Function at 0x1400261c0
Capabilities:
Check for software breakpoints

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x90
xor edi, edi
mov word [rbp - 0x29], 0x15ff
xor dl, dl
mov dword [rbp - 0x27], 2
mov byte [rbp + 0x67], dl
mov r14, rcx
mov byte [rbp + 0x6f], dl
mov r15d, edi
mov word [rbp - 0x23], 0x8eb
mov r12d, edi
mov qword [rbp - 0x21], rdi
mov word [rbp - 0x49], 0x25ff
mov dword [rbp - 0x47], edi
mov qword [rbp - 0x43], rdi
mov qword [rbp - 0x39], 0x25ff0e70
mov qword [rbp - 0x31], rdi
mov qword [rcx + 0x20], rdi
mov qword [rsp + 0xe0], r13
nop word [rax + rax]
mov rsi, qword [r14]
movzx ebx, dl
lea rdx, [rbp - 9]
add rbx, rsi
mov rcx, rbx
call fcn.140025440
mov r9d, dword [rbp + 0x18]
mov r8d, eax
bt r9d, 0xc
jb 0x14002653e
movzx edx, byte [rbp + 0x67]
mov r11, rbx
movzx r13d, byte [rbp - 9]
cmp dl, 5
jb 0x14002627f
mov r8d, SafeArrayDestroy
mov qword [rbp - 0x43], rbx
lea r11, [rbp - 0x49]
lea r12d, [r8 - 0xd]
jmp 0x140026406
movzx eax, byte [rbp + 4]
and al, 0xc7
cmp al, 5
jne 0x1400262e0
movzx eax, byte [rbp + 0x6f]
lea rdi, [rbp - 0x19]
mov rcx, r8
lea r11, [rbp - 0x19]
mov rsi, rbx
mov edx, ebx
sub edx, dword [r14 + 0x10]
rep movsb byte [rdi], byte [rsi]
sub edx, eax
mov ecx, r9d
add edx, dword [rbp + 0x14]
shr rcx, 2
and ecx, 0xf
movzx eax, r13b
sub rax, rcx
cmp byte [rbp + 2], 0xff
mov dword [rbp + rax - 0x1d], edx
jne 0x140026402
cmp byte [rbp + 6], 4
movzx edx, byte [rbp + 0x67]
jne 0x140026406
mov r12d, 1
jmp 0x140026406
movzx edx, byte [rbp + 2]
cmp dl, 0xe8
jne 0x140026304
movsxd rax, dword [rbp + 0xc]
lea r11, [rbp - 0x29]
add rax, rbx
movzx ecx, r13b
add rcx, rax
mov qword [rbp - 0x21], rcx
jmp 0x1400263fc
movzx eax, dl
and al, 0xfd
cmp al, 0xe9
jne 0x14002635f
movsx rax, byte [rbp + 0xc]
movzx ecx, r13b
add rcx, rbx
cmp dl, 0xeb
je 0x140026322
movsxd rax, dword [rbp + 0xc]
add rcx, rax
cmp rsi, rcx
ja 0x140026342
lea rax, [rsi + 5]
cmp rcx, rax
jae 0x140026342
cmp r15, rcx
cmovae rcx, r15
mov r15, rcx
jmp 0x140026402
cmp rbx, r15
mov qword [rbp - 0x43], rcx
mov r12d, edi
lea r11, [rbp - 0x49]
setae r12b
mov r8d, SafeArrayDestroy
jmp 0x140026402
movzx r9d, byte [rbp + 3]
movzx ecx, dl
and cl, 0xf0
cmp cl, 0x70
je 0x140026396
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
je 0x140026396
movzx eax, r9b
and al, 0xf0
cmp al, 0x80
je 0x140026396
and dl, 0xfe
cmp dl, 0xc2
jne 0x140026402
cmp rbx, r15
mov r12d, edi
setae r12b
jmp 0x140026402
movzx edi, r13b
add rdi, rbx
cmp cl, 0x70
je 0x1400263af
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
movsxd rax, dword [rbp + 0xc]
jne 0x1400263b4
movsx rax, byte [rbp + 0xc]
add rdi, rax
cmp rsi, rdi
ja 0x1400263d1
lea rax, [rsi + 5]
cmp rdi, rax
jae 0x1400263d1
cmp r15, rdi
cmovae rdi, r15
mov r15, rdi
jmp 0x140026402
movzx eax, dl
and al, 0xfc
cmp al, 0xe0
je 0x14002653e
cmp dl, 0xf
movzx ecx, r9b
movzx eax, dl
lea r11, [rbp - 0x39]
cmovne ecx, eax
mov qword [rbp - 0x31], rdi
and cl, 0xf
xor cl, 0x71
mov byte [rbp - 0x39], cl
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
movzx edx, byte [rbp + 0x67]
cmp rbx, r15
jae 0x140026418
movzx eax, r13b
cmp r8d, eax
jne 0x14002653e
movzx ebx, byte [rbp + 0x6f]
lea eax, [r8 + rbx]
cmp eax, 0x32
ja 0x14002653e
mov eax, dword [r14 + 0x24]
cmp eax, 8
jae 0x14002653e
mov byte [rax + r14 + 0x28], dl
mov rsi, r11
mov eax, dword [r14 + 0x24]
add dl, r13b
movzx edi, bl
mov ecx, r8d
mov byte [rbp + 0x67], dl
mov byte [rax + r14 + 0x30], bl
add bl, r8b
mov r10, qword [r14 + 0x10]
inc dword [r14 + 0x24]
add rdi, r10
mov byte [rbp + 0x6f], bl
rep movsb byte [rdi], byte [rsi]
mov edi, 0
test r12d, r12d
je 0x140026230
cmp dl, 5
jae 0x14002650e
mov rdi, qword [r14]
movzx ecx, dl
movzx esi, dl
add rcx, rdi
mov edx, 5
sub edx, esi
call fcn.140026180
test eax, eax
jne 0x14002650e
cmp byte [rbp + 0x67], 2
jae 0x1400264b3
mov edx, 2
sub edx, esi
call fcn.140026180
test eax, eax
je 0x14002653e
lea rcx, [rdi - 5]
mov r8d, gethostbyname
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [rbp + 0x17], 0x1000
jne 0x14002653e
test byte [rbp + 0x1b], 0xf0
je 0x14002653e
mov rax, qword [r14]
movzx edx, byte [rax - 5]
test dl, dl
je 0x1400264eb
cmp dl, 0x90
je 0x1400264eb
cmp dl, 0xcc
jne 0x14002653e
mov ecx, 1
add rax, 0xfffffffffffffffc
cmp byte [rax], dl
jne 0x14002653e
inc ecx
inc rax
cmp ecx, 5
jb 0x1400264f4
mov r10, qword [r14 + 0x10]
mov dword [r14 + 0x20], 1
mov rcx, qword [r14 + 8]
mov eax, 1
mov qword [rbp - 0x43], rcx
mov ecx, dword [rbp - 0x41]
movsd xmm0, qword [rbp - 0x49]
movzx edx, bl
add rdx, r10
mov qword [r14 + 0x18], rdx
movsd qword [rdx], xmm0
mov dword [rdx + 8], ecx
movzx ecx, word [rbp - 0x3d]
mov word [rdx + 0xc], cx
jmp 0x140026540
xor eax, eax
mov r13, qword [rsp + 0xe0]
add rsp, 0x90
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret