Function at 0x1400608f0
Capabilities:
Capture screenshot

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
lea rbp, [rsp - 0x48]
sub rsp, 0x148
movzx esi, byte [rbp + 0xc0]
mov rdi, qword [rbp + 0xb8]
mov ebx, edx
mov r12, rcx
test sil, sil
jne 0x140060944
lea rdx, str.Fast
mov rcx, rdi
call fcn.1400b95d0
mov byte [rsp + 0x50], sil
test rax, rax
je 0x140060949
mov byte [rsp + 0x50], 1
lea rdx, [0x1400fe3a8]
mov rcx, rdi
mov qword [rsp + 0x140], r13
mov qword [rsp + 0x138], r15
call fcn.1400b95d0
test rax, rax
setne al
mov byte [rsp + 0x51], al
test al, al
je 0x1400609a5
mov r15d, dword [rbp + 0xa8]
movzx eax, r15w
shr ax, 8
movzx r13d, al
mov eax, r15d
shr eax, 0x10
shl r13d, 8
movzx ecx, al
movzx eax, r15b
shl eax, 0x10
or r13d, ecx
or r13d, eax
jmp 0x1400609d2
mov r13d, dword [rbp + 0xa8]
movzx eax, r13w
shr ax, 8
movzx r15d, al
mov eax, r13d
shr eax, 0x10
shl r15d, 8
movzx ecx, al
movzx eax, r13b
shl eax, 0x10
or r15d, ecx
or r15d, eax
mov rax, qword [0x14012a940]
xor r14d, r14d
mov qword [rsp + 0x70], rax
mov edi, r14d
test sil, sil
jne 0x1400609f7
cmp byte [r12 + 1], 1
cmova rdi, qword [0x14012a948]
mov qword [rbp - 0x60], rdi
test rax, rax
je 0x140060a08
mov rcx, rax
call fcn.140024290
test rdi, rdi
je 0x140060a15
mov rcx, rdi
call fcn.140024290
xor eax, eax
mov r12d, r14d
mov dword [rsp + 0x7c], r14d
mov qword [rbp - 0x78], rax
mov rax, qword [0x1401255c8]
movzx edi, word [rax + 0x130]
and edi, 3
cmp edi, 2
je 0x140060aa6
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rsi, rax
test rax, rax
je 0x140060aa6
mov rcx, rax
call qword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x140060aa6
mov rcx, rsi
test edi, edi
jne 0x140060a77
lea rdx, [rbp - 0x70]
call qword [sym.imp.USER32.dll_GetWindowRect]
test eax, eax
je 0x140060aa6
mov r8, qword [rbp - 0x78]
add r12d, dword [rbp - 0x70]
add r8d, dword [rbp - 0x6c]
jmp 0x140060a9d
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x60], 0
call qword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
je 0x140060aa6
mov r8, qword [rbp - 0x78]
add r12d, dword [rsp + 0x60]
add r8d, dword [rsp + 0x64]
mov qword [rbp - 0x78], r8
mov dword [rsp + 0x7c], r12d
mov edi, dword [rbp + 0x98]
mov r8d, dword [rbp + 0x90]
mov rax, qword [rbp - 0x78]
add edi, r12d
add ebx, r12d
mov r12d, dword [rbp + 0xa0]
add r8d, eax
add r12d, eax
cmp ebx, edi
setg r9b
cmp r8d, r12d
mov dword [rbp + 0x98], edi
setg dl
mov dword [rbp + 0x90], r8d
mov dword [rsp + 0x78], ebx
mov byte [rsp + 0x52], r9b
mov dword [rbp - 0x80], r8d
mov dword [rsp + 0x58], edi
mov byte [rbp + 0x88], dl
mov dword [rsp + 0x54], r12d
test r9b, r9b
je 0x140060b0c
mov dword [rsp + 0x78], edi
mov dword [rsp + 0x58], ebx
test dl, dl
je 0x140060b19
mov dword [rbp - 0x80], r12d
mov dword [rsp + 0x54], r8d
mov edi, dword [rbp + 0xb0]
mov eax, 0xff
test edi, edi
jns 0x140060c74
mov edi, r14d
movzx eax, byte [rbp + 0xc0]
movzx esi, byte [rbp + 0xc0]
mov byte [rbp + 0xb0], al
movzx eax, byte [rbp + 0xc0]
movaps xmmword [rsp + 0x120], xmm6
xor ecx, ecx
movaps xmmword [rsp + 0x110], xmm7
mov dword [rsp + 0x68], eax
movaps xmmword [rsp + 0x100], xmm8
call qword [sym.imp.USER32.dll_GetDC]
mov r9, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140061e03
cmp byte [rsp + 0x50], 0
mov byte [rbp + 0xa0], 0
je 0x140061650
mov r13d, dword [rsp + 0x54]
mov r12d, dword [rsp + 0x58]
mov rcx, rax
sub r13d, dword [rbp - 0x80]
sub r12d, dword [rsp + 0x78]
mov qword [rbp - 0x58], r14
inc r13d
mov qword [rbp - 0x70], r14
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
movsd xmm7, qword [0x140112018]
movsd xmm8, qword [0x140112050]
movsd xmm6, qword [0x140112048]
mov qword [rbp - 0x50], rax
mov ebx, 8
test rax, rax
je 0x140060c65
mov rcx, qword [rsp + 0x60]
lea edx, [r12 + 1]
mov r8d, r13d
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov qword [rbp - 0x58], rax
test rax, rax
je 0x140060c65
mov rcx, qword [rbp - 0x50]
mov rdx, rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140060c65
mov eax, dword [rbp - 0x80]
mov dword [rsp + 0x40], 0xcc0020
lea r9d, [r12 + 1]
mov r12, qword [rbp - 0x50]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x60]
xor r8d, r8d
mov qword [rsp + 0x28], rax
xor edx, edx
mov rcx, r12
mov dword [rsp + 0x20], r13d
call qword [sym.imp.GDI32.dll_BitBlt]
test eax, eax
je 0x140060c65
mov rcx, r12
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
test rax, rax
jne 0x140060c9e
mov r13, r14
mov r12d, dword [rbp + 0xc0]
jmp 0x140061295
cmp edi, eax
jle 0x140060c7c
mov edi, eax
jmp 0x140060c84
test edi, edi
jle 0x140060b2f
movzx esi, r13w
mov eax, r13d
mov byte [rbp + 0xb0], r13b
shr si, 8
shr eax, 0x10
jmp 0x140060b4a
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x28], rax
lea r9, [rbp + 0x98]
lea r8, [rsp + 0x54]
lea rdx, [rbp + 0x90]
mov dword [rsp + 0x20], ebx
call fcn.140060670
mov r13, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140060c68
mov ecx, dword [rbp + 0x90]
movzx edx, byte [rbp + 0x98]
mov r9d, ecx
imul r9d, dword [rsp + 0x54]
mov dword [rsp + 0x54], r9d
test dl, dl
je 0x140060db1
mov r12d, r14d
mov rcx, r14
movsxd rax, r9d
test r9d, r9d
jle 0x140060d21
mov r12d, eax
nop word [rax + rax]
and dword [r13 + rcx*4], 0xf8f8f8f8
inc rcx
cmp rcx, rax
jl 0x140060d10
mov ecx, dword [rbp + 0x90]
cmp byte [rbp + 0xc0], 0
je 0x140061093
mov r8d, dword [r13]
and r8d, 0xffffff
cmp byte [rsp + 0x51], 0
jne 0x140060d6a
movzx eax, r8w
shr ax, 8
movzx edx, al
mov eax, r8d
movzx r8d, r8b
shr eax, 0x10
shl edx, 8
shl r8d, 0x10
movzx ecx, al
or edx, ecx
or r8d, edx
lea rdx, str.0x_06X
lea rcx, [rbp - 0x40]
call fcn.1400d7668
mov r15, qword [rsp + 0x70]
movzx r11d, byte [r15 + 0x23]
test r11b, r11b
jne 0x140060dbd
mov rcx, qword [r15 + 0x10]
lea rdx, [rbp - 0x40]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bd4c0
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x14006129d
mov r12d, dword [rbp + 0xc0]
jmp 0x140060d27
lea rax, [rbp - 0x40]
cmp qword [r15 + 8], rax
jne 0x140060dd0
mov r13, qword [r15 + 0x10]
shr r13, 1
jmp 0x140060de4
or rcx, 0xffffffffffffffff
lea rdi, [rbp - 0x40]
xor eax, eax
repne scasw ax, word [rdi]
not rcx
lea r13, [rcx - 1]
lea rax, [r13 + 1]
lea rsi, [rax + rax]
cmp r11b, 2
jne 0x140060e12
lea rcx, [rbp - 0x40]
mov rdx, r13
call fcn.140006d40
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x14006129d
mov rcx, qword [0x1401255a0]
cmp rsi, rcx
jbe 0x140060e52
cmp rsi, qword [r15 + 0x18]
jbe 0x140060e52
lea r8, [0x1400f1524]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x14012c5c0]
call fcn.14004e450
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x14006129d
cmp rax, 2
jae 0x140060e7b
xor r8d, r8d
mov rcx, r15
lea edx, [r8 + 4]
call fcn.1400bdb70
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x14006129d
movzx eax, byte [r15 + 0x21]
test al, 2
je 0x140060e9a
mov rcx, qword [r15]
and al, 0x3d
mov byte [r15 + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r9, qword [r15 + 0x18]
and byte [r15 + 0x21], 0x82
cmp rsi, r9
jbe 0x140061002
movzx r8d, byte [r15 + 0x20]
movzx eax, r8b
cmp r8b, 1
jbe 0x140060ecc
cmp al, 2
je 0x140060f0b
mov rdi, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140060ff5
cmp rsi, 0x80
ja 0x140060f0b
cmp rsi, rbx
ja 0x140060edf
mov rdi, rbx
jmp 0x140060ef0
mov edi, 0x80
cmp rsi, 0x10
mov eax, reloc.WSOCK32.dll_recv
cmovbe edi, eax
mov rcx, rdi
call fcn.1400b5f20
test rax, rax
je 0x14006102f
mov byte [r15 + 0x20], 1
jmp 0x140060ff5
cmp rsi, 0x20
jae 0x140060f1b
mov edi, SafeArrayAllocDescriptor
jmp 0x140060fbb
cmp rsi, 0x208
jae 0x140060f2e
mov edi, 0x208
jmp 0x140060fbb
cmp rsi, 0x50000
jae 0x140060f77
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x140060f49
addsd xmm0, xmm7
mulsd xmm0, xmm8
xor eax, eax
comisd xmm0, xmm6
jbe 0x140060f6d
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x140060f6d
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rdi, xmm0
add rdi, rax
jmp 0x140060fbb
cmp rsi, 0x320000
jae 0x140060f89
lea rdi, [rsi + 0x8000]
jmp 0x140060fbb
cmp rsi, 0xc80000
jae 0x140060fb4
movabs rax, 0x47ae147ae147ae15
mov rdi, rsi
mul rsi
sub rdi, rdx
shr rdi, 1
add rdi, rdx
shr rdi, 6
add rdi, rsi
jmp 0x140060fbb
lea rdi, [rsi + 0x20000]
cmp rdi, rcx
cmova rdi, rcx
cmp r8b, 2
jne 0x140060fdb
test r9, r9
je 0x140060fdb
mov rcx, qword [r15 + 8]
mov sil, 1
call fcn.1400d6e48
jmp 0x140060fde
xor sil, sil
test rdi, rdi
js 0x140061043
mov rcx, rdi
call fcn.1400d6d88
test rax, rax
je 0x140061043
mov byte [r15 + 0x20], 2
and byte [r15 + 0x21], 0x7f
mov qword [r15 + 8], rax
mov qword [r15 + 0x18], rdi
mov rcx, qword [r15 + 8]
lea rax, [rbp - 0x40]
cmp rcx, rax
je 0x14006101d
lea r8, [r13 + r13]
lea rdx, [rbp - 0x40]
call fcn.1400d78b0
mov rax, qword [r15 + 8]
lea rcx, [r13 + r13]
mov word [rcx + rax], r14w
mov qword [r15 + 0x10], rcx
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x14006129d
test sil, sil
je 0x140061059
lea rax, [0x14012c4b8]
mov qword [r15 + 0x18], r14
mov qword [r15 + 8], rax
jmp 0x140061061
mov rax, qword [r15 + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c5c0]
mov qword [r15 + 0x10], r14
call fcn.14004e450
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x14006129d
cmp edi, 1
jge 0x14006113f
test dl, dl
je 0x1400610a7
and r15d, 0xf8f8f8f8
mov edi, r14d
test r9d, r9d
jle 0x140061295
movzx r10d, byte [rbp + 0x88]
movzx r11d, byte [rsp + 0x52]
lea r8d, [r9 - 1]
test r11b, r11b
je 0x1400610e9
test r10b, r10b
je 0x1400610d4
mov r12d, r8d
jmp 0x140061108
mov eax, edi
cdq
idiv ecx
lea r12d, [rax + 1]
imul r12d, ecx
sub r12d, edx
dec r12d
jmp 0x140061108
test r10b, r10b
je 0x140061105
mov eax, r8d
cdq
idiv ecx
mov r12d, eax
mov eax, edi
cdq
imul r12d, ecx
idiv ecx
add r12d, edx
jmp 0x140061108
mov r12d, edi
movsxd rax, r12d
mov ecx, dword [r13 + rax*4]
and ecx, 0xffffff
cmp ecx, r15d
je 0x140061130
mov ecx, dword [rbp + 0x90]
inc edi
dec r8d
cmp edi, r9d
jl 0x1400610c5
jmp 0x140061295
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x140061298
mov eax, dword [rsp + 0x68]
test dl, dl
je 0x140061154
and byte [rbp + 0xb0], 0xf8
and sil, 0xf8
and al, 0xf8
movzx edx, byte [rbp + 0xb0]
cmp edi, edx
jle 0x140061168
mov byte [rbp + 0x98], 0
jmp 0x140061174
movzx ecx, dl
sub cl, dil
mov byte [rbp + 0x98], cl
movzx r8d, sil
cmp edi, r8d
jle 0x140061182
xor r15b, r15b
jmp 0x140061189
movzx r15d, r8b
sub r15b, dil
movzx r9d, al
cmp edi, r9d
jle 0x140061197
xor r13b, r13b
jmp 0x14006119e
movzx r13d, r9b
sub r13b, dil
mov ecx, 0xff
mov eax, ecx
sub eax, edx
cmp edi, eax
jle 0x1400611b0
movzx esi, cl
jmp 0x1400611b3
lea esi, [rdx + rdi]
mov eax, ecx
sub eax, r8d
cmp edi, eax
jle 0x1400611c2
movzx r11d, cl
jmp 0x1400611c6
lea r11d, [r8 + rdi]
sub ecx, r9d
cmp edi, ecx
jle 0x1400611d2
mov dil, 0xff
jmp 0x1400611d5
add dil, r9b
mov eax, dword [rsp + 0x54]
mov r8d, r14d
test eax, eax
jle 0x140061290
movzx r10d, byte [rbp + 0x88]
lea r9d, [rax - 1]
cmp byte [rsp + 0x52], 0
je 0x14006121d
test r10b, r10b
je 0x140061201
mov r12d, r9d
jmp 0x140061243
mov ecx, dword [rbp + 0x90]
mov eax, r8d
cdq
idiv ecx
lea r12d, [rax + 1]
imul r12d, ecx
sub r12d, edx
dec r12d
jmp 0x140061243
test r10b, r10b
je 0x140061240
mov ecx, dword [rbp + 0x90]
mov eax, r9d
cdq
idiv ecx
mov r12d, eax
mov eax, r8d
cdq
imul r12d, ecx
idiv ecx
add r12d, edx
jmp 0x140061243
mov r12d, r8d
mov rcx, qword [rsp + 0x58]
movsxd rax, r12d
mov edx, dword [rcx + rax*4]
mov eax, edx
movzx ecx, dx
shr eax, 0x10
shr cx, 8
cmp al, byte [rbp + 0x98]
jb 0x14006127f
cmp al, sil
ja 0x14006127f
cmp cl, r15b
jb 0x14006127f
cmp cl, r11b
ja 0x14006127f
cmp dl, r13b
jb 0x14006127f
cmp dl, dil
jbe 0x140061392
inc r8d
dec r9d
cmp r8d, dword [rsp + 0x54]
jl 0x1400611f0
mov r13, qword [rsp + 0x58]
xor sil, sil
mov r15, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rdi, qword [rbp - 0x50]
test rdi, rdi
je 0x1400612d1
mov rax, qword [rbp - 0x70]
test rax, rax
je 0x1400612c8
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.GDI32.dll_SelectObject]
mov rcx, rdi
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rax, qword [rbp - 0x58]
test rax, rax
je 0x1400612e3
mov rcx, rax
call qword [sym.imp.GDI32.dll_DeleteObject]
test r13, r13
je 0x140061e03
mov rcx, r13
call fcn.1400d6e48
cmp byte [rbp + 0xc0], 0
jne 0x140061349
test sil, sil
je 0x140061349
mov edi, dword [rbp + 0x90]
test r15, r15
je 0x140061329
mov eax, r12d
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rcx, r15
cdq
idiv edi
sub edx, dword [rsp + 0x7c]
add edx, dword [rsp + 0x78]
movsxd rdx, edx
call fcn.140001090
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140061349
mov eax, r12d
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
cdq
idiv edi
sub eax, dword [rbp - 0x78]
add eax, dword [rbp - 0x80]
movsxd rdx, eax
call fcn.140001090
cmp byte [rbp + 0xa0], 0
mov rsi, qword [0x14012b620]
lea r15, [0x1400f1614]
movzx r9d, byte [rsi + 0x23]
lea r13, [0x1400f566c]
cmovne r13, r15
test r9b, r9b
jne 0x1400613a6
mov rcx, qword [rsi + 0x10]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov rdx, r13
mov byte [rsp + 0x20], 1
call fcn.1400bd4c0
mov esi, eax
jmp 0x140061e28
mov r13, qword [rsp + 0x58]
mov sil, 1
mov byte [rbp + 0xa0], sil
jmp 0x140061298
mov dl, 1
test r13, r13
jne 0x1400613bb
xor dl, dl
mov r12, r14
lea r13, [0x1400f1524]
jmp 0x1400613dd
cmp qword [rsi + 8], r13
jne 0x1400613ca
mov r12, qword [rsi + 0x10]
shr r12, 1
jmp 0x1400613dd
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
lea r12, [rcx - 1]
lea rax, [r12 + 1]
lea rdi, [rax + rax]
cmp r9b, 2
jne 0x1400613fe
mov rdx, r12
mov rcx, r13
call fcn.140006d40
mov esi, eax
jmp 0x140061e28
mov r9, qword [0x1401255a0]
cmp rdi, r9
jbe 0x140061431
cmp rdi, qword [rsi + 0x18]
jbe 0x140061431
lea r8, [0x1400f1524]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x14012c5c0]
call fcn.14004e450
mov esi, eax
jmp 0x140061e28
cmp rax, 2
jae 0x140061458
test dl, dl
mov rcx, rsi
setne r14b
xor r8d, r8d
lea edx, [r14 + 3]
call fcn.1400bdb70
mov esi, 1
mov eax, esi
jmp 0x140061e28
movzx eax, byte [rsi + 0x21]
test al, 2
je 0x140061475
mov rcx, qword [rsi]
and al, 0x3d
mov byte [rsi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov r9, qword [0x1401255a0]
mov rcx, qword [rsi + 0x18]
and byte [rsi + 0x21], 0x82
cmp rdi, rcx
jbe 0x1400615db
movzx r8d, byte [rsi + 0x20]
movzx eax, r8b
cmp r8b, 1
jbe 0x1400614a6
cmp al, 2
je 0x1400614e6
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x1400615cf
cmp rdi, 0x80
ja 0x1400614e6
cmp rdi, rbx
jbe 0x1400614c5
mov ebx, 0x80
cmp rdi, 0x10
mov eax, reloc.WSOCK32.dll_recv
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b5f20
test rax, rax
jne 0x1400614dd
mov esi, r14d
mov eax, r14d
jmp 0x140061e28
mov byte [rsi + 0x20], 1
jmp 0x1400615cf
cmp rdi, 0x20
jae 0x1400614f6
mov ebx, SafeArrayAllocDescriptor
jmp 0x140061596
cmp rdi, 0x208
jae 0x140061509
mov ebx, 0x208
jmp 0x140061596
cmp rdi, 0x50000
jae 0x140061552
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x140061524
addsd xmm0, xmm7
mulsd xmm0, xmm8
xor eax, eax
comisd xmm0, xmm6
jbe 0x140061548
subsd xmm0, xmm6
comisd xmm0, xmm6
jae 0x140061548
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140061596
cmp rdi, 0x320000
jae 0x140061564
lea rbx, [rdi + 0x8000]
jmp 0x140061596
cmp rdi, 0xc80000
jae 0x14006158f
movabs rax, 0x47ae147ae147ae15
mov rbx, rdi
mul rdi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rdi
jmp 0x140061596
lea rbx, [rdi + 0x20000]
cmp rbx, r9
cmova rbx, r9
cmp r8b, 2
jne 0x1400615b6
test rcx, rcx
je 0x1400615b6
mov rcx, qword [rsi + 8]
mov dil, 1
call fcn.1400d6e48
jmp 0x1400615b9
xor dil, dil
test rbx, rbx
js 0x14006160d
mov rcx, rbx
call fcn.1400d6d88
test rax, rax
je 0x14006160d
mov byte [rsi + 0x20], 2
and byte [rsi + 0x21], 0x7f
mov qword [rsi + 8], rax
mov qword [rsi + 0x18], rbx
mov rcx, qword [rsi + 8]
cmp rcx, r13
je 0x1400615f0
lea r8, [r12 + r12]
mov rdx, r13
call fcn.1400d78b0
mov rax, qword [rsi + 8]
lea rcx, [r12 + r12]
mov word [rcx + rax], r14w
mov qword [rsi + 0x10], rcx
mov esi, 1
mov eax, esi
jmp 0x140061e28
test dil, dil
je 0x140061623
lea rax, [0x14012c4b8]
mov qword [rsi + 0x18], r14
mov qword [rsi + 8], rax
jmp 0x14006162b
mov rax, qword [rsi + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c5c0]
mov qword [rsi + 0x10], r14
call fcn.14004e450
mov esi, eax
jmp 0x140061e28
test edi, edi
jle 0x1400616f3
movzx ecx, byte [rbp + 0xb0]
cmp edi, ecx
jle 0x140061667
xor al, al
jmp 0x14006166d
movzx eax, cl
sub al, dil
movzx edx, sil
mov byte [rbp + 0xc0], al
cmp edi, edx
jle 0x14006167f
xor al, al
jmp 0x140061685
movzx eax, dl
sub al, dil
movzx r8d, byte [rsp + 0x68]
mov byte [rsp + 0x53], al
cmp edi, r8d
jle 0x140061698
xor al, al
jmp 0x14006169f
movzx eax, r8b
sub al, dil
mov byte [rsp + 0x50], al
mov r9d, 0xff
mov eax, r9d
sub eax, ecx
cmp edi, eax
jle 0x1400616bb
mov byte [rbp + 0xb0], r9b
jmp 0x1400616c4
lea eax, [rcx + rdi]
mov byte [rbp + 0xb0], al
mov eax, r9d
sub eax, edx
cmp edi, eax
jle 0x1400616d4
mov byte [rsp + 0x51], r9b
jmp 0x1400616db
lea eax, [rdx + rdi]
mov byte [rsp + 0x51], al
sub r9d, r8d
cmp edi, r9d
mov r9, qword [rsp + 0x60]
jle 0x1400616ed
mov r15b, 0xff
jmp 0x140061736
lea r15d, [r8 + rdi]
jmp 0x140061736
movzx eax, byte [rbp + 0xc0]
mov byte [rbp + 0xc0], al
movzx eax, byte [rbp + 0xc0]
movzx r15d, byte [rbp + 0xc0]
mov byte [rsp + 0x53], al
movzx eax, byte [rbp + 0xc0]
mov byte [rsp + 0x50], al
movzx eax, byte [rbp + 0xc0]
mov byte [rbp + 0xb0], al
movzx eax, byte [rbp + 0xc0]
mov byte [rsp + 0x51], al
movzx edx, byte [rsp + 0x52]
movsxd rax, edi
mov edi, dword [rbp + 0xc0]
or rcx, 0xffffffffffffffff
mov qword [rbp - 0x70], rax
lea esi, [rcx + 2]
nop
mov eax, r14d
test dl, dl
je 0x140061762
cmp ebx, dword [rbp + 0x98]
setge al
jmp 0x14006176b
cmp ebx, dword [rbp + 0x98]
setle al
test eax, eax
je 0x1400617c6
mov edi, dword [rbp + 0x90]
nop word [rax + rax]
cmp byte [rbp + 0x88], 0
mov eax, r14d
je 0x140061794
cmp edi, r12d
setge al
jmp 0x14006179a
cmp edi, r12d
setle al
test eax, eax
je 0x140061870
mov r8d, edi
mov edx, ebx
mov rcx, r9
call qword [sym.imp.GDI32.dll_GetPixel]
cmp qword [rbp - 0x70], rsi
jge 0x140061816
cmp eax, r13d
jne 0x14006184d
mov byte [rbp + 0xa0], sil
mov rdx, qword [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
cmp byte [rbp + 0xa0], 0
jne 0x140061b14
mov rdi, qword [0x14012b620]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140061883
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f566c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400bd4c0
mov esi, eax
jmp 0x140061e28
movzx ecx, ax
mov edx, eax
shr cx, 8
shr edx, 0x10
cmp al, byte [rbp + 0xc0]
jb 0x14006184d
cmp al, byte [rbp + 0xb0]
ja 0x14006184d
cmp cl, byte [rsp + 0x53]
jb 0x14006184d
cmp cl, byte [rsp + 0x51]
ja 0x14006184d
cmp dl, byte [rsp + 0x50]
jb 0x14006184d
cmp dl, r15b
jbe 0x1400617bf
movzx r10d, byte [rbp + 0x88]
mov r9, qword [rsp + 0x60]
mov eax, esi
test r10b, r10b
mov rcx, 0xffffffffffffffff
cmovne eax, ecx
add edi, eax
jmp 0x140061780
movzx edx, byte [rsp + 0x52]
mov eax, esi
test dl, dl
cmovne eax, ecx
add ebx, eax
jmp 0x140061750
lea r13, [0x1400f566c]
cmp qword [rdi + 8], r13
jne 0x140061899
mov r15, qword [rdi + 0x10]
shr r15, 1
jmp 0x14006189c
mov r15, rsi
lea rdx, [r15 + 1]
lea r12, [rdx + rdx]
cmp al, 2
jne 0x1400618ba
mov rdx, r15
mov rcx, r13
call fcn.140006d40
mov esi, eax
jmp 0x140061e28
mov rcx, qword [0x1401255a0]
cmp r12, rcx
jbe 0x1400618ed
cmp r12, qword [rdi + 0x18]
jbe 0x1400618ed
lea r8, [0x1400f1524]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x14012c5c0]
call fcn.14004e450
mov esi, eax
jmp 0x140061e28
cmp rdx, 2
jae 0x140061909
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bdb70
mov eax, esi
jmp 0x140061e28
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140061926
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r12, r8
jbe 0x140061aa4
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, sil
jbe 0x140061956
cmp al, 2
je 0x14006199d
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140061a98
cmp r12, 0x80
ja 0x14006199d
cmp r12, 8
ja 0x14006196c
mov ebx, 8
jmp 0x14006197c
mov eax, reloc.WSOCK32.dll_recv
mov ebx, 0x80
cmp r12, rax
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b5f20
test rax, rax
jne 0x140061994
mov esi, r14d
mov eax, r14d
jmp 0x140061e28
mov byte [rdi + 0x20], sil
jmp 0x140061a98
cmp r12, 0x20
jae 0x1400619ad
mov ebx, SafeArrayAllocDescriptor
jmp 0x140061a5e
cmp r12, 0x208
jae 0x1400619c0
mov ebx, 0x208
jmp 0x140061a5e
cmp r12, 0x50000
jae 0x140061a18
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x1400619df
addsd xmm0, qword [0x140112018]
mulsd xmm0, qword [0x140112050]
movsd xmm1, qword [0x140112048]
xor eax, eax
comisd xmm0, xmm1
jbe 0x140061a0e
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140061a0e
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140061a5e
cmp r12, 0x320000
jae 0x140061a2b
lea rbx, [r12 + 0x8000]
jmp 0x140061a5e
cmp r12, 0xc80000
jae 0x140061a56
movabs rax, 0x47ae147ae147ae15
mov rbx, r12
mul r12
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r12
jmp 0x140061a5e
lea rbx, [r12 + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x140061a7f
test r8, r8
je 0x140061a7f
mov rcx, qword [rdi + 8]
movzx r12d, sil
call fcn.1400d6e48
jmp 0x140061a82
xor r12b, r12b
test rbx, rbx
js 0x140061ad1
mov rcx, rbx
call fcn.1400d6d88
test rax, rax
je 0x140061ad1
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r13
je 0x140061ab9
lea r8, [r15 + r15]
mov rdx, r13
call fcn.1400d78b0
mov rax, qword [rdi + 8]
lea rcx, [r15 + r15]
mov word [rcx + rax], r14w
mov qword [rdi + 0x10], rcx
mov eax, esi
jmp 0x140061e28
test r12b, r12b
je 0x140061ae7
lea rax, [0x14012c4b8]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x140061aef
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c5c0]
mov qword [rdi + 0x10], r14
call fcn.14004e450
mov esi, eax
jmp 0x140061e28
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x140061b2d
sub ebx, dword [rsp + 0x7c]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, ebx
call fcn.140001090
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x140061b44
sub edi, dword [rbp - 0x78]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
movsxd rdx, edi
call fcn.140001090
mov rdi, qword [0x14012b620]
movzx eax, byte [rdi + 0x23]
test al, al
jne 0x140061b76
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f1614]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], sil
call fcn.1400bd4c0
mov esi, eax
jmp 0x140061e28
lea r15, [0x1400f1614]
cmp qword [rdi + 8], r15
jne 0x140061b8c
mov r13, qword [rdi + 0x10]
shr r13, 1
jmp 0x140061b8f
mov r13, rsi
lea rdx, [r13 + 1]
lea r12, [rdx + rdx]
cmp al, 2
jne 0x140061bad
mov rdx, r13
mov rcx, r15
call fcn.140006d40
mov esi, eax
jmp 0x140061e28
mov rcx, qword [0x1401255a0]
cmp r12, rcx
jbe 0x140061be0
cmp r12, qword [rdi + 0x18]
jbe 0x140061be0
lea r8, [0x1400f1524]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x14012c5c0]
call fcn.14004e450
mov esi, eax
jmp 0x140061e28
cmp rdx, 2
jae 0x140061bfc
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bdb70
mov eax, esi
jmp 0x140061e28
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x140061c19
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp r12, r8
jbe 0x140061d97
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, sil
jbe 0x140061c49
cmp al, 2
je 0x140061c90
mov rbx, qword [rbp - 0x70]
mov rax, qword [rbp - 0x70]
jmp 0x140061d8b
cmp r12, 0x80
ja 0x140061c90
cmp r12, 8
ja 0x140061c5f
mov ebx, 8
jmp 0x140061c6f
mov eax, reloc.WSOCK32.dll_recv
mov ebx, 0x80
cmp r12, rax
cmovbe ebx, eax
mov rcx, rbx
call fcn.1400b5f20
test rax, rax
jne 0x140061c87
mov esi, r14d
mov eax, r14d
jmp 0x140061e28
mov byte [rdi + 0x20], sil
jmp 0x140061d8b
cmp r12, 0x20
jae 0x140061ca0
mov ebx, SafeArrayAllocDescriptor
jmp 0x140061d51
cmp r12, 0x208
jae 0x140061cb3
mov ebx, 0x208
jmp 0x140061d51
cmp r12, 0x50000
jae 0x140061d0b
pxor xmm0, xmm0
cvtsi2sd xmm0, r12
test r12, r12
jns 0x140061cd2
addsd xmm0, qword [0x140112018]
mulsd xmm0, qword [0x140112050]
movsd xmm1, qword [0x140112048]
xor eax, eax
comisd xmm0, xmm1
jbe 0x140061d01
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x140061d01
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x140061d51
cmp r12, 0x320000
jae 0x140061d1e
lea rbx, [r12 + 0x8000]
jmp 0x140061d51
cmp r12, 0xc80000
jae 0x140061d49
movabs rax, 0x47ae147ae147ae15
mov rbx, r12
mul r12
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, r12
jmp 0x140061d51
lea rbx, [r12 + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x140061d72
test r8, r8
je 0x140061d72
mov rcx, qword [rdi + 8]
movzx r12d, sil
call fcn.1400d6e48
jmp 0x140061d75
xor r12b, r12b
test rbx, rbx
js 0x140061dc3
mov rcx, rbx
call fcn.1400d6d88
test rax, rax
je 0x140061dc3
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r15
je 0x140061dad
lea r8, [r13 + r13]
mov rdx, r15
call fcn.1400d78b0
mov rax, qword [rdi + 8]
lea rcx, [r13 + r13]
mov word [rcx + rax], r14w
mov qword [rdi + 0x10], rcx
mov eax, esi
jmp 0x140061e28
test r12b, r12b
je 0x140061dd9
lea rax, [0x14012c4b8]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x140061de1
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c5c0]
mov qword [rdi + 0x10], r14
call fcn.14004e450
mov esi, eax
jmp 0x140061e28
cmp byte [rbp + 0xc0], 0
mov rcx, qword [rbp + 0x80]
lea r13, [0x1400f566c]
lea rdx, [0x1400f5bf4]
cmovne rdx, r13
call fcn.14004d300
movaps xmm8, xmmword [rsp + 0x100]
movaps xmm7, xmmword [rsp + 0x110]
movaps xmm6, xmmword [rsp + 0x120]
mov r15, qword [rsp + 0x138]
mov r13, qword [rsp + 0x140]
add rsp, 0x148
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret