cc8
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x140098d18
cmp r12, 0x320000
jae 0x140098ce5
lea rdi, [r12 + 0x8000]
jmp 0x140098d18
cmp r12, 0xc80000
jae 0x140098d10
movabs rax, 0x47ae147ae147ae15
mov rdi, r12
mul r12
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r12
jmp 0x140098d18
lea rdi, [r12 + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x140098d38
test r9, r9
je 0x140098d38
mov rcx, qword [rbx + 8]
mov r12b, 1
call fcn.1400ca7a0
jmp 0x140098d3b
xor r12b, r12b
test rdi, rdi
js 0x140098d8d
mov rcx, rdi
call fcn.1400c9d04
test rax, rax
je 0x140098d8d
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, r14
je 0x140098d72
lea r8, [r15 + r15]
mov rdx, r14
call fcn.1400ca960
lea rcx, [r15 + r15]
mov rax, qword [rbx + 8]
mov r12d, 1
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x14009a83a
test r12b, r12b
je 0x140098da3
lea rax, [0x140119128]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x140098daa
mov rax, qword [rbx + 8]
mov word [rax], si
lea rdx, str.Out_of_memory.
lea rcx, [0x140119170]
mov r8, r13
mov qword [rbx + 0x10], rsi
call fcn.140040620
mov r12d, eax
jmp 0x14009a83a
mov rcx, qword [r14]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r14]
xor r8d, r8d
lea r9, [rsp + 0x50]
test al, 2
je 0x14009900c
mov edx, 0x1005
call qword [sym.imp.USER32.dll_SendMessageW]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5a]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rdx, str._04d_02d_02d_02d_02d_02d
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400ca650
mov edx, 0x2d
mov word [rbp - 0x30], dx
lea rcx, [rbp - 0x2e]
lea rdx, [rsp + 0x60]
call fcn.1400ac490
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x140098e77
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea r8d, [r9 + 0x11]
mov byte [rsp + 0x20], 1
call fcn.1400b0840
mov esi, eax
jmp 0x14009a83d
cmp dl, 2
jne 0x140098e91
lea rcx, [rbp - 0x40]
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElemsize
call fcn.140006100
mov esi, eax
jmp 0x14009a83d
mov rcx, qword [0x140112480]
cmp rcx, 0x24
jae 0x140098ec6
cmp qword [rbx + 0x18], 0x24
jae 0x140098ec6
lea r8, [0x1400e246c]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x140119170]
call fcn.140040620
mov esi, eax
jmp 0x14009a83d
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140098ee3
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140112480]
mov rax, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rax, 0x24
jae 0x140098fd2
movzx r8d, byte [rbx + 0x20]
movzx edx, r8b
cmp r8b, 1
jbe 0x140098fa6
cmp dl, 2
je 0x140098f20
mov rsi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140098fc6
mov edi, 0x208
cmp rcx, rdi
mov esi, edi
cmovb rsi, rcx
cmp r8b, 2
jne 0x140098f47
test rax, rax
je 0x140098f47
mov rcx, qword [rbx + 8]
mov dil, 1
call fcn.1400ca7a0
jmp 0x140098f4a
xor dil, dil
test rsi, rsi
js 0x140098f62
mov rcx, rsi
call fcn.1400c9d04
test rax, rax
je 0x140098f62
mov byte [rbx + 0x20], 2
jmp 0x140098fc6
xor esi, esi
test dil, dil
je 0x140098f7a
lea rax, [0x140119128]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x140098f81
mov rax, qword [rbx + 8]
mov word [rax], si
lea r8, [0x1400e246c]
lea rdx, str.Out_of_memory.
lea rcx, [0x140119170]
mov qword [rbx + 0x10], rsi
call fcn.140040620
mov esi, eax
jmp 0x14009a83d
mov edi, 0x80
mov ecx, edi
mov esi, edi
call fcn.1400a99c0
test rax, rax
jne 0x140098fc2
xor esi, esi
mov eax, esi
jmp 0x14009a83d
mov byte [rbx + 0x20], 1
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x140098fee
lea rdx, [rbp - 0x40]
mov r8d, SafeArrayAllocDescriptor
call fcn.1400ca960
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax + 0x22], si
mov esi, 1
mov qword [rbx + 0x10], SafeArrayAllocDescriptor
mov eax, esi
jmp 0x14009a83d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5a]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rdx, str._04d_02d_02d_02d_02d_02d
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.1400ca650
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x14009907f
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea r8d, [r9 + 8]
mov byte [rsp + 0x20], 1
call fcn.1400b0840
mov esi, eax
jmp 0x14009a83d
cmp dl, 2
jne 0x140099099
lea rcx, [rbp - 0x40]
mov edx, 8
call fcn.140006100
mov esi, eax
jmp 0x14009a83d
mov rcx, qword [0x140112480]
cmp rcx, 0x12
jae 0x1400990ce
cmp qword [rbx + 0x18], 0x12
jae 0x1400990ce
lea r8, [0x1400e246c]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x140119170]
call fcn.140040620
mov esi, eax
jmp 0x14009a83d
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x1400990eb
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140112480]
mov rax, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rax, 0x12
jae 0x1400991d8
movzx r8d, byte [rbx + 0x20]
movzx edx, r8b
cmp r8b, 1
jbe 0x1400991ae
cmp dl, 2
je 0x140099128
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x1400991cc
mov edi, SafeArrayAllocDescriptor
cmp rcx, rdi
cmovb rdi, rcx
cmp r8b, 2
jne 0x14009914d
test rax, rax
je 0x14009914d
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400ca7a0
jmp 0x140099150
xor sil, sil
test rdi, rdi
js 0x140099168
mov rcx, rdi
call fcn.1400c9d04
test rax, rax
je 0x140099168
mov byte [rbx + 0x20], 2
jmp 0x1400991cc
test sil, sil
je 0x140099180
lea rax, [0x140119128]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x140099189
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1400e246c]
lea rdx, str.Out_of_memory.
lea rcx, [0x140119170]
mov qword [rbx + 0x10], rsi
call fcn.140040620
mov esi, eax
jmp 0x14009a83d
mov edi, 0x80
mov ecx, edi
call fcn.1400a99c0
test rax, rax
jne 0x1400991c8
xor esi, esi
mov eax, esi
jmp 0x14009a83d
mov byte [rbx + 0x20], 1
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rcx, rax
je 0x1400991f7
lea rdx, [rbp - 0x40]
mov r8d, r13d
call fcn.1400ca960
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax + 0x10], si
mov esi, 1
mov qword [rbx + 0x10], r13
mov eax, esi
jmp 0x14009a83d
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.14009cfe0
movzx r11d, byte [rbx + 0x23]
test r11b, r11b
jne 0x14009925c
mov rcx, qword [rbx + 0x10]
lea rdx, [rbp - 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b0840
mov r12d, eax
jmp 0x14009a83a
lea rax, [rbp - 0x40]
cmp qword [rbx + 8], rax
jne 0x14009926f
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x140099283
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rsi, [rax + rax]
cmp r11b, 2
jne 0x1400992a6
lea rcx, [rbp - 0x40]
mov rdx, r12
call fcn.140006100
mov r12d, eax
jmp 0x14009a83a
mov rcx, qword [0x140112480]
cmp rsi, rcx
jbe 0x1400992c4
cmp rsi, qword [rbx + 0x18]
jbe 0x1400992c4
lea r8, [0x1400e246c]
jmp 0x140098b89
cmp rax, 2
jae 0x1400992e4
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400b0ef0
mov r12d, 1
jmp 0x14009a83a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140099301
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140112480]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x14009947b
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140099338
cmp al, 2
je 0x14009937c
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14009946f
mov edi, 0x80
cmp rsi, rdi
ja 0x14009937c
cmp rsi, 8
ja 0x14009934f
mov edi, 8
jmp 0x14009935c
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a99c0
test rax, rax
jne 0x140099373
xor esi, esi
mov r12d, esi
jmp 0x14009a83a
mov byte [rbx + 0x20], 1
jmp 0x14009946f
cmp rsi, 0x20
jae 0x14009938c
mov edi, SafeArrayAllocDescriptor
jmp 0x140099436
mov edi, 0x208
cmp rsi, rdi
jb 0x140099436
cmp rsi, 0x50000
jae 0x1400993f2
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x1400993b9
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor edx, edx
comisd xmm0, xmm1
jbe 0x1400993e8
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400993e8
movabs rax, 0x8000000000000000
mov rdx, rax
cvttsd2si rdi, xmm0
add rdi, rdx
jmp 0x140099436
cmp rsi, 0x320000
jae 0x140099404
lea rdi, [rsi + 0x8000]
jmp 0x140099436
cmp rsi, 0xc80000
jae 0x14009942f
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140099436
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x140099456
test r8, r8
je 0x140099456
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400ca7a0
jmp 0x140099459
xor sil, sil
test rdi, rdi
js 0x1400994a0
mov rcx, rdi
call fcn.1400c9d04
test rax, rax
je 0x1400994a0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x140099495
lea rdx, [rbp - 0x40]
lea r8, [r12 + r12]
call fcn.1400ca960
lea rcx, [r12 + r12]
xor esi, esi
jmp 0x140098d76
test sil, sil
je 0x1400994b8
lea rax, [0x140119128]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x1400994c1
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1400e246c]
lea rdx, str.Out_of_memory.
