Function at 0x14016e400
Capabilities:
Resolve dns

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2b80]
mov eax, 0x2c80
call fcn.1403caee0
sub rsp, rax
mov rax, qword [0x1404af540]
xor rax, rsp
mov qword [rbp + 0x2b70], rax
xor r12d, r12d
lea r9, [0x1404ba914]
lea r8, [0x1404ba910]
lea rdx, [0x1404ba90c]
call fcn.1401df660
xor sil, sil
mov qword [rbp - 0x18], r12
xor r8d, r8d
mov rdx, qword [0x1404ba678]
lea rcx, [rbp - 0x18]
call fcn.1401769f0
nop
lea r14, [0x1404c54b8]
mov r15, qword [rbp - 0x18]
test r15, r15
je 0x14016e880
mov ebx, r12d
mov qword [rbp - 0x38], rbx
cmp dword [0x1404ba628], 1
jne 0x14016e552
lea rax, [rbp - 0x40]
mov qword [rbp + 0xd8], rax
lea rdx, str.__GlobalConfig__DMCode
lea rcx, [rbp - 0x40]
call fcn.140018080
mov r14, rax
mov qword [rbp + 0xd8], rax
mov qword [rbp - 0x48], r12
mov rdx, qword [rax]
test rdx, rdx
je 0x14016e4d4
mov rdx, qword [rdx]
jmp 0x14016e4d7
mov rdx, r12
mov rax, qword [r15]
lea r8, [rbp - 0x48]
mov rcx, r15
call qword [rax + 0x128]
test eax, eax
jns 0x14016e4fc
lea r8, [0x14041b2b0]
mov rdx, r15
mov ecx, eax
call fcn.1403c9f60
mov rdi, qword [rbp - 0x48]
mov qword [rbp - 0x30], rdi
mov rcx, r14
call fcn.140018110
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x48]
call fcn.140016c90
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14016e532
mov rbx, rcx
mov qword [rbp - 0x38], rcx
mov rcx, r12
mov qword [rbp - 0x48], rcx
test rcx, rcx
je 0x14016e53e
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
test rdi, rdi
je 0x14016e54d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
jmp 0x14016e647
lea rax, [rbp - 0x48]
mov qword [rbp + 0xd8], rax
mov ecx, reloc.SinoSPE.dll_Ordinal_24
call fcn.1403ca490
mov rdi, rax
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x14016e5a8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r12
mov dword [rdi + 0x10], 1
lea rcx, str.__GlobalConfig__HDCode
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14017006c
jmp 0x14016e5ab
mov rdi, r12
mov qword [rbp - 0x48], rdi
test rdi, rdi
je 0x140170082
lea rax, [rbp - 0x48]
mov qword [rbp + 0xd8], rax
mov qword [rsp + 0x70], r12
mov rax, qword [r15]
lea r8, [rsp + 0x70]
mov rdx, qword [rdi]
mov rcx, r15
call qword [rax + 0x128]
test eax, eax
jns 0x14016e5f1
lea r8, [0x14041b2b0]
mov rdx, r15
mov ecx, eax
call fcn.1403c9f60
mov rdi, qword [rsp + 0x70]
mov qword [rbp - 0x40], rdi
lea rcx, [rbp - 0x48]
call fcn.140018110
nop
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x70]
call fcn.140016c90
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14016e62c
mov rbx, rcx
mov qword [rbp - 0x38], rcx
mov rcx, r12
mov qword [rsp + 0x70], rcx
test rcx, rcx
je 0x14016e638
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
test rdi, rdi
je 0x14016e647
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
test rbx, rbx
je 0x14016e851
mov qword [rbp - 0x28], r12
lea rdx, [rbp - 0x28]
mov rcx, rbx
call fcn.140017d90
nop
mov rdi, qword [rbp - 0x28]
test rdi, rdi
je 0x14016e684
mov r14, qword [rdi + 8]
test r14, r14
jne 0x14016e687
mov rcx, qword [rdi]
call fcn.1403ca010
mov r14, rax
mov qword [rdi + 8], rax
jmp 0x14016e687
mov r14, r12
cmp dword [0x1404ba628], 1
sete r12b
mov r13d, dword [0x1404ba62c]
mov eax, dword [0x1404ba630]
mov dword [rsp + 0x70], eax
cmp byte [0x1404b9e28], 0
je 0x14016e7eb
test r14, r14
je 0x14016e7eb
mov rax, 0xffffffffffffffff
inc rax
cmp byte [r14 + rax], 0
jne 0x14016e6c0
cmp rax, 0x30
jne 0x14016e7eb
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov r9d, 8
mov r8, r14
mov edx, reloc.SinoSPE.dll_Ordinal_16
lea rcx, [rbp + 0xd8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
xor edx, edx
mov r8d, reloc.SinoSPE.dll_Ordinal_16
lea rcx, [rbp + 0xd8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov esi, eax
lea r8, [r14 + 0x28]
mov edx, reloc.SinoSPE.dll_Ordinal_16
mov r9d, 8
lea rcx, [rbp + 0xd8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
xor edx, edx
mov r8d, reloc.SinoSPE.dll_Ordinal_16
lea rcx, [rbp + 0xd8]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
mov edx, eax
mov r8d, dword [r14 + 8]
movdqu xmm0, xmmword [r14 + 8]
movdqu xmm1, xmmword [r14 + 0x18]
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
xorps xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
xorps xmm1, xmm0
movd eax, xmm1
xor r8d, eax
xor r8d, edx
xor r8d, 0xa55a5aa5
cmp r8d, esi
jne 0x14016e7eb
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xf8], xmm0
movups xmmword [rbp + 0x108], xmm0
mov byte [rbp + 0x118], al
lea rax, [0x1404c54b8]
mov qword [rsp + 0x28], rax
mov byte [rsp + 0x20], r12b
mov r9d, r13d
mov r8d, dword [rsp + 0x70]
mov edx, 0x21
lea rcx, [rbp + 0xf8]
call fcn.1401de470
test al, al
je 0x14016e7eb
mov r8d, reloc.SinoSPE.dll_Ordinal_32
lea rdx, [r14 + 8]
lea rcx, [rbp + 0xf8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x14016e7eb
mov sil, 1
jmp 0x14016e7ee
xor sil, sil
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
xor r12d, r12d
mov ebx, r12d
mov qword [rbp - 0x38], rbx
test rdi, rdi
je 0x14016e851
mov eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14016e849
mov rbx, qword [rbp - 0x28]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14016e82a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14016e83c
call fcn.1403ca488
mov qword [rbx + 8], r12
mov edx, reloc.SinoSPE.dll_Ordinal_24
mov rcx, rbx
call fcn.1403ca488
mov rbx, qword [rbp - 0x38]
mov r15, qword [rbp - 0x18]
mov rax, qword [r15]
mov rcx, r15
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
mov r15, r12
mov qword [rbp - 0x18], r12
test rbx, rbx
je 0x14016e870
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
test sil, sil
jne 0x140170022
lea r14, [0x1404c54b8]
lea rcx, str.testready1.ddns.net
call qword [sym.imp.WS2_32.dll_gethostbyname]
mov rsi, rax
test rax, rax
je 0x140170022
lea rcx, [rbp + 0xf8]
call fcn.1401dc450
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe8], xmm1
mov r8d, 2
lea rdx, [0x140439aec]
lea rcx, [rbp + 0xd8]
call fcn.140006340
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc0], xmm1
mov r8d, 1
lea rdx, [0x14043f8d8]
lea rcx, [rbp + 0xb0]
call fcn.140006340
nop
cmp qword [rbp + 0x108], 0
je 0x14016e929
lea r8, [rbp + 0xf8]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0xb0]
call fcn.1401f7250
nop
mov r8, qword [rbp + 0xc8]
cmp r8, 7
jbe 0x14016e943
mov rdx, qword [rbp + 0xb0]
call fcn.140006010
nop
mov r8, qword [rbp + 0xf0]
cmp r8, 7
jbe 0x14016e95c
mov rdx, qword [rbp + 0xd8]
call fcn.140006010
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rax
mov r8d, 0x7c
lea rdx, [rbp + 0xf8]
lea rcx, [rbp - 0x10]
call fcn.1401f6ae0
nop
mov rbx, qword [rbp - 8]
sub rbx, qword [rbp - 0x10]
sar rbx, 5
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
mov r8d, 3
lea rdx, [0x140439af8]
lea rcx, [rsp + 0x78]
call fcn.140006340
nop
test ebx, ebx
jle 0x14016e9d7
mov rdx, qword [rbp - 0x10]
mov r8, rdx
cmp qword [rdx + 0x18], 7
jbe 0x14016e9c9
mov rdx, qword [rdx]
mov r8, qword [r8 + 0x10]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x14016ea18
lea rax, [rcx + 4]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
movabs rdx, 0x3d004600530026
mov qword [rax + rcx*2], rdx
mov word [rax + rcx*2 + 8], r12w
jmp 0x14016ea37
mov qword [rsp + 0x20], 4
lea r9, [0x140439b00]
mov edx, 4
lea rcx, [rsp + 0x78]
call fcn.140003d80
cmp ebx, 1
jle 0x14016ea5d
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0x20]
cmp qword [rax + 0x38], 7
jbe 0x14016ea4f
mov rdx, qword [rax + 0x20]
mov r8, qword [rax + 0x30]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x14016ea9e
lea rax, [rcx + 4]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
movabs rdx, 0x3d0044004d0026
mov qword [rax + rcx*2], rdx
mov word [rax + rcx*2 + 8], r12w
jmp 0x14016eabd
mov qword [rsp + 0x20], 4
lea r9, [0x140439b10]
mov edx, 4
lea rcx, [rsp + 0x78]
call fcn.140003d80
cmp ebx, 2
jle 0x14016eae3
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0x40]
cmp qword [rax + 0x58], 7
jbe 0x14016ead5
mov rdx, qword [rax + 0x40]
mov r8, qword [rax + 0x50]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x14016eb24
lea rax, [rcx + 4]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
movabs rdx, 0x3d004e00480026
mov qword [rax + rcx*2], rdx
mov word [rax + rcx*2 + 8], r12w
jmp 0x14016eb43
mov qword [rsp + 0x20], 4
lea r9, str.HN
mov edx, 4
lea rcx, [rsp + 0x78]
call fcn.140003d80
cmp ebx, 3
jle 0x14016eb69
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0x60]
cmp qword [rax + 0x78], 7
jbe 0x14016eb5b
mov rdx, qword [rax + 0x60]
mov r8, qword [rax + 0x70]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8d, 4
lea rdx, str.UN
lea rcx, [rsp + 0x78]
call fcn.140003f40
cmp ebx, 4
jle 0x14016ebb2
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0x80]
cmp qword [rax + 0x98], 7
jbe 0x14016eba1
mov rdx, qword [rax + 0x80]
mov r8, qword [rax + 0x90]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8d, 4
lea rdx, str.ON
lea rcx, [rsp + 0x78]
call fcn.140003f40
cmp ebx, 5
jle 0x14016ebfb
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0xa0]
cmp qword [rax + 0xb8], 7
jbe 0x14016ebea
mov rdx, qword [rax + 0xa0]
mov r8, qword [rax + 0xb0]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8d, 4
lea rdx, str.OV
lea rcx, [rsp + 0x78]
call fcn.140003f40
cmp ebx, 6
jle 0x14016ec44
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0xc0]
cmp qword [rax + 0xd8], 7
jbe 0x14016ec33
mov rdx, qword [rax + 0xc0]
mov r8, qword [rax + 0xd0]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8d, 4
lea rdx, str.ID
lea rcx, [rsp + 0x78]
call fcn.140003f40
cmp ebx, 8
jle 0x14016ecf3
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0xe0]
cmp qword [rax + 0xf8], 7
jbe 0x14016ec80
mov rdx, qword [rax + 0xe0]
mov r8, qword [rax + 0xf0]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
cmp rcx, rdx
jae 0x14016ecbe
lea rax, [rcx + 1]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
mov dword [rax + rcx*2], 0x5f
jmp 0x14016ecce
mov r9d, 0x5f
lea rcx, [rsp + 0x78]
call fcn.140003990
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0x100]
cmp qword [rax + 0x118], 7
jbe 0x14016ecea
mov rdx, qword [rax + 0x100]
mov r8, qword [rax + 0x110]
jmp 0x14016ed1b
cmp ebx, 7
jle 0x14016ed25
mov rax, qword [rbp - 0x10]
lea rdx, [rax + 0xe0]
cmp qword [rax + 0xf8], 7
jbe 0x14016ed14
mov rdx, qword [rax + 0xe0]
mov r8, qword [rax + 0xf0]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8d, 4
lea rdx, str.CS
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8, 0xffffffffffffffff
inc r8
cmp word [r14 + r8*2], 0
jne 0x14016ed43
mov rdx, r14
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8d, 4
lea rdx, str.DT
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov edx, dword [0x1404ba630]
lea rcx, [rbp + 0xb0]
call fcn.140003cb0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14016ed92
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x78]
call fcn.140003f40
nop
lea rcx, [rbp + 0xb0]
call fcn.140006060
mov r8d, 4
lea rdx, str.CT
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov edx, dword [0x1404ba62c]
lea rcx, [rbp + 0xb0]
call fcn.140003cb0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14016ede4
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x78]
call fcn.140003f40
nop
lea rcx, [rbp + 0xb0]
call fcn.140006060
mov r8d, 4
lea rdx, str.DN
lea rcx, [rsp + 0x78]
call fcn.140003f40
lea rdx, [0x1404c57a4]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14016ee24
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8d, 4
lea rdx, str.DS
lea rcx, [rsp + 0x78]
call fcn.140003f40
lea rdx, [0x1404c57e4]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14016ee60
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov r8d, 4
lea rdx, str.DC
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov eax, dword [0x1404ba630]
add eax, 0xfffffff6
cmp eax, 0xbe
ja case.0x14016eebb.11
cdqe
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x1700b8]
mov ecx, dword [rdx + rax*4 + 0x170090]
add rcx, rdx
jmp rcx
mov r8d, 3
lea rdx, [0x1404251b8]
jmp 0x14016ef42
mov r8d, 3
lea rdx, [0x1404251d0]
jmp 0x14016ef42
mov r8d, 3
lea rdx, [0x1404251f0]
jmp 0x14016ef42
mov r8d, 3
lea rdx, [0x140425208]
jmp 0x14016ef42
mov r8d, 3
lea rdx, [0x140425228]
jmp 0x14016ef42
mov r8d, 3
lea rdx, [0x140425248]
jmp 0x14016ef42
mov r8d, 3
lea rdx, [0x140425268]
jmp 0x14016ef42
mov r8d, 3
lea rdx, [0x140425288]
jmp 0x14016ef42
mov r8d, 2
lea rdx, [0x1404252a4]
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov eax, dword [0x1404ba630]
add eax, 0xfffffff6
cmp eax, 0x59
ja 0x14016efe0
mov eax, dword [0x1404c54a0]
cmp eax, 0xa
jne 0x14016ef9e
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
cmp rcx, rdx
jae 0x14016ef96
lea rax, [rcx + 1]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
mov dword [rax + rcx*2], 0x55
jmp 0x14016efe0
mov r9d, 0x55
jmp 0x14016efd6
cmp eax, 0x14
jne 0x14016efe0
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
cmp rcx, rdx
jae 0x14016efd0
lea rax, [rcx + 1]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
mov dword [rax + rcx*2], 0x4c
jmp 0x14016efe0
mov r9d, 0x4c
lea rcx, [rsp + 0x78]
call fcn.140003990
lea rdx, str.AV1
lea rax, str.AV0
cmp dword [0x1404ba628], 1
cmovne rdx, rax
mov r8d, 5
lea rcx, [rsp + 0x78]
call fcn.140003f40
cmp dword [0x1404ba908], 0
jle 0x14016f1ef
cmp dword [0x1404ba90c], 0
jle 0x14016f1ef
cmp dword [0x1404ba910], 0
jle 0x14016f1ef
cmp dword [0x1404ba914], 0
jle 0x14016f1ef
mov r8d, 4
lea rdx, str.IP
lea rcx, [rsp + 0x78]
call fcn.140003f40
mov edx, dword [0x1404ba908]
lea rcx, [rbp + 0xb0]
call fcn.140003cb0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14016f074
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x78]
call fcn.140003f40
nop
lea rcx, [rbp + 0xb0]
call fcn.140006060
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
mov ebx, Ordinal_48
cmp rcx, rdx
jae 0x14016f0bd
lea rax, [rcx + 1]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
mov dword [rax + rcx*2], ebx
jmp 0x14016f0ca
mov r9d, ebx
lea rcx, [rsp + 0x78]
call fcn.140003990
mov edx, dword [0x1404ba90c]
lea rcx, [rbp + 0xb0]
call fcn.140003cb0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14016f0ea
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x78]
call fcn.140003f40
nop
lea rcx, [rbp + 0xb0]
call fcn.140006060
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
cmp rcx, rdx
jae 0x14016f132
lea rax, [rcx + 1]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
mov dword [rax + rcx*2], Ordinal_51
jmp 0x14016f13f
mov r9d, ebx
lea rcx, [rsp + 0x78]
call fcn.140003990
mov edx, dword [0x1404ba910]
lea rcx, [rbp + 0xb0]
call fcn.140003cb0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14016f15f
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x78]
call fcn.140003f40
nop
lea rcx, [rbp + 0xb0]
call fcn.140006060
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
cmp rcx, rdx
jae 0x14016f1a7
lea rax, [rcx + 1]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 7
cmova rax, qword [rsp + 0x78]
mov dword [rax + rcx*2], Ordinal_51
jmp 0x14016f1b4
mov r9d, ebx
lea rcx, [rsp + 0x78]
call fcn.140003990
mov edx, dword [0x1404ba914]
lea rcx, [rbp + 0xb0]
call fcn.140003cb0
nop
mov rdx, rax
cmp qword [rax + 0x18], 7
jbe 0x14016f1d4
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x78]
call fcn.140003f40
nop
lea rcx, [rbp + 0xb0]
call fcn.140006060
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rdx, str.SC0SINO1
lea rcx, [rsp + 0x78]
call fcn.140003f40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0x30]
call fcn.14001fae0
nop
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 7
cmova r8, qword [rsp + 0x78]
mov rax, qword [rbp - 0x78]
lea r9, [r8 + rax*2]
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x30]
call fcn.14001fde0
nop
movabs rax, 0xaaaaaaaaaaaaaaab
mov rcx, qword [rbp + 0x20]
mul rcx
shr rdx, 1
lea eax, [rdx + rdx*2]
sub ecx, eax
cmp ecx, 1
jne 0x14016f291
mov r8d, 2
lea rdx, [0x14041bbf8]
jmp 0x14016f2a3
cmp ecx, 2
jne 0x14016f2ac
mov r8d, 1
lea rdx, reloc.SinoSPE.dll_Ordinal_32
lea rcx, [rbp + 0x10]
call fcn.140020ca0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], reloc.SinoSPE.dll_Ordinal_15
mov byte [rbp - 0x68], 0
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x10]
call fcn.1401aa250
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rcx, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x58]
add rdx, rcx
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rcx, qword [rbp - 0x68]
call fcn.1403c9de0
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f322
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rax + rcx], 0x61
jmp 0x14016f32e
mov r9b, 0x61
lea rcx, [rbp - 0x68]
call fcn.140020dc0
lea rcx, [rbp - 0x68]
call fcn.14001fc20
mov r8d, Ordinal_16
lea rdx, str.testready
lea rcx, [rbp - 0x68]
call fcn.140020ca0
lea r9, str.1.1.20240827
mov rdi, 0xffffffffffffffff
nop dword [rax + rax]
inc rdi
cmp byte [r9 + rdi], 0
jne 0x14016f360
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14016f3a9
lea rax, [rcx + rdi]
mov qword [rbp - 0x58], rax
lea rbx, [rbp - 0x68]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x68]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14016f3ba
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.140020b10
mov r8d, 7
lea rdx, str.ucapi
lea rcx, [rbp - 0x68]
call fcn.140020ca0
mov dword [rsp + 0x60], r12d
mov dword [rsp + 0x64], r12d
mov dword [rsp + 0x70], r12d
mov dword [rbp - 0x28], r12d
mov dword [rsp + 0x68], r12d
mov dword [rbp - 0x38], r12d
lea rax, [rbp - 0x38]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x64]
lea rcx, [rsp + 0x60]
call qword [sym.imp.ucapi64.dll_GetDllVersion_1]
mov edx, dword [rsp + 0x60]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f436
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f47a
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rax + rcx], Ordinal_51
jmp 0x14016f486
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rsp + 0x64]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f4a4
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f4e8
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rcx + rax], Ordinal_51
jmp 0x14016f4f4
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rsp + 0x68]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f512
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f556
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rcx + rax], Ordinal_51
jmp 0x14016f562
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rbp - 0x28]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f57f
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov r8d, 0xa
lea rdx, str.calcbase
lea rcx, [rbp - 0x68]
call fcn.140020ca0
lea rax, [rbp - 0x38]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x64]
lea rcx, [rsp + 0x60]
call qword [sym.imp.calcbase64.dll_GetDllVersion]
mov edx, dword [rsp + 0x60]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f5f9
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f63d
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rcx + rax], Ordinal_51
jmp 0x14016f649
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rsp + 0x64]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f667
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f6ab
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rax + rcx], Ordinal_51
jmp 0x14016f6b7
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rsp + 0x68]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f6d5
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f719
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rax + rcx], Ordinal_51
jmp 0x14016f725
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rbp - 0x28]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f742
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov r8d, reloc.SinoSPE.dll_Ordinal_16
lea rdx, str.reportdesigner
lea rcx, [rbp - 0x68]
call fcn.140020ca0
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x160]
call sub.VCRUNTIME140.dll_memset
mov r9, 0xffffffffffffffff
lea r8, [0x1404ba700]
mov edx, 0x104
lea rcx, [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy_s]
mov r9, 0xffffffffffffffff
lea r8, [0x140411498]
mov edx, 0x104
lea rcx, [rbp + 0x160]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat_s]
lea rax, [rbp - 0x38]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x64]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x160]
call fcn.1401dff80
test al, al
je 0x14016f973
mov edx, dword [rsp + 0x60]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f810
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f854
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rcx + rax], Ordinal_51
jmp 0x14016f860
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rsp + 0x64]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f87e
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f8c2
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rax + rcx], Ordinal_51
jmp 0x14016f8ce
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rsp + 0x68]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f8ec
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
cmp rcx, rdx
jae 0x14016f930
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x68]
mov word [rax + rcx], Ordinal_51
jmp 0x14016f93c
mov r9b, Ordinal_48
lea rcx, [rbp - 0x68]
call fcn.140020dc0
mov edx, dword [rbp - 0x38]
lea rcx, [rbp + 0xb0]
call fcn.140020a50
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14016f959
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp - 0x68]
call fcn.140020ca0
nop
lea rcx, [rbp + 0xb0]
call fcn.140021010
mov rax, qword [rsi + 0x18]
mov rbx, qword [rax]
mov ebx, dword [rbx]
mov dword [rbp - 0x48], 0xffffffff
xor edx, edx
mov r8d, 0x2800
lea rcx, [rbp + 0x370]
call sub.VCRUNTIME140.dll_memset
lea rdi, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rdi, qword [rbp - 0x68]
mov esi, 0x50
mov ecx, ebx
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rcx, rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x2800
lea rax, [rbp + 0x370]
mov qword [rsp + 0x20], rax
mov r9, rdi
lea r8, str._register.php
movzx edx, si
call fcn.1401dfd70
test eax, eax
jne 0x14016ffe2
lea rdx, str.sino_res1
lea rcx, [rbp + 0x370]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14016ffe2
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
cmp dword [0x1404ba628], 1
sete al
cmp byte [0x1404b9e28], 0
je 0x14016fb51
xor ecx, ecx
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
mov byte [rbp + 0xd0], cl
mov qword [rsp + 0x28], r14
mov byte [rsp + 0x20], al
mov r9d, dword [0x1404ba62c]
mov r8d, dword [0x1404ba630]
mov edx, 0x21
lea rcx, [rbp + 0xb0]
call fcn.1401de470
test al, al
je 0x14016fb51
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
movdqu xmm3, xmmword [rbp + 0xb0]
movaps xmm2, xmm3
movdqu xmm0, xmmword [rbp + 0xc0]
xorps xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 8
xorps xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 4
xorps xmm2, xmm0
movd r8d, xmm2
movd eax, xmm3
xor r8d, eax
xor r8d, 0xd856a75e
lea rdx, str._08X
lea rcx, [rbp + 0xd8]
call fcn.1401e6c10
mov r8d, 8
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x120]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, reloc.SinoSPE.dll_Ordinal_32
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x128]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov r8d, 0x7d0cfdfb
lea rdx, str._08X
lea rcx, [rbp + 0xd8]
call fcn.1401e6c10
mov r8d, 8
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x148]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov byte [rbp + 0x150], 0
mov qword [rbp - 0x48], r12
xor r8d, r8d
mov rdx, qword [0x1404ba678]
lea rcx, [rbp - 0x48]
call fcn.1401769f0
nop
mov rdi, qword [rbp - 0x48]
test rdi, rdi
je 0x14016ffd3
mov qword [rbp + 8], r12
lea rax, [rsp + 0x50]
mov qword [rbp + 0xd8], rax
lea rdx, str.__GlobalConfig
lea rcx, [rsp + 0x50]
call fcn.140018080
nop
mov r8, rax
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.140017e60
nop
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.140016c90
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14016fbc7
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov rbx, qword [rbp + 8]
test rbx, rbx
je 0x14016ffc4
cmp dword [0x1404ba628], 1
jne 0x14016fdcb
mov qword [rbp - 0x20], r12
lea rax, [rbp - 0x40]
mov qword [rbp + 0xd8], rax
lea rdx, str.DMCode
lea rcx, [rbp - 0x40]
call fcn.140018080
nop
mov r8, rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140017e60
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140016c90
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14016fc30
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov rsi, qword [rbp - 0x20]
test rsi, rsi
je 0x14016fc6e
lea rax, [rbp - 0x30]
mov qword [rbp + 0xd8], rax
lea rdx, [rbp + 0x120]
lea rcx, [rbp - 0x30]
call fcn.1401a8300
nop
mov rdx, rax
mov rcx, rsi
call fcn.140017cc0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
jmp 0x14016fdc6
mov qword [rbp - 0x30], r12
lea rax, [rsp + 0x48]
mov qword [rbp + 0xd8], rax
lea rdx, str.DMCode
lea rcx, [rsp + 0x48]
call fcn.140018080
nop
mov r8, rax
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.140017ba0
nop
lea rax, [rsp + 0x40]
mov qword [rbp + 0xd8], rax
lea rdx, [rbp + 0x120]
lea rcx, [rsp + 0x40]
call fcn.1401a8300
nop
mov r14, qword [rbp - 0x30]
test r14, r14
je 0x140170061
mov rdx, rax
mov rcx, r14
call fcn.140017cc0
mov qword [rbp - 0x40], r12
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x40], rax
lea rdx, str.Security
lea rcx, [rbp + 0xd8]
call fcn.140018080
nop
mov r8, rax
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140017e60
nop
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.140016c90
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14016fd29
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov rsi, qword [rbp - 0x40]
test rsi, rsi
je 0x14016fd8b
mov eax, 9
mov word [rbp + 0xb0], ax
mov qword [rbp + 0xb8], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.SinoSPE.dll_Ordinal_8]
nop
lea r9, [rbp + 0xb0]
mov r8, r14
lea rdx, [rbp + 0xd8]
mov rcx, rbx
call fcn.1401a8260
nop
mov rcx, qword [rbp + 0xd8]
test rcx, rcx
je 0x14016fd7c
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
lea rcx, [rbp + 0xb0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x14016fdad
mov r8, r14
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.1400178e0
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14016fdad
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
test rsi, rsi
je 0x14016fdbc
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
jmp 0x14016ffaa
mov qword [rbp - 0x40], r12
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x48], rax
lea rdx, str.HDCode
lea rcx, [rbp + 0xd8]
call fcn.140018080
nop
mov r8, rax
lea rdx, [rsp + 0x48]
mov rcx, rbx
call fcn.140017e60
nop
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.140016c90
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14016fe1e
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov rsi, qword [rbp - 0x40]
lea rax, [rsp + 0x40]
lea rcx, [rsp + 0x40]
test rsi, rsi
je 0x14016fe5b
mov qword [rbp - 0x30], rax
lea rdx, [rbp + 0x120]
call fcn.1401a8300
nop
mov rdx, rax
mov rcx, rsi
call fcn.140017cc0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
jmp 0x14016ffaa
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], rax
lea rdx, str.HDCode
call fcn.140018080
nop
mov r8, rax
lea rdx, [rbp - 0x30]
mov rcx, rdi
call fcn.140017ba0
nop
lea rax, [rbp + 0xd8]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0xd8]
call fcn.1401a8300
nop
mov r14, qword [rbp - 0x30]
test r14, r14
je 0x140170077
mov rdx, rax
mov rcx, r14
call fcn.140017cc0
mov qword [rbp - 0x20], r12
lea rax, [rsp + 0x48]
mov qword [rbp + 0xd8], rax
lea rdx, str.Security
lea rcx, [rsp + 0x48]
call fcn.140018080
nop
mov r8, rax
lea rdx, [rbp + 0xd8]
mov rcx, rbx
call fcn.140017e60
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140016c90
nop
mov rcx, qword [rbp + 0xd8]
test rcx, rcx
je 0x14016ff0d
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov rsi, qword [rbp - 0x20]
test rsi, rsi
je 0x14016ff6f
mov eax, 9
mov word [rbp + 0xb0], ax
mov qword [rbp + 0xb8], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.SinoSPE.dll_Ordinal_8]
nop
lea r9, [rbp + 0xb0]
mov r8, r14
lea rdx, [rbp + 0xd8]
mov rcx, rbx
call fcn.1401a8260
nop
mov rcx, qword [rbp + 0xd8]
test rcx, rcx
je 0x14016ff60
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
lea rcx, [rbp + 0xb0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x14016ff91
mov r8, r14
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.1400178e0
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14016ff91
mov rax, qword [rcx]
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
test rsi, rsi
je 0x14016ffa0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov rax, qword [r14]
mov rcx, r14
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov qword [rbp - 0x40], rdi
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.SinoSPE.dll_Ordinal_8]
nop
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.140177c40
nop
test rbx, rbx
je 0x14016ffd3
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
test rdi, rdi
je 0x14016ffe2
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
lea rcx, [rbp - 0x68]
call fcn.140021010
nop
lea rcx, [rbp + 0x10]
call fcn.140021010
nop
lea rcx, [rbp + 0x30]
call fcn.14001fa80
nop
lea rcx, [rsp + 0x78]
call fcn.140006060
nop
lea rcx, [rbp - 0x10]
call fcn.1400d0190
nop
lea rcx, [rbp + 0xf8]
call fcn.140006060
nop
test r15, r15
je 0x140170031
mov rax, qword [r15]
mov rcx, r15
call qword [rax + reloc.SinoSPE.dll_Ordinal_16]
nop
mov rcx, qword [rbp + 0x2b70]
xor rcx, rsp
call fcn.1403ca460
lea r11, [rsp + 0x2c80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004003
call fcn.1403c9f50
nop
mov ecx, 0x8007000e
call fcn.1403c9f50
nop
mov ecx, 0x80004003
call fcn.1403c9f50
nop
mov ecx, 0x8007000e
call fcn.1403c9f50
int3