Function at 0x14008f4d0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x7c0]
sub rsp, 0x8c0
mov rbx, rdx
mov qword [rsp + 0x48], rdx
lea rdx, str.Submit
mov rcx, r9
mov rsi, r9
mov r14, r8
call fcn.140108424
lea r12, sym.MZ_b_4ix__UH3tlIju_n3bu_bRSDz8e8_6O__LTLn_u_28Wnitpw
test eax, eax
movzx eax, byte [r14 + 8]
sete dil
add eax, 0xfffffff3
cmp eax, 5
ja case.default.0x14008f536
cdqe
mov ecx, dword [r12 + rax*4 + 0x90f08]
add rcx, r12
jmp rcx
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
test byte [r14 + 9], 0x80
je 0x14008f555
mov edx, 0x472
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14008f561
mov edx, 0x468
call qword [sym.imp.USER32.dll_SendMessageW]
cwde
movsxd rdx, eax
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, rbx
call fcn.140001370
mov eax, 1
jmp 0x140090ef5
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x400
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, r14
mov rdx, rax
call fcn.140093910
jmp 0x14008f561
test dil, dil
jne 0x14008f56f
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x408
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14008f561
mov rcx, qword [r14]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x14008f615
movzx ecx, word [rsp + 0x5a]
movzx edx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5c]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
lea rdx, str._04d_02d_02d_02d_02d_02d
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.140108924
lea rcx, [rbp - 0x40]
jmp 0x14008f61c
lea rcx, [0x1401295d4]
mov rdx, rcx
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rcx, rbx
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
jmp 0x140090ef5
mov rcx, qword [r14]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r14]
xor r8d, r8d
lea r9, [rsp + 0x50]
test al, 2
je 0x14008f87e
mov edx, 0x1005
call qword [sym.imp.USER32.dll_SendMessageW]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5a]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rdx, str._04d_02d_02d_02d_02d_02d
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.140108924
mov edx, 0x2d
mov word [rbp - 0x30], dx
lea rcx, [rbp - 0x2e]
lea rdx, [rsp + 0x60]
call fcn.1400e5dd0
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x14008f6e3
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea r8d, [r9 + 0x11]
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
mov esi, eax
jmp 0x140090ef5
cmp dl, 2
jne 0x14008f6fd
lea rcx, [rbp - 0x40]
mov edx, reloc.OLEAUT32.dll_SafeArrayGetElemsize
call fcn.140005910
mov esi, eax
jmp 0x140090ef5
mov rcx, qword [0x140169b08]
cmp rcx, 0x24
jae 0x14008f73a
cmp qword [rbx + 0x18], 0x24
jae 0x14008f73a
lea rcx, [0x14014bd60]
call fcn.1400dd2e0
lea r8, [0x1401295d4]
lea rcx, [0x1401712e0]
mov rdx, rax
call fcn.1400a5580
mov esi, eax
jmp 0x140090ef5
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14008f757
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140169b08]
mov rax, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rax, 0x24
jae 0x14008f844
movzx r8d, byte [rbx + 0x20]
movzx edx, r8b
cmp r8b, 1
jbe 0x14008f81a
cmp dl, 2
je 0x14008f794
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14008f838
mov edi, 0x208
cmp rcx, rdi
cmovb rdi, rcx
cmp r8b, 2
jne 0x14008f7b9
test rax, rax
je 0x14008f7b9
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.140108f48
jmp 0x14008f7bc
xor sil, sil
test rdi, rdi
js 0x14008f7d4
mov rcx, rdi
call fcn.1401084ac
test rax, rax
je 0x14008f7d4
mov byte [rbx + 0x20], 2
jmp 0x14008f838
test sil, sil
je 0x14008f7ec
lea rax, [0x140171290]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x14008f7f5
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1401295d4]
lea rdx, str.Out_of_memory.
lea rcx, [0x1401712e0]
mov qword [rbx + 0x10], rsi
call fcn.1400a5580
mov esi, eax
jmp 0x140090ef5
mov edi, pe_nt_image_headers64
mov ecx, edi
call fcn.1400dc2b0
test rax, rax
jne 0x14008f834
xor esi, esi
mov eax, esi
jmp 0x140090ef5
mov byte [rbx + 0x20], 1
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x14008f860
lea rdx, [rbp - 0x40]
mov r8d, SafeArrayAllocDescriptor
call fcn.140109100
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax + 0x22], si
mov esi, 1
mov qword [rbx + 0x10], SafeArrayAllocDescriptor
mov eax, esi
jmp 0x140090ef5
mov edx, 0x1001
call qword [sym.imp.USER32.dll_SendMessageW]
movzx edx, word [rsp + 0x5c]
movzx ecx, word [rsp + 0x58]
movzx eax, word [rsp + 0x5a]
movzx edi, word [rsp + 0x56]
movzx r9d, word [rsp + 0x52]
movzx r8d, word [rsp + 0x50]
mov dword [rsp + 0x38], edx
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rdx, str._04d_02d_02d_02d_02d_02d
lea rcx, [rbp - 0x40]
mov dword [rsp + 0x20], edi
call fcn.140108924
movzx edx, byte [rbx + 0x23]
test dl, dl
jne 0x14008f8f1
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
lea rdx, [rbp - 0x40]
lea r8d, [r9 + 8]
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
mov esi, eax
jmp 0x140090ef5
cmp dl, 2
jne 0x14008f90b
lea rcx, [rbp - 0x40]
mov edx, 8
call fcn.140005910
mov esi, eax
jmp 0x140090ef5
mov rcx, qword [0x140169b08]
cmp rcx, 0x12
jae 0x14008f948
cmp qword [rbx + 0x18], 0x12
jae 0x14008f948
lea rcx, [0x14014bd60]
call fcn.1400dd2e0
lea r8, [0x1401295d4]
lea rcx, [0x1401712e0]
mov rdx, rax
call fcn.1400a5580
mov esi, eax
jmp 0x140090ef5
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14008f965
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140169b08]
mov rax, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rax, 0x12
jae 0x14008fa52
movzx r8d, byte [rbx + 0x20]
movzx edx, r8b
cmp r8b, 1
jbe 0x14008fa28
cmp dl, 2
je 0x14008f9a2
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14008fa46
mov edi, SafeArrayAllocDescriptor
cmp rcx, rdi
cmovb rdi, rcx
cmp r8b, 2
jne 0x14008f9c7
test rax, rax
je 0x14008f9c7
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.140108f48
jmp 0x14008f9ca
xor sil, sil
test rdi, rdi
js 0x14008f9e2
mov rcx, rdi
call fcn.1401084ac
test rax, rax
je 0x14008f9e2
mov byte [rbx + 0x20], 2
jmp 0x14008fa46
test sil, sil
je 0x14008f9fa
lea rax, [0x140171290]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x14008fa03
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1401295d4]
lea rdx, str.Out_of_memory.
lea rcx, [0x1401712e0]
mov qword [rbx + 0x10], rsi
call fcn.1400a5580
mov esi, eax
jmp 0x140090ef5
mov edi, pe_nt_image_headers64
mov ecx, edi
call fcn.1400dc2b0
test rax, rax
jne 0x14008fa42
xor esi, esi
mov eax, esi
jmp 0x140090ef5
mov byte [rbx + 0x20], 1
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rcx, rax
je 0x14008fa71
lea rdx, [rbp - 0x40]
mov r8d, r13d
call fcn.140109100
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax + 0x10], si
mov esi, 1
mov qword [rbx + 0x10], r13
mov eax, esi
jmp 0x140090ef5
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.140093680
movzx r11d, byte [rbx + 0x23]
test r11b, r11b
jne 0x14008fad6
mov rcx, qword [rbx + 0x10]
lea rdx, [rbp - 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
mov r12d, eax
jmp 0x140090ef5
lea rax, [rbp - 0x40]
cmp qword [rbx + 8], rax
jne 0x14008fae9
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x14008fafd
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rsi, [rax + rax]
cmp r11b, 2
jne 0x14008fb20
lea rcx, [rbp - 0x40]
mov rdx, r12
call fcn.140005910
mov r12d, eax
jmp 0x140090ef5
mov rcx, qword [0x140169b08]
cmp rsi, rcx
jbe 0x14008fb5c
cmp rsi, qword [rbx + 0x18]
jbe 0x14008fb5c
lea rcx, [0x14014bd60]
call fcn.1400dd2e0
lea r8, [0x1401295d4]
lea rcx, [0x1401712e0]
mov rdx, rax
call fcn.1400a5580
mov r12d, eax
jmp 0x140090ef5
cmp rax, 2
jae 0x14008fb7f
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400ea290
mov r12d, 1
mov eax, r12d
jmp 0x140090ef5
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14008fb9c
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140169b08]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x14008fd18
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14008fbd3
cmp al, 2
je 0x14008fc19
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x14008fd0c
mov edi, pe_nt_image_headers64
cmp rsi, rdi
ja 0x14008fc19
cmp rsi, 8
ja 0x14008fbea
mov edi, 8
jmp 0x14008fbf7
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400dc2b0
test rax, rax
jne 0x14008fc10
xor esi, esi
mov r12d, esi
mov eax, esi
jmp 0x140090ef5
mov byte [rbx + 0x20], 1
jmp 0x14008fd0c
cmp rsi, 0x20
jae 0x14008fc29
mov edi, SafeArrayAllocDescriptor
jmp 0x14008fcd3
mov edi, 0x208
cmp rsi, rdi
jb 0x14008fcd3
cmp rsi, 0x50000
jae 0x14008fc8f
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14008fc56
addsd xmm0, qword [0x140152fd8]
mulsd xmm0, qword [0x140153040]
movsd xmm1, qword [0x140153038]
xor edx, edx
comisd xmm0, xmm1
jbe 0x14008fc85
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14008fc85
movabs rax, 0x8000000000000000
mov rdx, rax
cvttsd2si rdi, xmm0
add rdi, rdx
jmp 0x14008fcd3
cmp rsi, 0x320000
jae 0x14008fca1
lea rdi, [rsi + 0x8000]
jmp 0x14008fcd3
cmp rsi, 0xc80000
jae 0x14008fccc
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x14008fcd3
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x14008fcf3
test r8, r8
je 0x14008fcf3
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.140108f48
jmp 0x14008fcf6
xor sil, sil
test rdi, rdi
js 0x14008fd52
mov rcx, rdi
call fcn.1401084ac
test rax, rax
je 0x14008fd52
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x14008fd32
lea r8, [r12 + r12]
lea rdx, [rbp - 0x40]
call fcn.140109100
mov rax, qword [rbx + 8]
lea rcx, [r12 + r12]
xor esi, esi
mov word [rcx + rax], si
mov r12d, 1
mov qword [rbx + 0x10], rcx
mov eax, r12d
jmp 0x140090ef5
test sil, sil
je 0x14008fd6a
lea rax, [0x140171290]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x14008fd73
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1401295d4]
lea rdx, str.Out_of_memory.
lea rcx, [0x1401712e0]
mov qword [rbx + 0x10], rsi
call fcn.1400a5580
mov r12d, eax
jmp 0x140090ef5
lea rdx, str.Text
mov rcx, rsi
mov qword [rsp + 0x908], r15
call fcn.140108424
test eax, eax
je case.0x14008fdd5.12
movzx eax, byte [r14 + 8]
dec eax
cmp eax, 0x16
ja case.0x14008fdd5.12
cdqe
mov ecx, dword [r12 + rax*4 + 0x90f20]
add rcx, r12
jmp rcx
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf0
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x140090337
dec rax
je 0x1400900d8
dec rax
jne 0x140090bad
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x14008fe32
mov rcx, qword [rbx + 0x10]
lea rdx, [0x14012e7e8]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
mov r12d, eax
jmp 0x140090eea
lea r14, [0x14012e7e8]
cmp qword [rbx + 8], r14
jne 0x14008fe48
mov r12, qword [rbx + 0x10]
shr r12, 1
jmp 0x14008fe4e
mov r12d, 2
lea rdx, [r12 + 1]
lea rsi, [rdx + rdx]
cmp al, 2
jne 0x14008fe6e
mov rdx, r12
mov rcx, r14
call fcn.140005910
mov r12d, eax
jmp 0x140090eea
mov rcx, qword [0x140169b08]
cmp rsi, rcx
jbe 0x14008feaa
cmp rsi, qword [rbx + 0x18]
jbe 0x14008feaa
lea rcx, [0x14014bd60]
call fcn.1400dd2e0
lea r8, [0x1401295d4]
lea rcx, [0x1401712e0]
mov rdx, rax
call fcn.1400a5580
mov r12d, eax
jmp 0x140090eea
cmp rdx, 2
jae 0x14008feca
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400ea290
mov r12d, 1
jmp 0x140090eea
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14008fee7
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140169b08]
mov r8, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r8
jbe 0x140090061
movzx r9d, byte [rbx + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14008ff1e
cmp al, 2
je 0x14008ff62
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140090055
mov edi, pe_nt_image_headers64
cmp rsi, rdi
ja 0x14008ff62
cmp rsi, 8
ja 0x14008ff35
mov edi, 8
jmp 0x14008ff42
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400dc2b0
test rax, rax
jne 0x14008ff59
xor esi, esi
mov r12d, esi
jmp 0x140090eea
mov byte [rbx + 0x20], 1
jmp 0x140090055
cmp rsi, 0x20
jae 0x14008ff72
mov edi, SafeArrayAllocDescriptor
jmp 0x14009001c
mov edi, 0x208
cmp rsi, rdi
jb 0x14009001c
cmp rsi, 0x50000
jae 0x14008ffd8
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14008ff9f
addsd xmm0, qword [0x140152fd8]
mulsd xmm0, qword [0x140153040]
movsd xmm1, qword [0x140153038]
xor edx, edx
comisd xmm0, xmm1
jbe 0x14008ffce
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14008ffce
movabs rax, 0x8000000000000000
mov rdx, rax
cvttsd2si rdi, xmm0
add rdi, rdx
jmp 0x14009001c
cmp rsi, 0x320000
jae 0x14008ffea
lea rdi, [rsi + 0x8000]
jmp 0x14009001c
cmp rsi, 0xc80000
jae 0x140090015
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x14009001c
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r9b, 2
jne 0x14009003c
test r8, r8
je 0x14009003c
mov rcx, qword [rbx + 8]
mov sil, 1
call fcn.140108f48
jmp 0x14009003f
xor sil, sil
test rdi, rdi
js 0x140090091
mov rcx, rdi
call fcn.1401084ac
test rax, rax
je 0x140090091
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rcx, qword [rbx + 8]
cmp rcx, r14
je 0x140090076
lea r8, [r12 + r12]
mov rdx, r14
call fcn.140109100
mov rax, qword [rbx + 8]
lea rcx, [r12 + r12]
xor esi, esi
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
lea r12d, [rsi + 1]
jmp 0x140090eea
test sil, sil
je 0x1400900a9
lea rax, [0x140171290]
xor esi, esi
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rsi
jmp 0x1400900b2
mov rax, qword [rbx + 8]
xor esi, esi
mov word [rax], si
lea r8, [0x1401295d4]
lea rdx, str.Out_of_memory.
lea rcx, [0x1401712e0]
mov qword [rbx + 0x10], rsi
call fcn.1400a5580
mov r12d, eax
jmp 0x140090eea
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140090104
mov rcx, qword [rbx + 0x10]
lea rdx, [0x14012e7cc]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
mov r12d, eax
jmp 0x140090eea
lea r15, [0x14012e7cc]
mov r12d, 1
cmp qword [rbx + 8], r15
jne 0x140090120
mov r14, qword [rbx + 0x10]
shr r14, 1
jmp 0x140090123
mov r14, r12
lea rcx, [r14 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
jne 0x140090142
mov rdx, r14
mov rcx, r15
call fcn.140005910
mov r12d, eax
jmp 0x140090eea
mov r8, qword [0x140169b08]
cmp rsi, r8
jbe 0x140090158
cmp rsi, qword [rbx + 0x18]
ja 0x14008fe80
cmp rcx, 2
jae 0x140090172
xor r8d, r8d
mov rcx, rbx
lea edx, [r8 + 4]
call fcn.1400ea290
jmp 0x140090eea
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x14009018f
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140169b08]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp rsi, r9
jbe 0x14009030b
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, r12b
jbe 0x1400901c5
cmp al, 2
je 0x140090203
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x1400902ff
mov edi, pe_nt_image_headers64
cmp rsi, rdi
ja 0x140090203
cmp rsi, 8
ja 0x1400901dc
mov edi, 8
jmp 0x1400901e9
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, r13
cmovbe rdi, r13
mov rcx, rdi
call fcn.1400dc2b0
test rax, rax
je 0x14008ff4f
mov byte [rbx + 0x20], r12b
jmp 0x1400902ff
cmp rsi, 0x20
jae 0x140090213
mov edi, SafeArrayAllocDescriptor
jmp 0x1400902bd
mov edi, 0x208
cmp rsi, rdi
jb 0x1400902bd
cmp rsi, 0x50000
jae 0x140090279
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140090240
addsd xmm0, qword [0x140152fd8]
mulsd xmm0, qword [0x140153040]
movsd xmm1, qword [0x140153038]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x14009026f
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14009026f
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x1400902bd
cmp rsi, 0x320000
jae 0x14009028b
lea rdi, [rsi + 0x8000]
jmp 0x1400902bd
cmp rsi, 0xc80000
jae 0x1400902b6
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x1400902bd
lea rdi, [rsi + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x1400902de
test r9, r9
je 0x1400902de
mov rcx, qword [rbx + 8]
movzx esi, r12b
call fcn.140108f48
jmp 0x1400902e1
xor sil, sil
test rdi, rdi
js 0x140090091
mov rcx, rdi
call fcn.1401084ac
test rax, rax
je 0x140090091
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 0x18], rdi
mov qword [rbx + 8], rax
mov rcx, qword [rbx + 8]
cmp rcx, r15
je 0x140090320
lea r8, [r14 + r14]
mov rdx, r15
call fcn.140109100
mov rax, qword [rbx + 8]
lea rcx, [r14 + r14]
xor esi, esi
mov word [rcx + rax], si
mov qword [rbx + 0x10], rcx
jmp 0x140090eea
movzx eax, byte [rbx + 0x23]
test al, al
jne 0x140090363
mov rcx, qword [rbx + 0x10]
lea rdx, [0x1401296b4]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
mov r12d, eax
jmp 0x140090eea
lea r15, [0x1401296b4]
mov r12d, 1
cmp qword [rbx + 8], r15
jne 0x14009037f
mov r14, qword [rbx + 0x10]
shr r14, 1
jmp 0x140090382
mov r14, r12
lea rcx, [r14 + 1]
lea rsi, [rcx + rcx]
cmp al, 2
je 0x14009012f
mov r8, qword [0x140169b08]
cmp rsi, r8
jbe 0x1400903a8
cmp rsi, qword [rbx + 0x18]
ja 0x14008fe80
cmp rcx, 2
jb 0x14009015e
jmp 0x140090172
test byte [r14 + 9], 2
je case.0x14008fdd5.12
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x1400907f7
inc eax
jmp 0x14009082b
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x140090444
mov rcx, qword [r14]
lea rdx, [rbp - 0x40]
mov r8d, 0x400
call qword [sym.imp.USER32.dll_GetWindowTextW]
test eax, eax
je case.0x14008fdd5.12
mov rcx, qword [r14]
lea r9, [rbp - 0x40]
or r8, rdi
mov edx, 0x158
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je case.0x14008fdd5.12
test byte [r14 + 9], 2
je 0x140090453
lea eax, [rdi + 1]
jmp 0x140090828
mov rcx, qword [r14]
xor r9d, r9d
mov r8, rdi
mov edx, 0x149
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x1400907f7
xor r9d, r9d
mov r8, rax
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
cmp eax, 1
jne 0x140090bad
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001550
mov rcx, qword [r14]
mov r8, rdi
mov r9, rax
mov edx, 0x148
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
jne 0x1400904d0
cmp byte [rbx + 0x23], 0
jne 0x1400907c4
mov rax, qword [rbx + 0x10]
jmp 0x1400907c7
mov rdx, rax
jmp 0x140090eb3
mov rcx, qword [r14]
mov edx, 0xfffffff0
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
test eax, 0x808
je 0x140090721
mov edx, 0x190
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 1
jl 0x1400907f4
lea rcx, [rax*4]
call fcn.1401084ac
mov r12, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400907f4
mov rcx, qword [r14]
mov r9, rax
mov r8, rdi
mov edx, 0x191
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
mov qword [rbp + 0x810], rax
cmp rax, 1
jl 0x14009069c
xor esi, esi
test byte [r14 + 9], 2
lea r15, [rax - 1]
mov r13d, esi
je 0x140090668
test rax, rax
jle 0x1400905bf
mov rbx, rax
nop word [rax + rax]
mov ecx, dword [r12 + r13*4]
lea rdx, [rbp - 0x40]
mov r8d, 0xa
inc ecx
call fcn.140108150
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rbp - 0x40]
inc r13
repne scasw ax, word [rdi]
not rcx
dec rcx
add r15, rcx
cmp r13, rbx
jl 0x140090580
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rbp + 0x810]
xor r9d, r9d
mov r8, r15
xor edx, edx
mov rcx, rbx
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
cmp eax, 1
jne 0x140090bad
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001550
test byte [r14 + 9], 2
mov r13, rax
je 0x1400906b1
test rdi, rdi
jle 0x14009070f
mov r14, qword [rbp + 0x810]
mov rbx, qword [rsp + 0x40]
mov r12, qword [rbp + 0x800]
nop dword [rax + rax]
test rsi, rsi
je 0x140090634
movzx ecx, word [r12 + 0x6e]
add r13, 2
mov word [r13 - 2], cx
mov ecx, dword [rbx + rsi*4]
mov r8d, 0xa
mov rdx, r13
inc ecx
call fcn.140108150
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r13
inc rsi
repne scasw ax, word [rdi]
not rcx
lea r13, [r13 + rcx*2 - 2]
cmp rsi, r14
jl 0x140090620
jmp 0x140090704
test rax, rax
jle 0x1400905bf
movsxd r8, dword [r12 + r13*4]
mov rcx, qword [r14]
xor r9d, r9d
mov edx, 0x18a
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
je 0x14009069c
inc r13
add r15, rax
cmp r13, rdi
jl 0x140090671
jmp 0x1400905bf
mov rcx, r12
call fcn.140108f48
mov rcx, rbx
call fcn.140023100
jmp 0x140090eed
lea r15, [rdi - 1]
test rdi, rdi
jle 0x14009070f
mov rbx, qword [rsp + 0x40]
mov r12, qword [rbp + 0x800]
test rsi, rsi
je 0x1400906da
movzx eax, word [r12 + 0x6e]
add r13, 2
mov word [r13 - 2], ax
movsxd r8, dword [rbx + rsi*4]
mov rcx, qword [r14]
mov r9, r13
mov edx, 0x189
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
jle 0x1400906fc
add r15, rax
lea r13, [r13 + rax*2]
inc rsi
cmp rsi, rdi
jl 0x1400906c6
mov rbx, qword [rsp + 0x48]
mov r12d, 1
mov rcx, qword [rsp + 0x40]
call fcn.140108f48
mov rdx, r15
jmp 0x140090eb3
mov edx, 0x188
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400907f4
test byte [r14 + 9], 2
je 0x140090747
inc eax
jmp 0x140090828
mov rcx, qword [r14]
xor r9d, r9d
mov r8, rax
mov edx, 0x18a
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
cmp rax, 0xffffffffffffffff
je 0x1400907f7
xor r9d, r9d
mov r8, rax
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
cmp eax, 1
jne 0x140090bad
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001550
mov rcx, qword [r14]
mov r8, rdi
mov r9, rax
mov edx, 0x189
call qword [sym.imp.USER32.dll_SendMessageW]
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x140090719
cmp byte [rbx + 0x23], 0
jne 0x1400907c4
mov rax, qword [rbx + 0x10]
jmp 0x1400907c7
mov rax, rbx
cmp byte [rax + 0x23], 2
jne 0x1400907f0
cmp qword [0x140171f48], 0
je 0x1400907f0
lea rcx, [0x140171f30]
call fcn.140005a80
mov rcx, rbx
call fcn.140023100
jmp 0x140090eed
and byte [rax + 0x21], 0x86
mov rcx, rbx
call fcn.140023100
jmp 0x140090eed
mov rcx, qword [r14]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x130b
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd rcx, eax
cmp rcx, 0xffffffffffffffff
je 0x1400907f4
test byte [r14 + 9], 2
je 0x140090840
lea eax, [rcx + 1]
mov rcx, rbx
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, eax
call fcn.140001370
mov eax, 1
jmp 0x140090eed
mov r8, rcx
mov rcx, qword [r14]
lea rax, [rbp - 0x40]
lea r9, [rbp - 0x70]
mov r12d, 1
mov edx, 0x133c
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 0x3ff
mov dword [rbp - 0x70], r12d
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
test eax, eax
je 0x1400907f7
mov rdx, qword [rbp - 0x60]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], r12b
call fcn.1400e9bc0
jmp 0x140090eed
test dil, dil
jne 0x140090836
mov rcx, qword [r14]
call fcn.14007cbc0
mov rcx, rbx
test rax, rax
je 0x1400907f7
mov rdx, rax
call fcn.1400e9f40
jmp 0x140090eed
test dil, dil
jne 0x140090836
mov rcx, qword [r14]
call qword [sym.imp.USER32.dll_GetWindowTextLengthW]
movzx ecx, byte [rbx + 0x23]
xor esi, esi
movsxd r13, eax
mov dword [rsp + 0x40], r13d
mov r15, r13
test cl, cl
jne 0x1400908f7
mov rcx, qword [rbx + 0x10]
xor r9d, r9d
mov r8, r13
xor edx, edx
mov byte [rsp + 0x20], 1
call fcn.1400e9bc0
jmp 0x140090ba6
mov dl, 1
mov byte [rbp + 0x810], dl
movzx edi, dl
cmp r13, 0xffffffffffffffff
jne 0x140090910
xor dil, dil
mov r15, rsi
jmp 0x140090918
xor dl, dl
mov byte [rbp + 0x810], dl
lea rax, [r15 + 1]
lea r12, [rax + rax]
cmp cl, 2
jne 0x140090959
test dl, dl
je 0x14009093d
lea rcx, [0x1401295d4]
mov rdx, r15
call fcn.140005910
jmp 0x140090ba6
lea rcx, [0x140171f30]
mov rdx, rax
call fcn.1400059d0
mov edx, esi
test rax, rax
setne dl
jmp 0x140090ba8
mov r8, qword [0x140169b08]
cmp r12, r8
jbe 0x14009097f
cmp r12, qword [rbx + 0x18]
jbe 0x14009097f
lea rcx, [0x14014bd60]
call fcn.1400dd2e0
mov rdx, rax
jmp 0x140090b93
cmp rax, 2
jae 0x1400909a0
mov edx, esi
test dil, dil
mov rcx, rbx
setne dl
xor r8d, r8d
add edx, 3
call fcn.1400ea290
jmp 0x140090bbf
movzx eax, byte [rbx + 0x21]
test al, 2
je 0x1400909bd
mov rcx, qword [rbx]
and al, 0x3d
mov byte [rbx + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r8, qword [0x140169b08]
mov r9, qword [rbx + 0x18]
and byte [rbx + 0x21], 0x82
cmp r12, r9
jbe 0x140090b38
movzx r10d, byte [rbx + 0x20]
movzx eax, r10b
cmp r10b, 1
jbe 0x1400909f4
cmp al, 2
je 0x140090a37
mov rdi, qword [rbp + 0x810]
mov rax, qword [rbp + 0x810]
jmp 0x140090b2c
mov edi, pe_nt_image_headers64
cmp r12, rdi
ja 0x140090a37
cmp r12, 8
ja 0x140090a0b
mov edi, 8
jmp 0x140090a1d
mov r13d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp r12, r13
cmovbe rdi, r13
mov r13d, dword [rsp + 0x40]
mov rcx, rdi
call fcn.1400dc2b0
test rax, rax
je 0x140090bad
mov byte [rbx + 0x20], 1
jmp 0x140090b2c
cmp r12, 0x20
jae 0x140090a47
mov edi, SafeArrayAllocDescriptor
jmp 0x140090af3
mov edi, 0x208
cmp r12, rdi
jb 0x140090af3
cmp r12, 0x50000
jae 0x140090aad
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x140090a74
addsd xmm0, qword [0x140152fd8]
mulsd xmm0, qword [0x140153040]
movsd xmm1, qword [0x140153038]
xor ecx, ecx
comisd xmm0, xmm1
jbe 0x140090aa3
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140090aa3
movabs rax, 0x8000000000000000
mov rcx, rax
cvttsd2si rdi, xmm0
add rdi, rcx
jmp 0x140090af3
cmp r12, 0x320000
jae 0x140090ac0
lea rdi, [r12 + 0x8000]
jmp 0x140090af3
cmp r12, 0xc80000
jae 0x140090aeb
movabs rax, 0x47ae147ae147ae15
mov rdi, r12
mul r12
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, r12
jmp 0x140090af3
lea rdi, [r12 + 0x20000]
cmp rdi, r8
cmova rdi, r8
cmp r10b, 2
jne 0x140090b13
test r9, r9
je 0x140090b13
mov rcx, qword [rbx + 8]
mov r12b, 1
call fcn.140108f48
jmp 0x140090b16
xor r12b, r12b
test rdi, rdi
js 0x140090b6b
mov rcx, rdi
call fcn.1401084ac
test rax, rax
je 0x140090b6b
mov byte [rbx + 0x20], 2
and byte [rbx + 0x21], 0x7f
mov qword [rbx + 8], rax
mov qword [rbx + 0x18], rdi
mov rax, qword [rbx + 8]
cmp byte [rbp + 0x810], sil
je 0x140090bb4
lea rcx, [0x1401295d4]
cmp rax, rcx
je 0x140090b60
mov rdx, rcx
lea r8, [r15 + r15]
mov rcx, rax
call fcn.140109100
mov rax, qword [rbx + 8]
mov word [rax + r15*2], si
jmp 0x140090bb7
test r12b, r12b
je 0x140090b81
lea rax, [0x140171290]
mov qword [rbx + 0x18], rsi
mov qword [rbx + 8], rax
jmp 0x140090b88
mov rax, qword [rbx + 8]
mov word [rax], si
mov qword [rbx + 0x10], rsi
lea rdx, str.Out_of_memory.
lea r8, [0x1401295d4]
lea rcx, [0x1401712e0]
call fcn.1400a5580
mov edx, eax
cmp edx, 1
je 0x140090bbf
xor eax, eax
jmp 0x140090eed
mov word [rax], si
lea rax, [r15 + r15]
mov qword [rbx + 0x10], rax
mov r12d, 1
xor r8d, r8d
mov rcx, rbx
mov edx, r12d
call fcn.140001550
mov rcx, qword [r14]
lea r8d, [r13 + 1]
mov rdx, rax
call qword [sym.imp.USER32.dll_GetWindowTextW]
movsxd r13, eax
cmp byte [rbx + 0x23], sil
jne 0x140090bf2
mov rdi, qword [rbx + 0x10]
jmp 0x140090bf5
mov rdi, rbx
cmp byte [rdi + 0x23], r12b
jne 0x140090c0f
test byte [rdi + 0x21], 8
je 0x140090c09
mov rcx, rdi
call fcn.140001410
add rdi, 0x10
jmp 0x140090c16
lea rdi, [0x140174f58]
lea rax, [r13 + r13]
mov qword [rdi], rax
test r13, r13
jne 0x140090c39
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001550
mov word [rax], si
jmp 0x140090ebb
cmp byte [r14 + 8], 0xc
jne 0x140090ebb
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
or r15d, 0xffffffff
call fcn.140001550
or rcx, 0xffffffffffffffff
mov rdx, rax
mov qword [rsp + 0x40], rax
xor eax, eax
mov rdi, rdx
mov r14, rsi
mov r13, rsi
repne scasw ax, word [rdi]
mov qword [rsp + 0x70], rsi
not rcx
dec rcx
mov rax, rcx
mov qword [rsp + 0x78], rcx
cmp word [rdx], si
je 0x140090e92
cmp rax, 0x1388
jb 0x140090e2c
mov dword [rbp + 0x810], esi
mov rdi, rdx
mov qword [rsp + 0x48], rdx
nop word [rax + rax]
lea rdx, [0x1401371c0]
mov rcx, rdi
call fcn.140109454
mov rcx, rax
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140090d93
mov r10d, dword [rbp + 0x810]
mov rdi, rax
mov rax, qword [rsp + 0x48]
sub rdi, rax
inc r10d
dec r15d
sar rdi, 1
mov dword [rbp + 0x810], r10d
lea rdx, [r13 + rdi]
mov qword [rbp - 0x80], rdx
inc rdx
cmp rdx, qword [rsp + 0x70]
jb 0x140090d54
movsxd r9, dword [rsp + 0x78]
mov rax, rcx
movsxd rcx, edx
sub rax, qword [rsp + 0x40]
mov r8d, r15d
mov edx, r10d
sar rax, 1
cdqe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
or rcx, 0xffffffffffffffff
call fcn.1400e6de0
mov rcx, r14
lea rdx, [rax + rax]
mov qword [rsp + 0x70], rax
call fcn.1401099a4
test rax, rax
je 0x140090ddb
mov r14, rax
mov rax, qword [rsp + 0x48]
test rdi, rdi
je 0x140090d6d
lea r8, [rdi + rdi]
lea rcx, [r14 + r13*2]
mov rdx, rax
call fcn.140109100
mov r13, qword [rbp - 0x80]
movzx eax, word [0x14012fa74]
mov rdi, qword [rbp - 0x78]
inc r13
add rdi, 4
mov word [r14 + r13*2 - 2], ax
mov qword [rsp + 0x48], rdi
test r15d, r15d
jne 0x140090cb0
mov eax, dword [rbp + 0x810]
test eax, eax
je 0x140090e92
mov r15, qword [rsp + 0x78]
mov rax, rdi
sub rax, qword [rsp + 0x40]
sar rax, 1
sub r15, rax
je 0x140090e0b
lea rax, [r13 + r15]
mov qword [rbp + 0x810], rax
cmp rax, qword [rsp + 0x70]
jb 0x140090df4
lea rdx, [rax + rax + 2]
mov rcx, r14
call fcn.1401099a4
test rax, rax
jne 0x140090df1
test r14, r14
je 0x140090e92
mov rcx, r14
call fcn.140108f48
jmp 0x140090e92
mov r14, rax
lea r8, [r15 + r15]
lea rcx, [r14 + r13*2]
mov rdx, rdi
call fcn.140109100
mov r13, qword [rbp + 0x810]
mov rcx, qword [rsp + 0x40]
lea r8, [r13 + r13 + 2]
mov rdx, r14
mov word [r14 + r13*2], si
call fcn.140109100
mov rcx, r14
call fcn.140108f48
jmp 0x140090e92
mov r13, qword [rsp + 0x78]
mov rsi, rdx
mov rbx, rdx
nop word [rax + rax]
lea rdx, [0x1401371c0]
mov rcx, rsi
call fcn.140109454
mov rdi, rax
test rax, rax
je 0x140090e8d
mov rcx, rax
lea rsi, [rax + 2]
mov r8, r13
sub rcx, rbx
lea rdx, [rax + 4]
sar rcx, 1
sub r8, rcx
mov rcx, rsi
lea r8, [r8 + r8 - 2]
call fcn.140109100
movzx eax, word [0x14012fa74]
dec r13
dec r15d
mov word [rdi], ax
jne 0x140090e40
mov rbx, qword [rsp + 0x48]
xor r8d, r8d
mov edx, r12d
mov rcx, rbx
call fcn.140001550
or rcx, 0xffffffffffffffff
mov rdi, rax
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea rdx, [rcx - 1]
mov rcx, rbx
call fcn.140023570
cmp byte [rbx + 0x23], 0
jne 0x140090ec5
mov rbx, qword [rbx + 0x10]
cmp byte [rbx + 0x23], 2
jne 0x140090ee6
cmp qword [0x140171f48], 0
je 0x140090ee6
lea rcx, [0x140171f30]
call fcn.140005a80
mov r12d, eax
jmp 0x140090eea
and byte [rbx + 0x21], 0x86
mov eax, r12d
mov r15, qword [rsp + 0x908]
add rsp, 0x8c0
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret