Function at 0x140025390
Capabilities:
Check for software breakpoints

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
mov rbx, qword [rcx]
lea rdx, [rbp - 9]
mov r12, qword [rcx + 0x10]
xor esi, esi
xor al, al
mov qword [rcx + 0x20], rsi
mov r14, rcx
mov word [rbp - 0x29], 0x15ff
mov rcx, rbx
mov dword [rbp - 0x27], 2
mov word [rbp - 0x23], 0x8eb
mov r15d, esi
mov qword [rbp - 0x21], rsi
mov r13d, esi
mov word [rbp - 0x49], 0x25ff
mov edi, esi
mov dword [rbp - 0x47], esi
mov qword [rbp - 0x43], rsi
mov qword [rbp - 0x39], 0x25ff0e70
mov qword [rbp - 0x31], rsi
mov byte [rbp + 0x67], al
mov byte [rbp + 0x6f], al
mov qword [rbp + 0x77], rsi
call fcn.1400b3f24
mov r9d, dword [rbp + 0x18]
mov r8d, eax
bt r9d, 0xc
jb 0x140025664
nop
movzx edx, byte [rbp + 0x67]
mov r11, rbx
movzx r10d, byte [rbp - 9]
cmp dl, 5
jb 0x140025448
mov r8d, SafeArrayDestroy
mov qword [rbp - 0x43], rbx
lea r11, [rbp - 0x49]
lea r13d, [r8 - 0xd]
jmp 0x1400255cf
movzx eax, byte [rbp + 4]
and al, 0xc7
cmp al, 5
jne 0x1400254a2
mov ecx, r8d
lea rdi, [rbp - 0x19]
mov rsi, rbx
movzx eax, r10b
rep movsb byte [rdi], byte [rsi]
mov ecx, r9d
lea r11, [rbp - 0x19]
shr rcx, 2
mov edx, ebx
and ecx, 0xf
sub edx, r12d
add edx, dword [rbp + 0x14]
sub rax, rcx
cmp byte [rbp + 2], 0xff
mov dword [rbp + rax - 0x1d], edx
jne 0x1400255cb
cmp byte [rbp + 6], 4
movzx edx, byte [rbp + 0x67]
jne 0x1400255cf
mov r13d, 1
jmp 0x1400255cf
movzx edx, byte [rbp + 2]
cmp dl, 0xe8
jne 0x1400254c6
movsxd rax, dword [rbp + 0xc]
lea r11, [rbp - 0x29]
add rax, rbx
movzx ecx, r10b
add rcx, rax
mov qword [rbp - 0x21], rcx
jmp 0x1400255c5
movzx eax, dl
and al, 0xfd
cmp al, 0xe9
jne 0x140025524
movsx rax, byte [rbp + 0xc]
movzx ecx, r10b
add rcx, rbx
cmp dl, 0xeb
je 0x1400254e4
movsxd rax, dword [rbp + 0xc]
add rcx, rax
mov rax, qword [r14]
cmp rax, rcx
ja 0x140025507
add rax, 5
cmp rcx, rax
jae 0x140025507
cmp rdi, rcx
mov r15, rcx
cmovae r15, rdi
jmp 0x1400255cb
cmp rbx, r15
mov qword [rbp - 0x43], rcx
mov r13d, esi
lea r11, [rbp - 0x49]
setae r13b
mov r8d, SafeArrayDestroy
jmp 0x1400255cb
movzx esi, byte [rbp + 3]
movzx ecx, dl
and cl, 0xf0
cmp cl, 0x70
je 0x14002555a
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
je 0x14002555a
movzx eax, sil
and al, 0xf0
cmp al, 0x80
je 0x14002555a
and dl, 0xfe
cmp dl, 0xc2
jne 0x1400255cb
xor r13d, r13d
cmp rbx, r15
setae r13b
jmp 0x1400255cb
movzx edi, r10b
add rdi, rbx
cmp cl, 0x70
je 0x140025573
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
movsxd rax, dword [rbp + 0xc]
jne 0x140025578
movsx rax, byte [rbp + 0xc]
add rdi, rax
mov rax, qword [r14]
cmp rax, rdi
ja 0x14002559a
add rax, 5
cmp rdi, rax
jae 0x14002559a
cmp qword [rbp + 0x77], rdi
mov r15, rdi
cmovae r15, qword [rbp + 0x77]
jmp 0x1400255cb
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
je 0x140025664
cmp dl, 0xf
movzx ecx, sil
movzx eax, dl
lea r11, [rbp - 0x39]
cmovne ecx, eax
mov qword [rbp - 0x31], rdi
and cl, 0xf
xor cl, 0x71
mov byte [rbp - 0x39], cl
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
movzx edx, byte [rbp + 0x67]
cmp rbx, r15
jae 0x1400255e1
movzx eax, r10b
cmp r8d, eax
jne 0x140025664
movzx r12d, byte [rbp + 0x6f]
lea eax, [r8 + r12]
cmp eax, 0x32
ja 0x140025664
mov eax, dword [r14 + 0x24]
cmp eax, 8
jae 0x140025664
mov byte [rax + r14 + 0x28], dl
mov rsi, r11
mov eax, dword [r14 + 0x24]
add dl, byte [rbp - 9]
movzx edi, r12b
mov ecx, r8d
mov byte [rax + r14 + 0x30], r12b
add r12b, r8b
mov r10, qword [r14 + 0x10]
inc dword [r14 + 0x24]
add rdi, r10
mov byte [rbp + 0x6f], r12b
mov byte [rbp + 0x67], dl
rep movsb byte [rdi], byte [rsi]
test r13d, r13d
jne 0x140025681
movzx ebx, dl
mov rdi, r15
add rbx, qword [r14]
lea rdx, [rbp - 9]
movzx r12d, r12b
mov rcx, rbx
mov qword [rbp + 0x77], r15
add r12, r10
call fcn.1400b3f24
mov r9d, dword [rbp + 0x18]
mov r8d, eax
mov esi, r13d
bt r9d, 0xc
jae 0x140025420
xor eax, eax
mov rbx, qword [rsp + 0xe8]
add rsp, 0x90
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp dl, 5
jae 0x14002571f
mov rdi, qword [r14]
movzx ecx, dl
movzx esi, dl
add rcx, rdi
mov edx, 5
sub edx, esi
call fcn.140025350
test eax, eax
jne 0x14002571f
cmp byte [rbp + 0x67], 2
jae 0x1400256bc
mov edx, 2
sub edx, esi
call fcn.140025350
test eax, eax
je 0x140025664
lea rcx, [rdi - 5]
mov r8d, gethostbyname
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [rbp + 0x17], 0x1000
jne 0x140025664
test byte [rbp + 0x1b], 0xf0
je 0x140025664
mov rax, qword [r14]
movzx edx, byte [rax - 5]
test dl, dl
je 0x1400256f8
cmp dl, 0x90
je 0x1400256f8
cmp dl, 0xcc
jne 0x140025664
mov ecx, 1
add rax, 0xfffffffffffffffc
cmp byte [rax], dl
jne 0x140025664
inc ecx
inc rax
cmp ecx, 5
jb 0x140025701
mov r10, qword [r14 + 0x10]
mov dword [r14 + 0x20], 1
mov rcx, qword [r14 + 8]
mov eax, 1
mov qword [rbp - 0x43], rcx
mov ecx, dword [rbp - 0x41]
movsd xmm0, qword [rbp - 0x49]
movzx edx, r12b
add rdx, r10
mov qword [r14 + 0x18], rdx
movsd qword [rdx], xmm0
mov dword [rdx + 8], ecx
movzx ecx, word [rbp - 0x3d]
mov word [rdx + 0xc], cx
jmp 0x140025666