lea rcx, [0x140119170]
mov qword [rbx + 0x10], rsi
call fcn.140040620
mov r12d, eax
jmp 0x14009a83a
lea rdx, [0x1400e5df0]
mov rcx, rsi
call fcn.1400c9c7c
test eax, eax
je case.0x14009951b.12
movzx eax, byte [r14 + 8]
dec eax
cmp eax, 0x16
ja case.0x14009951b.12
cdqe
mov ecx, dword [r12 + rax*4 + 0x9a870]
add rcx, r12
jmp rcx
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, pe_nt_image_headers64
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x1400999e1
dec rax
je 0x140099782
dec rax
jne 0x14009a4f2
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140099578
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e51d8]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b0840
mov r12d, eax
jmp 0x14009a83a
lea r14, [0x1400e51d8]
cmp qword [rbx + 8], r14
jne 0x14009958e
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x140099594
mov r12d, 2
lea rdx, [r12 + 1]
lea rsi, [rdx + rdx]
cmp al, 2
jne 0x1400995b4
mov rdx, r12
mov rcx, r14
call fcn.140006100
mov r12d, eax
jmp 0x14009a83a
mov rcx, qword [0x140112480]
cmp rsi, rcx
jbe 0x1400995ca
cmp rsi, qword [rbx + 0x18]
ja 0x1400992b8
cmp rdx, 2
jb 0x1400992ca
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x1400995f1
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140112480]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x14009976d
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x140099628
cmp al, 2
je 0x140099666
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140099761
mov edi, 0x80
cmp rsi, rdi
ja 0x140099666
cmp rsi, 8
ja 0x14009963f
mov edi, 8
jmp 0x14009964c
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a99c0
test rax, rax
je 0x140099369
mov byte [rbx + 0x20], 1
jmp 0x140099761
cmp rsi, 0x20
jae 0x140099676
mov edi, SafeArrayAllocDescriptor
jmp 0x140099720
mov edi, 0x208
cmp rsi, rdi
jb 0x140099720
cmp rsi, 0x50000
jae 0x1400996dc
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x1400996a3
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor edx, edx
comisd xmm0, xmm1
jbe 0x1400996d2
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x1400996d2
movabs rax, 0x8000000000000000
mov rdx, rax
cvttsd2si rdi, xmm0
add rdi, rdx
jmp 0x140099720
cmp rsi, 0x320000
jae 0x1400996ee
lea rdi, [rsi + 0x8000]
jmp 0x140099720
cmp rsi, 0xc80000
jae 0x140099719
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140099720
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x140099740
test r8, r8
je 0x140099740
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.1400ca7a0
jmp 0x140099743
xor sil, sil
test rdi, rdi
js 0x1400994a0
mov rcx, rdi
call fcn.1400c9d04
test rax, rax
je 0x1400994a0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, r14
je 0x140099495
mov rdx, r14
jmp 0x14009948c
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x1400997ae
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e51bc]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b0840
mov r12d, eax
jmp 0x14009a83a
lea r15, [0x1400e51bc]
mov r12d, 1
cmp qword [rbx + 8], r15
jne 0x1400997ca
mov r14, qword [rbx + 0x10]
shr r14, 1
jmp 0x1400997cd
mov r14, r12
lea rcx, [r14 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
jne 0x1400997ec
mov rdx, r14
mov rcx, r15
call fcn.140006100
mov r12d, eax
jmp 0x14009a83a
mov r8, qword [0x140112480]
cmp rsi, r8
jbe 0x140099802
cmp rsi, qword [rbx + 0x18]
ja 0x1400992b8
cmp rcx, 2
jae 0x14009981c
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400b0ef0
jmp 0x14009a83a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x140099839
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140112480]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r9
jbe 0x1400999b5
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, r12b
jbe 0x14009986f
cmp al, 2
je 0x1400998ad
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x1400999a9
mov edi, 0x80
cmp rsi, rdi
ja 0x1400998ad
cmp rsi, 8
ja 0x140099886
mov edi, 8
jmp 0x140099893
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a99c0
test rax, rax
je 0x140099369
mov byte [rbx + 0x20], r12b
jmp 0x1400999a9
cmp rsi, 0x20
jae 0x1400998bd
mov edi, SafeArrayAllocDescriptor
jmp 0x140099967
mov edi, 0x208
cmp rsi, rdi
jb 0x140099967
cmp rsi, 0x50000
jae 0x140099923
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x1400998ea
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x140099919
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140099919
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x140099967
cmp rsi, 0x320000
jae 0x140099935
lea rdi, [rsi + 0x8000]
jmp 0x140099967
cmp rsi, 0xc80000
jae 0x140099960
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140099967
lea rdi, [rsi + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x140099988
test r9, r9
je 0x140099988
mov rcx, qword [rbx + 8]
movzx esi, r12b
call fcn.1400ca7a0
jmp 0x14009998b
xor sil, sil
test rdi, rdi
js 0x1400994a0
mov rcx, rdi
call fcn.1400c9d04
test rax, rax
je 0x1400994a0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 0x18], rdi
mov qword [rbx + 8], rax
mov rcx, qword [rbx + 8]
cmp rcx, r15
je 0x1400999ca
lea r8, [r14 + r14]
mov rdx, r15
call fcn.1400ca960
mov rax, qword [rbx + 8]
lea rcx, [r14 + r14]
xor esi, esi
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x14009a83a
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140099a0d
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1400e250c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b0840
mov r12d, eax
jmp 0x14009a83a
lea r15, [0x1400e250c]
mov r12d, 1
cmp qword [rbx + 8], r15
jne 0x140099a29
mov r14, qword [rbx + 0x10]
shr r14, 1
jmp 0x140099a2c
mov r14, r12
lea rcx, [r14 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
je 0x1400997d9
mov r8, qword [0x140112480]
cmp rsi, r8
jbe 0x140099a52
cmp rsi, qword [rbx + 0x18]
ja 0x1400992b8
cmp rcx, 2
jb 0x140099808
jmp 0x14009981c
test byte [r14 + 9], 2
je case.0x14009951b.12
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x140099ba6
inc eax
jmp 0x140098a3a
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x140099aee
mov rcx, qword [r14]
lea rdx, [rbp - 0x40]
mov r8d, 0x400
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je case.0x14009951b.12
mov rcx, qword [r14]
lea r9, [rbp - 0x40]
or r8, rdi
mov edx, 0x158
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je case.0x14009951b.12
test byte [r14 + 9], 2
je 0x140099afd
lea eax, [rdi + 1]
jmp 0x140098a37
mov rcx, qword [r14]
xor r9d, r9d
mov r8, rdi
mov edx, 0x149
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x140099ba6
xor r9d, r9d
mov r8, rax
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400b0840
cmp eax, 1
jne 0x14009a4f2
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
mov rcx, qword [r14]
mov r8, rdi
mov r9, rax
mov edx, 0x148
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
jne 0x140099bb0
cmp byte [rbx + 0x23], 0
jne 0x140099b73
mov rax, qword [rbx + 0x10]
jmp 0x140099b76
mov rax, rbx
cmp byte [rax + 0x23], 2
jne 0x140099b9f
cmp qword [0x140119de0], 0
je 0x140099b9f
lea rcx, [0x140119dc8]
call fcn.140006280
mov rcx, rbx
call fcn.14001c010
jmp 0x14009a83d
and byte [rax + 0x21], 0x86
mov rcx, rbx
call fcn.14001c010
jmp 0x14009a83d
mov rdx, rax
jmp 0x14009a803
mov rcx, qword [r14]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
test eax, 0x808
je 0x140099deb
mov edx, 0x190
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 1
jl 0x140099ba3
lea rcx, [rax*4]
call fcn.1400c9d04
mov r12, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x140099ba3
mov rcx, qword [r14]
mov r9, rax
mov r8, rdi
mov edx, 0x191
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
mov qword [rbp + 0x810], rax
cmp rax, 1
jge 0x140099c41
mov rcx, r12
call fcn.1400ca7a0
mov rcx, rbx
call fcn.14001c010
jmp 0x14009a83d
xor esi, esi
test byte [r14 + 9], 2
lea r15, [rax - 1]
mov r13d, esi
je 0x140099ca1
test rax, rax
jle 0x140099cda
mov rbx, rax
nop dword [rax]
mov ecx, dword [r12 + r13*4]
lea rdx, [rbp - 0x40]
mov r8d, 0xa
inc ecx
call fcn.1400c99d0
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rbp - 0x40]
inc r13
repne scasw ax, word [rdi]
not rcx
dec rcx
add r15, rcx
cmp r13, rbx
jl 0x140099c60
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rbp + 0x810]
jmp 0x140099cda
test rax, rax
jle 0x140099cda
nop word [rax + rax]
movsxd r8, dword [r12 + r13*4]
mov rcx, qword [r14]
xor r9d, r9d
mov edx, 0x18a
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
je 0x140099c2c
inc r13
add r15, rax
cmp r13, rdi
jl 0x140099cb0
xor r9d, r9d
mov r8, r15
xor edx, edx
mov rcx, rbx
mov byte [rsp + 0x20], 1
call fcn.1400b0840
cmp eax, 1
jne 0x14009a4f2
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
test byte [r14 + 9], 2
mov r13, rax
je 0x140099d77
test rdi, rdi
jle 0x140099dd9
mov r14, qword [rbp + 0x810]
mov rbx, qword [rsp + 0x40]
mov r12, qword [rbp + 0x800]
test rsi, rsi
je 0x140099d46
movzx ecx, word [r12 + 0x6e]
add r13, 2
mov word [r13 - 2], cx
mov ecx, dword [rbx + rsi*4]
mov r8d, 0xa
mov rdx, r13
inc ecx
call fcn.1400c99d0
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r13
inc rsi
repne scasw ax, word [rdi]
not rcx
lea r13, [r13 + rcx*2 - 2]
cmp rsi, r14
jl 0x140099d32
jmp 0x140099dce
lea r15, [rdi - 1]
test rdi, rdi
jle 0x140099dd9
mov rbx, qword [rsp + 0x40]
mov r12, qword [rbp + 0x800]
nop dword [rax]
test rsi, rsi
je 0x140099da4
movzx eax, word [r12 + 0x6e]
add r13, 2
mov word [r13 - 2], ax
movsxd r8, dword [rbx + rsi*4]
mov rcx, qword [r14]
mov r9, r13
mov edx, 0x189
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
jle 0x140099dc6
add r15, rax
lea r13, [r13 + rax*2]
inc rsi
cmp rsi, rdi
jl 0x140099d90
mov rbx, qword [rsp + 0x48]
mov r12d, 1
mov rcx, qword [rsp + 0x40]
call fcn.1400ca7a0
mov rdx, r15
jmp 0x14009a803
mov edx, 0x188
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x140099ba3
test byte [r14 + 9], 2
je 0x140099e11
inc eax
jmp 0x140098a37
mov rcx, qword [r14]
xor r9d, r9d
mov r8, rax
mov edx, 0x18a
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x140099ba6
xor r9d, r9d
mov r8, rax
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400b0840
cmp eax, 1
jne 0x14009a4f2
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001820
mov rcx, qword [r14]
mov r8, rdi
mov r9, rax
mov edx, 0x189
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x140099de3
cmp byte [rbx + 0x23], 0
jne 0x140099b73
mov rax, qword [rbx + 0x10]
jmp 0x140099b76
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x130b
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rcx, eax
cmp rcx, 0xffffffffffffffff
je 0x140099ba3
test byte [r14 + 9], 2
je 0x140099ec5
lea eax, [rcx + 1]
jmp 0x140098a37
mov r8, rcx
mov rcx, qword [r14]
lea rax, [rbp - 0x40]
lea r9, [rbp - 0x70]
mov r12d, 1
mov edx, 0x133c
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 0x3ff
mov dword [rbp - 0x70], r12d
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x140099ba3
movzx edx, byte [rbx + 0x23]
mov r15, qword [rbp - 0x60]
test dl, dl
jne 0x140099f27
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r15
mov byte [rsp + 0x20], r12b
call fcn.1400b0840
mov r12d, eax
jmp 0x14009a83a
xor esi, esi
movzx r8d, r12b
lea r13, [0x1400e246c]
test r15, r15
jne 0x140099f4a
xor r8b, r8b
mov edi, esi
mov qword [rbp + 0x810], rsi
mov r15, r13
jmp 0x140099f73
cmp qword [rbx + 8], r15
jne 0x140099f59
mov rdi, qword [rbx + 0x10]
shr rdi, 1
jmp 0x140099f6c
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
lea rdi, [rcx - 1]
mov qword [rbp + 0x810], rdi
lea rax, [rdi + 1]
lea r14, [rax + rax]
cmp dl, 2
jne 0x140099f93
mov rdx, rdi
mov rcx, r15
call fcn.140006100
mov r12d, eax
jmp 0x14009a83a
mov r9, qword [0x140112480]
cmp r14, r9
jbe 0x140099fc3
cmp r14, qword [rbx + 0x18]
jbe 0x140099fc3
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x140119170]
mov r8, r13
call fcn.140040620
mov r12d, eax
jmp 0x14009a83a
cmp rax, 2
jae 0x140099fe3
test r8b, r8b
mov rcx, rbx
setne sil
xor r8d, r8d
lea edx, [rsi + 3]
call fcn.1400b0ef0
jmp 0x14009a83a
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009a000
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r9, qword [0x140112480]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r14, r8
jbe 0x14009a17b
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, r12b
jbe 0x14009a036
cmp al, 2
je 0x14009a074
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14009a168
mov edi, 0x80
cmp r14, rdi
ja 0x14009a074
cmp r14, 8
ja 0x14009a04d
mov edi, 8
jmp 0x14009a05a
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r14, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a99c0
test rax, rax
je 0x14009936b
mov byte [rbx + 0x20], r12b
jmp 0x14009a168
cmp r14, 0x20
jae 0x14009a084
mov edi, SafeArrayAllocDescriptor
jmp 0x14009a12e
mov edi, 0x208
cmp r14, rdi
jb 0x14009a12e
cmp r14, 0x50000
jae 0x14009a0ea
pxor xmm0, xmm0
cvtsi2sd xmm0, r14
test r14, r14
jns 0x14009a0b1
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14009a0e0
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14009a0e0
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x14009a12e
cmp r14, 0x320000
jae 0x14009a0fc
lea rdi, [r14 + 0x8000]
jmp 0x14009a12e
cmp r14, 0xc80000
jae 0x14009a127
movabs rax, 0x47ae147ae147ae15
mov rdi, r14
mul r14
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r14
jmp 0x14009a12e
lea rdi, [r14 + 0x20000]
cmp rdi, r9
cmova rdi, r9
cmp r10b, 2
jne 0x14009a14f
test r8, r8
je 0x14009a14f
mov rcx, qword [rbx + 8]
movzx r14d, r12b
call fcn.1400ca7a0
jmp 0x14009a152
xor r14b, r14b
test rdi, rdi
js 0x14009a1a5
mov rcx, rdi
call fcn.1400c9d04
test rax, rax
je 0x14009a1a5
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 0x18], rdi
mov rdi, qword [rbp + 0x810]
mov qword [rbx + 8], rax
mov rcx, qword [rbx + 8]
cmp rcx, r15
je 0x14009a190
lea r8, [rdi + rdi]
mov rdx, r15
call fcn.1400ca960
mov rax, qword [rbx + 8]
lea rcx, [rdi + rdi]
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x14009a83a
test r14b, r14b
je 0x14009a1bb
lea rax, [0x140119128]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x14009a1c2
mov rax, qword [rbx + 8]
mov word [rax], si
lea rdx, str.Out_of_memory.
lea rcx, [0x140119170]
mov r8, r13
mov qword [rbx + 0x10], rsi
call fcn.140040620
mov r12d, eax
jmp 0x14009a83a
test dil, dil
jne 0x140098a45
mov rcx, qword [r14]
call fcn.140085280
mov rcx, rbx
test rax, rax
je 0x140099ba6
mov rdx, rax
call fcn.1400b0bc0
jmp 0x14009a83d
test dil, dil
jne 0x140098a45
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
movzx ecx, byte [rbx + 0x23]
xor esi, esi
mov dword [rsp + 0x40], eax
movsxd r15, eax
test cl, cl
jne 0x14009a24c
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
mov r8, r15
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400b0840
jmp 0x14009a4eb
mov dl, 1
mov byte [rbp + 0x810], dl
movzx edi, dl
cmp r15, 0xffffffffffffffff
jne 0x14009a265
xor dil, dil
mov r15, rsi
jmp 0x14009a26d
xor dl, dl
mov byte [rbp + 0x810], dl
lea rax, [r15 + 1]
lea r12, [rax + rax]
cmp cl, 2
jne 0x14009a2ae
test dl, dl
je 0x14009a292
lea rcx, [0x1400e246c]
mov rdx, r15
call fcn.140006100
jmp 0x14009a4eb
lea rcx, [0x140119dc8]
mov rdx, rax
call fcn.1400061c0
mov edx, esi
test rax, rax
setne dl
jmp 0x14009a4ed
mov r8, qword [0x140112480]
cmp r12, r8
jbe 0x14009a2cc
cmp r12, qword [rbx + 0x18]
jbe 0x14009a2cc
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
jmp 0x14009a4d8
cmp rax, 2
jae 0x14009a2ed
mov edx, esi
test dil, dil
mov rcx, rbx
setne dl
xor r8d, r8d
add edx, 3
call fcn.1400b0ef0
jmp 0x14009a508
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009a30a
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140112480]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r12, r9
jbe 0x14009a480
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x14009a341
cmp al, 2
je 0x14009a37f
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14009a474
mov edi, 0x80
cmp r12, rdi
ja 0x14009a37f
cmp r12, 8
ja 0x14009a358
mov edi, 8
jmp 0x14009a365
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r12, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400a99c0
test rax, rax
je 0x14009a4f2
mov byte [rbx + 0x20], 1
jmp 0x14009a474
cmp r12, 0x20
jae 0x14009a38f
mov edi, SafeArrayAllocDescriptor
jmp 0x14009a43b
mov edi, 0x208
cmp r12, rdi
jb 0x14009a43b
cmp r12, 0x50000
jae 0x14009a3f5
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x14009a3bc
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14009a3eb
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14009a3eb
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x14009a43b
cmp r12, 0x320000
jae 0x14009a408
lea rdi, [r12 + 0x8000]
jmp 0x14009a43b
cmp r12, 0xc80000
jae 0x14009a433
movabs rax, 0x47ae147ae147ae15
mov rdi, r12
mul r12
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r12
jmp 0x14009a43b
lea rdi, [r12 + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x14009a45b
test r9, r9
je 0x14009a45b
mov rcx, qword [rbx + 8]
mov r12b, 1
call fcn.1400ca7a0
jmp 0x14009a45e
xor r12b, r12b
test rdi, rdi
js 0x14009a4b0
mov rcx, rdi
call fcn.1400c9d04
test rax, rax
je 0x14009a4b0
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
cmp byte [rbp + 0x810], sil
je 0x14009a4f9
mov rcx, qword [rbx + 8]
lea r13, [0x1400e246c]
cmp rcx, r13
je 0x14009a4a5
lea r8, [r15 + r15]
mov rdx, r13
call fcn.1400ca960
mov rax, qword [rbx + 8]
mov word [rax + r15*2], si
jmp 0x14009a500
test r12b, r12b
je 0x14009a4c6
lea rax, [0x140119128]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x14009a4cd
mov rax, qword [rbx + 8]
mov word [rax], si
mov qword [rbx + 0x10], rsi
lea rdx, str.Out_of_memory.
lea r8, [0x1400e246c]
lea rcx, [0x140119170]
call fcn.140040620
mov edx, eax
cmp edx, 1
je 0x14009a508
xor eax, eax
jmp 0x14009a83d
mov rax, qword [rbx + 8]
mov word [rax], si
lea rax, [r15 + r15]
mov qword [rbx + 0x10], rax
mov edi, dword [rsp + 0x40]
mov r12d, 1
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
mov rcx, qword [r14]
lea r8d, [rdi + 1]
mov rdx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
movsxd r13, eax
cmp byte [rbx + 0x23], sil
jne 0x14009a53f
mov rdi, qword [rbx + 0x10]
jmp 0x14009a542
mov rdi, rbx
cmp byte [rdi + 0x23], r12b
jne 0x14009a55c
test byte [rdi + 0x21], 8
je 0x14009a556
mov rcx, rdi
call fcn.140001130
add rdi, 0x10
jmp 0x14009a563
lea rdi, [0x140119fa0]
lea rax, [r13 + r13]
mov qword [rdi], rax
test r13, r13
jne 0x14009a586
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
mov word [rax], si
jmp 0x14009a80b
cmp byte [r14 + 8], 0xc
jne 0x14009a80b
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
or r15d, 0xffffffff
call fcn.140001820
or rcx, 0xffffffffffffffff
mov rdx, rax
mov qword [rsp + 0x40], rax
xor eax, eax
mov rdi, rdx
mov r14, rsi
mov r13, rsi
repne scasw ax, word [rdi]
mov qword [rsp + 0x70], rsi
not rcx
dec rcx
mov rax, rcx
mov qword [rsp + 0x78], rcx
cmp word [rdx], si
je 0x14009a7e2
cmp rax, 0x1388
jb 0x14009a77a
mov dword [rbp + 0x810], esi
mov rdi, rdx
mov qword [rsp + 0x48], rdx
nop word [rax + rax]
lea rdx, [0x1400ecce8]
mov rcx, rdi
call fcn.1400cacb4
mov rcx, rax
mov qword [rbp - 0x78], rax
test rax, rax
je 0x14009a6e2
mov r10d, dword [rbp + 0x810]
mov rdi, rax
mov rax, qword [rsp + 0x48]
sub rdi, rax
inc r10d
dec r15d
sar rdi, 1
mov dword [rbp + 0x810], r10d
lea rdx, [rdi + r13]
mov qword [rbp - 0x80], rdx
inc rdx
cmp rdx, qword [rsp + 0x70]
jb 0x14009a6a3
movsxd r9, dword [rsp + 0x78]
mov rax, rcx
movsxd rcx, edx
sub rax, qword [rsp + 0x40]
mov r8d, r15d
mov edx, r10d
sar rax, 1
cdqe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
or rcx, 0xffffffffffffffff
call fcn.1400ad4a0
mov rcx, r14
lea rdx, [rax + rax]
mov qword [rsp + 0x70], rax
call fcn.1400cb204
test rax, rax
je 0x14009a729
mov r14, rax
mov rax, qword [rsp + 0x48]
test rdi, rdi
je 0x14009a6bc
lea r8, [rdi + rdi]
lea rcx, [r14 + r13*2]
mov rdx, rax
call fcn.1400ca960
mov r13, qword [rbp - 0x80]
movzx eax, word [0x1400ed894]
mov rdi, qword [rbp - 0x78]
inc r13
add rdi, 4
mov word [r14 + r13*2 - 2], ax
mov qword [rsp + 0x48], rdi
test r15d, r15d
jne 0x14009a600
mov eax, dword [rbp + 0x810]
test eax, eax
je 0x14009a7e2
mov r15, qword [rsp + 0x78]
mov rax, rdi
sub rax, qword [rsp + 0x40]
sar rax, 1
sub r15, rax
je 0x14009a759
lea rax, [r15 + r13]
mov qword [rbp + 0x810], rax
cmp rax, qword [rsp + 0x70]
jb 0x14009a742
lea rdx, [rax + rax + 2]
mov rcx, r14
call fcn.1400cb204
test rax, rax
jne 0x14009a73f
test r14, r14
je 0x14009a7e2
mov rcx, r14
call fcn.1400ca7a0
jmp 0x14009a7e2
mov r14, rax
lea r8, [r15 + r15]
lea rcx, [r14 + r13*2]
mov rdx, rdi
call fcn.1400ca960
mov r13, qword [rbp + 0x810]
mov rcx, qword [rsp + 0x40]
lea r8, [r13 + r13 + 2]
mov rdx, r14
mov word [r14 + r13*2], si
call fcn.1400ca960
mov rcx, r14
call fcn.1400ca7a0
jmp 0x14009a7e2
mov r13, qword [rsp + 0x78]
mov rsi, rdx
mov rbx, rdx
nop word [rax + rax]
lea rdx, [0x1400ecce8]
mov rcx, rsi
call fcn.1400cacb4
mov rdi, rax
test rax, rax
je 0x14009a7dd
mov rcx, rax
lea rsi, [rax + 2]
mov r8, r13
sub rcx, rbx
lea rdx, [rax + 4]
sar rcx, 1
sub r8, rcx
mov rcx, rsi
lea r8, [r8 + r8 - 2]
call fcn.1400ca960
movzx eax, word [0x1400ed894]
dec r13
dec r15d
mov word [rdi], ax
jne 0x14009a790
mov rbx, qword [rsp + 0x48]
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001820
or rcx, 0xffffffffffffffff
mov rdi, rax
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea rdx, [rcx - 1]
mov rcx, rbx
call fcn.14001c4b0
cmp byte [rbx + 0x23], 0
jne 0x14009a815
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x23], 2
jne 0x14009a836
cmp qword [0x140119de0], 0
je 0x14009a836
lea rcx, [0x140119dc8]
call fcn.140006280
mov r12d, eax
jmp 0x14009a83a
and byte [rbx + 0x21], 0x86
mov eax, r12d
mov rbx, qword [rsp + 0x908]
add rsp, 0x8c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret