Function at 0x140060900
Capabilities:
Capture screenshot

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
lea rbp, [rsp - 0x48]
sub rsp, 0x148
movzx esi, byte [rbp + 0xc0]
mov rdi, qword [rbp + 0xb8]
mov ebx, edx
mov r12, rcx
test sil, sil
jne 0x140060954
lea rdx, str.Fast
mov rcx, rdi
call fcn.1400b8ca0
mov byte [rsp + 0x50], sil
test rax, rax
je 0x140060959
mov byte [rsp + 0x50], 1
lea rdx, [0x1400fe3c8]
mov rcx, rdi
mov qword [rsp + 0x140], r13
mov qword [rsp + 0x138], r15
call fcn.1400b8ca0
test rax, rax
setne al
mov byte [rsp + 0x51], al
test al, al
je 0x1400609b5
mov r15d, dword [rbp + 0xa8]
movzx eax, r15w
shr ax, 8
movzx r13d, al
mov eax, r15d
shr eax, 0x10
shl r13d, 8
movzx ecx, al
movzx eax, r15b
shl eax, 0x10
or r13d, ecx
or r13d, eax
jmp 0x1400609e2
mov r13d, dword [rbp + 0xa8]
movzx eax, r13w
shr ax, 8
movzx r15d, al
mov eax, r13d
shr eax, 0x10
shl r15d, 8
movzx ecx, al
movzx eax, r13b
shl eax, 0x10
or r15d, ecx
or r15d, eax
mov rax, qword [0x14012a8c0]
xor r14d, r14d
mov qword [rsp + 0x70], rax
mov edi, r14d
test sil, sil
jne 0x140060a07
cmp byte [r12 + 1], 1
cmova rdi, qword [0x14012a8c8]
mov qword [rbp - 0x60], rdi
test rax, rax
je 0x140060a18
mov rcx, rax
call fcn.1400243d0
test rdi, rdi
je 0x140060a25
mov rcx, rdi
call fcn.1400243d0
xor eax, eax
mov r12d, r14d
mov dword [rsp + 0x7c], r14d
mov qword [rbp - 0x78], rax
mov rax, qword [0x1401255c8]
movzx edi, word [rax + 0x130]
and edi, 3
cmp edi, 2
je 0x140060ab6
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, rax
test rax, rax
je 0x140060ab6
mov rcx, rax
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x140060ab6
mov rcx, rsi
test edi, edi
jne 0x140060a87
lea rdx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x140060ab6
mov r8, qword [rbp - 0x78]
add r12d, dword [rbp - 0x70]
add r8d, dword [rbp - 0x6c]
jmp 0x140060aad
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x60], 0
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x140060ab6
mov r8, qword [rbp - 0x78]
add r12d, dword [rsp + 0x60]
add r8d, dword [rsp + 0x64]
mov qword [rbp - 0x78], r8
mov dword [rsp + 0x7c], r12d
mov edi, dword [rbp + 0x98]
mov r8d, dword [rbp + 0x90]
mov rax, qword [rbp - 0x78]
add edi, r12d
add ebx, r12d
mov r12d, dword [rbp + 0xa0]
add r8d, eax
add r12d, eax
cmp ebx, edi
setg r9b
cmp r8d, r12d
mov dword [rbp + 0x98], edi
setg dl
mov dword [rbp + 0x90], r8d
mov dword [rsp + 0x78], ebx
mov byte [rsp + 0x52], r9b
mov dword [rbp - 0x80], r8d
mov dword [rsp + 0x58], edi
mov byte [rbp + 0x88], dl
mov dword [rsp + 0x54], r12d
test r9b, r9b
je 0x140060b1c
mov dword [rsp + 0x78], edi
mov dword [rsp + 0x58], ebx
test dl, dl
je 0x140060b29
mov dword [rbp - 0x80], r12d
mov dword [rsp + 0x54], r8d
mov edi, dword [rbp + 0xb0]
mov eax, 0xff
test edi, edi
jns 0x140060c84
mov edi, r14d
movzx eax, byte [rbp + 0xc0]
movzx esi, byte [rbp + 0xc0]
mov byte [rbp + 0xb0], al
movzx eax, byte [rbp + 0xc0]
movaps xmmword [rsp + 0x120], xmm6
xor ecx, ecx
movaps xmmword [rsp + 0x110], xmm7
mov dword [rsp + 0x68], eax
movaps xmmword [rsp + 0x100], xmm8
call qword [sym.imp.USER32.dll_GetDC]
mov r9, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140061e13
cmp byte [rsp + 0x50], 0
mov byte [rbp + 0xa0], 0
je 0x140061660
mov r13d, dword [rsp + 0x54]
mov r12d, dword [rsp + 0x58]
mov rcx, rax
sub r13d, dword [rbp - 0x80]
sub r12d, dword [rsp + 0x78]
mov qword [rbp - 0x58], r14
inc r13d
mov qword [rbp - 0x70], r14
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
movsd xmm7, qword [0x140111fc8]
movsd xmm8, qword [0x140112000]
movsd xmm6, qword [0x140111ff8]
mov qword [rbp - 0x50], rax
mov ebx, 8
test rax, rax
je 0x140060c75
mov rcx, qword [rsp + 0x60]
lea edx, [r12 + 1]
mov r8d, r13d
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov qword [rbp - 0x58], rax
test rax, rax
je 0x140060c75
mov rcx, qword [rbp - 0x50]
mov rdx, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140060c75
mov eax, dword [rbp - 0x80]
mov dword [rsp + 0x40], 0xcc0020
lea r9d, [r12 + 1]
mov r12, qword [rbp - 0x50]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
mov rcx, r12
mov dword [rsp + 0x20], r13d
call qword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x140060c75
mov rcx, r12
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
test rax, rax
jne 0x140060cae
mov r13, r14
mov r12d, dword [rbp + 0xc0]
jmp 0x1400612a5
cmp edi, eax
jle 0x140060c8c
mov edi, eax
jmp 0x140060c94
test edi, edi
jle 0x140060b3f
movzx esi, r13w
mov eax, r13d
mov byte [rbp + 0xb0], r13b
shr si, 8
shr eax, 0x10
jmp 0x140060b5a
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x98]
lea r8, [rsp + 0x54]
lea rdx, [rbp + 0x90]
mov dword [rsp + 0x20], ebx
call fcn.140060680
mov r13, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140060c78
mov ecx, dword [rbp + 0x90]
movzx edx, byte [rbp + 0x98]
mov r9d, ecx
imul r9d, dword [rsp + 0x54]
mov dword [rsp + 0x54], r9d
test dl, dl
je 0x140060dc1
mov r12d, r14d
mov rcx, r14
movsxd rax, r9d
test r9d, r9d
jle 0x140060d31
mov r12d, eax
nop word [rax + rax]
and dword [r13 + rcx*4], 0xf8f8f8f8
inc rcx
cmp rcx, rax
jl 0x140060d20
mov ecx, dword [rbp + 0x90]
cmp byte [rbp + 0xc0], 0
je 0x1400610a3
mov r8d, dword [r13]
and r8d, 0xffffff
cmp byte [rsp + 0x51], 0
jne 0x140060d7a
movzx eax, r8w
shr ax, 8
movzx edx, al
mov eax, r8d
movzx r8d, r8b
shr eax, 0x10
shl edx, 8
shl r8d, 0x10
movzx ecx, al
or edx, ecx
or r8d, edx
lea rdx, str.0x_06X
lea rcx, [rbp - 0x40]
call fcn.1400d706c
mov r15, qword [rsp + 0x70]
movzx r11d, byte [r15 + 0x23]
test r11b, r11b
jne 0x140060dcd
mov rcx, qword [r15 + 0x10]
lea rdx, [rbp - 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bcba0
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400612ad
mov r12d, dword [rbp + 0xc0]
jmp 0x140060d37
lea rax, [rbp - 0x40]
cmp qword [r15 + 8], rax
jne 0x140060de0
mov r13, qword [r15 + 0x10]
shr r13, 1
jmp 0x140060df4
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r13, [rcx - 1]
lea rax, [r13 + 1]
lea rsi, [rax + rax]
cmp r11b, 2
jne 0x140060e22
lea rcx, [rbp - 0x40]
mov rdx, r13
call fcn.140006f10
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400612ad
mov rcx, qword [0x1401255a0]
cmp rsi, rcx
jbe 0x140060e62
cmp rsi, qword [r15 + 0x18]
jbe 0x140060e62
lea r8, [0x1400f1604]
lea rdx, [0x1401103d0]
lea rcx, [0x14012c540]
call fcn.14004e5d0
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400612ad
cmp rax, 2
jae 0x140060e8b
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 4]
call fcn.1400bd250
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400612ad
movzx eax, byte [r15 + 0x21]
test al, 2
je 0x140060eaa
mov rcx, qword [r15]
and al, 0x3d
mov byte [r15 + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r9, qword [r15 + 0x18]
and byte [r15 + 0x21], 0x82
cmp rsi, r9
jbe 0x140061012
movzx r8d, byte [r15 + 0x20]
movzx eax, r8b
cmp r8b, 1
jbe 0x140060edc
cmp al, 2
je 0x140060f1b
mov rdi, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140061005
cmp rsi, 0x80
ja 0x140060f1b
cmp rsi, rbx
ja 0x140060eef
mov rdi, rbx
jmp 0x140060f00
mov edi, 0x80
cmp rsi, 0x10
mov eax, reloc.WSOCK32.dll_recv
cmovbe edi, eax
mov rcx, rdi
call fcn.1400b55f0
test rax, rax
je 0x14006103f
mov byte [r15 + 0x20], 1
jmp 0x140061005
cmp rsi, 0x20
jae 0x140060f2b
mov edi, SafeArrayAllocDescriptor
jmp 0x140060fcb
cmp rsi, 0x208
jae 0x140060f3e
mov edi, 0x208
jmp 0x140060fcb
cmp rsi, 0x50000
jae 0x140060f87
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140060f59
addsd xmm0, xmm7
mulsd xmm0, xmm8
xor eax, eax
comisd xmm0, xmm6
jbe 0x140060f7d
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x140060f7d
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rdi, xmm0
add rdi, rax
jmp 0x140060fcb
cmp rsi, 0x320000
jae 0x140060f99
lea rdi, [rsi + 0x8000]
jmp 0x140060fcb
cmp rsi, 0xc80000
jae 0x140060fc4
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140060fcb
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r8b, 2
jne 0x140060feb
test r9, r9
je 0x140060feb
mov rcx, qword [r15 + 8]
mov sil, 1
call fcn.1400d6528
jmp 0x140060fee
xor sil, sil
test rdi, rdi
js 0x140061053
mov rcx, rdi
call fcn.1400d6468
test rax, rax
je 0x140061053
mov byte [r15 + 0x20], 2
and byte [r15 + 0x21], 0x7f
mov qword [r15 + 8], rax
mov qword [r15 + 0x18], rdi
mov rcx, qword [r15 + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x14006102d
lea r8, [r13 + r13]
lea rdx, [rbp - 0x40]
call fcn.1400d72b0
mov rax, qword [r15 + 8]
lea rcx, [r13 + r13]
mov word [rcx + rax], r14w
mov qword [r15 + 0x10], rcx
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400612ad
test sil, sil
je 0x140061069
lea rax, [0x14012c438]
mov qword [r15 + 0x18], r14
mov qword [r15 + 8], rax
jmp 0x140061071
mov rax, qword [r15 + 8]
mov word [rax], r14w
lea r8, [0x1400f1604]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c540]
mov qword [r15 + 0x10], r14
call fcn.14004e5d0
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400612ad
cmp edi, 1
jge 0x14006114f
test dl, dl
je 0x1400610b7
and r15d, 0xf8f8f8f8
mov edi, r14d
test r9d, r9d
jle 0x1400612a5
movzx r10d, byte [rbp + 0x88]
movzx r11d, byte [rsp + 0x52]
lea r8d, [r9 - 1]
test r11b, r11b
je 0x1400610f9
test r10b, r10b
je 0x1400610e4
mov r12d, r8d
jmp 0x140061118
mov eax, edi
cdq
idiv ecx
lea r12d, [rax + 1]
imul r12d, ecx
sub r12d, edx
dec r12d
jmp 0x140061118
test r10b, r10b
je 0x140061115
mov eax, r8d
cdq
idiv ecx
mov r12d, eax
mov eax, edi
cdq
imul r12d, ecx
idiv ecx
add r12d, edx
jmp 0x140061118
mov r12d, edi
movsxd rax, r12d
mov ecx, dword [r13 + rax*4]
and ecx, 0xffffff
cmp ecx, r15d
je 0x140061140
mov ecx, dword [rbp + 0x90]
inc edi
dec r8d
cmp edi, r9d
jl 0x1400610d5
jmp 0x1400612a5
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400612a8
mov eax, dword [rsp + 0x68]
test dl, dl
je 0x140061164
and byte [rbp + 0xb0], 0xf8
and sil, 0xf8
and al, 0xf8
movzx edx, byte [rbp + 0xb0]
cmp edi, edx
jle 0x140061178
mov byte [rbp + 0x98], 0
jmp 0x140061184
movzx ecx, dl
sub cl, dil
mov byte [rbp + 0x98], cl
movzx r8d, sil
cmp edi, r8d
jle 0x140061192
xor r15b, r15b
jmp 0x140061199
movzx r15d, r8b
sub r15b, dil
movzx r9d, al
cmp edi, r9d
jle 0x1400611a7
xor r13b, r13b
jmp 0x1400611ae
movzx r13d, r9b
sub r13b, dil
mov ecx, 0xff
mov eax, ecx
sub eax, edx
cmp edi, eax
jle 0x1400611c0
movzx esi, cl
jmp 0x1400611c3
lea esi, [rdx + rdi]
mov eax, ecx
sub eax, r8d
cmp edi, eax
jle 0x1400611d2
movzx r11d, cl
jmp 0x1400611d6
lea r11d, [r8 + rdi]
sub ecx, r9d
cmp edi, ecx
jle 0x1400611e2
mov dil, 0xff
jmp 0x1400611e5
add dil, r9b
mov eax, dword [rsp + 0x54]
mov r8d, r14d
test eax, eax
jle 0x1400612a0
movzx r10d, byte [rbp + 0x88]
lea r9d, [rax - 1]
cmp byte [rsp + 0x52], 0
je 0x14006122d
test r10b, r10b
je 0x140061211
mov r12d, r9d
jmp 0x140061253
mov ecx, dword [rbp + 0x90]
mov eax, r8d
cdq
idiv ecx
lea r12d, [rax + 1]
imul r12d, ecx
sub r12d, edx
dec r12d
jmp 0x140061253
test r10b, r10b
je 0x140061250
mov ecx, dword [rbp + 0x90]
mov eax, r9d
cdq
idiv ecx
mov r12d, eax
mov eax, r8d
cdq
imul r12d, ecx
idiv ecx
add r12d, edx
jmp 0x140061253
mov r12d, r8d
mov rcx, qword [rsp + 0x58]
movsxd rax, r12d
mov edx, dword [rcx + rax*4]
mov eax, edx
movzx ecx, dx
shr eax, 0x10
shr cx, 8
cmp al, byte [rbp + 0x98]
jb 0x14006128f
cmp al, sil
ja 0x14006128f
cmp cl, r15b
jb 0x14006128f
cmp cl, r11b
ja 0x14006128f
cmp dl, r13b
jb 0x14006128f
cmp dl, dil
jbe 0x1400613a2
inc r8d
dec r9d
cmp r8d, dword [rsp + 0x54]
jl 0x140061200
mov r13, qword [rsp + 0x58]
xor sil, sil
mov r15, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rdi, qword [rbp - 0x50]
test rdi, rdi
je 0x1400612e1
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x1400612d8
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rax, qword [rbp - 0x58]
test rax, rax
je 0x1400612f3
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteObject]
test r13, r13
je 0x140061e13
mov rcx, r13
call fcn.1400d6528
cmp byte [rbp + 0xc0], 0
jne 0x140061359
test sil, sil
je 0x140061359
mov edi, dword [rbp + 0x90]
test r15, r15
je 0x140061339
mov eax, r12d
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, r15
cdq
idiv edi
sub edx, dword [rsp + 0x7c]
add edx, dword [rsp + 0x78]
movsxd rdx, edx
call fcn.140001090
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140061359
mov eax, r12d
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
cdq
idiv edi
sub eax, dword [rbp - 0x78]
add eax, dword [rbp - 0x80]
movsxd rdx, eax
call fcn.140001090
cmp byte [rbp + 0xa0], 0
mov rsi, qword [0x14012b5a0]
lea r15, [0x1400f1614]
movzx r9d, byte [rsi + 0x23]
lea r13, [0x1400f569c]
cmovne r13, r15
test r9b, r9b
jne 0x1400613b6
mov rcx, qword [rsi + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r13
mov byte [rsp + 0x20], 1
call fcn.1400bcba0
mov esi, eax
jmp 0x140061e38
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x1400612a8
mov dl, 1
test r13, r13
jne 0x1400613cb
xor dl, dl
mov r12, r14
lea r13, [0x1400f1604]
jmp 0x1400613ed
cmp qword [rsi + 8], r13
jne 0x1400613da
mov r12, qword [rsi + 0x10]
shr r12, 1
jmp 0x1400613ed
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rdi, [rax + rax]
cmp r9b, 2
jne 0x14006140e
mov rdx, r12
mov rcx, r13
call fcn.140006f10
mov esi, eax
jmp 0x140061e38
mov r9, qword [0x1401255a0]
cmp rdi, r9
jbe 0x140061441
cmp rdi, qword [rsi + 0x18]
jbe 0x140061441
lea r8, [0x1400f1604]
lea rdx, [0x1401103d0]
lea rcx, [0x14012c540]
call fcn.14004e5d0
mov esi, eax
jmp 0x140061e38
cmp rax, 2
jae 0x140061468
test dl, dl
mov rcx, rsi
setne r14b
xor r8d, r8d
lea edx, [r14 + 3]
call fcn.1400bd250
mov esi, 1
mov eax, esi
jmp 0x140061e38
movzx eax, byte [rsi + 0x21]
test al, 2
je 0x140061485
mov rcx, qword [rsi]
and al, 0x3d
mov byte [rsi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r9, qword [0x1401255a0]
mov rcx, qword [rsi + 0x18]
and byte [rsi + 0x21], 0x82
cmp rdi, rcx
jbe 0x1400615eb
movzx r8d, byte [rsi + 0x20]
movzx eax, r8b
cmp r8b, 1
jbe 0x1400614b6
cmp al, 2
je 0x1400614f6
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x1400615df
cmp rdi, 0x80
ja 0x1400614f6
cmp rdi, rbx
jbe 0x1400614d5
mov ebx, 0x80
cmp rdi, 0x10
mov eax, reloc.WSOCK32.dll_recv
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b55f0
test rax, rax
jne 0x1400614ed
mov esi, r14d
mov eax, r14d
jmp 0x140061e38
mov byte [rsi + 0x20], 1
jmp 0x1400615df
cmp rdi, 0x20
jae 0x140061506
mov ebx, SafeArrayAllocDescriptor
jmp 0x1400615a6
cmp rdi, 0x208
jae 0x140061519
mov ebx, 0x208
jmp 0x1400615a6
cmp rdi, 0x50000
jae 0x140061562
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x140061534
addsd xmm0, xmm7
mulsd xmm0, xmm8
xor eax, eax
comisd xmm0, xmm6
jbe 0x140061558
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x140061558
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x1400615a6
cmp rdi, 0x320000
jae 0x140061574
lea rbx, [rdi + 0x8000]
jmp 0x1400615a6
cmp rdi, 0xc80000
jae 0x14006159f
movabs rax, 0x47ae147ae147ae15
mov rbx, rdi
mul rdi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rdi
jmp 0x1400615a6
lea rbx, [rdi + 0x20000]
cmp rbx, r9
cmova rbx, r9
cmp r8b, 2
jne 0x1400615c6
test rcx, rcx
je 0x1400615c6
mov rcx, qword [rsi + 8]
mov dil, 1
call fcn.1400d6528
jmp 0x1400615c9
xor dil, dil
test rbx, rbx
js 0x14006161d
mov rcx, rbx
call fcn.1400d6468
test rax, rax
je 0x14006161d
mov byte [rsi + 0x20], 2
and byte [rsi + 0x21], 0x7f
mov qword [rsi + 8], rax
mov qword [rsi + 0x18], rbx
mov rcx, qword [rsi + 8]
cmp rcx, r13
je 0x140061600
lea r8, [r12 + r12]
mov rdx, r13
call fcn.1400d72b0
mov rax, qword [rsi + 8]
lea rcx, [r12 + r12]
mov word [rcx + rax], r14w
mov qword [rsi + 0x10], rcx
mov esi, 1
mov eax, esi
jmp 0x140061e38
test dil, dil
je 0x140061633
lea rax, [0x14012c438]
mov qword [rsi + 0x18], r14
mov qword [rsi + 8], rax
jmp 0x14006163b
mov rax, qword [rsi + 8]
mov word [rax], r14w
lea r8, [0x1400f1604]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c540]
mov qword [rsi + 0x10], r14
call fcn.14004e5d0
mov esi, eax
jmp 0x140061e38
test edi, edi
jle 0x140061703
movzx ecx, byte [rbp + 0xb0]
cmp edi, ecx
jle 0x140061677
xor al, al
jmp 0x14006167d
movzx eax, cl
sub al, dil
movzx edx, sil
mov byte [rbp + 0xc0], al
cmp edi, edx
jle 0x14006168f
xor al, al
jmp 0x140061695
movzx eax, dl
sub al, dil
movzx r8d, byte [rsp + 0x68]
mov byte [rsp + 0x53], al
cmp edi, r8d
jle 0x1400616a8
xor al, al
jmp 0x1400616af
movzx eax, r8b
sub al, dil
mov byte [rsp + 0x50], al
mov r9d, 0xff
mov eax, r9d
sub eax, ecx
cmp edi, eax
jle 0x1400616cb
mov byte [rbp + 0xb0], r9b
jmp 0x1400616d4
lea eax, [rcx + rdi]
mov byte [rbp + 0xb0], al
mov eax, r9d
sub eax, edx
cmp edi, eax
jle 0x1400616e4
mov byte [rsp + 0x51], r9b
jmp 0x1400616eb
lea eax, [rdx + rdi]
mov byte [rsp + 0x51], al
sub r9d, r8d
cmp edi, r9d
mov r9, qword [rsp + 0x60]
jle 0x1400616fd
mov r15b, 0xff
jmp 0x140061746
lea r15d, [r8 + rdi]
jmp 0x140061746
movzx eax, byte [rbp + 0xc0]
mov byte [rbp + 0xc0], al
movzx eax, byte [rbp + 0xc0]
movzx r15d, byte [rbp + 0xc0]
mov byte [rsp + 0x53], al
movzx eax, byte [rbp + 0xc0]
mov byte [rsp + 0x50], al
movzx eax, byte [rbp + 0xc0]
mov byte [rbp + 0xb0], al
movzx eax, byte [rbp + 0xc0]
mov byte [rsp + 0x51], al
movzx edx, byte [rsp + 0x52]
movsxd rax, edi
mov edi, dword [rbp + 0xc0]
or rcx, 0xffffffffffffffff
mov qword [rbp - 0x70], rax
lea esi, [rcx + 2]
nop
mov eax, r14d
test dl, dl
je 0x140061772
cmp ebx, dword [rbp + 0x98]
setge al
jmp 0x14006177b
cmp ebx, dword [rbp + 0x98]
setle al
test eax, eax
je 0x1400617d6
mov edi, dword [rbp + 0x90]
nop word [rax + rax]
cmp byte [rbp + 0x88], 0
mov eax, r14d
je 0x1400617a4
cmp edi, r12d
setge al
jmp 0x1400617aa
cmp edi, r12d
setle al
test eax, eax
je 0x140061880
mov r8d, edi
mov edx, ebx
mov rcx, r9
call qword [sym.imp.GDI32.dll_GetPixel]
cmp qword [rbp - 0x70], rsi
jge 0x140061826
cmp eax, r13d
jne 0x14006185d
mov byte [rbp + 0xa0], sil
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
cmp byte [rbp + 0xa0], 0
jne 0x140061b24
mov rdi, qword [0x14012b5a0]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140061893
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f569c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400bcba0
mov esi, eax
jmp 0x140061e38
movzx ecx, ax
mov edx, eax
shr cx, 8
shr edx, 0x10
cmp al, byte [rbp + 0xc0]
jb 0x14006185d
cmp al, byte [rbp + 0xb0]
ja 0x14006185d
cmp cl, byte [rsp + 0x53]
jb 0x14006185d
cmp cl, byte [rsp + 0x51]
ja 0x14006185d
cmp dl, byte [rsp + 0x50]
jb 0x14006185d
cmp dl, r15b
jbe 0x1400617cf
movzx r10d, byte [rbp + 0x88]
mov r9, qword [rsp + 0x60]
mov eax, esi
test r10b, r10b
mov rcx, 0xffffffffffffffff
cmovne eax, ecx
add edi, eax
jmp 0x140061790
movzx edx, byte [rsp + 0x52]
mov eax, esi
test dl, dl
cmovne eax, ecx
add ebx, eax
jmp 0x140061760
lea r13, [0x1400f569c]
cmp qword [rdi + 8], r13
jne 0x1400618a9
mov r15, qword [rdi + 0x10]
shr r15, 1
jmp 0x1400618ac
mov r15, rsi
lea rdx, [r15 + 1]
lea r12, [rdx + rdx]
cmp al, 2
jne 0x1400618ca
mov rdx, r15
mov rcx, r13
call fcn.140006f10
mov esi, eax
jmp 0x140061e38
mov rcx, qword [0x1401255a0]
cmp r12, rcx
jbe 0x1400618fd
cmp r12, qword [rdi + 0x18]
jbe 0x1400618fd
lea r8, [0x1400f1604]
lea rdx, [0x1401103d0]
lea rcx, [0x14012c540]
call fcn.14004e5d0
mov esi, eax
jmp 0x140061e38
cmp rdx, 2
jae 0x140061919
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bd250
mov eax, esi
jmp 0x140061e38
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140061936
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r12, r8
jbe 0x140061ab4
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, sil
jbe 0x140061966
cmp al, 2
je 0x1400619ad
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140061aa8
cmp r12, 0x80
ja 0x1400619ad
cmp r12, 8
ja 0x14006197c
mov ebx, 8
jmp 0x14006198c
mov eax, reloc.WSOCK32.dll_recv
mov ebx, 0x80
cmp r12, rax
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b55f0
test rax, rax
jne 0x1400619a4
mov esi, r14d
mov eax, r14d
jmp 0x140061e38
mov byte [rdi + 0x20], sil
jmp 0x140061aa8
cmp r12, 0x20
jae 0x1400619bd
mov ebx, SafeArrayAllocDescriptor
jmp 0x140061a6e
cmp r12, 0x208
jae 0x1400619d0
mov ebx, 0x208
jmp 0x140061a6e
cmp r12, 0x50000
jae 0x140061a28
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x1400619ef
addsd xmm0, qword [0x140111fc8]
mulsd xmm0, qword [0x140112000]
movsd xmm1, qword [0x140111ff8]
xor eax, eax
comisd xmm0, xmm1
jbe 0x140061a1e
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140061a1e
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140061a6e
cmp r12, 0x320000
jae 0x140061a3b
lea rbx, [r12 + 0x8000]
jmp 0x140061a6e
cmp r12, 0xc80000
jae 0x140061a66
movabs rax, 0x47ae147ae147ae15
mov rbx, r12
mul r12
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r12
jmp 0x140061a6e
lea rbx, [r12 + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x140061a8f
test r8, r8
je 0x140061a8f
mov rcx, qword [rdi + 8]
movzx r12d, sil
call fcn.1400d6528
jmp 0x140061a92
xor r12b, r12b
test rbx, rbx
js 0x140061ae1
mov rcx, rbx
call fcn.1400d6468
test rax, rax
je 0x140061ae1
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r13
je 0x140061ac9
lea r8, [r15 + r15]
mov rdx, r13
call fcn.1400d72b0
mov rax, qword [rdi + 8]
lea rcx, [r15 + r15]
mov word [rcx + rax], r14w
mov qword [rdi + 0x10], rcx
mov eax, esi
jmp 0x140061e38
test r12b, r12b
je 0x140061af7
lea rax, [0x14012c438]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x140061aff
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f1604]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c540]
mov qword [rdi + 0x10], r14
call fcn.14004e5d0
mov esi, eax
jmp 0x140061e38
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140061b3d
sub ebx, dword [rsp + 0x7c]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, ebx
call fcn.140001090
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140061b54
sub edi, dword [rbp - 0x78]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, edi
call fcn.140001090
mov rdi, qword [0x14012b5a0]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140061b86
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f1614]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400bcba0
mov esi, eax
jmp 0x140061e38
lea r15, [0x1400f1614]
cmp qword [rdi + 8], r15
jne 0x140061b9c
mov r13, qword [rdi + 0x10]
shr r13, 1
jmp 0x140061b9f
mov r13, rsi
lea rdx, [r13 + 1]
lea r12, [rdx + rdx]
cmp al, 2
jne 0x140061bbd
mov rdx, r13
mov rcx, r15
call fcn.140006f10
mov esi, eax
jmp 0x140061e38
mov rcx, qword [0x1401255a0]
cmp r12, rcx
jbe 0x140061bf0
cmp r12, qword [rdi + 0x18]
jbe 0x140061bf0
lea r8, [0x1400f1604]
lea rdx, [0x1401103d0]
lea rcx, [0x14012c540]
call fcn.14004e5d0
mov esi, eax
jmp 0x140061e38
cmp rdx, 2
jae 0x140061c0c
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bd250
mov eax, esi
jmp 0x140061e38
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140061c29
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r12, r8
jbe 0x140061da7
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, sil
jbe 0x140061c59
cmp al, 2
je 0x140061ca0
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140061d9b
cmp r12, 0x80
ja 0x140061ca0
cmp r12, 8
ja 0x140061c6f
mov ebx, 8
jmp 0x140061c7f
mov eax, reloc.WSOCK32.dll_recv
mov ebx, 0x80
cmp r12, rax
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b55f0
test rax, rax
jne 0x140061c97
mov esi, r14d
mov eax, r14d
jmp 0x140061e38
mov byte [rdi + 0x20], sil
jmp 0x140061d9b
cmp r12, 0x20
jae 0x140061cb0
mov ebx, SafeArrayAllocDescriptor
jmp 0x140061d61
cmp r12, 0x208
jae 0x140061cc3
mov ebx, 0x208
jmp 0x140061d61
cmp r12, 0x50000
jae 0x140061d1b
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x140061ce2
addsd xmm0, qword [0x140111fc8]
mulsd xmm0, qword [0x140112000]
movsd xmm1, qword [0x140111ff8]
xor eax, eax
comisd xmm0, xmm1
jbe 0x140061d11
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140061d11
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140061d61
cmp r12, 0x320000
jae 0x140061d2e
lea rbx, [r12 + 0x8000]
jmp 0x140061d61
cmp r12, 0xc80000
jae 0x140061d59
movabs rax, 0x47ae147ae147ae15
mov rbx, r12
mul r12
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r12
jmp 0x140061d61
lea rbx, [r12 + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x140061d82
test r8, r8
je 0x140061d82
mov rcx, qword [rdi + 8]
movzx r12d, sil
call fcn.1400d6528
jmp 0x140061d85
xor r12b, r12b
test rbx, rbx
js 0x140061dd3
mov rcx, rbx
call fcn.1400d6468
test rax, rax
je 0x140061dd3
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r15
je 0x140061dbd
lea r8, [r13 + r13]
mov rdx, r15
call fcn.1400d72b0
mov rax, qword [rdi + 8]
lea rcx, [r13 + r13]
mov word [rcx + rax], r14w
mov qword [rdi + 0x10], rcx
mov eax, esi
jmp 0x140061e38
test r12b, r12b
je 0x140061de9
lea rax, [0x14012c438]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x140061df1
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f1604]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c540]
mov qword [rdi + 0x10], r14
call fcn.14004e5d0
mov esi, eax
jmp 0x140061e38
cmp byte [rbp + 0xc0], 0
mov rcx, qword [rbp + 0x80]
lea r13, [0x1400f569c]
lea rdx, [0x1400f5c24]
cmovne rdx, r13
call fcn.14004d480
movaps xmm8, xmmword [rsp + 0x100]
movaps xmm7, xmmword [rsp + 0x110]
movaps xmm6, xmmword [rsp + 0x120]
mov r15, qword [rsp + 0x138]
mov r13, qword [rsp + 0x140]
add rsp, 0x148
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret