Function at 0x140029960
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x140071048]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov byte [rsp + 0x51], r9b
mov dword [rbp - 0x60], r8d
mov r10, rdx
mov qword [rsp + 0x58], rdx
mov qword [rbp - 0x20], rdx
mov rax, qword [rbp + 0xf0]
mov qword [rsp + 0x60], rax
mov r8, qword [rbp + 0xf8]
mov qword [rsp + 0x70], r8
xor r14d, r14d
add rcx, 0x70
mov qword [rbp - 0x70], rcx
test rax, rax
jne 0x1400299db
mov rax, qword [rcx]
mov rax, qword [rax + 0x48]
mov qword [rsp + 0x60], rax
jmp 0x1400299df
mov qword [rbp - 0x70], rcx
test r8, r8
jne 0x1400299f4
mov rax, qword [rcx]
mov r8, qword [rax + 0x50]
add r8, qword [rax + 0x48]
mov qword [rsp + 0x70], r8
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov r13d, 2
mov qword [rbp - 0x80], r13
mov qword [rbp - 8], r13
mov esi, reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rbp], rsi
movzx eax, word [0x1400672a0]
mov word [rbp - 0x18], ax
mov byte [rbp - 0x16], 0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], rsi
movzx eax, word [0x14006566c]
mov word [rbp + 8], ax
mov byte [rbp + 0xa], 0
mov rbx, r14
movzx eax, r14b
mov byte [rsp + 0x50], bl
mov r12, qword [rbp + 8]
nop dword [rax + rax]
lea rdi, [rbp + 8]
test al, al
cmovne rdi, r12
mov r15, r10
cmp qword [r10 + 0x18], 0x10
jb 0x140029a67
mov r15, qword [r10]
mov rax, qword [r10 + 0x10]
cmp r13, rax
ja 0x140029b0d
sub rax, r13
cmp rbx, rax
ja 0x140029b0d
lea rsi, [rax + r15]
lea rcx, [r15 + rbx]
movsx r14d, byte [rdi]
lea r8, [rsi + 1]
sub r8, rcx
mov edx, r14d
call fcn.140032ae0
test rax, rax
mov rbx, rax
je 0x140029b0d
mov r8, r13
mov rdx, rdi
mov rcx, rax
call fcn.140032a00
test eax, eax
je 0x140029ac4
inc rbx
lea r8, [rsi + 1]
sub r8, rbx
mov rcx, rbx
jmp 0x140029a93
sub rbx, r15
mov rcx, qword [rbp]
mov rdx, qword [rbp - 8]
mov r10, qword [rsp + 0x58]
cmp rbx, 0xffffffffffffffff
je 0x140029b0d
lea r9, [rbp - 0x18]
cmp rcx, 0x10
cmovae r9, qword [rbp - 0x18]
mov qword [rsp + 0x20], rdx
mov r8, r13
mov rdx, rbx
mov rcx, r10
call fcn.140018170
add rbx, qword [rbp - 8]
movzx eax, byte [rsp + 0x50]
mov r10, qword [rsp + 0x58]
jmp 0x140029a50
mov esi, reloc.OLEAUT32.dll_SafeArrayDestroy
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140029b4d
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029b48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a752
call fcn.14002ff00
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov rcx, r13
mov qword [rbp - 8], rcx
mov r13, rsi
mov qword [rbp], rsi
movzx eax, word [0x1400672a0]
mov word [rbp - 0x18], ax
mov byte [rbp - 0x16], 0
movups xmmword [rbp + 8], xmm0
mov edx, 1
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], rsi
movzx eax, word [0x140060e98]
mov byte [rbp + 8], al
mov byte [rbp + 9], 0
xor ebx, ebx
movzx eax, bl
mov byte [rsp + 0x50], bl
mov r12, qword [rbp + 8]
nop dword [rax]
lea rdi, [rbp + 8]
test al, al
cmovne rdi, r12
mov r10, qword [rsp + 0x58]
mov r15, r10
cmp qword [r10 + 0x18], 0x10
jb 0x140029bbc
mov r15, qword [r10]
mov rax, qword [r10 + 0x10]
cmp rdx, rax
ja 0x140029c72
sub rax, rdx
cmp rbx, rax
ja 0x140029c72
test rdx, rdx
je 0x140029c32
lea rsi, [r15 + rax]
lea rcx, [r15 + rbx]
movsx r14d, byte [rdi]
lea r8, [rsi + 1]
sub r8, rcx
mov edx, r14d
call fcn.140032ae0
test rax, rax
mov rbx, rax
je 0x140029c72
mov r8d, 1
mov rdx, rdi
mov rcx, rax
call fcn.140032a00
test eax, eax
je 0x140029c21
inc rbx
lea r8, [rsi + 1]
sub r8, rbx
mov rcx, rbx
jmp 0x140029bed
sub rbx, r15
mov rcx, qword [rbp - 8]
mov r10, qword [rsp + 0x58]
mov edx, 1
cmp rbx, 0xffffffffffffffff
je 0x140029c72
lea r9, [rbp - 0x18]
cmp r13, 0x10
cmovae r9, qword [rbp - 0x18]
mov qword [rsp + 0x20], rcx
mov r8, rdx
mov rdx, rbx
mov rcx, r10
call fcn.140018170
mov rcx, qword [rbp - 8]
add rbx, rcx
mov r13, qword [rbp]
movzx eax, byte [rsp + 0x50]
mov edx, 1
jmp 0x140029ba0
mov esi, reloc.OLEAUT32.dll_SafeArrayDestroy
lea r13d, [rsi - 0xd]
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140029cb6
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029cb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a752
call fcn.14002ff00
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
mov qword [rbp], rsi
movzx eax, word [0x1400672a0]
mov word [rbp - 0x18], ax
mov byte [rbp - 0x16], 0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], rsi
movzx eax, word [0x1400672a4]
mov word [rbp + 8], ax
mov byte [rbp + 0xa], 0
xor ebx, ebx
movzx ecx, bl
mov byte [rsp + 0x50], bl
mov r12, qword [rbp + 8]
nop dword [rax]
lea rdi, [rbp + 8]
test cl, cl
cmovne rdi, r12
mov r10, qword [rsp + 0x58]
mov r15, r10
cmp qword [r10 + 0x18], 0x10
jb 0x140029d1c
mov r15, qword [r10]
mov rcx, qword [r10 + 0x10]
cmp r13, rcx
ja 0x140029dc5
mov rax, rcx
sub rax, r13
cmp rbx, rax
ja 0x140029dc5
mov rsi, r15
sub rsi, r13
add rsi, rcx
lea rcx, [r15 + rbx]
movsx r14d, byte [rdi]
lea r8, [rsi + 1]
sub r8, rcx
mov edx, r14d
call fcn.140032ae0
test rax, rax
mov rbx, rax
je 0x140029dc5
mov r8, r13
mov rdx, rdi
mov rcx, rax
call fcn.140032a00
test eax, eax
je 0x140029d81
inc rbx
lea r8, [rsi + 1]
sub r8, rbx
mov rcx, rbx
jmp 0x140029d50
sub rbx, r15
mov rdx, qword [rbp]
mov r8, qword [rbp - 8]
mov r10, qword [rsp + 0x58]
cmp rbx, 0xffffffffffffffff
je 0x140029dc5
lea r9, [rbp - 0x18]
cmp rdx, 0x10
cmovae r9, qword [rbp - 0x18]
mov qword [rsp + 0x20], r8
mov r8, r13
mov rdx, rbx
mov rcx, r10
call fcn.140018170
add rbx, qword [rbp - 8]
movzx ecx, byte [rsp + 0x50]
jmp 0x140029d00
mov esi, reloc.OLEAUT32.dll_SafeArrayDestroy
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140029e05
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029e00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a752
call fcn.14002ff00
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], r13
mov r13, rsi
mov qword [rbp], rsi
movzx eax, word [0x1400672a0]
mov word [rbp - 0x18], ax
mov byte [rbp - 0x16], 0
movups xmmword [rbp + 8], xmm0
mov edx, 1
mov qword [rbp + 0x18], rdx
mov qword [rbp + 0x20], rsi
movzx eax, word [0x1400672a8]
mov byte [rbp + 8], al
mov byte [rbp + 9], 0
xor ebx, ebx
movzx eax, bl
mov byte [rsp + 0x50], bl
mov r12, qword [rbp + 8]
nop dword [rax]
nop word [rax + rax]
lea rdi, [rbp + 8]
test al, al
cmovne rdi, r12
mov rcx, qword [rsp + 0x58]
mov r15, rcx
cmp qword [rcx + 0x18], 0x10
jb 0x140029e7c
mov r15, qword [rcx]
mov rax, qword [rcx + 0x10]
cmp rdx, rax
ja 0x140029f33
sub rax, rdx
cmp rbx, rax
ja 0x140029f33
test rdx, rdx
je 0x140029eee
lea rsi, [rax + r15]
lea rcx, [r15 + rbx]
movsx r14d, byte [rdi]
lea r8, [rsi + 1]
sub r8, rcx
mov edx, r14d
call fcn.140032ae0
test rax, rax
mov rbx, rax
je 0x140029f33
mov r8d, 1
mov rdx, rdi
mov rcx, rax
call fcn.140032a00
test eax, eax
je 0x140029ee1
inc rbx
lea r8, [rsi + 1]
sub r8, rbx
mov rcx, rbx
jmp 0x140029ead
sub rbx, r15
mov rcx, qword [rsp + 0x58]
mov edx, 1
cmp rbx, 0xffffffffffffffff
je 0x140029f33
lea r9, [rbp - 0x18]
cmp r13, 0x10
cmovae r9, qword [rbp - 0x18]
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r8, rdx
mov rdx, rbx
call fcn.140018170
mov rax, qword [rbp - 8]
mov qword [rbp - 0x80], rax
add rbx, rax
mov r13, qword [rbp]
movzx eax, byte [rsp + 0x50]
mov edx, 1
jmp 0x140029e60
cmp r13, 0x10
jb 0x140029f6b
lea rdx, [r13 + 1]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140029f66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a752
call fcn.14002ff00
xor r14d, r14d
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], r14
lea rdx, [rbp - 0x18]
mov rsi, qword [rsp + 0x58]
mov rcx, rsi
call fcn.140015a40
mov r15, qword [rsp + 0x60]
xor bl, bl
mov rax, qword [rbp - 0x70]
mov rax, qword [rax]
mov r12, qword [rax + 0x80]
mov qword [rsp + 0x78], r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], rax
mov ecx, 0x1000
mov r13d, ecx
call fcn.1400301c0
mov rdi, rax
mov qword [rbp - 0x68], rax
mov rax, qword [rsp + 0x70]
mov rdx, r15
test r12, r12
je 0x140029ff0
cmp rax, r15
jbe 0x140029ff0
mov rcx, rax
sub rcx, rdx
cmp rcx, 1
ja 0x14002a25a
cmp byte [rsp + 0x51], bl
je 0x14002a254
mov rcx, r13
call fcn.1400301c0
mov rdi, rax
mov qword [rbp - 0x68], rax
xor edx, edx
mov r8d, 0x800
mov rcx, rax
call fcn.140031fa0
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 8]
call fcn.140015ea0
cmp qword [rax + 0x18], 8
jb 0x14002a030
mov rax, qword [rax]
lea r8, [0x140074510]
cmp qword [0x140074528], 8
cmovae r8, qword [0x140074510]
mov r9, qword [rbp - 0x70]
mov r9, qword [r9]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, dword [r9 + 0x40]
mov edx, 0x800
mov rcx, rdi
call fcn.14002c890
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x14002a0b8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a0b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a758
call fcn.14002ff00
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xor r14d, r14d
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r14
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], r14w
jne 0x14002a0d1
mov rdx, rdi
lea rcx, [rbp + 8]
call fcn.1400024d0
nop
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x30]
call fcn.140012850
lea rdx, [0x140074470]
lea rcx, [rbp + 0x50]
call fcn.140012850
mov dword [rbp + 0x70], 0x30
mov ecx, 0x48
call fcn.14002ff34
mov rbx, rax
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x78], rax
lea rdx, [rbp + 0x30]
mov rcx, rax
call fcn.140012850
nop
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x50]
call fcn.140012850
mov ecx, dword [rbp + 0x70]
mov dword [rbx + 0x40], ecx
mov qword [rbp - 0x80], rbx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
lea r8, [0x14001a0c0]
xor edx, edx
xor ecx, ecx
call fcn.14003ae78
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14002a76f
lea rcx, [rbp + 0x30]
call fcn.1400158c0
cmp dword [rsp + 0x68], 0
je 0x14002a764
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.14002f4dc
test eax, eax
jne 0x14002a764
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x14002a1e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a1e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a75e
call fcn.14002ff00
nop
mov rcx, rdi
call fcn.14002ff00
nop
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x14002a205
cmp qword [rbp - 0x10], 0
jbe 0x14002a205
call fcn.14002ff00
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x14002a23f
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14002a23a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002a74c
mov rcx, r8
call fcn.14002ff00
mov qword [rsi + 0x10], r14
mov eax, reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rsi + 0x18], rax
mov byte [rsi], 0
jmp 0x14002a710
mov rcx, rax
sub rcx, rdx
mov r12, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x10]
cmp rax, rdx
jbe 0x14002a42c
cmp rcx, rsi
jb 0x14002a42c
mov r9d, 0x30
lea r8, [rbp - 0x50]
mov rcx, qword [rsp + 0x78]
call qword [0x140074280]
test rax, rax
je 0x14002a42c
test dword [rbp - 0x30], 0x1000
je 0x14002a393
mov eax, dword [rbp + 0x100]
test eax, eax
je 0x14002a2b2
test dword [rbp - 0x2c], eax
je 0x14002a393
lea rax, [r15 + r13]
mov rcx, qword [rsp + 0x70]
cmp rax, rcx
jbe 0x14002a2c6
mov r13, rcx
sub r13, r15
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
mov r9, r13
mov r8, rdi
mov rdx, r15
mov rcx, qword [rsp + 0x78]
call qword [0x140074258]
test eax, eax
setne dil
test eax, eax
jne 0x14002a308
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12b
jne 0x14002a308
mov rdx, qword [rbp - 0x58]
cmp rdx, rsi
jb 0x14002a311
mov dil, 1
jmp 0x14002a30c
mov rdx, qword [rbp - 0x58]
cmp rdx, rsi
jae 0x14002a321
mov r15, qword [rbp - 0x50]
dec r15
add r15, qword [rbp - 0x38]
xor r9d, r9d
jmp 0x14002a327
mov r9, rdx
sub r9, rsi
test dil, dil
je 0x14002a387
add qword [rbp - 0x80], rdx
xor edi, edi
mov r11, qword [rbp - 0x68]
mov r10, r11
sub r10, r12
nop dword [rax]
test rsi, rsi
je 0x14002a372
mov rcx, r12
lea rdx, [r10 + rdi]
nop dword [rax]
movzx eax, byte [rcx]
cmp al, byte [rdx + rcx]
je 0x14002a35c
cmp al, 0x99
jne 0x14002a36e
mov bl, 1
inc rcx
mov rax, rcx
sub rax, r12
cmp rax, rsi
jae 0x14002a376
jmp 0x14002a350
xor bl, bl
jmp 0x14002a37f
test bl, bl
je 0x14002a37f
inc r14d
cmp r14d, dword [rbp - 0x60]
jge 0x14002a3b2
inc rdi
cmp rdi, r9
jbe 0x14002a340
inc r15
add r15, r9
mov rdi, qword [rbp - 0x68]
jmp 0x14002a39b
mov r15, qword [rbp - 0x38]
add r15, qword [rbp - 0x50]
lea rax, [rsi + r15]
cmp rax, qword [rsp + 0x70]
jae 0x14002a42c
mov rdx, r15
jmp 0x14002a274
mov rcx, r11
call fcn.14002ff00
lea rbx, [rdi + r15]
test r12, r12
je 0x14002a3d1
test rsi, rsi
je 0x14002a3d1
mov rcx, r12
call fcn.14002ff00
nop
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14002a410
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14002a40b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x14002a74c
mov rcx, r8
call fcn.14002ff00
mov qword [rdi + 0x10], 0
mov eax, reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rdi + 0x18], rax
mov byte [rdi], 0
mov rax, rbx
jmp 0x14002a712
mov rcx, rdi
call fcn.14002ff00
cmp byte [rsp + 0x51], 0
je 0x14002a6af
mov rbx, qword [rbp - 0x80]
lea rax, [rbx - 1]
mov ecx, 0x28f6
cmp rax, 0x28f4
cmovbe rbx, rcx
mov ecx, 0x1000
call fcn.1400301c0
mov rdi, rax
mov qword [rbp - 0x68], rax
xor edx, edx
mov r8d, 0x800
mov rcx, rax
call fcn.140031fa0
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 8]
call fcn.140015ea0
mov rcx, rax
lea rdx, [0x1400746d0]
cmp qword [0x1400746e8], 8
cmovae rdx, qword [0x1400746d0]
cmp qword [rax + 0x18], 8
jb 0x14002a4a8
mov rcx, qword [rax]
lea r8, [0x1400744d0]
cmp qword [0x1400744e8], 8
cmovae r8, qword [0x1400744d0]
xorps xmm1, xmm1
test rbx, rbx
js 0x14002a4ce
cvtsi2sd xmm1, rbx
jmp 0x14002a4e3
mov rax, rbx
shr rax, 1
and ebx, 1
or rax, rbx
cvtsi2sd xmm1, rax
addsd xmm1, xmm1
mulsd xmm1, qword [0x140067370]
mulsd xmm1, qword [0x140067370]
mov rax, qword [rbp - 0x70]
mov r9, qword [rax]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
movsd qword [rsp + 0x30], xmm1
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9d, dword [r9 + 0x40]
mov edx, 0x800
mov rcx, rdi
call fcn.14002c890
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x14002a56f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a56a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a77f
call fcn.14002ff00
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xor r14d, r14d
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], r14
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdi + r8*2], r14w
jne 0x14002a590
mov rdx, rdi
lea rcx, [rbp + 8]
call fcn.1400024d0
nop
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x30]
call fcn.140012850
lea rdx, [0x140074470]
lea rcx, [rbp + 0x50]
call fcn.140012850
mov dword [rbp + 0x70], 0x30
mov ecx, 0x48
call fcn.14002ff34
mov rbx, rax
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x78], rax
lea rdx, [rbp + 0x30]
mov rcx, rax
call fcn.140012850
nop
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x50]
call fcn.140012850
mov ecx, dword [rbp + 0x70]
mov dword [rbx + 0x40], ecx
mov qword [rbp - 0x80], rbx
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
lea r8, [0x14001a0c0]
xor edx, edx
xor ecx, ecx
call fcn.14003ae78
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14002a73c
lea rcx, [rbp + 0x30]
call fcn.1400158c0
cmp dword [rsp + 0x68], 0
je 0x14002a78b
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x80], xmm0
lea rcx, [rbp - 0x80]
call fcn.14002f4dc
test eax, eax
jne 0x14002a78b
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x14002a6a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002a69f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002a785
call fcn.14002ff00
nop
mov rcx, rdi
call fcn.14002ff00
jmp 0x14002a6b2
xor r14d, r14d
test r12, r12
je 0x14002a6c5
test rsi, rsi
je 0x14002a6c5
mov rcx, r12
call fcn.14002ff00
nop
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14002a700
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x14002a6fb
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002a74c
mov rcx, r8
call fcn.14002ff00
mov qword [rdi + 0x10], r14
mov eax, reloc.OLEAUT32.dll_SafeArrayDestroy
mov qword [rdi + 0x18], rax
mov byte [rdi], 0
xor eax, eax
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.14002fee0
mov rbx, qword [rsp + 0x1e0]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [rsp + 0x68], r14d
mov ecx, 6
call fcn.14002f440
nop
call fcn.140036884
nop
call fcn.140036884
nop
call fcn.140036884
int3
call fcn.140036884
nop
mov ecx, 1
call fcn.14002f440
nop
mov dword [rsp + 0x68], r14d
mov ecx, 6
call fcn.14002f440
nop
call fcn.140036884
int3
call fcn.140036884
nop
mov ecx, 1
call fcn.14002f440
int3