Function at 0x140023318
Capabilities:
Authenticate hmac
Encode data using base64
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x1e8
mov r13d, dword [rcx]
mov r11, qword [rdx]
mov rbx, qword [r8]
xor edx, edx
xor r8d, r8d
mov eax, r13d
lea edi, [rdx + 1]
shr eax, 9
mov r10d, r13d
and eax, edi
shr r10d, 0xb
mov r14, r9
mov dword [rbp + 0x70], eax
xor eax, edi
and r10d, edi
mov dword [rbp + 0x68], eax
lea rax, [rdx - 2]
mov ecx, r8d
mov dword [rbp - 0x1c], eax
mov dword [rbp - 0x20], eax
mov dword [rbp - 0x48], eax
mov r9d, eax
mov dword [rbp - 0x64], eax
movsx eax, r13b
and eax, edi
mov dword [rbp - 0x2c], edx
mov dword [rbp - 0x14], edx
mov dword [rbp - 0x70], r13d
mov dword [rbp + 0x20], edx
mov dword [rbp - 4], edx
mov dword [rbp + 8], eax
mov qword [rbp - 0x78], r11
mov qword [rbp + 0x90], r11
mov qword [rbp + 0xa0], r11
mov dword [rbp - 0x5c], edx
mov dword [rbp + 0x18], edx
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x50], rcx
mov r15d, r8d
mov qword [rbp - 0x40], r8
mov qword [rbp + 0x28], rdx
mov qword [rbp + 0x10], r8
mov dword [rbp - 0x6c], r10d
mov r12d, r8d
mov dword [rbp], r8d
mov dword [rbp - 8], r8d
mov dword [rbp - 0x44], r8d
mov dword [rbp - 0x30], r8d
mov edi, 0x7fffffeb
mov dword [rbp + 0x88], reloc.OLEAUT32.dll_SafeArrayCreateEx
mov dword [rbp + 0x98], 0x52
movzx esi, word [rbx]
test esi, esi
je 0x140023efa
mov r10, qword [rbp + 0x180]
mov r8, qword [rbp + 0x188]
movsxd rcx, dword [r10 + 0x6c]
mov rax, qword [r10 + 0x20]
add rcx, 0xffffffffffffff9c
lea rcx, [rax + rcx*2]
test r8, r8
je 0x1400234cc
cmp r11, rcx
ja 0x140061cbc
mov rax, qword [rbp + 0x90]
mov edx, dword [r8]
cmp r11, rax
cmovb r11, rax
mov rcx, r11
mov qword [rbp - 0x78], r11
sub rcx, rax
mov eax, edi
sub eax, edx
sar rcx, 1
cdqe
cmp rax, rcx
jl 0x140061b40
lea eax, [rdx + rcx]
mov dword [r8], eax
test r15, r15
je 0x1400234d8
mov rax, qword [rbp + 0xa0]
cmp r15, rax
jbe 0x1400234e3
mov r8, r11
mov rdx, r15
mov rcx, rax
sub r8, r15
and r8, 0xfffffffffffffffe
call fcn.140026930
mov rax, qword [rbp + 0xa0]
mov r11, qword [rbp - 0x78]
mov rbx, qword [rbp - 0x80]
mov r10, qword [rbp + 0x180]
mov r9d, dword [rbp - 0x64]
mov r8, qword [rbp + 0x188]
sub r15, rax
mov qword [rbp - 0x40], rax
sar r15, 1
neg r15
lea r11, [r11 + r15*2]
mov r15, rax
jmp 0x1400234df
cmp qword [r10 + 0x40], rcx
ja 0x140061cbc
jmp 0x1400234ee
mov r11, qword [rbp + 0xa0]
mov qword [rbp - 0x78], r11
mov rdx, qword [rbp + 0x28]
mov qword [rbp + 0x90], r11
xor ecx, ecx
cmp dword [rbp - 0x5c], ecx
jne 0x14005eaf7
mov edi, r13d
and edi, 8
jne 0x14005eb7e
mov eax, 0x3f
cmp esi, eax
je 0x1400237c8
lea eax, [rsi - 0x2a]
mov edx, 1
cmp eax, edx
jbe 0x1400237c8
lea eax, [rdx + 0x7a]
cmp esi, eax
je 0x14005ecba
mov rax, qword [rbp - 0x50]
mov edx, ecx
mov rcx, qword [rbp + 0x28]
test rcx, rcx
jne 0x14005ecd2
xor ecx, ecx
bt r13d, 0xe
jb 0x14005ed10
mov eax, 0x3f
cmp esi, eax
ja 0x14002370f
je 0x140023d9e
mov eax, esi
test esi, esi
je 0x140023743
sub eax, 0x24
je 0x14005f9f0
sub eax, 4
je 0x140023b3d
dec eax
je 0x140023743
dec eax
je 0x140023f2f
dec eax
je 0x14005ed52
mov ecx, 3
cmp eax, ecx
je 0x1400242e9
xor r8d, r8d
mov r14d, dword [rbp - 0x48]
mov r12d, dword [rbp - 0x44]
mov edi, 1
lea r10d, [rdi + 1]
mov word [rbp + 0x78], si
mov ecx, 0xfc00
mov r9d, 0xd800
cmp dword [rbp - 0x6c], r8d
je 0x1400235d7
mov eax, esi
and eax, ecx
cmp eax, r9d
je 0x1400606a3
mov rbx, rdi
mov r15, r11
mov qword [rbp - 0x40], r11
cmp dword [rbp - 0x6c], r8d
je 0x140023640
test bl, r13b
je 0x140023640
movzx edx, si
mov eax, edx
and eax, ecx
cmp eax, r9d
je 0x1400619fa
mov eax, edx
mov ecx, 0x80
lea r9, [0x140000000]
cdq
idiv ecx
movsxd rcx, eax
movsxd rax, edx
movzx r8d, byte [rcx + r9 + 0xc8b90]
shl r8, 7
add r8, rax
movzx eax, word [r9 + r8*2 + 0xbc090]
xor r8d, r8d
movzx ecx, byte [r9 + rax*8 + 0xb9653]
test ecx, ecx
jne 0x140024257
mov al, r13b
and al, bl
neg al
sbb ecx, ecx
neg ecx
add ecx, 0x1d
mov word [r11], cx
add r11, r10
mov qword [rbp - 0x78], r11
test edi, edi
je 0x140023684
mov r8d, edi
lea rdx, [rbp + 0x78]
mov rcx, r11
add r8, r8
mov ebx, edi
call fcn.140026930
mov r11, qword [rbp - 0x78]
xor r8d, r8d
lea r11, [r11 + rbx*2]
lea ebx, [r8 + 1]
mov qword [rbp - 0x78], r11
mov eax, reloc.WSOCK32.dll_listen
cmp si, ax
je 0x140061a24
mov eax, 0xa
cmp si, ax
je 0x140061a24
mov r10, qword [rbp + 0x180]
mov r9d, dword [rbp - 0x64]
mov dword [rbp], r12d
mov dword [rbp - 0x1c], r14d
cmp r9d, 0xfffffffe
je 0x140023a9e
mov eax, dword [rbp - 0x30]
mov dword [rbp - 0x20], r9d
mov dword [rbp - 8], eax
cmp edi, ebx
jne 0x140061a5f
mov r14d, dword [r10 + 0x98]
movzx eax, word [r11 - 2]
or r14d, dword [rbp + 8]
mov dword [rbp - 0x44], eax
mov dword [rbp - 0x48], r14d
mov rbx, qword [rbp - 0x80]
mov edi, 0x7fffffeb
mov rcx, qword [rbp - 0x50]
mov r14, qword [rbp + 0x148]
mov r12d, dword [rbp]
mov rdx, qword [rbp + 0x28]
add rbx, 2
mov qword [rbp - 0x80], rbx
jmp 0x140023401
mov eax, esi
sub eax, 0x5b
je 0x1400237d6
dec eax
je 0x140023ac7
dec eax
je 0x140060686
dec eax
je 0x140060641
sub eax, 0x1d
je 0x14005fa18
dec eax
jne 0x1400235a1
mov rax, qword [rbp + 0x150]
mov ecx, dword [rbp - 0x30]
mov rdx, qword [rbp + 0x140]
mov dword [rax], ecx
mov rax, qword [rbp + 0x158]
mov ecx, dword [rbp - 0x44]
mov dword [rax], r9d
mov rax, qword [rbp + 0x160]
mov qword [rdx], rbx
mov dword [rax], ecx
mov rax, qword [rbp + 0x168]
mov ecx, dword [rbp - 0x48]
mov dword [rax], ecx
mov rax, qword [rbp + 0x138]
mov qword [rax], r11
test r8, r8
je 0x1400237af
sub r11, qword [rbp + 0x90]
mov ecx, dword [r8]
mov eax, 0x7fffffeb
sub eax, ecx
sar r11, 1
cdqe
cmp rax, r11
jl 0x140061c07
add ecx, r11d
mov dword [r8], ecx
mov eax, 1
add rsp, 0x1e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edx, 1
mov rax, qword [rbp - 0x50]
jmp 0x140023540
lea r11, [rbx + 2]
mov edi, 6
lea rdx, str._:_:__
mov rcx, r11
mov r8d, edi
call fcn.140024680
xor r8d, r8d
test eax, eax
je 0x140060ff7
lea rdx, [0x1400ac438]
mov r8d, edi
mov rcx, r11
call fcn.140024680
xor r8d, r8d
test eax, eax
je 0x140061004
mov r15, qword [rbp - 0x78]
lea eax, [rdi + 0x37]
mov qword [rbp - 0x40], r15
cmp word [r11], ax
ja 0x140023842
movzx eax, word [r11]
movabs rcx, 0x2400400000000000
bt rcx, rax
jb 0x140061029
mov eax, r8d
mov dword [rbp - 0x58], eax
mov r9d, 0x5e
lea r10d, [r9 - 0x5c]
lea edx, [r9 - 0x19]
mov ecx, 0x5c
add rbx, r10
mov qword [rbp - 0x80], rbx
movzx esi, word [rbx]
cmp esi, ecx
je 0x1400244c2
test eax, eax
jne 0x14002387a
cmp esi, r9d
je 0x140061061
mov ecx, 0x5d
cmp esi, ecx
je 0x14006106e
add r15, 6
xor edx, edx
mov edi, r8d
mov dword [rbp - 0x60], r8d
mov dword [rbp - 0x1c], r8d
mov r13d, r8d
mov r12d, r8d
mov dword [rbp - 0x68], r8d
lea rcx, [rbp + 0x48]
lea r8d, [rdx + 0x20]
mov qword [rbp - 0x28], r15
mov r14, r15
mov qword [rbp], r15
call fcn.1400271a0
mov rbx, qword [rbp - 0x80]
xor ecx, ecx
test esi, esi
je 0x140061895
mov r11d, dword [rbp - 0x6c]
mov r9, qword [rbp - 0x50]
jmp 0x1400239d5
cmp r15, r14
ja 0x1400610fe
mov edx, dword [rbp - 0x5c]
test edx, edx
jne 0x140061117
cmp esi, 0x5b
je 0x140061141
lea eax, [rdx + 0x5c]
cmp esi, eax
je 0x1400244f1
xor r8d, r8d
mov r10, qword [rbp + 0x148]
mov rcx, qword [rbp + 0x180]
mov r9d, 1
mov r15d, 0x5c
cmp word [rbx + 2], r15w
je 0x1400616b5
mov r15d, reloc.WSOCK32.dll_listen
mov rax, rbx
cmp esi, r15d
je 0x1400616e5
mov r15d, 0xa
cmp esi, r15d
je 0x1400616e5
test edx, edx
jne 0x140023959
lea r15d, [rdx + 0x2d]
cmp word [rbx + 2], r15w
je 0x140024191
mov r10d, 2
lea r15d, [r10 - 1]
cmp r12d, r10d
jl 0x140023a0d
cmp r12d, r15d
je 0x140023d8a
mov r9, qword [rbp + 0x180]
mov r8d, dword [rbp - 0x70]
mov dword [rsp + 0x28], esi
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x48]
mov dword [rsp + 0x20], esi
call fcn.1400245b4
add r13d, eax
mov r15, qword [rbp - 0x28]
mov rbx, qword [rbp - 0x80]
mov edx, dword [rbp - 0x5c]
mov r9, qword [rbp - 0x50]
mov r8, qword [rbp + 0x188]
mov r11d, dword [rbp - 0x6c]
mov r10d, dword [rbp - 0x70]
mov ecx, dword [rbp - 0x68]
add rbx, 2
xor eax, eax
mov qword [rbp - 0x80], rbx
movzx esi, word [rbx]
test esi, esi
je 0x140061873
cmp esi, 0x5d
je 0x140023a15
xor ecx, ecx
test r11d, r11d
je 0x1400239f2
mov eax, esi
mov edx, 0xfc00
mov r8d, 0xd800
and eax, edx
cmp eax, r8d
je 0x1400610ca
mov r8, qword [rbp + 0x188]
mov r10d, 1
test r8, r8
je 0x1400238de
jmp 0x1400238d5
add r12d, r15d
jmp 0x14002396c
test edx, edx
jne 0x1400239d3
mov r9d, dword [rbp - 0x64]
mov eax, dword [rbp - 0x1c]
lea esi, [rdx + 1]
cmp r15, r14
lea edx, [rsi - 2]
cmova eax, esi
cmp r9d, 0xfffffffe
cmove r9d, edx
mov edx, dword [rbp - 0x30]
mov dword [rbp - 8], edx
mov edx, dword [rbp - 0x44]
mov dword [rbp - 0x64], r9d
mov dword [rbp], edx
mov edx, dword [rbp - 0x48]
mov dword [rbp - 0x20], r9d
mov dword [rbp - 0x1c], edx
xor edx, edx
test eax, eax
jne 0x140061a6e
mov r11, qword [rbp - 0x78]
mov ebx, dword [rbp - 0x58]
mov eax, edx
cmp ebx, edi
mov ecx, WSAGetLastError
setne al
add eax, ecx
mov word [r11], ax
add r11, 2
mov qword [rbp - 0x78], r11
test r8, r8
je 0x140023f08
mov r13d, dword [rbp - 0x70]
add r11, 0x20
mov r15, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x80]
mov qword [rbp - 0x78], r11
xor r8d, r8d
jmp 0x1400236ea
or eax, 0xffffffff
mov dword [rbp - 0x20], eax
cmp edi, ebx
jne 0x140061a39
mov r9d, dword [rbp + 8]
movzx eax, si
mov dword [rbp - 0x64], r9d
mov dword [rbp - 0x30], eax
cmp edi, ebx
je 0x1400236e6
jmp 0x140061a48
mov r9d, dword [r10 + 0x70]
mov dword [rsp + 0x28], ecx
lea rdx, [rbp + 0x34]
lea rcx, [rbp - 0x80]
mov r8, r14
mov qword [rbp + 0x40], rbx
mov dword [rsp + 0x20], r13d
call fcn.1400246ac
xor r8d, r8d
movsxd rdi, eax
cmp dword [r14], r8d
jne 0x140061bda
test eax, eax
jne 0x140024335
mov eax, dword [rbp + 0x34]
cmp eax, 0xffff
ja 0x1400606d3
mov ebx, 1
movzx esi, ax
mov word [rbp + 0x78], ax
mov edi, ebx
mov r12d, dword [rbp - 0x44]
mov r14d, dword [rbp - 0x48]
mov r10d, 2
mov r11, qword [rbp - 0x78]
mov ecx, 0xfc00
mov r9d, 0xd800
jmp 0x1400235da
mov r8, qword [r10 + 0x40]
mov dword [rbp - 0x60], r13d
mov dword [rbp - 0x18], ecx
mov qword [rbp + 0x10], r8
xor r8d, r8d
mov r13d, ecx
lea esi, [r8 + 2]
mov dword [rbp - 0x58], 0x85
mov dword [rbp - 0x68], r8d
add rbx, rsi
lea ecx, [rsi + 0x28]
lea edi, [rsi + 0x38]
mov qword [rbp - 0x80], rbx
cmp word [rbx], cx
je 0x14005ed6d
mov r12d, 0x3f
cmp word [rbx], r12w
je 0x140023f49
test dword [rbp - 0x70], 0x1000
jne 0x14005f632
mov rcx, qword [rbp - 0x78]
mov esi, dword [rbp - 0x58]
mov r9d, 1
add dword [r10 + 0x70], r9d
movzx eax, word [r10 + 0x70]
mov r13d, r9d
mov word [rcx + 4], ax
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x78]
mov r12, qword [rbp + 0x188]
xor ecx, ecx
mov edi, 0x52
mov r11d, dword [rbp - 0x68]
mov r10d, dword [rbp - 0x60]
mov r9, qword [rbp + 0x180]
mov r14d, 1
add dword [r9 + 0x88], r14d
cmp dword [r9 + 0x88], 0xfa
jg 0x140061c57
mov word [rax], si
mov edi, dword [r9 + 0x98]
mov ebx, dword [r9 + 0x70]
mov qword [rbp - 0x10], rax
mov r15, rax
mov qword [rbp - 0x40], rax
mov rax, r12
mov dword [rbp - 4], ecx
neg rax
lea rax, [rbp - 4]
sbb r8, r8
and r8, rax
mov eax, 0x87
cmp esi, eax
je 0x14002458a
lea eax, [rsi - 0x7f]
mov edx, ecx
cmp eax, r14d
jbe 0x140024592
mov eax, dword [rbp + 0x178]
mov r14, qword [rbp + 0x148]
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x68], r9
add eax, edx
mov rdx, qword [rbp + 0x170]
mov qword [rsp + 0x60], rdx
lea rdx, [rbp + 0x1c]
lea r8, [rbp - 0x80]
mov qword [rsp + 0x58], rdx
lea rdx, [rbp + 0x38]
mov r9, r14
mov qword [rsp + 0x50], rdx
lea rdx, [rbp + 0x30]
mov qword [rsp + 0x48], rdx
lea rdx, [rbp + 0x6c]
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], ecx
lea rdx, [rbp - 0x10]
mov ecx, r10d
call fcn.140022f90
xor r8d, r8d
test eax, eax
je 0x140061bda
mov r10, qword [rbp + 0x180]
or r13d, 0xffffffff
mov eax, 0x81
add dword [r10 + 0x88], r13d
cmp esi, eax
je 0x140060946
mov r11, qword [rbp - 0x78]
lea eax, [rsi - 0x7d]
mov ecx, 3
cmp eax, ecx
jbe 0x140060962
mov eax, 0x87
cmp esi, eax
je 0x14006096e
mov r9d, 0x78
lea r10d, [r9 - 0x77]
mov r11, qword [rbp - 0x78]
mov ecx, dword [rbp + 0x30]
mov eax, dword [rbp + 0x1c]
mov rbx, qword [rbp - 0x80]
mov edx, reloc.OLEAUT32.dll_SafeArrayCreateEx
cmp word [rbx], dx
jne 0x140061c4e
test r12, r12
jne 0x14002428d
mov r11, qword [rbp - 0x10]
mov edx, VariantChangeTypeEx
mov qword [rbp - 0x78], r11
cmp esi, edx
je 0x140023eed
mov edx, dword [rbp - 0x44]
mov r9d, dword [rbp - 0x64]
mov dword [rbp + 0x18], r8d
mov dword [rbp], edx
mov edx, dword [rbp - 0x48]
mov dword [rbp - 0x20], r9d
mov dword [rbp - 0x1c], edx
mov edx, dword [rbp - 0x30]
mov dword [rbp - 8], edx
cmp esi, 0x81
jl 0x1400609fe
cmp r9d, 0xfffffffe
je 0x1400609db
test ecx, ecx
jns 0x14002454d
test eax, eax
js 0x140023eed
mov ecx, dword [rbp + 0x38]
mov dword [rbp - 0x48], eax
mov dword [rbp - 0x44], ecx
jmp 0x140023ef1
mov eax, 0x5d
cmp word [rbx + 2], ax
jne 0x140023975
jmp 0x1400618a8
mov r11d, 1
mov r9d, ecx
mov dword [rbp - 0x2c], ecx
mov r13d, r11d
mov dword [rbp - 0x14], r11d
test r15, r15
je 0x1400245aa
test r9d, r9d
jne 0x140024571
mov eax, dword [rbp - 8]
mov esi, dword [rbp - 0x20]
mov dword [rbp - 0x44], r12d
mov dword [rbp - 0x30], eax
mov eax, dword [rbp - 0x1c]
mov dword [rbp - 0x64], esi
mov dword [rbp - 0x48], eax
mov eax, r9d
mov r12d, 2
mov dword [rbp - 0x60], ecx
sub eax, r13d
mov qword [rbp - 0x10], r15
neg eax
sbb eax, eax
and eax, r12d
mov dword [rbp - 0x28], eax
test edi, edi
jne 0x14005fa5d
lea rax, [rbx + 2]
mov edx, 0x2b
cmp word [rax], dx
je 0x14005fb7a
lea ecx, [rdx + 0x14]
cmp word [rax], cx
je 0x140024403
mov r12d, dword [rbp + 0x70]
mov dword [rbp - 0x68], r12d
mov eax, 0x75
cmp word [r15], ax
je 0x14005fb90
mov r11, qword [rbp - 0x78]
mov r10, qword [rbp + 0x188]
xor edi, edi
movzx eax, word [r15]
mov ecx, 3
sub ax, 0x1d
cmp ax, cx
jbe 0x14006021a
cmp word [r15], 0x17
jb 0x140024413
movzx eax, word [r15]
mov ecx, 6
sub ax, 0x6e
cmp ax, cx
ja 0x140024070
xor r8d, r8d
test r13d, r13d
je 0x1400601c2
test r9d, r9d
jne 0x1400601ce
or eax, 0xffffffff
cmp r13d, eax
je 0x140024187
lea eax, [rcx - 5]
cmp r13d, eax
jne 0x1400601ea
add r12w, 0x66
mov word [r11], r12w
mov esi, 2
mov rbx, qword [rbp - 0x80]
add r11, rsi
mov r14d, 0x78
mov qword [rbp - 0x78], r11
mov r15d, dword [rbp - 0x60]
mov r13d, 0x81
test r15d, r15d
jne 0x140060491
mov rcx, qword [rbp + 0x180]
mov eax, dword [rbp - 0x28]
mov r15, r8
or dword [rcx + 0x98], eax
mov qword [rbp - 0x40], r8
mov r9d, dword [rbp - 0x64]
mov r13d, dword [rbp - 0x70]
jmp 0x1400236ea
test rcx, rcx
je 0x14002340c
jmp 0x14005eae4
test ebx, ebx
jne 0x140061b28
lea rdx, [rbp + 0x48]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
mov rcx, r11
call fcn.140026930
mov r11, qword [rbp - 0x78]
mov r9d, dword [rbp - 0x64]
jmp 0x140023a82
or eax, 0xffffffff
mov r9d, ecx
mov dword [rbp - 0x2c], ecx
mov r13d, eax
mov dword [rbp - 0x14], eax
mov r11d, 1
jmp 0x140023db1
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx edx, word [rbx]
cmp edx, edi
jle 0x14005f008
mov ecx, edx
mov r15d, 0x3c
sub ecx, r15d
je 0x14005f796
dec ecx
je 0x14005f763
dec ecx
je 0x140024567
sub ecx, 5
je 0x14005f6db
sub ecx, 0xd
je 0x14005f682
sub ecx, esi
je 0x14005f669
cmp ecx, 0x2a
je 0x14005f661
mov r11d, r8d
mov r15d, 0x2d
mov r9d, reloc.OLEAUT32.dll_SafeArrayCreateEx
mov eax, r8d
mov r10d, r8d
mov dword [rbp - 0x38], r8d
lea rcx, [rbp - 0x38]
mov dword [rbp - 0x58], eax
cmp dx, r9w
je 0x140023ffd
cmp dx, di
je 0x140023ff6
add rbx, rsi
movzx eax, dx
mov qword [rbp - 0x80], rbx
cmp eax, r15d
je 0x140024581
cmp eax, 0x69
jne 0x14006089b
mov eax, 1
or dword [rcx], eax
movzx edx, word [rbx]
cmp dx, r9w
jne 0x140023fc5
mov r10d, dword [rbp - 0x38]
mov eax, dword [rbp - 0x58]
or r10d, dword [rbp - 0x70]
not eax
and r10d, eax
cmp word [rbx], r9w
jne 0x140060924
mov rcx, qword [rbp + 0x180]
mov r11, qword [rbp - 0x78]
mov r12d, 4
mov rax, qword [rcx + 0x28]
add rax, r12
cmp r11, rax
je 0x140060903
mov esi, 1
mov eax, r10d
shr eax, 9
and eax, esi
mov dword [rbp + 0x70], eax
xor eax, esi
mov dword [rbp + 0x68], eax
movsx eax, r10b
and eax, esi
mov dword [rbp + 8], eax
mov rax, qword [rbp + 0x130]
mov r13d, r10d
mov dword [rbp - 0x70], r10d
mov r15, r8
mov qword [rbp - 0x40], r8
mov dword [rax], r10d
mov r9d, dword [rbp - 0x64]
jmp 0x1400236ea
movzx eax, word [r15]
mov ecx, 0xa
sub ax, 0x7d
cmp ax, cx
ja 0x1400601a7
mov rdi, qword [rbp - 0x40]
xor r8d, r8d
mov r14, r11
sub r14, r15
lea eax, [rcx + 0x7d]
mov r15d, r8d
sar r14, 1
mov r12d, r8d
cmp word [rdi], ax
je 0x14005fc19
mov eax, 0x81
cmp word [rdi], ax
jb 0x14005fc2d
lea edx, [rax - 0x80]
test r9d, r9d
jne 0x14005fcc6
mov rax, qword [rbp + 0x10]
mov r9, qword [rbp + 0x180]
mov word [r11], r8w
mov r8d, dword [rbp - 0x6c]
mov qword [rsp + 0x20], rax
mov rcx, rdi
cmp r13d, edx
jg 0x14005fc69
call fcn.140024ab0
lea eax, [r14 + r14]
lea rbx, [rdi + 2]
movsxd r8, eax
mov rcx, rbx
mov rdx, rdi
call fcn.140026930
mov r11, qword [rbp - 0x78]
xor r8d, r8d
add r11, 2
mov qword [rbp - 0x78], r11
test r13d, r13d
je 0x14005fc4b
movzx eax, word [rbp - 0x68]
mov ecx, reloc.OLEAUT32.dll_VariantChangeTypeEx
mov r12, rdi
add ax, cx
mov qword [rbp - 0x40], rbx
mov word [rdi], ax
mov rbx, qword [rbp - 0x80]
mov edx, 1
sub r13d, edx
mov dword [rbp - 0x14], r13d
test r13d, r13d
js 0x14006002c
mov r8, qword [rbp + 0x188]
test r8, r8
je 0x14002415d
test r13d, r13d
jg 0x14005fe3d
lea edi, [r13 - 1]
xor r8d, r8d
test edi, edi
jns 0x14005fe87
mov r11, qword [rbp - 0x78]
mov esi, 2
lea r14d, [rsi + 0x76]
test r15, r15
je 0x140023ec3
jmp 0x14005ffd8
add r12w, 0x62
jmp 0x140023ea9
add rbx, 4
mov r15d, 0x5c
mov qword [rbp - 0x80], rbx
cmp word [rbx], r15w
mov r15d, 4
je 0x1400616f2
cmp word [rbx], r8w
je 0x140061867
test edx, edx
jne 0x1400241cb
lea r9d, [rdx + 0x5d]
cmp word [rbx], r9w
je 0x140061867
movzx r8d, word [rbx]
mov dword [rbp - 0x38], r8d
test r11d, r11d
je 0x1400241f3
mov r9d, 0xfc00
mov eax, r8d
and eax, r9d
mov r9d, 0xd800
cmp eax, r9d
je 0x140061782
test edx, edx
jne 0x14002420d
lea eax, [rdx + 0x5c]
cmp r8d, eax
je 0x1400617b0
cmp r8d, 0x5b
je 0x14006180c
mov r15d, dword [rbp - 0x70]
cmp r8d, esi
jb 0x140061cb3
je 0x1400245a2
mov eax, reloc.WSOCK32.dll_listen
lea r12d, [rax - 0xb]
cmp r8d, eax
je 0x140061853
lea eax, [r12 + 8]
cmp r8d, eax
je 0x140061853
mov rax, qword [rbp + 0x180]
mov dword [rsp + 0x28], r8d
mov r9, rax
mov r8d, r15d
jmp 0x140023984
mov r9d, dword [rbp - 0x64]
mov eax, reloc.WSOCK32.dll_recv
mov word [r11], ax
add r11, r10
mov eax, 9
mov word [r11], ax
add r11, r10
mov word [r11], cx
add r11, r10
mov qword [rbp - 0x78], r11
cmp r9d, 0xfffffffe
jne 0x1400236e6
jmp 0x140061a19
mov r8d, dword [rbp - 4]
mov edx, dword [r12]
mov edi, 0x7fffffeb
mov ecx, edi
lea eax, [r8 - 4]
sub ecx, edx
cmp ecx, eax
jl 0x140061b40
mov r13d, dword [rbp - 0x70]
mov esi, 2
lea eax, [r8 - 4]
add r11, rsi
add eax, edx
mov dword [r12], eax
mov word [r11], si
add r11, rsi
mov word [r11], r9w
mov r9d, dword [rbp - 0x64]
add r11, rsi
mov word [r11], si
mov rbx, qword [rbp - 0x80]
add r11, rsi
mov qword [rbp - 0x78], r11
xor r8d, r8d
jmp 0x1400236ef
mov r8d, dword [rbp - 0x30]
mov r12d, dword [rbp - 0x44]
cmp r9d, 0xfffffffe
mov eax, 0xffffffff
mov r15, r11
mov qword [rbp - 0x40], r11
cmove r9d, eax
mov eax, dword [rbp - 0x48]
mov dword [rbp - 8], r8d
mov dword [rbp - 0x1c], eax
movsx eax, r13b
mov dword [rbp - 0x64], r9d
and eax, 4
mov dword [rbp - 0x20], r9d
mov dword [rbp], r12d
or eax, 0x30
shr eax, 2
mov word [r11], ax
add r11, 2
jmp 0x140023a8e
cmp edi, 0x1a
je 0x1400606fa
mov r9d, dword [rbp - 0x64]
cmp edi, 0x19
je 0x140060fea
mov ebx, reloc.WSOCK32.dll_recv
cmp r9d, 0xfffffffe
jne 0x140024366
lea eax, [rdi - 6]
cmp eax, ebx
lea eax, [rbx - 0x11]
cmovbe r9d, eax
mov dword [rbp - 0x64], r9d
mov eax, dword [rbp - 0x48]
mov r8d, dword [rbp - 0x30]
mov edx, dword [rbp - 0x44]
mov dword [rbp - 0x1c], eax
mov eax, CreateStdDispatch
mov dword [rbp - 8], r8d
mov dword [rbp - 0x20], r9d
mov dword [rbp], edx
cmp edi, eax
je 0x140060728
mov eax, RegisterActiveObject
cmp edi, eax
je 0x140060a39
xor r8d, r8d
lea esi, [rax - 0x1b]
test edi, edi
js 0x140060e79
lea eax, [rdi - 0xf]
cmp eax, esi
jbe 0x140060f68
cmp edi, esi
je 0x140060f20
lea eax, [rdi - 4]
cmp eax, esi
jbe 0x140060f20
mov r11, qword [rbp - 0x78]
lea eax, [rdi - 0x1d]
mov ecx, 5
cmp eax, ecx
jbe 0x140060f39
lea eax, [rdi - 6]
mov r15, r8
cmp eax, ebx
cmovbe r15, r11
mov qword [rbp - 0x40], r15
cmp dword [rbp - 0x6c], r8d
je 0x140060f55
mov word [r11], di
add r11, 2
mov qword [rbp - 0x78], r11
jmp 0x1400236e6
mov r12d, dword [rbp + 0x68]
mov rbx, rax
mov qword [rbp - 0x80], rax
jmp 0x140023e20
movzx esi, word [r15]
mov edi, reloc.WSOCK32.dll_gethostbyname
mov r8d, dword [rbp - 0x6c]
mov r10d, 1
movzx eax, word [r15]
sub ax, 0xf
cmp ax, r10w
jbe 0x1400602d2
or eax, 0xffffffff
mov r15d, eax
mov r14d, eax
mov rdx, qword [rbp - 0x40]
mov rax, qword [rbp - 0x78]
mov r11, rdx
mov qword [rbp - 0x78], rdx
test r13d, r13d
je 0x140024579
mov ecx, dword [rbp - 0x2c]
add r12d, edi
test ecx, ecx
jne 0x140060321
or eax, 0xffffffff
cmp r13d, eax
jne 0x1400602e1
add r12w, 0x21
mov word [rdx], r12w
lea r11, [rdx + 2]
mov qword [rbp - 0x78], r11
test r8d, r8d
je 0x140024493
bt esi, 0x1c
jb 0x140060452
mov word [r11], si
mov esi, 2
add r11, rsi
xor r8d, r8d
mov qword [rbp - 0x78], r11
test r14d, r14d
jns 0x140060481
mov r15d, dword [rbp - 0x60]
mov rbx, qword [rbp - 0x80]
mov r14d, 0x78
jmp 0x140023ec7
lea rcx, [rbx + 2]
cmp word [rcx], dx
je 0x14002459a
lea rdx, [0x1400ac448]
mov r8d, 3
call fcn.140024680
xor r8d, r8d
test eax, eax
jne 0x140023887
jmp 0x140061056
mov rax, qword [rbp + 0x180]
mov esi, dword [rbp - 0x70]
mov r8, qword [rbp + 0x148]
mov r9d, dword [rax + 0x70]
mov dword [rsp + 0x28], r10d
lea rdx, [rbp + 0x34]
lea rcx, [rbp - 0x80]
mov dword [rsp + 0x20], esi
call fcn.1400246ac
mov r10, qword [rbp + 0x148]
xor r8d, r8d
movsxd rbx, eax
cmp dword [r10], r8d
jne 0x140061bda
test eax, eax
jne 0x140061403
mov esi, dword [rbp + 0x34]
mov rbx, qword [rbp - 0x80]
mov r11d, dword [rbp - 0x6c]
mov edx, dword [rbp - 0x5c]
jmp 0x140023907
test eax, eax
jns 0x140023d7c
mov eax, dword [rbp + 0x6c]
mov dword [rbp + 0x38], eax
mov eax, ecx
or eax, edi
mov dword [rbp + 0x1c], eax
jmp 0x140023d74
mov esi, 0x81
jmp 0x14005f772
mov esi, dword [rbp - 0x64]
jmp 0x140023dd9
xor r8d, r8d
jmp 0x140023ed6
lea rcx, [rbp - 0x58]
jmp 0x140023fed
mov rdx, r14
jmp 0x140023c3b
mov rcx, r14
jmp 0x140023c3b
mov rbx, rcx
jmp 0x140023856
xor r8d, r8d
jmp 0x140023959
mov eax, 9
jmp 0x140061b87
mov qword [rbp - 0x80], rcx
movzx esi, word [rcx]
mov rbx, rcx
mov qword [rbp - 0x50], r8
jmp 0x14002340c
test esi, esi
je 0x1400234f9
mov eax, 0x5c
cmp esi, eax
jne 0x14005eb23
lea r14d, [rax - 0x17]
cmp word [rbx + 2], r14w
jne 0x14005eb23
xor r8d, r8d
add rbx, 2
mov dword [rbp - 0x5c], r8d
jmp 0x1400236ef
test rdx, rdx
je 0x14005eb46
test r8, r8
jne 0x14005eb42
mov eax, ebx
sub eax, dword [r10 + 0x30]
sar rax, 1
sub ax, word [rdx + 4]
mov word [rdx + 6], ax
mov rbx, qword [rbp - 0x80]
mov qword [rbp + 0x28], rcx
bt r13d, 0xe
jae 0x1400235a1
mov dword [r11], 0xff0076
mov eax, ebx
mov qword [rbp + 0x28], r11
sub eax, dword [r10 + 0x30]
sar rax, 1
mov word [r11 + 4], ax
xor eax, eax
add r11, 8
mov word [r11 - 2], ax
mov rbx, qword [rbp - 0x80]
jmp 0x1400235a1
mov edx, 0xff
mov r12d, SafeArrayDestroyData
mov r9d, 1
cmp esi, edx
ja 0x14005ebb1
mov rcx, qword [r10 + 0x18]
lea r14d, [r9 + 1]
test byte [rsi + rcx], r9b
je 0x14005ebaf
add rbx, r14
mov qword [rbp - 0x80], rbx
movzx esi, word [rbx]
cmp esi, edx
jbe 0x14005eb9b
xor ecx, ecx
cmp esi, r12d
jne 0x14005ec9b
mov esi, 2
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx r8d, word [rbx]
test r8w, r8w
je 0x14005ec93
mov edx, dword [r10 + 0xac]
test edx, edx
je 0x14005ec0d
mov r8, qword [r10 + 0x38]
cmp rbx, r8
jae 0x14005ec40
mov eax, dword [rbp - 0x6c]
lea r9, [r10 + 0xb0]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.1400216d4
mov r10, qword [rbp + 0x180]
xor ecx, ecx
test eax, eax
je 0x14005ec40
jmp 0x14005ec7f
movsxd rdx, dword [r10 + 0xb0]
imul rcx, rdx, 0xfffffffffffffffe
add rcx, qword [r10 + 0x38]
cmp rbx, rcx
ja 0x14005ec3e
cmp r8w, word [r10 + 0xb4]
jne 0x14005ec3e
cmp edx, r9d
je 0x14005ec7d
movzx eax, word [r10 + 0xb6]
cmp word [rbx + 2], ax
je 0x14005ec7d
xor ecx, ecx
add rbx, rsi
mov qword [rbp - 0x80], rbx
cmp dword [rbp - 0x6c], ecx
je 0x14005ec68
movzx eax, word [rbx]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x14005ec68
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx r8d, word [rbx]
test r8w, r8w
je 0x14005ec8e
mov r9d, 1
jmp 0x14005ebd4
xor ecx, ecx
movsxd rax, dword [r10 + 0xb0]
lea rbx, [rbx + rax*2]
mov qword [rbp - 0x80], rbx
mov edx, 0xff
movzx esi, word [rbx]
jmp 0x14005eb89
mov r14, qword [rbp + 0x148]
mov r11, qword [rbp - 0x78]
mov r12d, dword [rbp]
mov r9d, dword [rbp - 0x64]
mov r8, qword [rbp + 0x188]
jmp 0x140023505
lea rcx, [rbx + 2]
call fcn.1400a96ac
xor ecx, ecx
test eax, eax
jne 0x1400237c8
jmp 0x14002352d
test rax, rax
jne 0x140023540
mov eax, dword [rbp + 0x20]
dec dword [rbp + 0x20]
test eax, eax
jg 0x1400237cd
xor eax, eax
test r8, r8
jne 0x14005ed07
mov eax, ebx
sub eax, dword [r10 + 0x30]
sar rax, 1
sub ax, word [rcx + 4]
mov word [rcx + 6], ax
mov rbx, qword [rbp - 0x80]
xor eax, eax
mov qword [rbp + 0x28], rax
jmp 0x1400237cd
test edx, edx
jne 0x14002354d
test rax, rax
jne 0x14002354d
mov dword [r11], 0xff0076
mov eax, ebx
mov qword [rbp + 0x28], r11
sub eax, dword [r10 + 0x30]
sar rax, 1
mov word [r11 + 4], ax
xor eax, eax
add r11, 8
mov word [r11 - 2], ax
mov rbx, qword [rbp - 0x80]
mov qword [rbp - 0x78], r11
jmp 0x14002354d
mov r11d, 1
or eax, 0xffffffff
mov r9d, r11d
mov dword [rbp - 0x2c], r11d
mov r13d, eax
mov dword [rbp - 0x14], eax
jmp 0x140023db1
lea r13, [rbx + 2]
mov edx, 0xff
cmp word [r13], di
je 0x14005eda1
cmp word [r13], dx
ja 0x14005ed98
movzx ecx, word [r13]
mov rax, qword [r10 + 0x18]
test byte [rcx + rax], sil
jne 0x14005eda1
mov ecx, 0x2a
mov r13d, dword [rbp - 0x18]
jmp 0x140023b77
mov rbx, r13
mov r14d, r8d
lea r12, [0x1400ccb00]
mov qword [rbp - 0x80], rbx
movzx eax, word [r13]
mov qword [rbp - 0x28], r8
mov qword [rbp - 0x40], r8
cmp ax, dx
ja 0x14005ede0
mov rcx, qword [r10 + 0x18]
movzx eax, ax
test byte [rax + rcx], sil
je 0x14005ede0
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx eax, word [rbx]
cmp ax, dx
jbe 0x14005edc8
mov r15, rbx
sub r15, r13
sar r15, 1
cmp word [rbx], di
jne 0x14005ee41
add rbx, rsi
mov qword [rbp - 0x80], rbx
mov rcx, rbx
mov qword [rbp - 0x28], rbx
movzx eax, word [rbx]
test ax, ax
je 0x14005ee1d
mov edx, reloc.OLEAUT32.dll_SafeArrayCreateEx
cmp ax, dx
je 0x14005ee1d
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx eax, word [rbx]
test ax, ax
jne 0x14005ee09
mov r14, rbx
sub r14, rcx
sar r14, 1
cmp r14d, 0xffff
jbe 0x14005ee41
mov rax, qword [rbp + 0x148]
mov dword [rax], VarR8FromUI1
jmp 0x140061cc3
mov eax, reloc.OLEAUT32.dll_SafeArrayCreateEx
cmp word [rbx], ax
jne 0x140061b70
mov dword [rbp - 0x38], r8d
mov rsi, r8
lea rdi, [0x1400cca30]
lea r10d, [rax - 0x28]
mov r11d, dword [rdi]
cmp r15d, r11d
jne 0x14005ee82
mov r8d, r15d
mov rdx, r12
mov rcx, r13
call fcn.140024680
xor r8d, r8d
test eax, eax
je 0x14005eea8
lea r10d, [r8 + 1]
add dword [rbp - 0x38], r10d
lea eax, [r11 + 1]
add rdi, 0xc
movsxd rcx, eax
lea rax, [0x1400cca9c]
add rsi, r10
add r12, rcx
cmp rdi, rax
jl 0x14005ee61
jmp 0x14005efe5
lea rax, [rsi + rsi*2]
lea rdx, [0x1400cca30]
mov r11d, QueryPathOfRegTypeLib
mov ecx, dword [rdx + rax*4 + 4]
cmp ecx, r11d
jne 0x14005ef38
test r14d, r14d
jne 0x140061b4c
mov r8, qword [rbp + 0x180]
mov rdx, qword [rbp - 0x78]
lea r10d, [r14 + 1]
mov rcx, qword [r8 + 0x48]
xor r9d, r9d
lea r15d, [r14 + 2]
mov dword [r8 + 0x9c], r10d
test rcx, rcx
je 0x14005ef0b
mov eax, LHashValOfNameSys
mov word [rdx], ax
movzx eax, word [rcx + 8]
add rdx, r15
mov word [rdx], ax
mov rcx, qword [rcx]
add rdx, r15
jmp 0x14005eeec
cmp dword [r8 + 0x8c], r9d
mov eax, r9d
setg al
add eax, r11d
mov word [rdx], ax
add rdx, r15
cmp dword [rbp - 0x64], 0xfffffffe
mov qword [rbp - 0x78], rdx
movzx ebx, ax
jne 0x14005efb7
or dword [rbp - 0x64], 0xffffffff
jmp 0x14005efb7
test r14d, r14d
jne 0x14005ef5b
test ecx, ecx
js 0x140061b5e
movzx eax, cx
mov rcx, qword [rbp - 0x78]
mov word [rcx], ax
add rcx, 2
mov ebx, eax
mov qword [rbp - 0x78], rcx
jmp 0x14005efaa
cmp dword [rdx + rax*4 + 8], r8d
jl 0x140061b4c
movzx eax, word [rdx + rax*4 + 8]
mov rdi, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x28]
mov word [rdi], ax
mov r15d, 2
mov ebx, eax
add rdi, r15
lea eax, [r14 + r14]
mov word [rdi], r14w
add rdi, r15
movsxd r8, eax
mov rcx, rdi
call fcn.140026930
movsxd rax, r14d
lea rdi, [rdi + rax*2]
xor eax, eax
mov word [rdi], ax
add rdi, r15
mov qword [rbp - 0x78], rdi
mov r8, qword [rbp + 0x180]
mov r10d, 1
cmp ebx, 0x96
jl 0x14005efe1
cmp ebx, 0x99
jle 0x14005efda
cmp ebx, 0x9b
jg 0x14005efe1
bts dword [r8 + 0x94], 0xc
jmp 0x14005efe1
mov dword [r8 + 0xa0], r10d
mov rbx, qword [rbp - 0x80]
mov eax, 9
cmp dword [rbp - 0x38], eax
jge 0x140061b70
mov r11, qword [rbp - 0x78]
mov r15, qword [rbp - 0x40]
mov r9d, dword [rbp - 0x64]
mov r13d, dword [rbp - 0x70]
jmp 0x140023a96
je 0x14005f63c
mov eax, SafeArrayDestroyDescriptor
cmp edx, eax
je 0x14005f580
mov eax, SafeArrayDestroyData
cmp edx, eax
je 0x14005f542
mov eax, reloc.OLEAUT32.dll_SafeArrayDestroyData
cmp edx, eax
je 0x14005f52c
mov eax, reloc.OLEAUT32.dll_SafeArrayRedim
cmp edx, eax
je 0x14005f7dc
cmp edx, 0x28
je 0x14005f07a
mov eax, 0x2b
cmp edx, eax
je 0x14005f670
lea r15d, [rax + 2]
cmp edx, r15d
je 0x14005f670
cmp edx, 0x2f
jle 0x14005f072
lea eax, [r15 + 0xc]
cmp edx, eax
jle 0x14005f670
mov r11d, r8d
jmp 0x140023fa8
mov eax, 0x87
mov r8, rbx
mov qword [rbp + 0x40], rbx
mov esi, eax
mov dword [rbp - 0x58], eax
cmp word [rbx + 2], r12w
jne 0x14005f0ee
lea eax, [rsi - 0x44]
cmp word [rbx + 4], ax
jne 0x14005f0ee
mov eax, 3
lea r9d, [rsi - 0x57]
mov edx, eax
mov ecx, eax
movzx eax, word [rbx + 6]
cmp ax, r9w
jb 0x14005f0d5
lea edi, [rsi - 0x4e]
lea r14d, [rcx - 2]
cmp ax, di
ja 0x14005f0ce
add rcx, r14
add edx, r14d
movzx eax, word [rbx + rcx*2]
cmp ax, r9w
jae 0x14005f0b9
mov r14, qword [rbp + 0x148]
mov eax, reloc.OLEAUT32.dll_SafeArrayCreateEx
cmp word [rbx + rcx*2], ax
jne 0x14005f0ee
lea eax, [rdx + 1]
movsxd rcx, eax
lea r8, [rbx + rcx*2]
mov qword [rbp + 0x40], r8
cmp word [r8 + 2], r12w
jne 0x14005f11c
movzx eax, word [r8 + 4]
mov ecx, SafeArrayDestroyDescriptor
cmp ax, cx
je 0x140023bb5
lea edi, [rcx + 0x1b]
sub ax, di
lea ecx, [rdi - 0x3b]
cmp ax, cx
jbe 0x140023bb5
jmp 0x14005f121
mov edi, 0x3c
xor r12d, r12d
or edx, 0xffffffff
mov eax, 0x8d
mov word [r11 + 4], ax
mov rbx, qword [rbp - 0x80]
mov eax, 2
add rbx, rax
mov dword [rbp - 0x18], eax
mov r9d, edx
mov qword [rbp - 0x80], rbx
movzx ecx, word [rbx]
mov r13d, edx
mov r15d, r12d
mov qword [rbp - 0x40], r12
mov r8d, r12d
cmp cx, word [rbp + 0x98]
jne 0x14005f24a
lea edx, [rax + 0x24]
cmp word [rbx + 2], dx
mov edx, r13d
jne 0x14005f24a
add rbx, 4
mov eax, VariantChangeTypeEx
mov edi, edx
mov qword [rbp - 0x80], rbx
mov word [r11 + 4], ax
mov rbx, qword [rbp - 0x80]
mov dword [rbp - 0x38], edx
movzx ecx, word [rbx]
mov edx, 9
lea eax, [rcx - 0x30]
cmp ax, dx
jbe 0x140061ba7
mov r12d, 0xff
cmp cx, r12w
ja 0x140061ba0
mov rax, qword [r10 + 0x18]
movzx ecx, cx
mov r13d, reloc.WSOCK32.dll_recv
test byte [rcx + rax], r13b
je 0x140061ba0
lea edx, [r13 - 0xe]
mov r15, rbx
mov qword [rbp - 0x40], rbx
add rbx, rdx
mov qword [rbp - 0x80], rbx
movzx eax, word [rbx]
cmp ax, r12w
ja 0x14005f202
mov rcx, qword [r10 + 0x18]
movzx eax, ax
test byte [rax + rcx], r13b
je 0x14005f202
add rbx, rdx
mov qword [rbp - 0x80], rbx
movzx eax, word [rbx]
cmp ax, r12w
jbe 0x14005f1e9
mov r12, qword [rbp + 0x188]
mov r13, rbx
xor ecx, ecx
sub r13, r15
sar r13, 1
test r12, r12
je 0x14005f220
lea eax, [rcx + 1]
add dword [r12], eax
test edi, edi
jle 0x14005f303
movzx eax, word [rbx]
add rbx, rdx
mov qword [rbp - 0x80], rbx
cmp ax, di
je 0x14005f303
sub rbx, rdx
mov dword [r14], RegisterActiveObject
jmp 0x140061cc3
cmp cx, di
jne 0x14005f26c
mov ecx, 0x3e
mov edi, ecx
mov dword [rbp - 0x38], ecx
jmp 0x14005f260
mov edi, edx
mov dword [rbp - 0x38], edx
add rbx, rax
mov qword [rbp - 0x80], rbx
jmp 0x14005f18f
mov edx, reloc.OLEAUT32.dll_SafeArrayRedim
cmp cx, dx
je 0x14005f25b
lea eax, [rcx - 0x2b]
mov edx, 0xfffd
mov edi, r12d
mov dword [rbp - 0x38], r12d
test dx, ax
je 0x14005f2ab
mov eax, gethostbyname
cmp cx, ax
jb 0x14005f1a3
mov eax, reloc.WSOCK32.dll_gethostname
cmp cx, ax
ja 0x14005f18f
mov r9d, r12d
jmp 0x14005f2c5
add rbx, 2
movzx r9d, cx
mov qword [rbp - 0x80], rbx
test r9d, r9d
js 0x14005f18f
mov eax, reloc.WSOCK32.dll_gethostname
mov r12d, gethostbyname
jmp 0x14005f2ee
cmp dx, ax
ja 0x14005f2f7
lea r8d, [r8 + r8*4]
movzx eax, dx
add rbx, 2
lea r8d, [r8 - 0x18]
mov qword [rbp - 0x80], rbx
lea r8d, [rax + r8*2]
mov eax, reloc.WSOCK32.dll_gethostname
movzx edx, word [rbx]
cmp dx, r12w
jae 0x14005f2cd
mov r12, qword [rbp + 0x188]
xor ecx, ecx
lea edx, [rcx + 2]
movzx eax, word [rbx]
add rbx, rdx
mov qword [rbp - 0x80], rbx
cmp ax, word [rbp + 0x88]
jne 0x14005f23b
test r12, r12
jne 0x14005f369
test r9d, r9d
js 0x14005f376
test r8d, r8d
jle 0x140061b8f
test r9d, r9d
je 0x14005f34d
lea eax, [r12 + 0x2d]
cmp r9d, eax
jne 0x14005f349
mov eax, dword [r10 + 0x70]
sub eax, r8d
lea r8d, [rax + 1]
jmp 0x14005f34d
add r8d, dword [r10 + 0x70]
test r8d, r8d
jle 0x140060891
cmp r8d, dword [r10 + 0x74]
jg 0x140060891
mov word [r11 + 6], r8w
mov rbx, qword [rbp - 0x80]
mov rax, qword [rbp - 0x78]
mov r13d, dword [rbp - 0x18]
jmp 0x140023bc2
mov r14d, dword [r10 + 0x60]
mov rsi, qword [r10 + 0x58]
mov r11d, ecx
test r14d, r14d
jle 0x14005f3c1
mov edi, 1
lea rdx, [rsi + 2]
mov r8d, r13d
mov rcx, r15
call fcn.1400a9aec
mov r10, qword [rbp + 0x180]
test eax, eax
je 0x14005f3b5
movsxd rax, dword [r10 + 0x64]
add r11d, edi
lea rsi, [rsi + rax*2]
cmp r11d, r14d
jl 0x14005f38b
mov edi, dword [rbp - 0x38]
mov r12, qword [rbp + 0x188]
xor ecx, ecx
cmp r11d, r14d
jge 0x14005f462
movzx r15d, word [rsi]
mov ecx, 1
mov dword [rbp - 0x28], r11d
add r11d, ecx
mov ebx, ecx
mov dword [rbp - 0x38], r15d
cmp r11d, r14d
jge 0x14005f444
movsxd rdi, dword [r10 + 0x64]
mov r12, qword [rbp - 0x40]
add rdi, rdi
add rsi, rdi
mov r8d, r13d
mov rcx, r12
lea rdx, [rsi + 2]
call fcn.1400a9aec
mov ecx, 1
test eax, eax
jne 0x14005f415
add r11d, ecx
add ebx, ecx
cmp r11d, r14d
jl 0x14005f3f0
mov r15d, dword [rbp - 0x38]
mov r12d, dword [rbp - 0x28]
cmp ebx, ecx
jle 0x14005f444
mov rax, qword [rbp - 0x78]
mov esi, dword [rbp - 0x58]
mov r13d, 3
add word [rax + 4], cx
mov word [rax + 6], r12w
mov word [rax + 8], bx
mov rbx, qword [rbp - 0x80]
jmp 0x140023bb9
mov rax, qword [rbp - 0x78]
mov esi, dword [rbp - 0x58]
mov r12, qword [rbp + 0x188]
mov word [rax + 6], r15w
mov rbx, qword [rbp - 0x80]
xor ecx, ecx
jmp 0x14005f36d
test edi, edi
jne 0x140061b96
mov edi, 0x52
cmp word [r15], di
jne 0x14005f4e2
lea r9d, [rdi - 0x51]
mov r8d, r9d
cmp r13d, r9d
jle 0x14005f4ba
lea rdx, [r15 + 2]
lea r10d, [rdi - 0x22]
lea r11d, [rdi - 0x49]
movzx eax, word [rdx]
sub ax, r10w
cmp ax, r11w
ja 0x140061b96
movzx eax, word [rdx]
lea ecx, [rcx + rcx*4]
add r8d, r9d
lea ecx, [rcx - 0x18]
add rdx, 2
lea ecx, [rax + rcx*2]
cmp r8d, r13d
jl 0x14005f48d
test ecx, ecx
jne 0x14005f4bf
mov ecx, 0xffff
mov rax, qword [rbp - 0x78]
mov esi, dword [rbp - 0x58]
mov r13d, dword [rbp - 0x18]
mov word [rax + 6], cx
mov edx, VariantChangeTypeEx
xor ecx, ecx
mov word [rax + 4], dx
mov rbx, qword [rbp - 0x80]
jmp 0x140023bc7
mov eax, 6
cmp r13d, eax
jne 0x140061b96
lea rdx, str.DEFINE
mov r8d, eax
mov rcx, r15
call fcn.140024680
xor ecx, ecx
test eax, eax
jne 0x140061b96
mov rax, qword [rbp - 0x78]
mov esi, dword [rbp - 0x58]
mov edx, VariantChangeTypeEx
mov word [rax + 4], dx
mov rbx, qword [rbp - 0x80]
lea r13d, [rcx + 1]
mov r11d, ecx
jmp 0x140023bcb
mov r9d, reloc.OLEAUT32.dll_SafeArrayCreateEx
lea r15d, [r9 - 0x28]
mov r13d, r15d
mov dword [rbp - 0x58], r15d
jmp 0x140060aa6
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx eax, word [rbx]
test ax, ax
je 0x14005f574
mov ecx, reloc.OLEAUT32.dll_SafeArrayCreateEx
cmp ax, cx
je 0x14005f56a
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx eax, word [rbx]
test ax, ax
jne 0x14005f556
cmp word [rbx], r8w
jne 0x140023ef1
mov dword [r14], reloc.WSOCK32.dll_select
jmp 0x140061cc3
add rbx, rsi
mov eax, reloc.OLEAUT32.dll_SafeArrayCreateEx
mov qword [rbp - 0x80], rbx
cmp word [rbx], ax
jne 0x14005f621
movzx eax, word [rbx + 2]
sub ax, cx
mov ecx, 1
cmp ax, cx
jbe 0x14005f621
cmp word [rbx + 2], r12w
je 0x14005f621
lea eax, [rcx + 0x7a]
cmp word [rbx + 2], ax
jne 0x14005f5c3
lea rcx, [rbx + 4]
call fcn.1400a96ac
test eax, eax
jne 0x14005f621
mov eax, 0x9d
mov word [r11], ax
add r11, rsi
jmp 0x14005f5f2
mov word [r11], ax
mov eax, dword [rbp - 0x80]
add r11, rsi
sub eax, dword [r10 + 0x30]
mov word [r11 + 2], r8w
sar rax, 1
add ax, cx
mov word [r11], ax
add r11, 4
mov qword [rbp - 0x78], r11
mov r15, r8
mov qword [rbp - 0x40], r8
jmp 0x14005f618
mov r11, r15
mov qword [rbp - 0x78], r15
mov r15, qword [rbp - 0x40]
mov rax, r11
sub rax, r15
sar rax, 1
mov word [r15 + 2], ax
mov rbx, qword [rbp - 0x80]
jmp 0x140023ef1
mov esi, 0x7e
lea eax, [rsi - 0x7d]
add dword [r10 + 0x8c], eax
jmp 0x14005f637
mov esi, 0x83
mov r11d, r8d
jmp 0x14005f64c
mov r11d, r8d
add rbx, 2
mov esi, 0x83
mov qword [rbp - 0x80], rbx
mov rax, qword [rbp - 0x78]
mov r12, qword [rbp + 0x188]
xor ecx, ecx
lea edi, [rcx + 0x52]
jmp 0x140023bcb
mov r11d, 1
jmp 0x14005f63f
add rbx, rsi
mov qword [rbp - 0x80], rbx
mov r9d, reloc.OLEAUT32.dll_SafeArrayCreateEx
mov r11d, r8d
lea r12d, [r9 + 7]
jmp 0x1400607c3
add rbx, rsi
mov eax, 0x3d
mov qword [rbp - 0x80], rbx
movzx edx, word [rbx]
cmp dx, ax
je 0x14005f6c3
mov eax, 0x3e
cmp dx, ax
je 0x14005f6b4
cmp dx, r15w
je 0x14005f7e2
mov eax, reloc.OLEAUT32.dll_SafeArrayCreateEx
jmp 0x140061b87
mov r15d, 1
mov r13d, r15d
mov dword [rbp - 0x58], r15d
jmp 0x14005f6d0
mov r13d, r8d
mov dword [rbp - 0x58], r8d
mov r15d, 1
mov r9d, reloc.OLEAUT32.dll_SafeArrayCreateEx
jmp 0x140060aa6
mov ecx, 1
mov qword [rbp + 0x28], r11
lea eax, [rcx + 0x75]
lea r12d, [rcx + 0x2f]
mov dword [rbp + 0x20], ecx
mov word [r11], ax
mov rbx, qword [rbp - 0x80]
add r11, rsi
add rbx, rsi
mov eax, r8d
mov qword [rbp - 0x80], rbx
movzx edx, word [rbx]
cmp dx, r12w
jb 0x14005f73e
lea r10d, [rcx + 0x38]
cmp dx, r10w
ja 0x14005f732
lea ecx, [rax + rax*4]
add rbx, rsi
movzx eax, dx
mov qword [rbp - 0x80], rbx
movzx edx, word [rbx]
lea eax, [rax + rcx*2]
add eax, 0xffffffd0
cmp dx, r12w
jae 0x14005f710
mov r10, qword [rbp + 0x180]
mov ecx, 1
mov edx, reloc.OLEAUT32.dll_SafeArrayCreateEx
cmp word [rbx], dx
jne 0x140061bb3
mov edx, 0xff
cmp eax, edx
jle 0x14005f5d1
mov eax, reloc.OLEAUT32.dll_SafeArrayDestroyData
jmp 0x140061b87
mov esi, 0x7d
lea eax, [rsi - 0x7c]
add dword [r10 + 0x8c], eax
add rbx, 2
jmp 0x14005f78d
mov esi, 0x7f
mov eax, 1
add dword [r10 + 0x8c], eax
add rbx, 4
mov qword [rbp - 0x80], rbx
jmp 0x14005f637
movzx eax, word [rbx + 2]
mov ecx, SafeArrayDestroyDescriptor
cmp eax, ecx
je 0x14005f9e6
mov ecx, 0x3d
cmp eax, ecx
je 0x14005f778
mov r9d, 0xff
cmp ax, r9w
ja 0x14005f7cd
mov ecx, eax
mov rax, qword [r10 + 0x18]
mov edi, reloc.WSOCK32.dll_recv
test byte [rcx + rax], dil
jne 0x14005f7ed
add rbx, rsi
mov dword [r14], reloc.OLEAUT32.dll_SafeArrayGetElement
jmp 0x140061cc3
mov r15d, 0x3c
mov r9d, 0xff
mov edi, reloc.WSOCK32.dll_recv
cmp dx, r15w
mov r8d, reloc.OLEAUT32.dll_SafeArrayRedim
lea edx, [r8 + 0x17]
cmove r8d, edx
add rbx, rsi
mov edx, gethostbyname
mov qword [rbp - 0x80], rbx
movzx ecx, word [rbx]
lea r11d, [rdx - 0x27]
movzx eax, cx
mov r12, rbx
sub ax, dx
cmp ax, r11w
jbe 0x140061ba7
cmp cx, r9w
ja 0x14005f84d
mov rdx, qword [r10 + 0x18]
movzx eax, cx
test byte [rax + rdx], dil
je 0x14005f848
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx ecx, word [rbx]
cmp cx, r9w
jbe 0x14005f82f
mov edx, gethostbyname
mov r14, rbx
xor r13d, r13d
sub r14, r12
sar r14, 1
cmp qword [rbp + 0x188], r13
je 0x14005f9da
mov r15d, dword [r10 + 0x70]
lea ecx, [r13 + 1]
add r15d, ecx
cmp word [rbx], r8w
jne 0x140061bf5
mov esi, dword [r10 + 0x60]
cmp esi, 0x2710
jge 0x140061be3
lea eax, [r14 + 2]
cmp eax, dword [r10 + 0x64]
jle 0x14005f8ad
mov dword [r10 + 0x64], eax
cmp r14d, 0x20
jle 0x14005f8ad
mov rax, qword [rbp + 0x148]
mov dword [rax], edx
jmp 0x140061cc3
mov r11, qword [r10 + 0x50]
mov edi, r13d
test esi, esi
jle 0x14005f92b
cmp r14d, dword [r11 + 8]
jne 0x14005f90c
mov rdx, qword [r11]
mov r8d, r14d
mov rcx, r12
call fcn.1400a9aec
test eax, eax
jne 0x14005f900
cmp dword [r11 + 0xc], r15d
je 0x14005f924
test dword [rbp - 0x70], 0x80000
je 0x140061bba
mov r10, qword [rbp + 0x180]
lea ecx, [rax + 1]
mov dword [r10 + 0xa8], ecx
add edi, ecx
add r11, 0x10
cmp edi, esi
jl 0x14005f8b8
jmp 0x14005f92b
mov r10, qword [rbp + 0x180]
mov ecx, 1
cmp dword [r11 + 0xc], r15d
jne 0x14005f8f4
mov rax, qword [rbp + 0x148]
mov dword [rax], 0x41
jmp 0x140061cc3
mov r10, qword [rbp + 0x180]
cmp edi, esi
jl 0x14005f9d5
mov eax, dword [r10 + 0x68]
cmp esi, eax
jl 0x14005f999
lea edi, [rax + rax]
movsxd rcx, edi
shl rcx, 4
call qword [case.0x140063883.1]
mov rbx, rax
test rax, rax
je 0x140061bc4
mov rax, qword [rbp + 0x180]
mov rcx, rbx
movsxd r8, dword [rax + 0x68]
mov rdx, qword [rax + 0x50]
shl r8, 4
call fcn.140026930
mov r10, qword [rbp + 0x180]
cmp dword [r10 + 0x68], 0x14
jle 0x14005f991
mov rcx, qword [r10 + 0x50]
call qword [case.0x140063883.0]
mov r10, qword [rbp + 0x180]
mov qword [r10 + 0x50], rbx
mov dword [r10 + 0x68], edi
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x50]
add rcx, rcx
mov qword [rax + rcx*8], r12
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x50]
add rcx, rcx
mov dword [rax + rcx*8 + 8], r14d
movsxd rcx, dword [r10 + 0x60]
mov rax, qword [r10 + 0x50]
add rcx, rcx
mov dword [rax + rcx*8 + 0xc], r15d
mov rbx, qword [rbp - 0x80]
mov eax, 1
add dword [r10 + 0x60], eax
mov esi, 2
add rbx, rsi
mov qword [rbp - 0x80], rbx
jmp 0x140023b94
mov esi, 0x80
jmp 0x14005f77d
xor r8d, r8d
mov al, r13b
lea edx, [r8 + 2]
mov r15d, r8d
mov qword [rbp - 0x40], r8
and al, dl
neg al
sbb ecx, ecx
neg ecx
add ecx, 0x19
mov word [r11], cx
add r11, rdx
jmp 0x1400243fa
xor r8d, r8d
test edx, edx
je 0x1400235a4
lea rcx, [rbx + 2]
lea r8, [rbp - 0x14]
lea rdx, [rbp - 0x2c]
mov r9, r14
call fcn.1400a971c
xor ecx, ecx
mov rbx, rax
mov qword [rbp - 0x80], rax
cmp dword [r14], ecx
jne 0x140061cc3
mov r13d, dword [rbp - 0x14]
mov r9d, dword [rbp - 0x2c]
mov r10, qword [rbp + 0x180]
jmp 0x140023f3e
add rbx, r12
mov r14d, SafeArrayDestroyData
mov edx, 0xff
movzx eax, word [rbx]
cmp ax, dx
ja 0x14005fa8d
mov rcx, qword [r10 + 0x18]
movzx eax, ax
test byte [rax + rcx], r11b
je 0x14005fa8b
add rbx, r12
movzx eax, word [rbx]
cmp ax, dx
jbe 0x14005fa77
xor ecx, ecx
cmp word [rbx], r14w
jne 0x14005fb62
add rbx, r12
movzx r8d, word [rbx]
test r8w, r8w
je 0x14005fa6b
mov edx, dword [r10 + 0xac]
test edx, edx
je 0x14005fae1
mov r8, qword [r10 + 0x38]
cmp rbx, r8
jae 0x14005fb17
mov eax, dword [rbp - 0x6c]
lea r9, [r10 + 0xb0]
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.1400216d4
mov r10, qword [rbp + 0x180]
xor ecx, ecx
test eax, eax
je 0x14005fb17
lea r11d, [rcx + 1]
jmp 0x14005fb52
movsxd rdx, dword [r10 + 0xb0]
mov rax, rdx
imul rcx, rdx, 0xfffffffffffffffe
add rcx, qword [r10 + 0x38]
cmp rbx, rcx
ja 0x14005fb15
cmp r8w, word [r10 + 0xb4]
jne 0x14005fb15
cmp edx, r11d
je 0x14005fb50
movzx eax, word [r10 + 0xb6]
cmp word [rbx + 2], ax
je 0x14005fb50
xor ecx, ecx
add rbx, r12
cmp dword [rbp - 0x6c], ecx
je 0x14005fb37
movzx eax, word [rbx]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x14005fb37
add rbx, r12
movzx r8d, word [rbx]
mov r11d, 1
test r8w, r8w
je 0x14005fa66
jmp 0x14005faa4
xor ecx, ecx
movsxd rax, dword [r10 + 0xb0]
lea rbx, [rbx + rax*2]
jmp 0x14005fa66
mov r9d, dword [rbp - 0x2c]
mov r14, qword [rbp + 0x148]
add rbx, 0xfffffffffffffffe
mov qword [rbp - 0x80], rbx
jmp 0x140023dfe
mov r12d, ecx
mov dword [rbp - 0x68], ecx
mov dword [rbp - 0x60], r11d
mov rbx, rax
mov qword [rbp - 0x80], rax
jmp 0x140023e24
mov ebx, 4
lea rcx, [r15 + 4]
mov rdx, r15
mov r8d, ebx
call fcn.140026930
mov r11, qword [rbp - 0x78]
mov r10, qword [rbp + 0x188]
add r11, 8
mov dword [r15], 0x40081
lea eax, [rbx + 2]
xor edi, edi
mov dword [r15 + 8], 0x40078
mov qword [rbp - 0x78], r11
mov dword [rbp - 4], eax
test r10, r10
jne 0x14005fc0c
mov r9, qword [rbp + 0x180]
lea ebx, [rdi + 2]
mov rax, qword [r9 + 0x20]
mov r8, qword [r9 + 0x40]
add rax, rbx
cmp r8, rax
jb 0x14005fc0c
movzx edx, word [r8 - 2]
mov rcx, r15
sub rcx, qword [r9 + 0x28]
add rcx, rbx
sar rcx, 1
cmp rdx, rcx
jne 0x14005fc0c
add dx, bx
mov word [r8 - 2], dx
mov rbx, qword [rbp - 0x80]
mov r9d, dword [rbp - 0x2c]
jmp 0x140023e40
mov eax, VariantChangeTypeEx
cmp word [rdi + 4], ax
je 0x140023ed6
jmp 0x1400240a8
test r9d, r9d
jg 0x140023ed6
mov edx, 1
cmp r13d, edx
cmova r13d, edx
mov dword [rbp - 0x14], r13d
jmp 0x1400240b9
mov eax, LHashValOfNameSys
mov word [rdi], ax
jmp 0x14005fc60
mov eax, dword [rbp - 0x68]
add ax, 0x79
mov word [r14], ax
mov rbx, qword [rbp - 0x80]
jmp 0x140023ed6
mov edx, 3
call fcn.140024ab0
lea eax, [r14 + r14]
lea rcx, [rdi + 6]
movsxd r8, eax
mov rdx, rdi
call fcn.140026930
mov eax, 6
mov r10d, 2
add qword [rbp - 0x78], rax
movzx eax, word [rbp - 0x68]
mov ecx, reloc.OLEAUT32.dll_VariantChangeTypeEx
add ax, cx
xor r8d, r8d
mov word [rdi], ax
add rdi, r10
lea eax, [rcx - 0xf]
mov word [rdi], ax
add rdi, r10
mov word [rdi], r8w
mov r15, rdi
add rdi, r10
mov qword [rbp - 0x40], rdi
jmp 0x14002412f
cmp r9d, edx
jle 0x14005fe2c
test r10, r10
je 0x14005fd18
lea eax, [r9 - 1]
mov edx, eax
movsxd rcx, eax
movsxd rax, dword [rbp - 4]
imul edx, dword [rbp - 4]
imul rcx, rax
cmp rcx, 0x7fffffff
jg 0x140061c13
mov ecx, dword [r10]
mov eax, 0x7fffffeb
sub eax, ecx
cmp eax, edx
jl 0x140061c13
lea eax, [rcx + rdx]
mov edx, 1
mov dword [r10], eax
jmp 0x14005fe2c
cmp dword [rbp + 0x18], r8d
je 0x14005fd2d
cmp dword [rbp - 0x48], r8d
jge 0x14005fd2d
mov eax, dword [rbp - 0x30]
mov dword [rbp - 0x48], esi
mov dword [rbp - 0x44], eax
mov edi, edx
cmp r9d, edx
jle 0x14005fe2c
mov r8, qword [rbp + 0x180]
lea eax, [r14 + r14]
movsxd rsi, eax
mov qword [rbp - 0x38], rsi
mov rbx, qword [r8 + 0x40]
mov rdx, qword [rbp - 0x40]
mov rcx, r11
mov r8, rsi
call fcn.140026930
mov r8, qword [rbp + 0x180]
mov r9, qword [rbp + 0x10]
mov rdx, qword [r8 + 0x20]
jmp 0x14005fdb3
sub r9, rdx
sub rbx, rdx
mov rcx, r8
sar r9, 1
sar rbx, 1
mov qword [rbp + 0x10], r9
call fcn.1400a90ac
mov rcx, qword [rbp + 0x148]
mov dword [rcx], eax
test eax, eax
jne 0x140061bda
mov r8, qword [rbp + 0x180]
mov rax, qword [rbp + 0x10]
mov rdx, qword [r8 + 0x20]
cdqe
lea r9, [rdx + rax*2]
movsxd rax, ebx
lea rbx, [rdx + rax*2]
movsxd rcx, dword [r8 + 0x6c]
mov rax, rbx
sub rax, r9
add rcx, 0xffffffffffffff9c
sar rax, 1
imul rax, rax, 0xfffffffffffffffe
add rax, rdx
lea rcx, [rax + rcx*2]
cmp qword [r8 + 0x40], rcx
ja 0x14005fd6e
cmp r9, rbx
jae 0x14005fdfe
mov esi, 2
mov rax, qword [r8 + 0x40]
movzx ecx, r14w
add cx, word [r9]
add r9, rsi
mov word [rax], cx
add qword [r8 + 0x40], rsi
cmp r9, rbx
jb 0x14005fddf
mov rsi, qword [rbp - 0x38]
mov r11, qword [rbp - 0x78]
mov r9d, dword [rbp - 0x2c]
movsxd rax, r14d
mov edx, 1
lea r11, [r11 + rax*2]
mov qword [rbp + 0x10], rbx
add edi, edx
mov qword [rbp - 0x78], r11
cmp edi, r9d
jl 0x14005fd4a
mov rbx, qword [rbp - 0x80]
xor r8d, r8d
test r13d, r13d
jle 0x140024142
sub r13d, r9d
jmp 0x14002413b
mov eax, dword [rbp - 4]
add eax, 5
mov edx, eax
movsxd rcx, eax
movsxd rax, r13d
imul edx, r13d
imul rcx, rax
sub edx, 4
cmp rcx, 0x7fffffff
jg 0x140061c13
mov ecx, dword [r8]
mov eax, 0x7fffffeb
sub eax, ecx
cmp eax, edx
jl 0x140061c13
lea eax, [rcx + rdx]
mov dword [r8], eax
xor r8d, r8d
lea edx, [r8 + 1]
jmp 0x14002416c
mov ecx, dword [rbp - 0x68]
mov r11, qword [rbp - 0x78]
mov r13, qword [rbp + 0x180]
mov r12, qword [rbp + 0x10]
mov eax, reloc.OLEAUT32.dll_VariantChangeTypeEx
mov r9d, 2
add cx, ax
lea eax, [r14 + r14]
movsxd rsi, eax
mov dword [rbp - 0x68], ecx
mov qword [rbp - 0x38], rsi
mov rbx, qword [r13 + 0x40]
mov word [r11], cx
add r11, r9
mov qword [rbp - 0x78], r11
test edi, edi
je 0x14005fef5
mov eax, 0x83
mov word [r11], ax
add r11, r9
test r15, r15
jne 0x14005fede
mov eax, r8d
jmp 0x14005fee7
mov rax, r11
sub rax, r15
sar rax, 1
mov r15, r11
mov word [r11], ax
add r11, r9
mov qword [rbp - 0x78], r11
mov rdx, qword [rbp - 0x40]
mov r8, rsi
mov rcx, r11
call fcn.140026930
mov rdx, qword [r13 + 0x20]
jmp 0x14005ff41
sub r12, rdx
sub rbx, rdx
mov rcx, r13
sar r12, 1
sar rbx, 1
call fcn.1400a90ac
mov rcx, qword [rbp + 0x148]
mov dword [rcx], eax
test eax, eax
jne 0x140061bda
mov rdx, qword [r13 + 0x20]
movsxd rax, r12d
lea r12, [rdx + rax*2]
movsxd rax, ebx
lea rbx, [rdx + rax*2]
movsxd rcx, dword [r13 + 0x6c]
mov rax, rbx
sub rax, r12
add rcx, 0xffffffffffffff9c
sar rax, 1
imul rax, rax, 0xfffffffffffffffe
add rax, rdx
lea rcx, [rax + rcx*2]
cmp qword [r13 + 0x40], rcx
ja 0x14005ff0a
mov r9d, 2
cmp r12, rbx
jae 0x14005ffa5
movsxd r8, edi
lea esi, [r9 - 1]
movzx ecx, word [r12]
mov rax, r8
neg rax
mov rax, qword [r13 + 0x40]
sbb edx, edx
add cx, r14w
add r12, r9
and edx, r9d
add edx, esi
add cx, dx
mov word [rax], cx
add qword [r13 + 0x40], r9
cmp r12, rbx
jb 0x14005ff75
mov rsi, qword [rbp - 0x38]
mov r11, qword [rbp - 0x78]
mov ecx, dword [rbp - 0x68]
mov edx, 1
sub edi, edx
movsxd rax, r14d
mov r12, rbx
lea r11, [r11 + rax*2]
mov qword [rbp + 0x10], rbx
lea r8d, [rdx - 1]
mov qword [rbp - 0x78], r11
jns 0x14005feb5
mov rbx, qword [rbp - 0x80]
jmp 0x140024170
mov rcx, r11
sub rcx, r15
sar rcx, 1
add ecx, edx
mov rdx, r11
movsxd rax, ecx
add rax, rax
sub rdx, rax
movzx eax, word [rdx + 2]
test eax, eax
jne 0x14005fffc
mov r15, r8
jmp 0x140060003
neg rax
lea r15, [r15 + rax*2]
mov word [r11], r14w
add r11, rsi
mov word [r11], cx
add r11, rsi
mov word [rdx + 2], cx
mov edx, 1
test r15, r15
jne 0x14005ffd8
mov rbx, qword [rbp - 0x80]
mov qword [rbp - 0x78], r11
jmp 0x140023ec3
mov r11, qword [rbp - 0x78]
mov r15d, dword [rbp - 0x60]
mov r13d, 0x81
lea r14, [r11 - 4]
mov rdi, r14
movzx eax, word [r14 + 2]
add rax, rax
sub rdi, rax
movzx eax, word [rdi]
sub ax, r13w
cmp ax, dx
ja 0x140060064
test r15d, r15d
je 0x140060064
lea eax, [r13 + 2]
mov word [rdi], ax
movzx esi, word [rdi]
movzx eax, si
sub ax, r13w
cmp ax, dx
jbe 0x14006018a
mov r13, qword [rbp + 0x180]
cmp qword [rbp + 0x188], r8
jne 0x1400600cc
mov rbx, rdi
mov qword [rsp + 0x20], r8
mov r8d, dword [rbp - 0x6c]
mov r9, r13
mov rdx, r14
mov rcx, rbx
call fcn.140024794
xor r8d, r8d
test eax, eax
jne 0x1400600b8
movzx eax, word [rbx + 2]
lea rbx, [rbx + rax*2]
cmp word [rbx], 0x77
je 0x14006008a
jmp 0x1400600c3
mov eax, 5
add si, ax
mov word [rdi], si
mov r11, qword [rbp - 0x78]
mov edx, 1
test r15d, r15d
je 0x14005fc55
movzx eax, word [rdi]
mov ecx, 0x87
cmp ax, cx
je 0x1400600fe
mov ecx, 0x8c
cmp ax, cx
je 0x1400600fe
add ax, dx
mov word [rdi], ax
lea eax, [rcx - 0x11]
lea esi, [rax - 0x79]
mov word [r14], ax
jmp 0x14006016a
mov rax, qword [rbp + 0x10]
mov rbx, r11
mov word [r11], r8w
mov r8d, dword [rbp - 0x6c]
mov esi, 2
sub rbx, rdi
mov r9, r13
mov rcx, rdi
mov edx, esi
sar rbx, 1
mov qword [rsp + 0x20], rax
call fcn.140024ab0
lea eax, [rbx + rbx]
lea rcx, [rdi + 4]
mov rdx, rdi
movsxd r8, eax
call fcn.140026930
mov r11, qword [rbp - 0x78]
add ebx, esi
add r11, 4
mov eax, 0x84
mov word [rdi], ax
lea eax, [rsi + 0x79]
mov word [r11], ax
add r11, rsi
mov word [r11], bx
add r11, rsi
mov word [rdi + 2], bx
mov qword [rbp - 0x78], r11
xor r8d, r8d
test r12, r12
je 0x140060179
mov eax, __WSAFDIsSet
mov word [r12], ax
cmp dword [rbp - 0x2c], esi
jge 0x1400244b3
mov r15d, r8d
jmp 0x1400244b3
mov eax, dword [rbp - 0x68]
mov esi, 2
add ax, 0x79
mov word [r14], ax
mov rbx, qword [rbp - 0x80]
lea r14d, [rsi + 0x76]
jmp 0x140023ecd
mov eax, 0x9d
cmp word [r15], ax
je 0x140024579
mov dword [r14], reloc.WSOCK32.dll_inet_ntoa
jmp 0x140061cc3
mov r11, r15
mov qword [rbp - 0x78], r15
jmp 0x140023ed6
mov eax, 1
cmp r9d, eax
jne 0x1400601ea
or eax, 0xffffffff
cmp r13d, eax
jne 0x1400601ea
add r12w, 0x64
jmp 0x140023ea9
add r12w, 0x68
mov esi, 2
mov word [r11], r12w
add r11, rsi
mov word [r11], r9w
add r11, rsi
or r9d, 0xffffffff
cmp r13d, r9d
cmove r13d, r8d
mov dword [rbp - 0x14], r13d
mov word [r11], r13w
jmp 0x140023eb2
movzx ecx, word [r15]
mov r10d, RegisterActiveObject
sub ecx, r10d
je 0x14006023d
dec ecx
je 0x140060236
dec ecx
jne 0x140060242
lea edi, [rcx + 0x27]
jmp 0x140060242
mov edi, 0x1a
jmp 0x140060242
mov edi, reloc.WSOCK32.dll_listen
mov r8d, dword [rbp - 0x6c]
test r8d, r8d
je 0x140060299
lea rdx, [r11 - 2]
mov ecx, 0xfc00
mov esi, 0xdc00
movzx eax, word [rdx]
and ax, cx
cmp ax, si
jne 0x140060299
movzx eax, word [rdx]
and ax, cx
cmp ax, si
jne 0x140060273
sub rdx, 2
mov rsi, r11
lea rcx, [rbp + 0xd0]
sub rsi, rdx
sar rsi, 1
lea r8d, [rsi + rsi]
call fcn.140026930
mov rbx, qword [rbp - 0x80]
bts esi, 0x1c
jmp 0x14002441c
movzx esi, word [r11 - 2]
cmp word [r15], r10w
ja 0x140024420
mov r10d, 1
cmp r9d, r10d
jle 0x140024426
mov rcx, qword [rbp + 0x180]
mov dword [rbp - 0x44], esi
mov eax, dword [rcx + 0x98]
or eax, dword [rbp + 8]
mov dword [rbp - 0x48], eax
jmp 0x140024426
movzx r14d, word [r15 + 2]
movzx r15d, word [r15 + 4]
jmp 0x140024441
lea r11, [rdx + 2]
cmp r13d, r10d
jne 0x1400602f8
add r12w, 0x25
mov word [rdx], r12w
jmp 0x140024480
add r12w, 0x27
mov word [rdx], r12w
jmp 0x140060314
add r12w, 0x27
lea r11, [rax + 2]
sub r13w, r10w
mov word [rax], r12w
mov word [r11], r13w
add r11, 2
jmp 0x140024480
cmp ecx, r10d
jne 0x14006034a
or ecx, 0xffffffff
cmp r13d, ecx
jne 0x140060338
add r12w, 0x23
jmp 0x140024478
mov r11, rax
mov qword [rbp - 0x78], rax
cmp r13d, r10d
je 0x140024579
jmp 0x140060303
lea r11, [rdx + 2]
add di, 0x29
mov ebx, 2
mov word [rdx], di
mov word [r11], cx
add r11, rbx
mov qword [rbp - 0x78], r11
test r13d, r13d
jns 0x1400603cc
test r8d, r8d
je 0x1400603a0
bt esi, 0x1c
jae 0x1400603a0
mov eax, esi
lea rdx, [rbp + 0xd0]
mov rcx, r11
and eax, 7
lea r8d, [rax + rax]
call fcn.140026930
mov r11, qword [rbp - 0x78]
mov r8d, dword [rbp - 0x6c]
mov eax, esi
and eax, 7
lea r11, [r11 + rax*2]
jmp 0x1400603ba
mov word [r11], si
add r11, rbx
test r14d, r14d
js 0x1400603ba
mov word [r11], r14w
add r11, rbx
mov word [r11], r15w
add r11, rbx
add r12w, 0x21
jmp 0x1400603c6
add r12w, 0x25
mov word [r11], r12w
jmp 0x14006044a
cmp r13d, ecx
je 0x140024484
test r8d, r8d
je 0x140060414
bt esi, 0x1c
jae 0x140060414
mov eax, esi
lea rdx, [rbp + 0xd0]
mov rcx, r11
and eax, 7
lea r8d, [rax + rax]
call fcn.140026930
mov r11, qword [rbp - 0x78]
mov ecx, dword [rbp - 0x2c]
mov r8d, dword [rbp - 0x6c]
mov eax, esi
mov r10d, 1
and eax, 7
lea r11, [r11 + rax*2]
jmp 0x14006041b
mov word [r11], si
add r11, rbx
test r14d, r14d
js 0x14006042e
mov word [r11], r14w
add r11, rbx
mov word [r11], r15w
add r11, rbx
sub r13d, ecx
mov dword [rbp - 0x14], r13d
cmp r13d, r10d
je 0x1400603c1
add r12w, 0x27
mov word [r11], r12w
add r11, rbx
mov word [r11], r13w
add r11, rbx
jmp 0x140024480
mov eax, esi
lea rdx, [rbp + 0xd0]
mov rcx, r11
and eax, 7
lea r8d, [rax + rax]
call fcn.140026930
mov r11, qword [rbp - 0x78]
mov eax, esi
and eax, 7
mov esi, 2
lea r11, [r11 + rax*2]
jmp 0x14002449f
mov word [r11], r14w
add r11, rsi
mov word [r11], r15w
jmp 0x140023eb2
mov rax, qword [rbp - 0x10]
movzx edx, word [rax]
cmp edx, 0x50
jg 0x14006050f
je 0x1400604cc
mov eax, RegisterActiveObject
cmp edx, eax
jl 0x140060551
cmp edx, 0x20
jle 0x1400604cc
mov eax, reloc.OLEAUT32.dll_SafeArrayCreateEx
cmp edx, eax
je 0x1400604cc
cmp edx, 0x36
je 0x1400604cc
mov eax, 0x43
cmp edx, eax
jne 0x140060551
mov rcx, qword [rbp - 0x10]
mov r8d, dword [rbp - 0x6c]
mov rax, rdx
lea rdx, [0x140000000]
movzx eax, byte [rax + rdx + 0xbbfa0]
lea rcx, [rcx + rax*2]
mov qword [rbp - 0x10], rcx
test r8d, r8d
je 0x14006055c
movzx eax, word [rcx - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xd800
cmp ax, cx
jne 0x14006055c
add qword [rbp - 0x10], rsi
jmp 0x14006055c
mov eax, 0x5d
cmp edx, eax
je 0x140060597
cmp edx, 0x6d
jle 0x140060551
cmp edx, 0x6f
jle 0x14006054c
mov r8d, dword [rbp - 0x6c]
mov eax, WSACleanup
cmp edx, eax
lea rdx, [0x140000000]
jne 0x14006055c
mov rcx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x10]
movzx ecx, word [rcx + 2]
lea rcx, [rax + rcx*2]
mov qword [rbp - 0x10], rcx
jmp 0x14006055c
add qword [rbp - 0x10], 0x22
lea rdx, [0x140000000]
mov r8d, dword [rbp - 0x6c]
mov rcx, qword [rbp - 0x10]
mov rdi, r11
sub rdi, rcx
sar rdi, 1
test edi, edi
jle 0x140024579
movzx eax, word [rcx]
mov r9d, 0x76
cmp eax, r9d
jae 0x1400605d8
mov dl, byte [rax + rdx + 0xcdca0]
xor eax, eax
test dl, dl
je 0x1400605da
movzx eax, dl
mov word [rcx], ax
jmp 0x140060638
mov rcx, qword [rbp - 0x10]
mov r9d, 1
movzx eax, word [rcx + 4]
mov ecx, esi
sub ax, 0xf
cmp ax, r9w
mov rax, rdx
lea rdx, [0x140000000]
movzx eax, byte [rax + rdx + 0xbbfa0]
cmova ecx, r8d
add eax, ecx
movsxd rcx, eax
mov rax, qword [rbp - 0x10]
lea rcx, [rax + rcx*2]
mov qword [rbp - 0x10], rcx
jmp 0x140060558
xor eax, eax
mov r9, qword [rbp + 0x180]
mov word [r11], ax
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp - 0x10]
mov edx, esi
mov qword [rsp + 0x20], rax
call fcn.140024ab0
mov rdx, qword [rbp - 0x10]
lea eax, [rdi + rdi]
lea rcx, [rdx + 4]
movsxd r8, eax
call fcn.140026930
mov rax, qword [rbp - 0x10]
mov r11, qword [rbp - 0x78]
mov word [rax], r13w
add r11, 4
add edi, esi
mov word [r11], r14w
add r11, rsi
mov word [r11], di
mov rax, qword [rbp - 0x10]
add r11, rsi
mov word [rax + 2], di
mov qword [rbp - 0x78], r11
mov rbx, qword [rbp - 0x80]
jmp 0x140024579
xor r8d, r8d
mov edi, 0x7fffffeb
lea esi, [r8 + 2]
mov r15d, r8d
mov qword [rbp - 0x40], r8
test sil, r13b
je 0x14006066d
lea eax, [rsi - 3]
cmp r9d, 0xfffffffe
cmove r9d, eax
lea eax, [rsi + 0x1a]
mov dword [rbp - 0x64], r9d
jmp 0x140060672
mov eax, CreateStdDispatch
mov word [r11], ax
mov rbx, qword [rbp - 0x80]
add r11, rsi
mov qword [rbp - 0x78], r11
jmp 0x1400236ef
test dword [r10 + 0x90], 0x2000000
je 0x1400235a1
mov dword [r14], 0x40
jmp 0x140061cc3
add rbx, 2
mov edx, 0xdc00
movzx eax, word [rbx]
and ax, cx
cmp ax, dx
jne 0x1400235d7
mov qword [rbp - 0x80], rbx
movzx eax, word [rbx]
mov edi, r10d
mov word [rbp + 0x7a], ax
mov ebx, 1
jmp 0x1400235da
cmp dword [rbp - 0x6c], r8d
je 0x140023b0d
lea rdx, [rbp + 0x78]
mov ecx, eax
call fcn.1400aa088
movzx esi, word [rbp + 0x78]
xor r8d, r8d
mov edi, eax
lea ebx, [r8 + 1]
jmp 0x140023b1b
mov rbx, qword [rbp - 0x80]
mov eax, 0x5c
cmp word [rbx + 2], ax
jne 0x140060718
lea ecx, [rax - 0x17]
cmp word [rbx + 4], cx
jne 0x140060718
add rbx, 4
jmp 0x14006071f
mov dword [rbp - 0x5c], 1
mov r11, qword [rbp - 0x78]
jmp 0x140024067
mov rbx, qword [rbp - 0x80]
mov r10, qword [rbp + 0x180]
mov esi, 2
mov rax, qword [r10 + 0x40]
add rbx, rsi
lea r9d, [rsi + 0x25]
mov qword [rbp + 0x10], rax
lea eax, [rsi + 0x3a]
mov qword [rbp - 0x80], rbx
cmp word [rbx], ax
lea rdx, [rbx + 2]
lea edi, [rsi + 0x3c]
movzx eax, word [rdx]
cmove r9d, edi
xor r8d, r8d
lea ecx, [rsi + 0x37]
mov r13d, r8d
mov r11d, r8d
cmp eax, ecx
ja 0x140060a2a
movabs rcx, 0x3ff280000000000
bt rcx, rax
jae 0x140060a2a
lea rcx, [rbx + 4]
lea r12d, [rsi + 0x2e]
lea edi, [rsi + 0x37]
movzx eax, word [rcx]
cmp ax, r12w
jb 0x1400607a5
cmp ax, di
ja 0x1400607a5
add rcx, rsi
jmp 0x140060792
cmp word [rcx], r9w
je 0x1400607b7
mov r11, qword [rbp - 0x78]
mov dword [r14], edi
jmp 0x140023eed
mov rbx, rdx
mov qword [rbp - 0x80], rdx
mov edi, 0x3a
movzx edx, word [rbx]
mov r15d, 0x2b
cmp edx, r15d
jne 0x1400607f0
add rbx, rsi
lea ecx, [r15 - 0x22]
mov qword [rbp - 0x80], rbx
movzx eax, word [rbx]
sub ax, r12w
cmp ax, cx
jbe 0x140060821
lea eax, [rcx + 0x36]
jmp 0x140061b87
mov eax, 0x2d
cmp edx, eax
jne 0x140060821
lea rcx, [rbx + 2]
mov r15d, 9
movzx eax, word [rcx]
sub ax, r12w
cmp ax, r15w
ja 0x140023fa2
mov rbx, rcx
mov qword [rbp - 0x80], rcx
mov r15d, 0x2b
mov edi, r8d
movzx r8d, word [rbx]
cmp r8w, r12w
jb 0x14006085e
mov r15d, reloc.WSOCK32.dll_gethostname
cmp r8w, r15w
ja 0x140060858
add rbx, rsi
lea edi, [rdi + rdi*4]
movzx eax, r8w
mov qword [rbp - 0x80], rbx
movzx r8d, word [rbx]
lea edi, [rdi - 0x18]
lea edi, [rax + rdi*2]
cmp r8w, r12w
jae 0x140060834
mov r15d, 0x2b
cmp word [rbx], r9w
jne 0x140061c6c
mov eax, 0x2d
xor r8d, r8d
cmp edx, eax
jne 0x140060a10
test edi, edi
je 0x140061c62
mov eax, dword [r10 + 0x70]
sub eax, edi
lea edi, [rax + 1]
test edi, edi
jg 0x140060c20
mov eax, reloc.WSOCK32.dll_ntohs
jmp 0x140061b87
cmp eax, 0x4a
je 0x1400608eb
cmp eax, 0x55
je 0x1400608e2
cmp eax, 0x58
je 0x1400608da
cmp eax, 0x6d
je 0x1400608d3
cmp eax, 0x73
je 0x1400608c9
mov edx, 0x78
cmp eax, edx
jne 0x140061c25
or dword [rcx], 8
jmp 0x140023fed
mov eax, 4
jmp 0x140023feb
or dword [rcx], esi
jmp 0x140023fed
or dword [rcx], 0x40
jmp 0x140023fed
bts dword [rcx], 9
jmp 0x140023fed
mov rax, qword [rbp + 0x180]
bts dword [rcx], 0x13
bts dword [rax + 0x94], 0xa
jmp 0x140023fed
mov rax, qword [rbp + 0x188]
test rax, rax
je 0x140060918
cmp dword [rax], r12d
jne 0x140024031
mov dword [rcx + 0x90], r10d
jmp 0x14002404f
mov rax, qword [rbp - 0x78]
mov r12, qword [rbp + 0x188]
add rbx, 2
mov esi, 0x83
mov qword [rbp - 0x80], rbx
xor ecx, ecx
lea edi, [rsi - 0x31]
jmp 0x140023bcf
cmp dword [r10 + 0x70], ebx
ja 0x140023cf4
mov r11, qword [rbp - 0x78]
mov eax, 0x82
mov word [r11], ax
jmp 0x140023cd7
add dword [r10 + 0x8c], r13d
jmp 0x140023ce7
mov r10d, 1
lea r9d, [r10 + 0x77]
test r12, r12
jne 0x140023cfe
mov rcx, r11
mov edx, r8d
movzx eax, word [rcx + 2]
add edx, r10d
lea rcx, [rcx + rax*2]
cmp word [rcx], r9w
jne 0x140060987
mov eax, VariantChangeTypeEx
cmp word [r11 + 4], ax
jne 0x1400609b4
cmp edx, r10d
jg 0x140061c34
mov esi, eax
jmp 0x140023d02
mov eax, 2
cmp edx, eax
jg 0x140061c3d
cmp edx, r10d
jne 0x140023cfe
mov eax, r13d
mov ecx, r13d
mov dword [rbp + 0x1c], eax
mov dword [rbp + 0x30], ecx
jmp 0x140023d08
test ecx, ecx
js 0x1400609ee
mov edx, dword [rbp + 0x6c]
mov r9d, ecx
mov dword [rbp + 0x18], r10d
mov dword [rbp - 0x30], edx
jmp 0x1400609f1
mov r9d, r13d
mov dword [rbp - 0x64], r9d
mov dword [rbp - 0x20], r13d
jmp 0x140023d74
mov ecx, 0x7d
cmp esi, ecx
jne 0x140023eed
jmp 0x140023d74
cmp edx, r15d
jne 0x140060c20
test edi, edi
je 0x140061c62
add edi, dword [r10 + 0x70]
jmp 0x140060c20
mov r15d, 1
mov r13d, r15d
mov dword [rbp - 0x58], r15d
jmp 0x140060aab
mov rbx, qword [rbp - 0x80]
mov ecx, 0x3c
lea rax, [rbx + 2]
lea edx, [rcx - 0x15]
cmp word [rax], cx
je 0x140060a6c
cmp word [rax], dx
je 0x140060a6c
lea r8d, [rcx + 0x3f]
cmp word [rax], r8w
je 0x140060a6c
mov r11, qword [rbp - 0x78]
lea eax, [rcx + 9]
mov dword [r14], eax
jmp 0x140023a96
mov r10, qword [rbp + 0x180]
xor r8d, r8d
mov qword [rbp - 0x80], rax
mov r13d, r8d
mov dword [rbp - 0x58], r8d
mov rbx, rax
lea esi, [r8 + 2]
lea r15d, [r8 + 1]
cmp word [rax], cx
jne 0x140060a99
lea edi, [rsi + 0x3c]
mov r9d, edi
jmp 0x140060aab
cmp word [rax], dx
mov r9d, 0x7d
cmove r9d, edx
mov edi, 0x3e
add rbx, rsi
mov edx, gethostbyname
mov qword [rbp - 0x80], rbx
movzx ecx, word [rbx]
lea r11d, [rdx - 0x27]
movzx eax, cx
mov r12, rbx
sub ax, dx
cmp ax, r11w
jbe 0x140061ba7
mov r11d, 0xff
cmp cx, r11w
ja 0x140060b0c
mov rdx, qword [r10 + 0x18]
mov r14d, reloc.WSOCK32.dll_recv
movzx eax, cx
test byte [rax + rdx], r14b
je 0x140060b00
add rbx, rsi
mov qword [rbp - 0x80], rbx
movzx ecx, word [rbx]
cmp cx, r11w
jbe 0x140060ae7
mov r14, qword [rbp + 0x148]
mov edx, gethostbyname
mov r11, rbx
sub r11, r12
sar r11, 1
cmp qword [rbp + 0x188], r8
je 0x140060ba8
test r11d, r11d
je 0x140061c7b
cmp word [rbx], r9w
jne 0x140061b82
cmp r11d, 0x20
jg 0x140061c76
mov esi, dword [r10 + 0x60]
mov rbx, qword [r10 + 0x50]
mov edi, r8d
test esi, esi
jle 0x140060b83
mov eax, reloc.WSOCK32.dll_recv
cmp r11d, dword [rbx + 8]
jne 0x140060b72
mov rdx, qword [rbx]
mov r8d, r11d
mov rcx, r12
call fcn.1400a9aec
xor r8d, r8d
test eax, eax
je 0x140060b7c
lea eax, [r8 + 0x10]
add edi, r15d
add rbx, rax
cmp edi, esi
jl 0x140060b53
mov r10, qword [rbp + 0x180]
cmp edi, esi
jge 0x140060b8c
mov edi, dword [rbx + 0xc]
jmp 0x140060b8f
mov edi, r8d
test r13d, r13d
jne 0x140060c20
lea esi, [r13 + 1]
add dword [r10 + 0x84], esi
jmp 0x140060e96
mov r14d, dword [r10 + 0x60]
mov r15, qword [r10 + 0x58]
mov esi, r8d
test r14d, r14d
jle 0x140060c03
movsxd rdi, r11d
mov r13d, 1
lea rdx, [r15 + 2]
mov r8d, r11d
mov rcx, r12
call fcn.1400a9aec
xor r8d, r8d
test eax, eax
jne 0x140060be8
cmp word [r15 + rdi*2 + 2], r8w
jne 0x140060be8
mov r10, qword [rbp + 0x180]
jmp 0x140060bff
mov r10, qword [rbp + 0x180]
add esi, r13d
movsxd rax, dword [r10 + 0x64]
lea r15, [r15 + rax*2]
cmp esi, r14d
jl 0x140060bc1
mov r13d, dword [rbp - 0x58]
cmp esi, r14d
jge 0x140061b96
movzx edi, word [r15]
test r13d, r13d
je 0x140060d5d
mov r14, qword [rbp + 0x148]
mov rax, qword [rbp - 0x78]
mov rbx, qword [r10 + 0x28]
mov r15, rax
mov qword [rbp - 0x40], rax
cmp qword [rbp + 0x188], r8
jne 0x140060d11
mov esi, dword [rbp - 0x6c]
mov word [rax], r8w
test edi, edi
je 0x140060c65
mov rcx, qword [r10 + 0x28]
mov r8d, edi
mov edx, esi
call fcn.1400a8930
mov r10, qword [rbp + 0x180]
xor r8d, r8d
mov rbx, rax
mov rax, r15
test rbx, rbx
jne 0x140060cd5
cmp edi, dword [r10 + 0x74]
jg 0x140061c44
mov rax, qword [r10 + 0x28]
movsxd rcx, edi
lea rbx, [rax + rcx*2]
movsxd rcx, dword [r10 + 0x6c]
mov rax, qword [r10 + 0x20]
add rcx, 0xffffffffffffff9c
lea rcx, [rax + rcx*2]
cmp qword [r10 + 0x40], rcx
jb 0x140060cb2
mov rcx, r10
call fcn.1400a90ac
xor r8d, r8d
mov dword [r14], eax
test eax, eax
jne 0x140061bda
mov r10, qword [rbp + 0x180]
mov rax, qword [r10 + 0x40]
mov r11, qword [rbp - 0x78]
mov edx, 2
mov ecx, r11d
sub ecx, dword [r10 + 0x28]
add rcx, rdx
sar rcx, 1
mov word [rax], cx
add qword [r10 + 0x40], rdx
jmp 0x140060d15
cmp word [rbx + 2], r8w
jne 0x140060d11
cmp dword [rbp + 0x178], r8d
jg 0x140060d11
mov r8, qword [rbp + 0x170]
mov r9d, esi
mov rdx, rax
mov rcx, rbx
mov qword [rsp + 0x20], r10
call fcn.1400a903c
xor r8d, r8d
test eax, eax
jne 0x140061c80
mov r10, qword [rbp + 0x180]
mov r11, qword [rbp - 0x78]
mov r9d, dword [rbp - 0x64]
mov r13d, dword [rbp - 0x70]
mov eax, 0x75
mov word [r11], ax
mov eax, ebx
add r11, 4
sub eax, dword [r10 + 0x28]
mov qword [rbp - 0x78], r11
mov dword [rbp + 0x18], r8d
sar rax, 1
mov word [r11 - 2], ax
cmp r9d, 0xfffffffe
jne 0x1400236e6
or eax, 0xffffffff
jmp 0x140060d52
mov dword [rbp - 0x48], eax
mov r9d, eax
mov dword [rbp - 0x64], eax
jmp 0x1400236e6
cmp dword [r10 + 0xa8], r8d
je 0x140060e91
mov r13, qword [rbp + 0x180]
mov ecx, 1
mov dword [rbp - 0x28], esi
movsxd rax, dword [r13 + 0x64]
add esi, ecx
mov r10d, ecx
lea r12, [r15 + rax*2]
cmp esi, r14d
jge 0x140060e84
mov ebx, ecx
lea rdx, [r12 + 2]
lea rcx, [r15 + 2]
call fcn.1400a9abc
xor r8d, r8d
test eax, eax
jne 0x140060db8
movsxd rax, dword [r13 + 0x64]
add esi, ebx
add r10d, ebx
lea r12, [r12 + rax*2]
cmp esi, r14d
jl 0x140060d91
mov r9d, dword [rbp - 0x64]
mov rsi, rbx
mov ebx, dword [rbp - 0x28]
cmp r10d, esi
jle 0x140060e8c
mov r11, qword [rbp - 0x78]
cmp r9d, 0xfffffffe
mov edx, 2
mov qword [rbp - 0x40], r11
mov eax, 0xffffffff
cmove r9d, eax
mov al, byte [rbp - 0x70]
and al, sil
mov dword [rbp - 0x64], r9d
neg al
sbb ecx, ecx
neg ecx
add ecx, 0x73
mov word [r11], cx
add r11, rdx
mov word [r11], bx
add r11, rdx
mov word [r11], r10w
add r11, rdx
mov qword [rbp - 0x78], r11
cmp r15, r12
jb 0x140060e23
mov r15, qword [rbp - 0x40]
mov r13d, dword [rbp - 0x70]
jmp 0x1400236e6
movzx edx, word [r15]
mov eax, esi
cmp edx, 0x20
jge 0x140060e32
mov ecx, edx
shl eax, cl
or dword [r13 + 0x80], eax
cmp edx, dword [r13 + 0x7c]
jle 0x140060e43
mov dword [r13 + 0x7c], edx
mov rcx, qword [r13 + 0x48]
jmp 0x140060e54
movzx eax, word [rcx + 8]
cmp eax, edx
je 0x140060e5b
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140060e49
jmp 0x140060e5f
mov word [rcx + 0xa], si
movsxd rax, dword [r13 + 0x64]
lea r15, [r15 + rax*2]
cmp r15, r12
jb 0x140060e23
mov rbx, qword [rbp - 0x80]
mov r15, qword [rbp - 0x40]
jmp 0x140023ef1
mov r10, qword [rbp + 0x180]
neg edi
jmp 0x140060e9e
mov r10, r13
mov rsi, rcx
jmp 0x140060e96
mov r10, r13
jmp 0x140060e9a
mov esi, 1
mov r9d, dword [rbp - 0x64]
mov r13d, dword [rbp - 0x70]
mov r11, qword [rbp - 0x78]
cmp r9d, 0xfffffffe
mov eax, 0xffffffff
cmove r9d, eax
mov al, r13b
mov r15, r11
and al, sil
mov qword [rbp - 0x40], r11
mov dword [rbp - 0x64], r9d
neg al
mov eax, 2
sbb ecx, ecx
neg ecx
add ecx, 0x71
mov word [r11], cx
add r11, rax
mov word [r11], di
add r11, rax
mov eax, esi
mov qword [rbp - 0x78], r11
cmp edi, 0x20
jge 0x140060eeb
mov ecx, edi
shl eax, cl
or dword [r10 + 0x80], eax
cmp edi, dword [r10 + 0x7c]
jle 0x140060efc
mov dword [r10 + 0x7c], edi
mov rcx, qword [r10 + 0x48]
jmp 0x140060f0d
movzx eax, word [rcx + 8]
cmp eax, edi
je 0x140060f17
mov rcx, qword [rcx]
test rcx, rcx
jne 0x140060f02
jmp 0x1400236e6
mov word [rcx + 0xa], si
jmp 0x1400236e6
mov rax, qword [rbp + 0x180]
cmp dword [rax + 0x78], r8d
jne 0x1400243c4
mov dword [rax + 0x78], esi
jmp 0x1400243c4
mov rcx, qword [rbp - 0x80]
lea rdx, [0x140000000]
mov rbx, qword [rdx + rdi*8 + 0xcd848]
add rcx, 2
jmp 0x140061017
cmp edi, 0xe
jne 0x1400243f2
mov edi, reloc.WSOCK32.dll_listen
jmp 0x1400243f2
mov dword [rbp - 0x38], r8d
mov dword [rbp - 0x58], r8d
lea r9, [rbp - 0x58]
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x20], r14
call fcn.1400a9554
xor r8d, r8d
test eax, eax
je 0x140061bda
mov r11, qword [rbp - 0x78]
mov ecx, r8d
cmp edi, ebx
mov eax, r8d
sete al
mov r15, r11
cmp eax, dword [rbp + 0xa8]
lea eax, [r8 + 0xf]
mov qword [rbp - 0x40], r11
setne cl
add ecx, eax
mov word [r11], cx
lea ecx, [rax - 0xd]
movzx eax, word [rbp - 0x38]
add r11, rcx
mov word [r11], ax
movzx eax, word [rbp - 0x58]
add r11, rcx
mov word [r11], ax
mov rbx, qword [rbp - 0x80]
add r11, rcx
mov qword [rbp - 0x78], r11
jmp 0x140024067
mov rbx, qword [rbp - 0x80]
mov r11, qword [rbp - 0x78]
jmp 0x1400236ea
lea rcx, [rbx + 0xe]
lea rbx, str._b__w_
jmp 0x14006100f
lea rcx, [rbx + 0xe]
lea rbx, str._b___w_
mov r11, qword [rbp - 0x78]
mov r9d, dword [rbp - 0x64]
mov qword [rbp - 0x50], rcx
sub rbx, 2
mov edi, 0x7fffffeb
jmp 0x1400236f3
lea rdx, [rbp + 0x40]
mov rcx, rbx
call fcn.1400a8f98
test eax, eax
je 0x140023842
mov eax, 0x3a
cmp word [rbx + 2], ax
mov eax, reloc.OLEAUT32.dll_CreateStdDispatch
lea ecx, [rax - 0x12]
cmove eax, ecx
jmp 0x140061b87
mov eax, dword [rbp - 0x58]
add rbx, rdi
jmp 0x140023848
mov eax, 1
mov dword [rbp - 0x58], eax
jmp 0x14002385b
mov rcx, qword [rbp + 0x180]
test dword [rcx + 0x90], 0x2000000
je 0x140023887
mov r11, qword [rbp - 0x78]
mov r9d, dword [rbp - 0x64]
mov ecx, dword [rbp - 0x30]
neg eax
mov dword [rbp - 8], ecx
sbb eax, eax
and eax, 0xffffff70
add eax, 0x9d
mov word [r11], ax
mov rbx, qword [rbp - 0x80]
add r11, r10
cmp r9d, 0xfffffffe
mov eax, 0xffffffff
mov qword [rbp - 0x78], r11
cmove r9d, eax
mov dword [rbp - 0x64], r9d
mov dword [rbp - 0x20], r9d
jmp 0x1400236ea
movzx esi, word [rbx]
mov eax, esi
and eax, edx
cmp eax, r8d
jne 0x1400239f2
add rbx, 2
mov edx, 0x3ff
movzx eax, word [rbx]
and esi, edx
mov qword [rbp - 0x80], rbx
and eax, edx
shl esi, 0xa
or esi, eax
add esi, 0x10000
jmp 0x1400239f2
sub r15, r14
mov dword [rbp - 0x1c], r10d
mov qword [rbp - 0x28], r14
sar r15, 1
add dword [r8], r15d
mov r15, r14
jmp 0x1400238de
mov eax, 0x5c
cmp esi, eax
jne 0x1400238fd
lea r10d, [rax - 0x17]
cmp word [rbx + 2], r10w
jne 0x1400238fd
mov edx, ecx
mov dword [rbp - 0x5c], ecx
add rbx, 2
jmp 0x1400239b2
mov eax, 0x3d
cmp word [rbx + 2], ax
ja 0x1400238fd
movzx eax, word [rbx + 2]
movabs rcx, 0x2400400000000000
bt rcx, rax
jae 0x1400238fd
lea rdx, [rbp + 0x40]
mov rcx, rbx
call fcn.1400a8f98
xor r8d, r8d
test eax, eax
je 0x1400616ad
mov rax, qword [rbp + 0x180]
mov esi, r8d
mov rdi, qword [rax + 0x10]
lea eax, [r8 + 0x3a]
cmp word [rbx + 2], ax
jne 0x140061c9b
add rbx, 4
lea eax, [r8 + 0x5e]
mov qword [rbp - 0x80], rbx
cmp word [rbx], ax
jne 0x1400611bb
add rbx, 2
mov esi, r10d
mov dword [rbp - 0x60], r10d
mov qword [rbp - 0x80], rbx
mov r14, qword [rbp + 0x40]
mov rcx, rbx
mov rdx, r14
sub rdx, rbx
sar rdx, 1
call fcn.1400a8f14
xor r8d, r8d
mov edx, eax
test eax, eax
js 0x140061c8c
mov r10d, dword [rbp - 0x70]
lea r11d, [r8 + 1]
lea r9d, [r8 + 2]
test r11b, r10b
je 0x1400611f5
cmp eax, r9d
cmovle edx, r8d
bt r10d, 0x1d
jae 0x14006130a
mov eax, esi
neg eax
sbb rcx, rcx
and ecx, 0xe
lea eax, [rcx + rdx]
movsxd rcx, eax
lea rax, [0x140000000]
mov rbx, qword [rax + rcx*8 + 0xcdbb0]
test rbx, rbx
je 0x14006124a
mov edi, dword [rbp - 0x60]
mov r8, qword [rbp + 0x188]
mov r11d, dword [rbp - 0x6c]
mov edx, dword [rbp - 0x5c]
lea r9, [r14 + 2]
mov r14, qword [rbp]
mov qword [rbp - 0x50], r9
add rbx, 0xfffffffffffffffe
jmp 0x1400239b6
mov ecx, edx
sub ecx, 8
je 0x14006126b
dec ecx
je 0x140061264
dec ecx
jne 0x14006130a
mov ecx, reloc.WSOCK32.dll_listen
jmp 0x140061270
mov ecx, reloc.WSOCK32.dll_ioctlsocket
jmp 0x140061270
mov ecx, reloc.WSOCK32.dll_inet_ntoa
mov edi, dword [rbp - 0x60]
neg esi
lea rbx, [r14 + 2]
mov r14, qword [rbp]
sbb eax, eax
neg eax
add eax, 3
mov word [r15], ax
add r15, r9
mov word [r15], cx
add r15, r9
mov ecx, r11d
mov word [r15], r8w
add r15, r9
mov dword [rbp - 0x68], ecx
jmp 0x1400612ef
mov r10d, dword [rbp - 0x70]
mov eax, ecx
mov ecx, reloc.WSOCK32.dll_recv
cmp ebx, ecx
mov ecx, 2
sete al
sub eax, dword [rbp + 0xac]
neg eax
sbb eax, eax
add eax, 4
mov word [r15], ax
movzx eax, word [rbp - 0x38]
add r15, rcx
mov word [r15], ax
movzx eax, word [rbp - 0x18]
add r15, rcx
mov word [r15], ax
mov rbx, qword [rbp - 0x80]
lea eax, [rcx - 1]
add r15, rcx
mov dword [rbp - 0x68], eax
mov ecx, eax
sub r13d, eax
mov r8, qword [rbp + 0x188]
mov r11d, dword [rbp - 0x6c]
mov edx, dword [rbp - 0x5c]
mov r9, qword [rbp - 0x50]
mov qword [rbp - 0x28], r15
jmp 0x1400239b9
lea eax, [rdx + rdx*2]
lea r12, [0x140000000]
mov r13d, reloc.OLEAUT32.dll_RegisterActiveObject
movsxd rbx, eax
lea rcx, [rbp + 0xb0]
mov r8d, r13d
movsxd rdx, dword [r12 + rbx*4 + 0xcdb00]
add rdx, rdi
call fcn.140026930
mov r10d, dword [r12 + rbx*4 + 0xcdb04]
mov r9d, dword [r12 + rbx*4 + 0xcdb08]
xor r11d, r11d
lea r12d, [r13 - 0x1f]
test r10d, r10d
js 0x140061391
mov r8d, r11d
test r9d, r9d
js 0x140061376
lea eax, [r10 + r8]
mov edx, r8d
add r8d, r12d
mov al, byte [rax + rdi]
or byte [rbp + rdx + 0xb0], al
cmp r8d, r13d
jb 0x14006135b
jmp 0x140061391
lea eax, [r10 + r8]
mov edx, r8d
add r8d, r12d
mov al, byte [rax + rdi]
not al
and byte [rbp + rdx + 0xb0], al
cmp r8d, r13d
jb 0x140061376
test r9d, r9d
jns 0x140061399
neg r9d
mov r8d, 2
cmp r9d, r12d
jne 0x1400613ad
and byte [rbp + 0xb1], 0xc3
jmp 0x1400613b9
cmp r9d, r8d
jne 0x1400613b9
and byte [rbp + 0xbb], 0x7f
mov rcx, r11
mov rdx, r13
test esi, esi
je 0x1400613da
mov al, byte [rbp + rcx + 0xb0]
not al
or byte [rbp + rcx + 0x48], al
add rcx, r12
sub rdx, r12
jne 0x1400613c3
jmp 0x1400613ed
mov al, byte [rbp + rcx + 0xb0]
or byte [rbp + rcx + 0x48], al
add rcx, r12
sub rdx, r12
jne 0x1400613da
mov edi, dword [rbp - 0x60]
lea rbx, [r14 + 2]
mov r14, qword [rbp]
mov r13d, r12d
mov r12d, r8d
jmp 0x1400239a0
mov eax, 5
cmp ebx, eax
jne 0x140061414
lea esi, [rax + 3]
jmp 0x14002453d
cmp ebx, 0xc
je 0x140061bd3
cmp ebx, 0x1a
jne 0x140061452
mov rbx, qword [rbp - 0x80]
mov eax, 0x5c
cmp word [rbx + 2], ax
jne 0x140061443
lea ecx, [rax - 0x17]
cmp word [rbx + 4], cx
jne 0x140061443
add rbx, 4
jmp 0x1400239a0
mov eax, 1
mov edx, eax
mov dword [rbp - 0x5c], eax
jmp 0x1400239a3
cmp ebx, 0x19
je 0x14002399c
mov rcx, qword [rbp + 0x180]
mov r9d, 1
mov rdx, qword [rcx + 0x10]
lea r11d, [r9 + 1]
lea eax, [r9 + 0xf]
add r12d, r11d
add r13d, r9d
cmp ebx, eax
jg 0x1400615e0
lea eax, [r9 + 0xe]
cmp ebx, eax
jge 0x1400615ac
sub ebx, 6
je 0x14006157f
dec ebx
je 0x14006155b
dec ebx
je 0x14006152f
dec ebx
je 0x14006150c
dec ebx
je 0x1400614dc
dec ebx
jne 0x140061629
lea rax, [rbp + 0x48]
lea rcx, [rbp + 0x48]
lea r8d, [r9 + 0x1f]
sub rdx, rax
mov al, byte [rdx + rcx + 0xa0]
or byte [rcx], al
add rcx, r9
sub r8, r9
jne 0x1400614c6
jmp 0x14002399c
lea rax, [rbp + 0x48]
mov edi, r9d
mov dword [rbp - 0x60], r9d
lea rcx, [rbp + 0x48]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rcx + rdx + 0xa0]
not al
or byte [rcx], al
add rcx, r9
sub r8, r9
jne 0x1400614f4
jmp 0x14002399c
lea rax, [rbp + 0x48]
lea rcx, [rbp + 0x48]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rcx + rdx]
or byte [rcx], al
add rcx, r9
sub r8, r9
jne 0x14006151d
jmp 0x14002399c
lea rax, [rbp + 0x48]
mov edi, r9d
mov dword [rbp - 0x60], r9d
lea rcx, [rbp + 0x48]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rcx + rdx]
not al
or byte [rcx], al
add rcx, r9
sub r8, r9
jne 0x140061547
jmp 0x14002399c
lea rax, [rbp + 0x48]
lea rcx, [rbp + 0x48]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rdx + rcx + 0x40]
or byte [rcx], al
add rcx, r9
sub r8, r9
jne 0x14006156c
jmp 0x14002399c
lea rax, [rbp + 0x48]
mov edi, r9d
mov dword [rbp - 0x60], r9d
lea rcx, [rbp + 0x48]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rcx + rdx + 0x40]
not al
or byte [rcx], al
add rcx, r9
sub r8, r9
jne 0x140061597
jmp 0x14002399c
mov dword [rbp - 0x38], r8d
mov dword [rbp - 0x18], r8d
lea r9, [rbp - 0x18]
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0xac]
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x20], r10
call fcn.1400a9554
xor ecx, ecx
test eax, eax
je 0x140061bda
jmp 0x1400612a1
cmp ebx, 0x12
je 0x140061688
cmp ebx, 0x13
je 0x140061655
cmp ebx, 0x14
je 0x14006167f
cmp ebx, 0x15
je 0x14006164c
lea eax, [rbx - 0x1d]
cmp eax, 5
ja 0x140061629
mov r9, qword [rbp - 0x80]
mov edx, dword [rbp - 0x5c]
lea rcx, [0x140000000]
mov rbx, qword [rcx + rbx*8 + 0xcd848]
mov qword [rbp - 0x50], r9
sub rbx, r11
dec r13d
jmp 0x1400239a7
mov rbx, qword [rbp - 0x80]
test sil, 0x40
jne 0x140061caa
movzx esi, word [rbx]
mov edx, dword [rbp - 0x5c]
sub r13d, r9d
sub r12d, r11d
mov r11d, dword [rbp - 0x6c]
jmp 0x140023914
lea rax, str._n_v_f_r
jmp 0x14006165c
lea rax, [0x1400ce1c0]
or dword [rsp + 0x28], 0xffffffff
mov r9, rcx
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x48]
mov r8d, esi
mov qword [rsp + 0x20], rax
call fcn.1400a8a80
nop
jmp 0x140023998
lea rax, str._n_v_f_r
jmp 0x14006168f
lea rax, [0x1400ce1c0]
mov r9, rcx
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x48]
mov r8d, esi
mov qword [rsp + 0x20], rax
call fcn.1400a8bf0
nop
jmp 0x140023998
mov edx, dword [rbp - 0x5c]
jmp 0x140023900
mov r14d, 0x45
lea rax, [rbx + 4]
cmp word [rax], r14w
jne 0x1400616d6
mov qword [rbp - 0x80], rax
mov edx, r8d
mov rbx, rax
cmp word [rax + 2], r15w
je 0x1400616bb
mov edi, dword [rbp - 0x60]
mov r14, qword [rbp]
mov dword [rbp - 0x5c], edx
jmp 0x140023925
bts dword [rcx + 0x94], 0xb
jmp 0x140023946
mov r14d, 0x5c
lea r10d, [r14 - 0x17]
cmp word [rbx + 2], r10w
jne 0x140061710
add rbx, r15
mov qword [rbp - 0x80], rbx
cmp word [rbx], r14w
je 0x1400616fc
cmp word [rbx], r14w
mov edi, dword [rbp - 0x60]
mov r10, qword [rbp + 0x148]
mov r14, qword [rbp]
jne 0x1400241af
cmp word [rbx + 2], 0x51
jne 0x1400241af
add rbx, r15
mov r15d, 0x5c
mov qword [rbp - 0x80], rbx
cmp word [rbx], r15w
jne 0x140061777
mov r15d, 0x45
cmp word [rbx + 2], r15w
mov r15d, 4
jne 0x140061777
add rbx, r15
mov r15d, 0x5c
mov qword [rbp - 0x80], rbx
cmp word [rbx], r15w
mov r15d, 4
je 0x140061728
jmp 0x1400241af
mov edx, r9d
mov dword [rbp - 0x5c], edx
jmp 0x1400241af
add rbx, 2
mov r9d, 0x3ff
movzx eax, word [rbx]
and r8d, r9d
mov qword [rbp - 0x80], rbx
and eax, r9d
shl r8d, 0xa
or r8d, eax
add r8d, 0x10000
mov dword [rbp - 0x38], r8d
jmp 0x1400241f3
mov r9d, dword [rcx + 0x70]
mov r15d, dword [rbp - 0x70]
mov eax, 1
mov dword [rsp + 0x28], eax
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x80]
mov r8, r10
mov dword [rsp + 0x20], r15d
call fcn.1400246ac
mov r10, qword [rbp + 0x148]
xor ecx, ecx
cmp dword [r10], ecx
jne 0x140061bda
mov rbx, qword [rbp - 0x80]
test eax, eax
je 0x1400617ff
mov ecx, 5
cmp eax, ecx
jne 0x140061847
lea r8d, [rcx + 3]
jmp 0x140061803
mov r8d, dword [rbp - 0x38]
mov r11d, dword [rbp - 0x6c]
jmp 0x140024211
mov eax, 0x3d
cmp word [rbx + 2], ax
ja 0x14002420d
movzx eax, word [rbx + 2]
movabs rcx, 0x2400400000000000
bt rcx, rax
jae 0x14002420d
lea rdx, [rbp + 0x40]
mov rcx, rbx
call fcn.1400a8f98
test eax, eax
je 0x14002420d
mov dword [r10], 0x53
jmp 0x140061cc3
mov rax, qword [rbp + 0x180]
bts dword [rax + 0x94], 0xb
jmp 0x140024247
mov rbx, rax
mov qword [rbp - 0x80], rax
jmp 0x140023959
test r9, r9
je 0x140061895
mov rbx, r9
mov qword [rbp - 0x50], rax
mov r9, rax
add rbx, 2
mov qword [rbp - 0x80], rbx
movzx esi, word [rbx]
test esi, esi
jne 0x1400239ce
mov ecx, 6
mov rax, qword [rbp + 0x148]
mov dword [rax], ecx
jmp 0x140061cc3
mov r12d, dword [rbp - 0x44]
mov r14d, dword [rbp - 0x48]
add rbx, r10
mov qword [rbp - 0x80], rbx
mov ebx, dword [rbp - 0x58]
mov dword [rbp], r12d
mov dword [rbp - 0x1c], r14d
test ebx, ebx
je 0x1400619b8
mov r9d, dword [rbp - 0x64]
mov r10d, dword [rbp - 0x6c]
mov r14d, dword [rbp - 0x30]
mov r13d, dword [rbp - 0x70]
cmp r9d, 0xfffffffe
mov eax, 0xffffffff
cmove r9d, eax
mov dword [rbp - 8], r14d
mov dword [rbp - 0x64], r9d
mov dword [rbp - 0x20], r9d
test r10d, r10d
je 0x140061977
test r15b, r13b
je 0x140061977
mov eax, esi
mov ecx, 0x80
lea r11, [0x140000000]
cdq
idiv ecx
movsxd rcx, eax
movsxd rax, edx
movzx r8d, byte [rcx + r11 + 0xc8b90]
shl r8, 7
add r8, rax
movzx eax, word [r11 + r8*2 + 0xbc090]
xor r8d, r8d
movzx ecx, byte [r11 + rax*8 + 0xb9653]
test ecx, ecx
je 0x140061977
mov r11, qword [rbp - 0x78]
lea eax, [r8 + 0xf]
mov word [r11], ax
lea edx, [rax - 0xd]
add r11, rdx
lea eax, [rdx + 7]
mov word [r11], ax
add r11, rdx
mov word [r11], cx
jmp 0x140061963
mov word [r11], si
mov rbx, qword [rbp - 0x80]
mov r15, qword [rbp - 0x40]
add r11, rdx
mov qword [rbp - 0x78], r11
jmp 0x1400236ea
mov r11, qword [rbp - 0x78]
mov al, r13b
and al, r15b
neg al
sbb edx, edx
neg edx
add edx, 0x1f
mov word [r11], dx
mov edx, 2
add r11, rdx
test r10d, r10d
je 0x14006195f
cmp esi, 0xffff
jbe 0x14006195f
mov rdx, r11
mov ecx, esi
call fcn.1400aa088
mov edx, eax
lea r11, [r11 + rdx*2]
jmp 0x140023a8a
test r11d, r11d
je 0x1400619e6
cmp esi, 0xffff
jbe 0x1400619e6
lea rdx, [rbp + 0x78]
mov ecx, esi
call fcn.1400aa088
movzx esi, word [rbp + 0x78]
mov r13d, dword [rbp - 0x70]
xor r8d, r8d
mov edi, eax
lea ebx, [r8 + 1]
jmp 0x140023b29
mov r13d, dword [rbp - 0x70]
mov ebx, 1
mov word [rbp + 0x78], si
mov edi, ebx
jmp 0x140023b29
movzx eax, word [rbp + 0x7a]
mov ecx, 0x3ff
and eax, ecx
and ecx, edx
shl ecx, 0xa
mov edx, eax
or edx, ecx
add edx, 0x10000
jmp 0x1400235fc
or eax, 0xffffffff
mov dword [rbp - 0x20], eax
jmp 0x140060d52
mov r10, qword [rbp + 0x180]
bts dword [r10 + 0x94], 0xb
jmp 0x1400236a7
cmp dword [rbp + 8], r8d
je 0x140023aac
jmp 0x140060d4f
movzx ecx, word [r11 - 2]
mov eax, dword [r10 + 0x98]
mov dword [rbp - 0x44], ecx
mov dword [rbp - 0x48], eax
jmp 0x1400236e6
cmp dword [rbp + 8], r8d
jne 0x1400236e6
jmp 0x1400236cf
test edi, edi
je 0x140061a7d
bt r10d, 0x1d
jae 0x140023a58
mov rdi, qword [rbp - 0x78]
mov ebx, dword [rbp - 0x58]
xor r8d, r8d
mov word [r15], r8w
lea esi, [r8 + 2]
lea r12d, [r8 + 4]
lea eax, [rsi + 0x6e]
add r15, rsi
mov word [rdi], ax
add rdi, r12
test ebx, ebx
mov eax, r8d
setne al
mov word [rdi], ax
test ecx, ecx
je 0x140061ab5
or ax, r12w
mov word [rdi], ax
test r13d, r13d
jle 0x14005f5ff
or word [rdi], si
add rdi, rsi
mov r8, r15
sub r8, rdi
lea rcx, [rdi + 0x20]
mov rdx, rdi
and r8, 0xfffffffffffffffe
mov qword [rbp - 0x78], rdi
call fcn.140026930
test ebx, ebx
je 0x140061b02
mov eax, dword [rbp - 0x68]
test eax, eax
jne 0x140061b02
lea rdx, [rbp + 0x48]
lea edi, [rax + 1]
lea r8d, [rax + 0x20]
not byte [rdx]
add rdx, rdi
sub r8, rdi
jne 0x140061af4
mov rdi, qword [rbp - 0x78]
lea rdx, [rbp + 0x48]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
mov rcx, rdi
call fcn.140026930
mov r9d, dword [rbp - 0x64]
lea r11, [r15 + 0x20]
mov qword [rbp - 0x78], r11
xor r8d, r8d
jmp 0x14005f606
lea rcx, [rbp + 0x48]
mov edx, reloc.OLEAUT32.dll_RegisterActiveObject
not byte [rcx]
add rcx, rsi
sub rdx, rsi
jne 0x140061b31
jmp 0x140023f10
mov dword [r14], reloc.WSOCK32.dll_sendto
jmp 0x140061cc3
mov rax, qword [rbp + 0x148]
mov dword [rax], 0x3b
jmp 0x140061cc3
mov rax, qword [rbp + 0x148]
mov dword [rax], 0x42
jmp 0x140061cc3
mov rax, qword [rbp + 0x148]
mov dword [rax], 0x3c
jmp 0x140061cc3
mov eax, 0x2a
mov dword [r14], eax
jmp 0x140061cc3
mov eax, SafeArrayDestroyData
jmp 0x140061b87
mov ecx, reloc.WSOCK32.dll_ntohs
jmp 0x14006189a
mov eax, RegisterActiveObject
jmp 0x140061b87
mov dword [r14], 0x54
jmp 0x140061cc3
mov eax, reloc.OLEAUT32.dll_SafeArrayRedim
jmp 0x140061b87
mov ecx, 0x2b
jmp 0x14006189a
mov rax, qword [rbp + 0x148]
mov dword [rax], reloc.WSOCK32.dll_setsockopt
jmp 0x140061bda
mov dword [r10], VarR8FromUI1
mov rbx, qword [rbp - 0x80]
jmp 0x140061cc3
mov rax, qword [rbp + 0x148]
mov dword [rax], gethostbyname
jmp 0x140061cc3
mov rax, qword [rbp + 0x148]
mov dword [rax], 0x2a
jmp 0x140061cc3
mov dword [r14], reloc.WSOCK32.dll_sendto
jmp 0x140061cca
mov rax, qword [rbp + 0x148]
mov dword [rax], reloc.WSOCK32.dll_sendto
jmp 0x140061cc3
mov dword [r14], reloc.WSOCK32.dll_ioctlsocket
sub rbx, rsi
jmp 0x140061cc3
mov dword [r14], gethostname
jmp 0x140061bda
mov eax, CreateStdDispatch
jmp 0x140061c49
mov eax, reloc.WSOCK32.dll_ntohs
mov dword [r14], eax
jmp 0x140061bda
mov dword [r14], ntohs
jmp 0x140061cc3
mov rax, qword [rbp + 0x148]
mov dword [rax], edi
jmp 0x140061cc3
mov eax, 0x3a
jmp 0x140061b87
mov eax, RegisterActiveObject
jmp 0x140061b87
mov dword [r14], edx
jmp 0x140061cc3
mov dword [r14], edi
jmp 0x140061cc3
mov dword [r14], SafeArrayCreateEx
jmp 0x140061bda
mov rax, qword [rbp + 0x148]
mov dword [rax], RegisterActiveObject
jmp 0x140061cc3
mov rax, qword [rbp + 0x148]
mov dword [rax], reloc.OLEAUT32.dll_CreateStdDispatch
jmp 0x140061cc3
mov dword [r10], 7
jmp 0x140061cc3
mov dword [r10], 8
jmp 0x140061cc3
mov dword [r14], reloc.WSOCK32.dll_gethostbyname
mov rdx, qword [rbp + 0x140]
mov qword [rdx], rbx
xor eax, eax
jmp 0x1400237b4