Function at 0x1400573c0
Capabilities:
Authenticate hmac
Encode data using base64
Encrypt data using speck
Parse credit card information

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x198
mov rsi, qword [rdx]
mov rdi, qword [r8]
mov r8d, dword [rcx]
xor r10d, r10d
mov r11d, r8d
mov eax, r8d
shr eax, 9
shr r11d, 0xb
mov edx, r10d
and r11d, 1
movsx ebx, r8b
mov r15, r9
mov dword [rsp + 0x7c], r11d
lea r11d, [r10 + 1]
mov dword [rbp - 0x1c], r10d
and eax, r11d
and ebx, r11d
mov dword [rbp - 0x38], r10d
mov dword [rbp + 0x48], eax
xor eax, r11d
shl ebx, 8
mov dword [rbp + 0x4c], eax
lea eax, [r10 - 2]
mov dword [rbp + 0x30], r10d
mov dword [rbp - 0x20], r10d
mov dword [rbp + 0x34], r10d
mov r14d, r10d
mov qword [rbp - 0x70], r10
mov r13d, r10d
mov qword [rbp - 0x58], r10
mov qword [rbp + 0x18], r10
mov r10, qword [rbp + 0x120]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x60], eax
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x78], eax
mov dword [rbp - 0x80], r8d
mov r9, rsi
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x68], rsi
mov dword [rsp + 0x78], edx
mov dword [rbp - 0x18], ebx
mov r11, qword [rbp + 0x118]
mov qword [rsp + 0x70], rdi
movzx r12d, byte [rdi]
mov rax, qword [r11 + 0x20]
mov ecx, 0x7fffffeb
add rax, 0xf9c
test r10, r10
je 0x140057532
cmp rsi, rax
ja 0x14005ab27
mov eax, ecx
cmp rsi, r9
cmovb rsi, r9
sub eax, dword [r10]
movsxd rcx, eax
mov rax, rsi
sub rax, r9
cmp rcx, rax
jl 0x14005a8db
mov eax, esi
sub eax, r9d
add eax, dword [r10]
mov dword [r10], eax
test r14, r14
je 0x140057528
mov rbx, qword [rbp + 0x68]
cmp r14, rbx
jbe 0x14005752c
mov r8, rsi
mov rdx, r14
mov rcx, rbx
sub r8, r14
call fcn.140014740
mov rdi, qword [rsp + 0x70]
mov r10, qword [rbp + 0x120]
mov r8d, dword [rbp - 0x80]
mov edx, dword [rsp + 0x78]
mov r11, rbx
sub r11, r14
mov qword [rbp - 0x70], rbx
mov r14, rbx
add rsi, r11
mov r11, qword [rbp + 0x118]
jmp 0x14005752c
mov rsi, qword [rbp + 0x68]
mov qword [rbp + 0x58], rsi
jmp 0x14005753c
cmp qword [r11 + 0x48], rax
ja 0x14005ab27
xor r9d, r9d
test edx, edx
je 0x1400575db
test r12d, r12d
je 0x1400575db
cmp r12d, 0x5c
jne 0x14005756b
cmp byte [rdi + 1], 0x45
jne 0x14005756b
mov edx, r9d
inc rdi
mov dword [rsp + 0x78], edx
jmp 0x140058f5a
test r13, r13
je 0x1400575a0
test r10, r10
jne 0x14005759c
movzx eax, byte [r13 + 3]
movzx ecx, byte [r13 + 2]
shl ecx, 8
or ecx, eax
sub edi, ecx
sub edi, dword [r11 + 0x30]
mov eax, edi
mov byte [r13 + 5], dil
sar eax, 8
mov byte [r13 + 4], al
mov rdi, qword [rsp + 0x70]
mov qword [rbp - 0x58], r9
bt r8d, 0xe
jae 0x140058e4a
mov word [rsi], 0xff53
mov eax, edi
mov qword [rbp - 0x58], rsi
sub eax, dword [r11 + 0x30]
sar eax, 8
mov byte [rsi + 2], al
sub dil, byte [r11 + 0x30]
mov word [rsi + 4], r9w
mov byte [rsi + 3], dil
mov rdi, qword [rsp + 0x70]
add rsi, 6
jmp 0x140058e4a
cmp r12d, 0x2a
je 0x140057665
cmp r12d, 0x2b
je 0x140057665
cmp r12d, 0x3f
je 0x140057665
cmp r12d, 0x7b
jne 0x140057612
lea rcx, [rdi + 1]
call fcn.1400368a0
mov r11, qword [rbp + 0x118]
mov edx, dword [rsp + 0x78]
xor r9d, r9d
test eax, eax
jne 0x140057665
mov ebx, r9d
mov r10d, 1
test r13, r13
je 0x14005766e
mov ecx, dword [rbp + 0x30]
mov eax, ecx
sub ecx, r10d
mov dword [rbp + 0x30], ecx
test eax, eax
jg 0x14005766e
cmp qword [rbp + 0x120], r9
jne 0x14005765f
movzx eax, byte [r13 + 3]
movzx ecx, byte [r13 + 2]
shl ecx, 8
or ecx, eax
sub edi, ecx
sub edi, dword [r11 + 0x30]
mov eax, edi
mov byte [r13 + 5], dil
sar eax, 8
mov byte [r13 + 4], al
mov rdi, qword [rsp + 0x70]
mov qword [rbp - 0x58], r9
jmp 0x14005766e
mov r10d, 1
mov ebx, r10d
mov r8d, dword [rbp - 0x80]
mov r13d, r8d
and r13d, 8
mov dword [rbp - 0x7c], r13d
je 0x140057711
mov rax, qword [r11 + 0x18]
test byte [r12 + rax], r10b
jne 0x140058f4f
cmp r12d, 0x23
jne 0x140057711
add rdi, r10
mov qword [rsp + 0x70], rdi
jmp 0x140057825
mov edx, dword [r11 + 0x84]
test edx, edx
je 0x1400577cf
mov r8, qword [r11 + 0x38]
cmp rdi, r8
jae 0x140057804
mov eax, dword [rsp + 0x7c]
lea r9, [r11 + 0x88]
mov rcx, rdi
mov dword [rsp + 0x20], eax
call fcn.140035a10
mov r11, qword [rbp + 0x118]
xor r9d, r9d
lea r10d, [r9 + 1]
test eax, eax
je 0x140057804
mov eax, dword [r11 + 0x88]
sub eax, r10d
cdqe
add rdi, rax
mov qword [rsp + 0x70], rdi
cmp byte [rdi], r9b
jne 0x140058f47
mov r8d, dword [rbp - 0x80]
mov r12d, r9d
bt r8d, 0xe
jae 0x14005774d
test ebx, ebx
jne 0x14005774d
mov byte [rsi], 0x53
lea rcx, [rsi + 1]
mov eax, edi
mov byte [rcx], 0xff
sub eax, dword [r11 + 0x30]
add rcx, r10
sar eax, 8
mov qword [rbp - 0x58], rsi
lea rsi, [rcx + 4]
mov byte [rcx], al
sub dil, byte [r11 + 0x30]
mov word [rcx + 2], bx
mov byte [rcx + 1], dil
mov rdi, qword [rsp + 0x70]
cmp r12d, 0x3f
jg 0x1400582a3
je 0x140058290
mov ecx, r12d
test r12d, r12d
je 0x1400582d4
sub ecx, 0x24
je 0x140058288
sub ecx, 4
je 0x140057854
dec ecx
je 0x1400582d4
dec ecx
je 0x14005783f
dec ecx
je 0x140057836
cmp ecx, 3
jne 0x140058e4a
mov edx, dword [rbp - 0x78]
lea eax, [rcx - 4]
mov r14, rsi
cmp edx, 0xfffffffe
mov qword [rbp - 0x70], rsi
cmove edx, eax
mov eax, dword [rbp - 0x68]
mov dword [rbp - 0x50], eax
movsx eax, r8b
mov dword [rbp - 0x78], edx
and eax, 4
mov dword [rbp - 0x60], edx
or eax, 0x30
shr eax, 2
mov byte [rsi], al
jmp 0x140058e22
movsxd rdx, dword [r11 + 0x88]
mov rcx, qword [r11 + 0x38]
sub rcx, rdx
cmp rdi, rcx
ja 0x140057804
cmp r8b, byte [r11 + 0x8c]
jne 0x140057804
cmp edx, r10d
je 0x1400576ed
mov al, byte [r11 + 0x8d]
cmp byte [rdi + 1], al
je 0x1400576ed
add rdi, r10
mov qword [rsp + 0x70], rdi
cmp dword [rsp + 0x7c], r9d
je 0x140057825
jmp 0x14005781d
add rdi, r10
mov qword [rsp + 0x70], rdi
mov al, byte [rdi]
and al, 0xc0
cmp al, 0x80
je 0x140057815
mov r8b, byte [rdi]
test r8b, r8b
jne 0x1400576a4
jmp 0x14005770a
mov r15d, r10d
mov dword [rbp - 0x1c], r10d
jmp 0x140057846
mov r15d, r9d
mov dword [rbp - 0x1c], r9d
or eax, 0xffffffff
mov r12d, eax
mov dword [rbp - 0x38], eax
jmp 0x140058371
mov rbx, qword [r11 + 0x48]
mov eax, 0x5f
mov r10d, r8d
mov qword [rbp + 0x18], rbx
lea ebx, [rax - 0x5e]
mov dword [rbp - 0x64], r8d
add rdi, rbx
mov r13d, r9d
mov dword [rbp - 0x28], eax
mov qword [rsp + 0x70], rdi
cmp byte [rdi], 0x2a
mov r14d, r9d
mov dword [rbp - 0x30], r9d
jne 0x140057a82
mov rcx, qword [r11 + 0x18]
lea r9, [rdi + 1]
movzx eax, byte [r9]
mov qword [rbp + 0x20], r9
test byte [rax + rcx], 2
jne 0x1400578a7
cmp al, 0x3a
jne 0x140057a7f
xor r8d, r8d
lea r14, [0x140097368]
mov r12d, r8d
mov qword [rbp + 0x40], r8
mov qword [rbp - 0x70], r8
add rdi, rbx
mov qword [rsp + 0x70], rdi
movzx eax, byte [rdi]
test byte [rax + rcx], 2
jne 0x1400578bc
mov r13d, edi
sub r13d, r9d
cmp byte [rdi], 0x3a
jne 0x1400578ff
add rdi, rbx
mov rdx, rdi
mov qword [rbp + 0x40], rdx
mov qword [rsp + 0x70], rdi
movzx eax, byte [rdi]
test byte [rax + rcx], 6
jne 0x1400578f4
cmp al, 0x5f
jne 0x1400578f9
add rdi, rbx
jmp 0x1400578e2
mov r12d, edi
sub r12d, edx
cmp byte [rdi], 0x29
jne 0x14005a91f
mov r15d, r8d
mov rdi, r8
lea rbx, [0x1400973b0]
mov r11d, 1
cmp r13d, dword [rbx]
jne 0x14005793d
movsxd r8, r13d
mov rdx, r14
mov rcx, r9
call fcn.14001a790
xor r8d, r8d
lea r11d, [r8 + 1]
test eax, eax
je 0x140057962
mov r9, qword [rbp + 0x20]
mov eax, dword [rbx]
add rbx, 0xc
add r15d, r11d
add eax, r11d
add rdi, r11
cdqe
add r14, rax
lea rax, [0x14009741c]
cmp rbx, rax
jl 0x14005791b
jmp 0x140057a54
lea rdx, [rdi + rdi*2]
lea rax, [0x1400973b0]
cmp dword [rax + rdx*4 + 4], 0x74
jne 0x1400579a9
mov rax, qword [rbp + 0x118]
mov rcx, qword [rax + 0x40]
mov dword [rax + 0x7c], r11d
test rcx, rcx
je 0x1400579a2
mov byte [rsi], 0x75
mov al, byte [rcx + 9]
add rsi, r11
mov byte [rsi], al
mov al, byte [rcx + 8]
add rsi, 2
mov byte [rsi - 1], al
mov rcx, qword [rcx]
jmp 0x140057983
lea rax, [0x1400973b0]
test r12d, r12d
jne 0x1400579f1
cmp dword [rax + rdx*4 + 4], r8d
jl 0x14005a8e7
mov al, byte [rax + rdx*4 + 4]
mov byte [rsi], al
add rsi, r11
cmp al, 0x70
jne 0x140057a54
mov rdi, qword [rbp + 0x110]
mov eax, esi
sub eax, dword [rdi + 8]
sub rax, r11
sar rax, 8
mov byte [rsi], al
mov al, sil
sub al, byte [rdi + 8]
sub al, r11b
add rsi, 2
mov byte [rsi - 1], al
jmp 0x140057a54
cmp dword [rax + rdx*4 + 8], r8d
jl 0x14005a8fe
mov al, byte [rax + rdx*4 + 8]
mov byte [rsi], al
add rsi, r11
cmp al, 0x71
jne 0x140057a2e
mov rcx, qword [rbp + 0x110]
mov eax, esi
sub eax, dword [rcx + 8]
sub rax, r11
sar rax, 8
mov byte [rsi], al
mov al, sil
sub al, byte [rcx + 8]
sub al, r11b
add rsi, 2
mov byte [rsi - 1], al
mov rdx, qword [rbp + 0x40]
mov byte [rsi], r12b
add rsi, r11
movsxd rbx, r12d
mov rcx, rsi
mov r8, rbx
call fcn.140014740
xor eax, eax
add rsi, rbx
lea r11d, [rax + 1]
mov byte [rsi], al
add rsi, r11
mov rdi, qword [rsp + 0x70]
cmp r15d, 9
jge 0x14005a90d
mov r14, qword [rbp - 0x70]
mov r10, qword [rbp + 0x120]
mov r8d, dword [rbp - 0x80]
mov r13, qword [rbp - 0x58]
mov edx, dword [rsp + 0x78]
jmp 0x140058f60
xor r9d, r9d
cmp byte [rdi], 0x3f
jne 0x140058274
add rdi, rbx
mov qword [rsp + 0x70], rdi
movzx edx, byte [rdi]
cmp edx, 0x3a
jg 0x140057ecb
je 0x140057f01
cmp edx, 0x21
je 0x140057e9d
cmp edx, 0x23
je 0x140057e67
cmp edx, 0x26
je 0x140057e55
mov r12d, reloc.OLEAUT32.dll_SafeArrayRedim
cmp edx, r12d
je 0x14005803d
cmp edx, 0x28
je 0x140057afd
cmp edx, 0x2b
je 0x140057f1e
cmp edx, 0x2d
je 0x140057f1e
cmp edx, 0x2f
jle 0x14005911d
cmp edx, 0x39
jle 0x140057f1e
jmp 0x14005911d
cmp byte [rdi + 1], 0x3f
mov eax, 0x60
mov dword [rbp - 0x28], eax
jne 0x140057b26
mov al, byte [rdi + 2]
cmp al, 0x3d
je 0x14005923a
cmp al, 0x21
je 0x14005923a
cmp al, 0x3c
je 0x14005923a
mov byte [rsi + 3], 0x64
mov rdi, qword [rsp + 0x70]
or edx, 0xffffffff
lea rax, [rdi + 1]
mov r13d, 3
mov r9d, edx
cmp byte [rax], 0x52
mov dword [rbp - 0x40], r13d
jne 0x140057b6a
lea rcx, [rdi + 2]
cmp byte [rcx], 0x26
jne 0x140057b6a
mov qword [rsp + 0x70], rcx
mov byte [rsi + 3], 0x66
mov rdi, qword [rsp + 0x70]
mov r14d, edx
mov dword [rbp - 0x70], edx
xor r12d, r12d
jmp 0x140057bb2
cmp byte [rax], 0x3c
jne 0x140057b84
mov ecx, 0x3e
mov r14d, ecx
mov dword [rbp - 0x70], ecx
mov qword [rsp + 0x70], rax
xor r12d, r12d
jmp 0x140057baf
cmp byte [rax], r12b
jne 0x140057b92
mov r14d, r12d
mov dword [rbp - 0x70], r12d
jmp 0x140057b7a
xor r12d, r12d
cmp byte [rax], 0x2d
mov r14d, r12d
mov dword [rbp - 0x70], r12d
je 0x140057ba6
cmp byte [rax], 0x2b
jne 0x140057bb2
mov qword [rsp + 0x70], rax
movzx r9d, byte [rax]
mov rdi, rax
mov r8, qword [r11 + 0x18]
lea rcx, [rdi + 1]
movzx eax, byte [rcx]
test byte [rax + r8], 0x10
je 0x14005a988
mov qword [rsp + 0x70], rcx
movzx edx, byte [rcx]
mov ebx, r12d
test byte [rdx + r8], 0x10
mov rdi, rcx
mov r15, rcx
mov qword [rbp + 0x40], rcx
mov eax, edx
je 0x140057c38
mov r14d, 1
or r11d, 0xffffffff
lea r15, [0x140000000]
test ebx, ebx
js 0x140057c15
test byte [rax + r15 + 0x97f40], 4
je 0x140057c12
lea ecx, [rbx + rbx*4]
movzx eax, dl
lea ebx, [rax + rcx*2 - 0x30]
jmp 0x140057c15
mov ebx, r11d
add rdi, r14
mov qword [rsp + 0x70], rdi
movzx edx, byte [rdi]
mov eax, edx
test byte [r8 + rdx], 0x10
jne 0x140057bf7
mov r14d, dword [rbp - 0x70]
mov r15, qword [rbp + 0x40]
mov r11, qword [rbp + 0x118]
xor ecx, ecx
mov r12d, edi
sub r12d, r15d
lea edx, [rcx + 1]
mov dword [rbp + 0x20], r12d
test r14d, r14d
jle 0x140057c60
movzx eax, byte [rdi]
add rdi, rdx
mov qword [rsp + 0x70], rdi
cmp eax, r14d
jne 0x14005a973
mov al, byte [rdi]
add rdi, rdx
mov qword [rsp + 0x70], rdi
cmp al, 0x29
jne 0x14005a973
cmp qword [rbp + 0x120], rcx
jne 0x140059237
test r9d, r9d
jle 0x140057cc6
test ebx, ebx
jle 0x14005a93d
cmp r9d, 0x2d
jne 0x140057c9d
mov eax, dword [r11 + 0x60]
sub eax, ebx
lea ebx, [rdx + rax]
jmp 0x140057ca1
add ebx, dword [r11 + 0x60]
xor r9d, r9d
test ebx, ebx
jle 0x14005a92b
cmp ebx, dword [r11 + 0x64]
jg 0x14005a92b
mov eax, ebx
mov byte [rsi + 5], bl
sar eax, 8
mov byte [rsi + 4], al
jmp 0x14005923a
mov rdi, qword [r11 + 0x50]
xor r9d, r9d
mov r13d, r9d
cmp dword [r11 + 0x58], r9d
jle 0x140057d23
movsxd r15, r12d
mov r12, qword [rbp + 0x40]
lea r14d, [r9 + 1]
lea rdx, [rdi + 2]
mov r8, r15
mov rcx, r12
call fcn.14001a790
mov r11, qword [rbp + 0x118]
xor r9d, r9d
test eax, eax
je 0x140057d0e
movsxd rax, dword [r11 + 0x5c]
add r13d, r14d
add rdi, rax
cmp r13d, dword [r11 + 0x58]
jl 0x140057ce1
mov r12d, dword [rbp + 0x20]
mov r14d, dword [rbp - 0x70]
mov r15, qword [rbp + 0x40]
mov r10d, dword [rbp - 0x64]
mov edx, 1
cmp r13d, dword [r11 + 0x58]
jge 0x140057d4c
movzx eax, byte [rdi]
movzx ecx, byte [rdi + 1]
shl eax, 8
or ecx, eax
mov eax, ecx
mov byte [rsi + 5], cl
sar eax, 8
add byte [rsi + 3], dl
mov r13d, dword [rbp - 0x40]
mov byte [rsi + 4], al
jmp 0x14005923a
mov eax, dword [rsp + 0x7c]
mov edi, dword [rbp - 0x7c]
mov r8d, r12d
test edi, edi
mov rdx, r15
mov rcx, r11
setne r9b
mov dword [rsp + 0x20], eax
call fcn.1400485d0
xor r9d, r9d
mov r11d, eax
test eax, eax
jle 0x140057d9a
sar eax, 8
mov byte [rsi + 5], r11b
mov byte [rsi + 4], al
lea eax, [r9 + 1]
add byte [rsi + 3], al
mov r13d, dword [rbp - 0x40]
mov r10d, dword [rbp - 0x64]
mov r11, qword [rbp + 0x118]
jmp 0x14005923a
test r14d, r14d
jne 0x14005a94f
cmp byte [r15], 0x52
jne 0x140057dfe
lea ebx, [r14 + 1]
mov ecx, r9d
mov edx, ebx
cmp r12d, ebx
jle 0x140057de8
movsxd rax, edx
movzx r8d, byte [rax + r15]
lea rax, [0x140000000]
test byte [r8 + rax + 0x97f40], 4
je 0x14005a94f
lea ecx, [rcx + rcx*4]
add edx, ebx
lea ecx, [r8 + rcx*2 - 0x30]
cmp edx, r12d
jl 0x140057db7
test ecx, ecx
jne 0x140057ded
mov ecx, 0xffff
mov eax, ecx
mov byte [rsi + 3], 0x66
mov byte [rsi + 5], cl
sar eax, 8
mov byte [rsi + 4], al
jmp 0x140057d86
cmp r12d, 6
jne 0x140057e2b
lea rdx, str.DEFINE
mov r8d, r12d
mov rcx, r15
call fcn.14001a790
xor r9d, r9d
test eax, eax
jne 0x140057e2b
mov byte [rsi + 3], 0x68
lea r13d, [r12 - 5]
jmp 0x140057d8a
test ebx, ebx
jle 0x14005a95e
mov r11, qword [rbp + 0x118]
cmp ebx, dword [r11 + 0x64]
jg 0x14005a95e
mov r10d, dword [rbp - 0x64]
mov eax, ebx
mov byte [rsi + 5], bl
sar eax, 8
jmp 0x140057d40
mov r15d, ebx
mov r13d, dword [rbp - 0x7c]
mov r8d, reloc.OLEAUT32.dll_SafeArrayCreateEx
jmp 0x1400594fb
add rdi, rbx
mov qword [rsp + 0x70], rdi
mov al, byte [rdi]
test al, al
je 0x14005a997
cmp al, 0x29
je 0x140057e8b
add rdi, rbx
mov qword [rsp + 0x70], rdi
mov al, byte [rdi]
test al, al
jne 0x140057e79
cmp byte [rdi], r9b
je 0x14005a997
mov r14, qword [rbp - 0x70]
jmp 0x140058f4b
add rdi, rbx
mov qword [rsp + 0x70], rdi
cmp byte [rdi], 0x29
jne 0x140057ec1
mov byte [rsi], reloc.WSOCK32.dll_WSAStartup
mov rdi, qword [rsp + 0x70]
mov r14, r9
add rsi, rbx
mov qword [rbp - 0x70], r9
jmp 0x140058f4b
mov eax, 0x59
jmp 0x140058268
mov ecx, edx
sub ecx, 0x3c
je 0x140058013
dec ecx
je 0x140058006
dec ecx
je 0x140057ffc
sub ecx, 5
je 0x140057f65
sub ecx, 0xd
je 0x140057f30
sub ecx, 2
je 0x140057f16
cmp ecx, 0x2a
jne 0x14005911d
mov dword [rbp - 0x30], ebx
mov eax, 0x5e
add rdi, rbx
mov dword [rbp - 0x28], eax
mov qword [rsp + 0x70], rdi
jmp 0x14005923a
add rdi, rbx
mov qword [rsp + 0x70], rdi
mov r8d, reloc.OLEAUT32.dll_SafeArrayCreateEx
lea r10, [0x140000000]
jmp 0x1400590cc
add rdi, rbx
mov qword [rsp + 0x70], rdi
mov dl, byte [rdi]
cmp dl, 0x3d
je 0x140057f5d
cmp dl, 0x3e
je 0x140057e55
cmp dl, 0x3c
je 0x140058037
mov dword [r15], reloc.OLEAUT32.dll_SafeArrayCreateEx
jmp 0x14005ab2e
mov r15d, r9d
jmp 0x140057e58
mov byte [rsi], 0x53
mov rdi, qword [rsp + 0x70]
mov r13, rsi
mov qword [rbp - 0x58], rsi
add rsi, rbx
xor r9d, r9d
mov dword [rbp + 0x30], ebx
lea r10, [0x140000000]
mov eax, r9d
jmp 0x140057f93
lea ecx, [rax + rax*4]
movzx eax, dl
lea eax, [rax + rcx*2 - 0x30]
add rdi, rbx
mov qword [rsp + 0x70], rdi
movzx edx, byte [rdi]
test byte [rdx + r10 + 0x97f40], 4
jne 0x140057f89
cmp byte [rdi], 0x29
jne 0x14005a9af
cmp eax, 0xff
jg 0x14005a9a3
mov edx, dword [rsp + 0x78]
mov byte [rsi], al
mov eax, dword [rsp + 0x70]
sub eax, dword [r11 + 0x30]
add rsi, rbx
mov r14, r9
add eax, ebx
mov qword [rbp - 0x70], r9
sar eax, 8
mov byte [rsi], al
mov al, byte [rsp + 0x70]
sub al, byte [r11 + 0x30]
mov word [rsi + 2], r9w
add al, bl
add rsi, 4
mov byte [rsi - 3], al
mov rdi, qword [rsp + 0x70]
jmp 0x140058f53
mov eax, 0x5d
jmp 0x140057f06
mov eax, 0x58
add rdi, rbx
jmp 0x140058263
mov al, byte [rdi + 1]
cmp al, 0x21
je 0x14005825a
cmp al, 0x3d
je 0x140058253
movzx ecx, al
mov rax, qword [r11 + 0x18]
test byte [rcx + rax], 0x10
je 0x14005a9f2
mov r12d, reloc.OLEAUT32.dll_SafeArrayRedim
mov rax, qword [r11 + 0x18]
cmp dl, 0x3c
mov r8d, r12d
mov edx, 0x3e
cmove r8d, edx
add rdi, rbx
mov qword [rsp + 0x70], rdi
movzx ecx, byte [rdi]
mov r15, rdi
test byte [rcx + rax], 0x10
je 0x140058078
mov rcx, rax
add rdi, rbx
mov qword [rsp + 0x70], rdi
movzx eax, byte [rdi]
test byte [rax + rcx], 0x10
jne 0x140058067
mov ecx, edi
sub ecx, r15d
cmp qword [rbp + 0x120], r9
je 0x1400580cc
movzx eax, byte [rdi]
cmp eax, r8d
jne 0x14005a9ce
cmp dword [r11 + 0x58], 0x2710
jge 0x14005a9bc
lea eax, [rcx + 3]
cmp eax, dword [r11 + 0x5c]
jle 0x140058227
mov dword [r11 + 0x5c], eax
cmp ecx, 0x20
jle 0x140058227
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], gethostbyname
jmp 0x14005ab2e
mov rbx, qword [r11 + 0x50]
mov r13d, r9d
mov r12d, r9d
movsxd r14, ecx
cmp dword [r11 + 0x58], r9d
jle 0x14005818f
lea rdx, [rbx + 2]
mov r8, r14
mov rcx, r15
call fcn.140015420
xor r9d, r9d
test eax, eax
jne 0x140058138
cmp byte [r14 + rbx + 2], r9b
jne 0x140058133
movzx eax, byte [rbx]
movzx ecx, byte [rbx + 1]
mov r11, qword [rbp + 0x118]
shl eax, 8
lea edx, [r9 + 1]
or ecx, eax
mov eax, dword [r11 + 0x60]
add eax, edx
cmp ecx, eax
je 0x14005812e
test dword [rbp - 0x80], 0x80000
je 0x14005a9e0
mov r13d, edx
jmp 0x140058146
or eax, 0xffffffff
test eax, eax
js 0x140058158
mov r11, qword [rbp + 0x118]
mov edx, 1
movsxd rax, dword [r11 + 0x5c]
add r12d, edx
add rbx, rax
cmp r12d, dword [r11 + 0x58]
jl 0x1400580e3
jmp 0x140058185
mov rcx, qword [rbp + 0x118]
mov rdx, rbx
mov eax, dword [rcx + 0x58]
sub eax, r12d
imul eax, dword [rcx + 0x5c]
movsxd rcx, dword [rcx + 0x5c]
add rcx, rbx
movsxd r8, eax
call fcn.140014740
mov r11, qword [rbp + 0x118]
xor r9d, r9d
test r13d, r13d
jne 0x1400581e3
mov rdi, qword [rsp + 0x70]
mov rdx, qword [r11 + 0x50]
mov r8d, r9d
cmp dword [r11 + 0x58], r9d
jle 0x1400581e3
mov r9d, 1
cmp rdx, rbx
je 0x1400581d0
movzx eax, byte [rdx]
movzx ecx, byte [rdx + 1]
shl eax, 8
or ecx, eax
mov eax, dword [r11 + 0x60]
add eax, r9d
cmp ecx, eax
jne 0x1400581d3
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 0x41
jmp 0x14005ab2e
sub r8d, r9d
movsxd rax, dword [r11 + 0x5c]
add r8d, r9d
add rdx, rax
cmp r8d, dword [r11 + 0x58]
jl 0x1400581a2
mov eax, dword [r11 + 0x60]
mov edx, 1
lea rcx, [rbx + 2]
add eax, edx
mov r8, r14
sar eax, 8
mov byte [rbx], al
mov al, byte [r11 + 0x60]
add al, dl
mov rdx, r15
mov byte [rbx + 1], al
call fcn.140014740
mov r10d, dword [rbp - 0x64]
mov r11, qword [rbp + 0x118]
xor r9d, r9d
mov byte [rbx + r14 + 2], r9b
mov rdi, qword [rsp + 0x70]
lea ebx, [r9 + 1]
add dword [r11 + 0x58], ebx
add rdi, rbx
mov qword [rsp + 0x70], rdi
add dword [r11 + 0x60], ebx
mov eax, dword [r11 + 0x60]
mov r13d, 2
sar eax, 8
mov byte [rsi + 3], al
mov al, byte [r11 + 0x60]
mov byte [rsi + 4], al
jmp 0x14005923a
mov eax, 0x5a
jmp 0x14005825f
mov eax, 0x5b
add rdi, 2
mov qword [rsp + 0x70], rdi
mov dword [rbp - 0x28], eax
mov qword [rbp - 0x70], r9
jmp 0x14005924d
bt r8d, 0xc
jae 0x140058233
mov eax, 0x5e
mov dword [rbp - 0x28], eax
jmp 0x14005923a
mov byte [rsi], 0x1b
jmp 0x140058e1b
mov r15d, r9d
mov dword [rbp - 0x1c], r9d
mov r12d, r10d
mov dword [rbp - 0x38], r10d
jmp 0x140058371
mov ecx, r12d
sub ecx, 0x5b
je 0x1400598a9
dec ecx
je 0x140058ef7
dec ecx
je 0x140058e3c
dec ecx
je 0x140058e01
sub ecx, 0x1d
je 0x140058339
dec ecx
jne 0x140058e4a
mov rax, qword [rbp + 0x100]
mov ecx, dword [rbp - 0x78]
mov r9, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0x120]
mov dword [rax], ecx
mov rax, qword [rbp + 0x108]
mov ecx, dword [rbp - 0x68]
mov qword [r9], rdi
mov dword [rax], ecx
mov rax, qword [rbp + 0xe8]
mov qword [rax], rsi
test rdx, rdx
je 0x14005aa08
mov r8, qword [rbp + 0x58]
mov eax, 0x7fffffeb
sub eax, dword [rdx]
movsxd rcx, eax
mov rax, rsi
sub rax, r8
cmp rcx, rax
jge 0x14005aa01
mov dword [r15], reloc.WSOCK32.dll_sendto
jmp 0x14005ab35
test ebx, ebx
je 0x140058e4a
lea rcx, [rdi + 1]
lea r8, [rbp - 0x38]
lea rdx, [rbp - 0x1c]
mov r9, r15
call fcn.1400367d0
xor r9d, r9d
mov rdi, rax
mov qword [rsp + 0x70], rax
cmp dword [r15], r9d
jne 0x14005ab2e
mov r15d, dword [rbp - 0x1c]
mov r12d, dword [rbp - 0x38]
test r14, r14
je 0x14005aa34
test r15d, r15d
jne 0x140058391
mov r10d, dword [rbp - 0x60]
mov r11d, dword [rbp - 0x50]
mov dword [rbp - 0x78], r10d
mov dword [rbp - 0x68], r11d
jmp 0x140058399
mov r10d, dword [rbp - 0x78]
mov r11d, dword [rbp - 0x68]
mov eax, r15d
mov rdx, r14
mov ecx, r9d
sub eax, r12d
mov qword [rbp - 0x48], rdx
mov ebx, r9d
neg eax
mov dword [rbp - 0x64], ecx
mov r8d, 1
sbb eax, eax
and eax, 0x200
mov dword [rbp + 0x20], eax
lea rax, [rdi + 1]
cmp byte [rax], 0x2b
jne 0x1400583d5
mov ecx, r8d
mov r13d, r9d
mov dword [rbp - 0x64], ecx
jmp 0x1400583de
cmp byte [rax], 0x3f
jne 0x1400583e8
mov r13d, dword [rbp + 0x4c]
mov rdi, rax
mov qword [rsp + 0x70], rax
jmp 0x1400583ec
mov r13d, dword [rbp + 0x48]
mov al, byte [r14]
cmp al, 0x1c
je 0x140058a07
cmp al, 0x1d
je 0x140058a07
cmp al, 0x1e
jne 0x14005845f
movzx r14d, byte [r14 + 1]
mov ebx, reloc.WSOCK32.dll_listen
test ecx, ecx
jne 0x140058a92
test r12d, r12d
jns 0x140058a92
mov rcx, qword [rbp + 0x118]
mov edx, dword [rsp + 0x7c]
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp - 0x80]
mov rcx, qword [rbp - 0x70]
lea r8, [rdi + 1]
call fcn.140047670
mov rdi, qword [rsp + 0x70]
xor r9d, r9d
test eax, eax
je 0x140058a92
lea r11d, [r9 + 1]
mov r13d, r9d
mov dword [rbp - 0x64], r11d
jmp 0x140058a98
cmp al, 0x17
jae 0x14005846e
mov ebx, 0x1a
movzx r14d, al
jmp 0x14005840d
cmp al, 0x4e
je 0x140058974
cmp al, 0x4f
je 0x140058974
cmp al, 0x50
je 0x140058974
cmp al, 0x51
je 0x140058974
cmp al, 0x5e
je 0x1400584b8
cmp al, 0x5f
je 0x1400584b8
cmp al, 0x5d
je 0x1400584b8
cmp al, 0x60
je 0x1400584b8
cmp al, 0x73
je 0x14005897c
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], reloc.WSOCK32.dll_inet_ntoa
jmp 0x14005ab2e
mov rbx, qword [rbp - 0x70]
mov r14d, esi
mov dword [rbp - 0x30], r9d
sub r14d, ebx
mov qword [rbp - 0x28], r9
mov dword [rbp - 0x40], r14d
cmp al, 0x60
jne 0x1400584dc
cmp byte [rbx + 3], 0x68
je 0x14005aa10
or eax, 0xffffffff
cmp r12d, eax
jne 0x140058510
mov r8, rbx
movzx eax, byte [r8 + 1]
shl eax, 8
movsxd rcx, eax
movzx eax, byte [r8 + 2]
or rcx, rax
add r8, rcx
cmp byte [r8], 0x55
jne 0x1400584e7
mov r9d, esi
sub r9d, r8d
mov dword [rbp - 0x30], r9d
xor r9d, r9d
test r15d, r15d
jne 0x1400585c9
mov rax, qword [rbp + 0x18]
mov r8d, dword [rsp + 0x7c]
lea edx, [r15 + 1]
mov byte [rsi], r9b
mov r9, qword [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov rcx, rbx
cmp r12d, edx
jg 0x140058576
call fcn.140048160
mov rdi, qword [rbp - 0x70]
inc rbx
movsxd r8, r14d
mov rcx, rbx
mov rdx, rdi
call fcn.140014740
lea r11d, [r15 + 1]
xor r9d, r9d
add rsi, r11
test r12d, r12d
jne 0x14005856e
mov byte [rdi], 0x76
jmp 0x140058de3
lea eax, [r13 + 0x69]
mov byte [rdi], al
jmp 0x1400585b7
mov edx, 4
call fcn.140048160
lea rcx, [rbx + 4]
movsxd r8, r14d
mov rdx, rbx
call fcn.140014740
mov r11d, 1
xor r9d, r9d
lea eax, [r13 + 0x69]
add rsi, 4
mov byte [rbx], al
add rbx, r11
mov byte [rbx], 0x5e
add rbx, r11
mov word [rbx], r9w
mov qword [rbp - 0x28], rbx
add rbx, 2
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x70], rbx
sub r12d, r11d
jmp 0x140058634
mov eax, 1
cmp r15d, eax
jle 0x140058626
mov r9, qword [rbp + 0x120]
xor eax, eax
test r9, r9
je 0x1400586a4
lea eax, [r15 - 1]
mov r8d, eax
movsxd rcx, eax
movsxd rax, dword [rbp - 0x20]
imul r8d, dword [rbp - 0x20]
imul rcx, rax
cmp rcx, 0x7fffffff
jg 0x14005aa22
mov ecx, dword [r9]
mov eax, 0x7fffffeb
sub eax, ecx
cmp eax, r8d
jl 0x14005aa22
lea eax, [r8 + rcx]
mov dword [r9], eax
xor r9d, r9d
mov r11d, 1
test r12d, r12d
jle 0x14005863b
sub r12d, r15d
mov dword [rbp - 0x38], r12d
test r12d, r12d
js 0x1400588e7
mov r9, qword [rbp + 0x120]
xor r10d, r10d
test r9, r9
je 0x14005875d
test r12d, r12d
jle 0x14005875d
mov eax, dword [rbp - 0x20]
add eax, 7
mov r8d, eax
movsxd rcx, eax
movsxd rax, r12d
imul r8d, r12d
imul rcx, rax
sub r8d, 6
cmp rcx, 0x7fffffff
jg 0x14005aa22
mov ecx, dword [r9]
mov eax, 0x7fffffeb
sub eax, ecx
cmp eax, r8d
jl 0x14005aa22
lea eax, [r8 + rcx]
mov dword [r9], eax
jmp 0x14005884b
cmp dword [rbp + 0x34], r9d
je 0x1400586b5
test r11d, r11d
cmovs r11d, r10d
mov dword [rbp - 0x68], r11d
mov r11d, 1
cmp r15d, r11d
jle 0x14005862c
mov r8, qword [rbp + 0x118]
lea eax, [r15 - 1]
mov r15, qword [rbp - 0x70]
movsxd rdi, r14d
mov r14d, eax
mov rbx, qword [r8 + 0x48]
mov rdx, r15
mov rcx, rsi
mov r8, rdi
call fcn.140014740
mov r9, qword [rbp + 0x18]
mov r8, qword [rbp + 0x118]
cmp r9, rbx
jae 0x140058732
mov edx, dword [rbp - 0x40]
movzx eax, byte [r9 + 1]
movzx ecx, byte [r9]
add r9, 2
shl ecx, 8
or ecx, eax
mov rax, qword [r8 + 0x48]
add ecx, edx
sar ecx, 8
mov byte [rax], cl
mov cl, byte [r9 - 1]
mov rax, qword [r8 + 0x48]
add cl, dl
mov byte [rax + 1], cl
add qword [r8 + 0x48], 2
cmp r9, rbx
jb 0x1400586fe
mov r11d, 1
add rsi, rdi
mov qword [rbp + 0x18], rbx
sub r14, r11
jne 0x1400586d9
mov r15d, dword [rbp - 0x1c]
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x48]
mov r14d, dword [rbp - 0x40]
xor r9d, r9d
jmp 0x14005862c
dec r12d
js 0x14005884b
mov r15d, dword [rbp - 0x40]
mov r8, qword [rbp + 0x118]
add r13b, 0x69
movsxd r14, r14d
movsxd rbx, r12d
mov rdi, qword [r8 + 0x48]
mov byte [rsi], r13b
add rsi, r11
test r12d, r12d
je 0x1400587b4
mov rax, qword [rbp - 0x28]
mov byte [rsi], 0x5e
add rsi, r11
test rax, rax
jne 0x14005879e
mov ecx, r10d
jmp 0x1400587a2
mov ecx, esi
sub ecx, eax
mov eax, ecx
mov qword [rbp - 0x28], rsi
mov byte [rsi + 1], cl
sar eax, 8
mov byte [rsi], al
add rsi, 2
mov rdx, qword [rbp - 0x70]
mov r8, r14
mov rcx, rsi
call fcn.140014740
mov r9, qword [rbp + 0x18]
mov r8, qword [rbp + 0x118]
mov r11d, 1
cmp r9, rdi
jae 0x14005882c
movzx edx, byte [r9]
mov rax, rbx
neg rax
movzx eax, byte [r9 + 1]
sbb ecx, ecx
shl edx, 8
or edx, eax
mov rax, qword [r8 + 0x48]
and ecx, 3
add ecx, r11d
add edx, ecx
add edx, r15d
sar edx, 8
mov byte [rax], dl
mov cl, byte [r9 + 1]
mov rax, rbx
neg rax
mov rax, qword [r8 + 0x48]
sbb edx, edx
add cl, r15b
and edx, 3
add edx, r11d
add cl, dl
mov byte [rax + 1], cl
add qword [r8 + 0x48], 2
add r9, 2
jmp 0x1400587d4
add rsi, r14
sub rbx, r11
xor r10d, r10d
sub r12d, r11d
mov qword [rbp + 0x18], rdi
jns 0x14005877b
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x48]
mov r9, qword [rbp - 0x28]
test r9, r9
je 0x1400588aa
mov ecx, esi
mov rdx, rsi
sub ecx, r9d
add ecx, r11d
movsxd rax, ecx
sub rdx, rax
movzx r8d, byte [rdx + 1]
movzx eax, byte [rdx + 2]
shl r8d, 8
or r8d, eax
jne 0x14005887c
mov r9, r10
jmp 0x140058882
movsxd rax, r8d
sub r9, rax
mov byte [rsi], 0x55
add rsi, r11
mov eax, ecx
sar eax, 8
mov byte [rsi + 1], cl
mov byte [rsi], al
add rsi, 2
mov byte [rdx + 1], al
mov byte [rdx + 2], cl
test r9, r9
jne 0x140058854
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x48]
xor r9d, r9d
mov r8d, dword [rsp + 0x7c]
cmp dword [rbp - 0x64], r9d
je 0x140058de8
mov al, byte [rdx]
cmp al, 0x41
jne 0x140058c88
mov al, byte [rdx + 3]
cmp al, 0x10
je 0x1400588d4
cmp al, 0xf
mov eax, r9d
jne 0x1400588d9
mov eax, 2
add eax, 4
movsxd rcx, eax
add rdx, rcx
jmp 0x140058ccb
movsxd rax, dword [rbp - 0x30]
add r13b, 0x56
mov rdi, rsi
sub rdi, rax
mov r12, rdi
movzx eax, byte [rdi + 1]
mov byte [rdi], r13b
shl eax, 8
movsxd rcx, eax
movzx eax, byte [rdi + 2]
or rcx, rax
sub r12, rcx
cmp qword [rbp + 0x120], r9
jne 0x140058960
cmp byte [r12], 0x5d
je 0x140058960
mov rbx, r12
mov r9, qword [rbp + 0x118]
mov r8d, dword [rsp + 0x7c]
mov rdx, rdi
mov rcx, rbx
call fcn.140048230
xor r9d, r9d
test eax, eax
jne 0x14005895b
movzx eax, byte [rbx + 1]
shl eax, 8
movsxd rcx, eax
movzx eax, byte [rbx + 2]
or rcx, rax
add rbx, rcx
cmp byte [rbx], 0x54
je 0x140058922
jmp 0x140058960
add byte [r12], 3
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x48]
mov r11d, 1
jmp 0x1400588ad
test r12d, r12d
jne 0x140058987
mov rsi, r14
mov r11d, 1
jmp 0x140058de8
mov r11d, 1
test r15d, r15d
jne 0x1400589bd
or eax, 0xffffffff
cmp r12d, eax
jne 0x1400589b2
add r13b, 0x46
mov byte [rsi], r13b
add rsi, r11
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x48]
jmp 0x1400588ad
cmp r12d, r11d
jne 0x1400589d0
add r13b, 0x4a
jmp 0x14005899e
cmp r15d, r11d
jne 0x1400589d0
or eax, 0xffffffff
cmp r12d, eax
jne 0x1400589d0
add r13b, 0x48
jmp 0x14005899e
add r13b, 0x4c
mov eax, r15d
mov byte [rsi], r13b
add rsi, r11
sar eax, 8
mov byte [rsi], al
or eax, 0xffffffff
mov byte [rsi + 1], r15b
cmp r12d, eax
cmove r12d, r9d
mov eax, r12d
mov byte [rsi + 3], r12b
mov dword [rbp - 0x38], r12d
sar eax, 8
add rsi, 4
mov byte [rsi - 2], al
jmp 0x1400589a4
mov r10d, dword [rsp + 0x7c]
test r10d, r10d
je 0x140058a1a
lea rdx, [rsi - 1]
test byte [rdx], 0x80
jne 0x140058a42
movzx r14d, byte [rsi - 1]
mov r11d, 1
cmp r15d, r11d
jle 0x140058a75
mov rax, qword [rbp + 0x118]
mov edx, dword [rax + 0x78]
or edx, r14d
or edx, dword [rbp - 0x18]
mov dword [rbp - 0x68], edx
jmp 0x140058a7c
sub rdx, r8
mov al, byte [rdx]
and al, 0xc0
cmp al, 0x80
je 0x140058a3f
mov r14d, esi
lea rcx, [rbp + 0x50]
sub r14d, edx
movsxd r8, r14d
call fcn.140014740
mov rdi, qword [rsp + 0x70]
mov ecx, dword [rbp - 0x64]
mov r10d, dword [rsp + 0x7c]
bts r14d, 7
xor r9d, r9d
lea r11d, [r9 + 1]
mov rax, qword [rbp + 0x118]
test ecx, ecx
jne 0x140058a98
test r12d, r12d
jns 0x140058a98
mov qword [rsp + 0x20], rax
mov edx, r10d
jmp 0x14005842e
mov r11d, 1
mov r8, qword [rbp - 0x70]
cmp byte [r8], 0x10
je 0x140058ab4
cmp byte [r8], 0xf
je 0x140058ab4
or r10d, 0xffffffff
mov edx, r10d
mov ecx, r10d
jmp 0x140058ac2
movzx ecx, byte [r8 + 1]
movzx edx, byte [r8 + 2]
or r10d, 0xffffffff
mov rax, rsi
mov dword [rbp - 0x40], edx
mov dword [rbp - 0x30], ecx
mov rsi, r8
test r12d, r12d
je 0x140058de8
add r13d, ebx
test r15d, r15d
jne 0x140058b15
cmp r12d, r10d
jne 0x140058af4
add r13b, 0x1f
mov byte [r8], r13b
lea rsi, [r8 + 1]
jmp 0x140058c35
lea rsi, [r8 + 1]
cmp r12d, r11d
jne 0x140058b09
add r13b, 0x23
mov byte [r8], r13b
jmp 0x140058c35
add r13b, 0x25
mov byte [r8], r13b
jmp 0x140058c25
cmp r15d, r11d
jne 0x140058b49
cmp r12d, r10d
jne 0x140058b25
add r13b, 0x21
jmp 0x140058ae8
mov rsi, rax
cmp r12d, r11d
je 0x140058de8
add r13b, 0x25
lea rsi, [rax + 1]
mov byte [rax], r13b
lea eax, [r12 - 1]
sub r12b, r11b
jmp 0x140058c28
lea rsi, [r8 + 1]
add bl, 0x27
mov eax, r15d
sar eax, 8
mov byte [r8], bl
mov byte [rsi + 1], r15b
mov byte [rsi], al
add rsi, 2
test r12d, r12d
jns 0x140058bb3
cmp dword [rsp + 0x7c], r9d
je 0x140058b99
cmp r14d, 0x80
jl 0x140058b99
mov ebx, r14d
lea rdx, [rbp + 0x50]
mov rcx, rsi
and ebx, 7
mov r8d, ebx
call fcn.140014740
add rsi, rbx
xor r9d, r9d
lea r11d, [r9 + 1]
jmp 0x140058bad
mov byte [rsi], r14b
add rsi, r11
test ecx, ecx
js 0x140058bad
mov byte [rsi], cl
add rsi, r11
mov byte [rsi], dl
add rsi, r11
add r13b, 0x1f
jmp 0x140058c13
cmp r12d, r15d
je 0x140058c35
cmp dword [rsp + 0x7c], r9d
je 0x140058be9
cmp r14d, 0x80
jl 0x140058be9
mov ebx, r14d
lea rdx, [rbp + 0x50]
mov rcx, rsi
and ebx, 7
mov r8d, ebx
call fcn.140014740
add rsi, rbx
xor r9d, r9d
lea r11d, [r9 + 1]
jmp 0x140058bef
mov byte [rsi], r14b
add rsi, r11
mov eax, dword [rbp - 0x30]
test eax, eax
js 0x140058c03
mov byte [rsi], al
mov eax, dword [rbp - 0x40]
add rsi, r11
mov byte [rsi], al
add rsi, r11
sub r12d, r15d
mov dword [rbp - 0x38], r12d
cmp r12d, r11d
jne 0x140058c1b
add r13b, 0x23
mov byte [rsi], r13b
add rsi, r11
jmp 0x140058c35
add r13b, 0x25
mov byte [rsi], r13b
add rsi, r11
mov eax, r12d
sar eax, 8
mov byte [rsi], al
mov byte [rsi + 1], r12b
add rsi, 2
mov r8d, dword [rsp + 0x7c]
test r8d, r8d
je 0x140058c74
cmp r14d, 0x80
jl 0x140058c74
mov ebx, r14d
lea rdx, [rbp + 0x50]
mov rcx, rsi
and ebx, 7
mov r8d, ebx
call fcn.140014740
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x48]
add rsi, rbx
mov r11d, 1
jmp 0x1400588aa
mov byte [rsi], r14b
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x48]
add rsi, r11
jmp 0x1400588b2
mov ecx, reloc.OLEAUT32.dll_SafeArrayRedim
cmp al, cl
je 0x140058c95
cmp al, 0x34
jne 0x140058ccf
lea rcx, [0x140000000]
movzx eax, al
movzx eax, byte [rax + rcx + 0x96620]
add rdx, rax
mov qword [rbp - 0x48], rdx
test r8d, r8d
je 0x140058ccf
cmp byte [rdx - 1], 0xc0
jb 0x140058ccf
movzx eax, byte [rdx - 1]
and eax, 0x3f
movzx eax, byte [rax + rcx + 0x966f0]
add rdx, rax
mov qword [rbp - 0x48], rdx
mov ebx, esi
sub ebx, edx
test ebx, ebx
jle 0x140058de8
movzx eax, byte [rdx]
cmp eax, 0x30
jg 0x140058d3b
je 0x140058d33
cmp eax, 0x1f
je 0x140058d2b
cmp eax, 0x21
je 0x140058d23
cmp eax, 0x23
je 0x140058d1b
cmp eax, 0x25
je 0x140058d13
cmp eax, 0x2c
je 0x140058d0b
cmp eax, 0x2e
jne 0x140058d60
mov byte [rdx], 0x36
jmp 0x140058de3
mov byte [rdx], 0x35
jmp 0x140058de3
mov byte [rdx], 0x2b
jmp 0x140058de3
mov byte [rdx], 0x2a
jmp 0x140058de3
mov byte [rdx], reloc.OLEAUT32.dll_SafeArrayCreateEx
jmp 0x140058de3
mov byte [rdx], SafeArrayCreateEx
jmp 0x140058de3
mov byte [rdx], gethostname
jmp 0x140058de3
cmp eax, 0x32
je 0x140058de0
cmp eax, 0x39
je 0x140058ddb
cmp eax, 0x3b
je 0x140058dd6
cmp eax, 0x3d
je 0x140058dd1
cmp eax, 0x3f
je 0x140058dcc
mov rax, qword [rbp + 0x18]
mov byte [rsi], r9b
mov r9, qword [rbp + 0x118]
mov rcx, qword [rbp - 0x48]
mov edx, 3
mov qword [rsp + 0x20], rax
call fcn.140048160
mov rdx, qword [rbp - 0x48]
movsxd r8, ebx
lea rcx, [rdx + 3]
call fcn.140014740
mov rax, qword [rbp - 0x48]
add rsi, 3
mov byte [rax], 0x5d
mov byte [rsi], 0x55
add ebx, 3
mov r11d, 1
mov ecx, ebx
add rsi, r11
sar ecx, 8
mov byte [rsi], cl
mov byte [rsi + 1], bl
mov rax, qword [rbp - 0x48]
mov byte [rax + 1], cl
mov rax, qword [rbp - 0x48]
add rsi, 2
mov byte [rax + 2], bl
xor r9d, r9d
jmp 0x140058de3
mov byte [rdx], 0x45
jmp 0x140058de3
mov byte [rdx], 0x44
jmp 0x140058de3
mov byte [rdx], 0x43
jmp 0x140058de3
mov byte [rdx], 0x42
jmp 0x140058de3
mov byte [rdx], gethostname
mov rdi, qword [rsp + 0x70]
mov rcx, qword [rbp + 0x118]
mov eax, dword [rbp + 0x20]
mov r14, r9
or dword [rcx + 0x78], eax
mov qword [rbp - 0x70], r9
jmp 0x140057a67
test r8b, 2
je 0x140058e18
mov ebx, dword [rbp - 0x78]
mov eax, 0xffffffff
cmp ebx, 0xfffffffe
cmove ebx, eax
mov dword [rbp - 0x78], ebx
mov byte [rsi], 0x1a
mov qword [rbp - 0x70], r9
mov r14, r9
mov r11d, 1
add rsi, r11
mov rdi, qword [rsp + 0x70]
mov r10, qword [rbp + 0x120]
jmp 0x140057a72
test dword [r11 + 0x70], 0x2000000
jne 0x14005aa46
mov r11d, 1
mov byte [rbp + 0x28], r12b
mov r13d, r11d
cmp dword [rsp + 0x7c], r9d
je 0x140058e95
mov edx, 0xc0
cmp r12d, edx
jl 0x140058e95
inc rdi
mov al, byte [rdi]
and al, dl
cmp al, 0x80
jne 0x140058e95
lea rcx, [rbp + 0x29]
mov qword [rsp + 0x70], rdi
mov al, byte [rdi]
add r13d, r11d
mov byte [rcx], al
add rcx, r11
inc rdi
mov al, byte [rdi]
and al, dl
cmp al, 0x80
je 0x140058e77
mov r12b, byte [rbp + 0x28]
mov r15d, dword [rbp - 0x68]
movsx eax, r8b
mov r14, rsi
mov qword [rbp - 0x70], rsi
and eax, r11d
or eax, 0x1c
mov byte [rsi], al
add rsi, r11
test r13d, r13d
jle 0x140058ed3
lea rdx, [rbp + 0x28]
mov r8d, r13d
mov rcx, rsi
mov ebx, r13d
call fcn.140014740
mov r8d, dword [rbp - 0x80]
add rsi, rbx
mov r11d, 1
mov eax, reloc.WSOCK32.dll_listen
cmp r12b, al
je 0x140058ee7
cmp r12b, 0xa
jne 0x14005a73c
mov rax, qword [rbp + 0x118]
or dword [rax + 0x74], 0x20
jmp 0x14005a743
mov dword [rsp + 0x20], r9d
mov r9d, r8d
mov r8d, dword [r11 + 0x60]
lea rcx, [rsp + 0x70]
mov rdx, r15
mov qword [rbp + 0x60], rdi
call fcn.140036940
xor r9d, r9d
mov r11d, eax
cmp dword [r15], r9d
jne 0x14005a8f4
test eax, eax
jns 0x140059864
neg eax
cmp eax, 0x1a
jne 0x140058f91
mov rdi, qword [rsp + 0x70]
cmp byte [rdi + 1], 0x5c
jne 0x140058f73
cmp byte [rdi + 2], 0x45
jne 0x140058f73
add rdi, 2
mov r8d, dword [rbp - 0x80]
mov edx, dword [rsp + 0x78]
mov r13, qword [rbp - 0x58]
mov r10, qword [rbp + 0x120]
mov r11d, 1
mov r15, qword [rbp + 0xf8]
mov r9, qword [rbp + 0x58]
add rdi, r11
jmp 0x140057482
mov r11d, 1
mov edx, r11d
mov dword [rsp + 0x78], edx
mov r10, qword [rbp + 0x120]
mov r8d, dword [rbp - 0x80]
mov r13, qword [rbp - 0x58]
jmp 0x140058f60
cmp eax, 0x19
je 0x14005985a
mov edx, dword [rbp - 0x78]
cmp edx, 0xfffffffe
jne 0x140058fb3
cmp eax, 5
jle 0x140058fb3
lea ecx, [rdx + 1]
cmp eax, 0x17
cmovl edx, ecx
mov dword [rbp - 0x78], edx
mov ecx, dword [rbp - 0x68]
mov rdi, qword [rsp + 0x70]
mov dword [rbp - 0x60], edx
mov dword [rbp - 0x50], ecx
cmp eax, 0x1b
jne 0x14005949f
mov rax, qword [rbp + 0x118]
mov ebx, 1
mov r13d, r9d
mov rax, qword [rax + 0x48]
add rdi, rbx
lea r8d, [rbx + 0x26]
mov qword [rsp + 0x70], rdi
cmp byte [rdi], 0x3c
mov qword [rbp + 0x18], rax
lea eax, [rbx + 0x3d]
lea r11, [rdi + 1]
mov dword [rbp - 0x30], r9d
cmove r8d, eax
cmp byte [r11], 0x2b
je 0x140059097
cmp byte [r11], 0x2d
je 0x140059097
mov cl, byte [r11]
mov r10d, ebx
mov r9, r11
test cl, cl
je 0x140059061
mov r14, qword [rbp + 0x118]
mov r15d, r10d
movzx eax, cl
cmp eax, r8d
je 0x140059056
mov rax, qword [r14 + 0x18]
movzx ecx, cl
mov dl, byte [rcx + rax]
mov al, dl
and al, 4
neg al
sbb eax, eax
and r10d, eax
test dl, 0x10
je 0x140059056
add r9, r15
mov cl, byte [r9]
test cl, cl
jne 0x14005902a
mov r15, qword [rbp + 0xf8]
mov r14, qword [rbp - 0x70]
movzx eax, byte [r9]
cmp eax, r8d
je 0x140059076
mov dword [r15], reloc.WSOCK32.dll_gethostname
jmp 0x140058f47
xor r9d, r9d
lea ebx, [r9 + 1]
test r10d, r10d
je 0x14005908b
lea r10, [0x140000000]
jmp 0x1400590bd
mov r13d, dword [rbp - 0x7c]
mov r15d, ebx
jmp 0x1400594f4
lea rcx, [rdi + 2]
lea r10, [0x140000000]
jmp 0x1400590a7
add rcx, rbx
movzx eax, byte [rcx]
test byte [rax + r10 + 0x97f40], 4
jne 0x1400590a4
movzx eax, byte [rcx]
cmp eax, r8d
jne 0x14005906a
mov rdi, r11
mov qword [rsp + 0x70], r11
mov r11, qword [rbp + 0x118]
movzx edx, byte [rdi]
cmp edx, 0x2b
jne 0x1400590fa
add rdi, rbx
mov qword [rsp + 0x70], rdi
movzx eax, byte [rdi]
test byte [rax + r10 + 0x97f40], 4
jne 0x14005942e
mov dword [r15], 0x3f
jmp 0x14005ab2e
cmp edx, 0x2d
jne 0x14005942e
lea rcx, [rdi + 1]
movzx eax, byte [rcx]
test byte [rax + r10 + 0x97f40], 4
jne 0x140059426
mov r8d, dword [rbp - 0x80]
mov ecx, r9d
mov r10d, r9d
mov dword [rbp - 0x40], r9d
lea rax, [rbp - 0x40]
mov dword [rbp - 0x70], ecx
cmp dl, 0x29
je 0x1400591aa
cmp dl, 0x3a
je 0x1400591a3
add rdi, rbx
movzx ecx, dl
mov qword [rsp + 0x70], rdi
cmp ecx, 0x2d
je 0x140059198
cmp ecx, 0x4a
je 0x14005918d
cmp ecx, 0x55
je 0x140059187
cmp ecx, 0x58
je 0x140059182
cmp ecx, 0x69
je 0x14005917e
cmp ecx, 0x6d
je 0x140059179
cmp ecx, 0x73
je 0x140059174
cmp ecx, 0x78
jne 0x14005aa52
or dword [rax], 8
jmp 0x14005919c
or dword [rax], 4
jmp 0x14005919c
or dword [rax], 2
jmp 0x14005919c
or dword [rax], ebx
jmp 0x14005919c
or dword [rax], 0x40
jmp 0x14005919c
bts dword [rax], 9
jmp 0x14005919c
bts dword [rax], 0x13
or dword [r11 + 0x74], 0x10
jmp 0x14005919c
lea rax, [rbp - 0x70]
mov dl, byte [rdi]
cmp dl, 0x29
jne 0x140059133
mov r10d, dword [rbp - 0x40]
mov ecx, dword [rbp - 0x70]
or r10d, r8d
not ecx
and r10d, ecx
cmp byte [rdi], 0x29
jne 0x140057f01
mov rax, qword [r11 + 0x28]
add rax, 3
cmp rsi, rax
jne 0x1400591df
mov rax, qword [rbp + 0x120]
test rax, rax
je 0x1400591d9
cmp dword [rax], 6
jne 0x1400591df
mov dword [r11 + 0x70], r10d
jmp 0x14005921a
mov eax, r10d
xor eax, r8d
test al, 7
je 0x1400591fe
mov byte [rsi], 0x19
add rsi, rbx
mov al, r10b
and al, 7
mov byte [rsi], al
mov rdi, qword [rsp + 0x70]
add rsi, rbx
mov eax, r10d
shr eax, 9
and eax, ebx
mov dword [rbp + 0x48], eax
xor eax, ebx
mov dword [rbp + 0x4c], eax
movsx eax, r10b
and eax, ebx
shl eax, 8
mov dword [rbp - 0x18], eax
mov rax, qword [rbp + 0xe0]
mov r8d, r10d
mov dword [rbp - 0x80], r10d
mov r14, r9
mov qword [rbp - 0x70], r9
mov dword [rax], r10d
jmp 0x140058f4b
xor r9d, r9d
mov r14d, dword [rbp - 0x30]
mov r15, qword [rbp + 0xf8]
mov r8d, dword [rbp - 0x80]
mov qword [rbp - 0x70], rsi
mov r12d, dword [rbp - 0x28]
mov rax, qword [rbp + 0x120]
neg rax
mov byte [rsi], r12b
mov ebx, dword [r11 + 0x78]
sbb rcx, rcx
lea rax, [rbp - 0x20]
mov qword [rbp - 0x48], rsi
and rcx, rax
mov dword [rbp - 0x20], r9d
cmp r12d, 0x5a
je 0x140059285
cmp r12d, 0x5b
je 0x140059285
mov eax, r9d
jmp 0x14005928a
mov eax, 1
mov qword [rsp + 0x60], rcx
mov rcx, qword [rbp + 0x110]
mov qword [rsp + 0x58], r11
mov qword [rsp + 0x50], rcx
mov edx, r8d
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0x38]
lea r9, [rsp + 0x70]
mov qword [rsp + 0x40], rcx
mov dword [rsp + 0x38], r13d
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], eax
lea r8, [rbp - 0x48]
and edx, 7
mov ecx, r10d
mov qword [rsp + 0x20], r15
call fcn.14005ff90
xor r9d, r9d
test eax, eax
je 0x14005a8f4
mov r10, qword [rbp + 0x120]
lea r11d, [r9 + 1]
cmp r12d, 0x60
jne 0x140059334
test r10, r10
jne 0x140059334
mov rdx, rsi
mov r8d, r9d
movzx eax, byte [rdx + 1]
add r8d, r11d
shl eax, 8
movsxd rcx, eax
movzx eax, byte [rdx + 2]
or rcx, rax
add rdx, rcx
cmp byte [rdx], 0x55
jne 0x140059303
cmp byte [rsi + 3], 0x68
jne 0x14005939f
cmp r8d, r11d
jg 0x14005aa61
mov r12d, 0x68
mov ecx, dword [rbp + 0x38]
mov eax, dword [rbp + 0x10]
or r8d, 0xffffffff
mov rdi, qword [rsp + 0x70]
cmp byte [rdi], 0x29
jne 0x14005aa79
test r10, r10
je 0x1400593c3
mov r8d, dword [rbp - 0x20]
mov edx, dword [r10]
mov ecx, 0x7fffffeb
lea eax, [r8 - 6]
sub ecx, edx
cmp ecx, eax
jl 0x14005a8db
lea eax, [rdx + r8 - 6]
mov dword [r10], eax
mov byte [rsi], 0x5e
add rsi, r11
mov word [rsi], 0x300
add rsi, 2
mov byte [rsi], 0x55
add rsi, r11
mov word [rsi], 0x300
mov rdi, qword [rsp + 0x70]
add rsi, 2
mov r14, qword [rbp - 0x70]
jmp 0x140057a6e
cmp r8d, 2
jg 0x14005aa6d
cmp r8d, r11d
jne 0x140059334
or r8d, 0xffffffff
mov eax, r8d
mov ecx, r8d
mov dword [rbp + 0x10], eax
mov dword [rbp + 0x38], ecx
jmp 0x14005933e
mov rsi, qword [rbp - 0x48]
cmp r12d, 0x68
je 0x140059396
mov edx, dword [rbp - 0x68]
mov dword [rbp + 0x34], r9d
mov dword [rbp - 0x50], edx
mov edx, dword [rbp - 0x78]
mov dword [rbp - 0x60], edx
cmp r12d, 0x5d
jl 0x140059410
cmp edx, 0xfffffffe
jne 0x1400593ff
test ecx, ecx
js 0x1400593f5
mov dword [rbp - 0x78], ecx
mov dword [rbp + 0x34], r11d
jmp 0x1400593f9
mov dword [rbp - 0x78], r8d
mov dword [rbp - 0x60], r8d
jmp 0x140059416
test ecx, ecx
js 0x140059416
test eax, eax
jns 0x14005941e
mov eax, ecx
or eax, ebx
mov dword [rbp + 0x10], eax
jmp 0x140059416
cmp r12d, 0x58
jne 0x140059396
test eax, eax
js 0x140059396
mov dword [rbp - 0x68], eax
jmp 0x140059396
mov rdi, rcx
mov qword [rsp + 0x70], rcx
mov r12d, r9d
jmp 0x140059447
lea ecx, [r12 + r12*4]
movzx eax, al
add rdi, rbx
lea r12d, [rax + rcx*2 - 0x30]
mov qword [rsp + 0x70], rdi
movzx eax, byte [rdi]
test byte [rax + r10 + 0x97f40], 4
jne 0x140059433
movzx eax, byte [rdi]
cmp eax, r8d
jne 0x14005aa9d
cmp edx, 0x2d
jne 0x14005948b
test r12d, r12d
je 0x14005aa91
mov eax, dword [r11 + 0x60]
sub eax, r12d
lea r12d, [rbx + rax]
test r12d, r12d
jle 0x14005aa85
mov edi, dword [rbp - 0x7c]
jmp 0x140059658
cmp edx, 0x2b
jne 0x140059483
test r12d, r12d
je 0x14005aa91
add r12d, dword [r11 + 0x60]
jmp 0x140059483
cmp eax, 0x1c
jne 0x140059781
lea rcx, [rdi + 1]
lea r12d, [rax + 0xb]
cmp byte [rcx], 0x3c
je 0x1400594c3
cmp byte [rcx], r12b
je 0x1400594c3
cmp byte [rcx], 0x7b
jne 0x140059781
mov qword [rsp + 0x70], rcx
cmp byte [rcx], 0x3c
mov r15d, r9d
mov rdi, rcx
mov ebx, 1
jne 0x1400594e7
mov r11, qword [rbp + 0x118]
lea edx, [rbx + 0x3d]
mov r8d, edx
jmp 0x140059500
cmp byte [rcx], r12b
mov r8d, 0x7d
cmove r8d, r12d
mov r11, qword [rbp + 0x118]
mov edx, 0x3e
mov rax, qword [r11 + 0x18]
add rdi, rbx
mov qword [rsp + 0x70], rdi
movzx ecx, byte [rdi]
mov r14, rdi
test byte [rcx + rax], 0x10
je 0x14005952c
mov rcx, rax
add rdi, rbx
mov qword [rsp + 0x70], rdi
movzx eax, byte [rdi]
test byte [rax + rcx], 0x10
jne 0x14005951b
mov r12d, edi
sub r12d, r14d
mov dword [rbp + 0x20], r12d
cmp qword [rbp + 0x120], r9
je 0x1400595a7
test r12d, r12d
je 0x14005aaa9
movzx eax, byte [rdi]
cmp eax, r8d
jne 0x14005a9ce
cmp r12d, 0x20
jg 0x1400580ba
mov eax, dword [rsp + 0x7c]
mov rbx, qword [r11 + 0x38]
test r13d, r13d
setne r9b
mov r8d, r12d
mov rdx, r14
mov rcx, r11
mov dword [rsp + 0x20], eax
mov qword [r11 + 0x38], rdi
call fcn.1400485d0
mov r11, qword [rbp + 0x118]
mov edi, dword [rbp - 0x7c]
xor r9d, r9d
mov qword [r11 + 0x38], rbx
mov r12d, eax
test eax, eax
jns 0x140059648
mov r12d, r9d
jmp 0x140059648
mov rbx, qword [r11 + 0x50]
mov edi, r9d
movsxd r13, r12d
cmp dword [r11 + 0x58], r9d
jle 0x1400595fe
mov r12d, 1
lea rdx, [rbx + 2]
mov r8, r13
mov rcx, r14
call fcn.14001a790
xor r9d, r9d
test eax, eax
jne 0x1400595da
cmp byte [r13 + rbx + 2], r9b
je 0x1400595f3
mov r11, qword [rbp + 0x118]
add edi, r12d
movsxd rax, dword [r11 + 0x5c]
add rbx, rax
cmp edi, dword [r11 + 0x58]
jl 0x1400595bd
jmp 0x1400595fa
mov r11, qword [rbp + 0x118]
mov r12d, dword [rbp + 0x20]
cmp edi, dword [r11 + 0x58]
mov edi, dword [rbp - 0x7c]
jge 0x140059617
movzx eax, byte [rbx]
movzx r12d, byte [rbx + 1]
shl eax, 8
or r12d, eax
jmp 0x140059648
mov eax, dword [rsp + 0x7c]
test edi, edi
mov r8d, r12d
mov rdx, r14
mov rcx, r11
setne r9b
mov dword [rsp + 0x20], eax
call fcn.1400485d0
xor r9d, r9d
mov r12d, eax
test eax, eax
jle 0x14005a94f
mov r11, qword [rbp + 0x118]
test r15d, r15d
je 0x140059795
mov r15, qword [rbp + 0xf8]
mov rbx, qword [r11 + 0x28]
mov r14, rsi
mov qword [rbp - 0x70], rsi
cmp qword [rbp + 0x120], r9
jne 0x140059722
mov edx, dword [rsp + 0x7c]
mov byte [rsi], r9b
test r12d, r12d
je 0x14005968e
mov rcx, qword [r11 + 0x28]
mov r8d, r12d
call fcn.140035ed0
xor r9d, r9d
mov rbx, rax
test rbx, rbx
jne 0x1400596ea
mov dword [rsp + 0x20], edx
test edi, edi
mov r8d, r12d
setne r9b
xor edx, edx
mov rcx, r11
call fcn.1400485d0
test eax, eax
js 0x14005aab4
mov r11, qword [rbp + 0x118]
mov ecx, esi
movsxd rbx, r12d
sub ecx, dword [r11 + 0x28]
mov rax, qword [r11 + 0x48]
add rbx, qword [r11 + 0x28]
add ecx, 4
sar ecx, 8
mov byte [rax], cl
mov rax, qword [r11 + 0x48]
mov cl, sil
sub cl, byte [r11 + 0x28]
add cl, 4
mov byte [rax + 1], cl
add qword [r11 + 0x48], 2
jmp 0x140059722
movzx ecx, byte [rbx + 1]
movzx eax, byte [rbx + 2]
shl ecx, 8
or ecx, eax
jne 0x140059722
mov r8, qword [rbp + 0x110]
mov r9d, edx
mov rcx, rbx
mov rdx, rsi
mov qword [rsp + 0x20], r11
call fcn.140050880
test eax, eax
jne 0x14005aac0
mov r11, qword [rbp + 0x118]
mov r10, qword [rbp + 0x120]
mov r8d, dword [rbp - 0x80]
mov r13, qword [rbp - 0x58]
mov edx, dword [rsp + 0x78]
mov dword [rsi], 0x5206005d
mov eax, ebx
sub eax, dword [r11 + 0x28]
add rsi, 9
sar eax, 8
mov byte [rsi - 5], al
sub bl, byte [r11 + 0x28]
cmp dword [rbp - 0x78], 0xfffffffe
mov byte [rsi - 4], bl
mov word [rsi - 3], 0x55
mov byte [rsi - 1], 6
mov rdi, qword [rsp + 0x70]
mov dword [rbp - 0x20], 9
mov r11d, 1
jne 0x140058f60
or dword [rbp - 0x78], 0xffffffff
jmp 0x140058f60
cmp eax, 0x23
jl 0x14005980c
mov r12d, 0xffffffdd
sub r12d, r11d
jmp 0x140059798
mov edx, dword [rbp - 0x78]
mov byte [rsi], 0x51
mov eax, 0xffffffff
cmp edx, 0xfffffffe
cmove edx, eax
lea r11d, [rax + 2]
mov r14, rsi
mov qword [rbp - 0x70], rsi
add rsi, r11
mov eax, r12d
sar eax, 8
mov byte [rsi + 1], r12b
mov dword [rbp - 0x78], edx
mov byte [rsi], al
add rsi, 2
mov eax, r11d
cmp r12d, 0x20
jge 0x1400597d5
mov ecx, r12d
shl eax, cl
mov rcx, qword [rbp + 0x118]
or dword [rcx + 0x6c], eax
mov eax, dword [rcx + 0x68]
cmp r12d, eax
cmovg eax, r12d
mov dword [rcx + 0x68], eax
mov rcx, qword [rcx + 0x40]
jmp 0x1400597fe
movzx eax, word [rcx + 8]
cmp eax, r12d
je 0x140059805
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1400597f2
jmp 0x140059850
mov word [rcx + 0xa], r11w
jmp 0x140059850
cmp eax, 0x16
je 0x14005aacc
cmp eax, 0xf
je 0x14005aacc
cmp eax, 0x10
je 0x14005aacc
cmp eax, 5
jle 0x14005983a
cmp eax, 0x17
jge 0x14005983a
mov r14, rsi
mov qword [rbp - 0x70], rsi
jmp 0x140059841
mov r14, r9
mov qword [rbp - 0x70], r9
neg r11b
mov byte [rsi], r11b
mov r11d, 1
add rsi, r11
mov rdi, qword [rsp + 0x70]
jmp 0x140057a67
mov rdi, qword [rsp + 0x70]
jmp 0x140058f47
cmp dword [rsp + 0x7c], r9d
je 0x140059891
cmp eax, 0x7f
jle 0x140059891
lea rdx, [rbp + 0x28]
mov ecx, eax
call fcn.140035820
mov r12b, byte [rbp + 0x28]
mov r8d, dword [rbp - 0x80]
mov r13d, eax
mov r11d, 1
jmp 0x140058e95
mov r8d, dword [rbp - 0x80]
mov r11d, 1
mov r12b, al
mov r13d, r11d
mov byte [rbp + 0x28], al
jmp 0x140058e95
cmp byte [rdi + 1], 0x3a
mov r14, rsi
mov qword [rbp - 0x70], rsi
je 0x1400598c2
cmp byte [rdi + 1], 0x2e
je 0x1400598c2
cmp byte [rdi + 1], 0x3d
jne 0x1400598d9
lea rdx, [rbp + 0x60]
mov rcx, rdi
call fcn.140035d80
xor r9d, r9d
test eax, eax
jne 0x14005ab13
mov eax, r9d
mov dword [rbp - 0x64], eax
mov r11d, 1
add rdi, r11
mov qword [rsp + 0x70], rdi
movzx ebx, byte [rdi]
cmp ebx, 0x5c
jne 0x140059925
inc rdi
cmp byte [rdi], 0x45
je 0x1400598e5
lea r8d, [rbx - 0x59]
lea rdx, [0x14009d7b0]
mov rcx, rdi
call fcn.14001a790
xor r9d, r9d
test eax, eax
jne 0x140059973
mov rdi, qword [rsp + 0x70]
mov eax, dword [rbp - 0x64]
add rdi, 3
jmp 0x1400598df
test eax, eax
jne 0x140059936
cmp ebx, 0x5e
jne 0x140059936
mov eax, r11d
mov dword [rbp - 0x64], eax
jmp 0x1400598e5
cmp ebx, 0x5d
jne 0x140059973
mov rcx, qword [rbp + 0x118]
test dword [rcx + 0x70], 0x2000000
je 0x140059973
mov ebx, dword [rbp - 0x78]
neg eax
sbb eax, eax
and eax, 0xffffff9a
add eax, 0x73
mov byte [rsi], al
add rsi, r11
cmp ebx, 0xfffffffe
mov eax, 0xffffffff
cmove ebx, eax
mov dword [rbp - 0x78], ebx
mov dword [rbp - 0x60], ebx
jmp 0x140059850
or eax, 0xffffffff
lea rcx, [rbp - 0x10]
xor edx, edx
lea r8d, [rax + 0x21]
mov dword [rbp - 0x7c], r9d
mov r14d, r9d
mov r13d, eax
mov dword [rbp - 0x50], eax
call fcn.140015500
mov rdi, qword [rsp + 0x70]
xor r9d, r9d
lea r12, [rsi + 4]
mov rax, r12
mov r15d, r9d
mov dword [rbp - 0x60], r9d
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x40], rax
test ebx, ebx
je 0x14005ab04
mov r11d, dword [rsp + 0x7c]
jmp 0x1400599c2
xor r9d, r9d
test r11d, r11d
je 0x140059ab4
cmp ebx, 0x7f
jle 0x140059ab4
movzx ebx, byte [rdi]
cmp ebx, 0xc0
jl 0x140059ab4
test bl, 0x20
jne 0x140059a05
inc rdi
and ebx, 0x1f
movzx ecx, byte [rdi]
mov eax, ebx
mov qword [rsp + 0x70], rdi
and ecx, 0x3f
shl eax, 6
mov ebx, ecx
jmp 0x140059aae
movzx ecx, byte [rdi + 1]
and ecx, 0x3f
test bl, 0x10
jne 0x140059a21
and ebx, 0xf
lea rdx, [rdi + 2]
mov eax, ebx
mov ebx, ecx
shl eax, 6
jmp 0x140059a9b
mov eax, 8
test al, bl
jne 0x140059a40
and ebx, 7
lea rdx, [rdi + 3]
mov eax, ebx
mov ebx, ecx
shl eax, 6
or ebx, eax
movzx eax, byte [rdi + 2]
jmp 0x140059a95
test bl, 4
jne 0x140059a67
and ebx, 3
lea rdx, [rdi + 4]
mov eax, ebx
mov ebx, ecx
shl eax, 6
or ebx, eax
movzx eax, byte [rdi + 2]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [rdi + 3]
jmp 0x140059a95
mov eax, 1
lea rdx, [rdi + 5]
and eax, ebx
mov ebx, ecx
shl eax, 6
or ebx, eax
movzx eax, byte [rdi + 2]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [rdi + 3]
and eax, 0x3f
shl ebx, 6
or ebx, eax
movzx eax, byte [rdi + 4]
shl ebx, 6
and eax, 0x3f
or ebx, eax
movzx eax, byte [rdx]
mov rdi, rdx
shl ebx, 6
and eax, 0x3f
mov qword [rsp + 0x70], rdx
or ebx, eax
mov rax, qword [rbp - 0x40]
mov r10, qword [rbp + 0x120]
test r10, r10
je 0x140059acd
sub r12d, eax
mov qword [rbp - 0x30], rax
add dword [r10], r12d
mov r12, rax
mov edx, dword [rsp + 0x78]
test edx, edx
je 0x140059af7
cmp ebx, 0x5c
jne 0x14005a2b1
cmp byte [rdi + 1], 0x45
jne 0x14005a2b1
mov edx, r9d
inc rdi
mov dword [rsp + 0x78], edx
jmp 0x140059c75
cmp ebx, 0x5b
jne 0x140059d15
cmp byte [rdi + 1], 0x3a
je 0x140059b16
cmp byte [rdi + 1], 0x2e
je 0x140059b16
cmp byte [rdi + 1], 0x3d
jne 0x14005a2b1
lea rdx, [rbp + 0x60]
mov rcx, rdi
call fcn.140035d80
xor ecx, ecx
test eax, eax
je 0x14005a299
cmp byte [rdi + 1], 0x3a
mov rax, qword [rbp + 0x118]
mov r14d, ecx
mov r13, qword [rax + 0x10]
jne 0x14005aae7
add rdi, 2
lea ebx, [rcx + 1]
mov qword [rsp + 0x70], rdi
cmp byte [rdi], 0x5e
jne 0x140059b63
add rdi, rbx
mov r14d, ebx
mov dword [rbp - 0x7c], ebx
mov qword [rsp + 0x70], rdi
mov r15, qword [rbp + 0x60]
mov rcx, rdi
mov edx, r15d
sub edx, edi
call fcn.140035d00
xor edi, edi
test eax, eax
js 0x14005aad5
test byte [rbp - 0x80], bl
je 0x140059b89
cmp eax, 2
cmovle eax, edi
lea eax, [rax + rax*2]
lea rcx, [rbp + 0x70]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
movsxd rbx, eax
lea rax, [0x140000000]
movsxd rdx, dword [rax + rbx*4 + 0x97480]
add rdx, r13
call fcn.140014740
lea rcx, [0x140000000]
mov r11d, reloc.OLEAUT32.dll_RegisterActiveObject
movsxd rax, dword [rcx + rbx*4 + 0x97484]
mov ecx, dword [rcx + rbx*4 + 0x97488]
lea r10d, [r11 - 0x1f]
test eax, eax
js 0x140059c0a
lea r8, [rbp + 0x70]
lea rdx, [rbp + 0x70]
sub rax, r8
mov r8d, r11d
lea r9, [rax + r13]
test ecx, ecx
js 0x140059bfa
mov al, byte [r9 + rdx]
or byte [rdx], al
add rdx, r10
sub r8, r10
jne 0x140059bea
jmp 0x140059c0a
mov al, byte [rdx + r9]
not al
and byte [rdx], al
add rdx, r10
sub r8, r10
jne 0x140059bfa
test ecx, ecx
jns 0x140059c10
neg ecx
cmp ecx, r10d
jne 0x140059c1b
and byte [rbp + 0x71], 0xc3
jmp 0x140059c24
cmp ecx, 2
jne 0x140059c24
and byte [rbp + 0x7b], 0x7f
mov rcx, rdi
mov rdx, r11
test r14d, r14d
je 0x140059c43
mov al, byte [rbp + rcx + 0x70]
not al
or byte [rbp + rcx - 0x10], al
add rcx, r10
sub rdx, r10
jne 0x140059c2f
jmp 0x140059c53
mov al, byte [rbp + rcx + 0x70]
or byte [rbp + rcx - 0x10], al
add rcx, r10
sub rdx, r10
jne 0x140059c43
lea rdi, [r15 + 1]
mov r14d, 0xa
mov r13d, dword [rbp - 0x50]
mov r15d, dword [rbp - 0x60]
mov r10, qword [rbp + 0x120]
mov edx, dword [rsp + 0x78]
mov r11d, dword [rsp + 0x7c]
mov r9d, dword [rbp - 0x7c]
inc rdi
mov qword [rsp + 0x70], rdi
movzx ebx, byte [rdi]
test ebx, ebx
je 0x14005ab04
mov rax, qword [rbp - 0x40]
cmp ebx, 0x5d
jne 0x1400599bf
test edx, edx
jne 0x1400599bf
mov ecx, dword [rbp - 0x64]
mov eax, 1
xor edi, edi
cmp r14d, eax
jne 0x14005a7b3
test r15d, r15d
jne 0x14005a7b3
test r11d, r11d
je 0x140059cd3
test ecx, ecx
je 0x140059cd3
cmp r13d, 0x80
jge 0x14005a7b3
mov r15d, dword [rbp - 0x68]
mov dword [rbp - 0x50], r15d
test ecx, ecx
je 0x14005a6f9
mov ebx, dword [rbp - 0x78]
mov byte [rsi], RegisterActiveObject
mov eax, 0xffffffff
lea r11d, [rax + 2]
cmp ebx, 0xfffffffe
cmove ebx, eax
add rsi, r11
mov byte [rsi], r13b
add rsi, r11
mov dword [rbp - 0x78], ebx
mov dword [rbp - 0x60], ebx
mov rdi, qword [rsp + 0x70]
mov r14, qword [rbp - 0x70]
jmp 0x140058f87
mov r9d, dword [rbp - 0x80]
cmp ebx, 0x5c
jne 0x14005a2b5
mov rax, qword [rbp + 0x118]
mov rdx, qword [rbp + 0xf8]
lea edi, [rbx - 0x5b]
mov r8d, dword [rax + 0x60]
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x20], edi
call fcn.140036940
xor r9d, r9d
mov r10, rdx
mov ebx, eax
cmp dword [rdx], r9d
jne 0x14005a8f4
mov ecx, eax
neg ecx
cmp ecx, 5
jne 0x140059d79
mov r11d, dword [rsp + 0x7c]
mov r9d, dword [rbp - 0x80]
mov edx, dword [rsp + 0x78]
lea ebx, [rdi + 7]
mov rdi, qword [rsp + 0x70]
jmp 0x14005a2bc
cmp ecx, 0x1a
jne 0x140059dad
mov rdi, qword [rsp + 0x70]
cmp byte [rdi + 1], 0x5c
jne 0x140059d98
cmp byte [rdi + 2], 0x45
jne 0x140059d98
add rdi, 2
jmp 0x140059c65
mov r10, qword [rbp + 0x120]
mov edx, 1
mov dword [rsp + 0x78], edx
jmp 0x140059c70
cmp ecx, 0x19
je 0x14005a28f
mov r8, qword [rbp + 0x118]
test eax, eax
jns 0x14005a281
mov rdx, qword [r8 + 0x10]
add r14d, 2
cmp ecx, 0xb
jg 0x140059f1a
je 0x140059ef3
sub ecx, 6
je 0x140059eb2
dec ecx
je 0x140059e91
dec ecx
je 0x140059e62
dec ecx
je 0x140059e2c
dec ecx
jne 0x140059f37
lea rax, [rbp - 0x10]
mov r9d, edi
mov dword [rbp - 0x7c], edi
lea rcx, [rbp - 0x10]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rdx + rcx + 0xa0]
not al
or byte [rcx], al
add rcx, rdi
sub r8, rdi
jne 0x140059e14
jmp 0x140059ed9
mov al, byte [rdx]
lea rcx, [rbp - 0xe]
mov r8d, RegisterActiveObject
or byte [rbp - 0x10], al
mov al, byte [rdx + 1]
and al, 0xf7
or byte [rbp - 0xf], al
lea rax, [rbp - 0xe]
sub rdx, rax
mov al, byte [rdx + rcx + 2]
or byte [rcx], al
add rcx, rdi
sub r8, rdi
jne 0x140059e4a
mov rdi, qword [rsp + 0x70]
jmp 0x140059c65
lea rax, [rbp - 0x10]
mov r9d, edi
mov dword [rbp - 0x7c], edi
lea rcx, [rbp - 0x10]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rcx + rdx]
not al
or byte [rcx], al
add rcx, rdi
sub r8, rdi
jne 0x140059e79
lea eax, [r8 + 8]
or byte [rbp - 0xf], al
jmp 0x140059ed9
lea rax, [rbp - 0x10]
lea rcx, [rbp - 0x10]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rdx + rcx + 0x40]
or byte [rcx], al
add rcx, rdi
sub r8, rdi
jne 0x140059ea2
jmp 0x140059e58
lea rax, [rbp - 0x10]
mov r9d, edi
mov dword [rbp - 0x7c], edi
lea rcx, [rbp - 0x10]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rcx + rdx + 0x40]
not al
or byte [rcx], al
add rcx, rdi
sub r8, rdi
jne 0x140059ec9
mov rdi, qword [rsp + 0x70]
mov r11d, dword [rsp + 0x7c]
mov r10, qword [rbp + 0x120]
mov edx, dword [rsp + 0x78]
jmp 0x140059c79
lea rax, [rbp - 0x10]
lea rcx, [rbp - 0x10]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
sub rdx, rax
mov al, byte [rcx + rdx + 0xa0]
or byte [rcx], al
add rcx, rdi
sub r8, rdi
jne 0x140059f04
jmp 0x140059e58
sub ecx, 0x12
je 0x14005a119
dec ecx
je 0x14005a052
dec ecx
je 0x140059fbe
dec ecx
je 0x140059f5f
mov r9d, dword [rbp - 0x80]
mov rdi, qword [rsp + 0x70]
test r9b, 0x40
jne 0x14005aaf6
movzx ebx, byte [rdi]
sub r14d, 2
mov r11d, dword [rsp + 0x7c]
mov edx, dword [rsp + 0x78]
jmp 0x14005a2c3
mov r11d, dword [rsp + 0x7c]
or byte [rbp - 0xf], 0x3c
or byte [rbp], 0x20
test r11d, r11d
je 0x140059fa9
mov byte [r12], 2
add r12, rdi
mov ecx, 0x2028
mov rdx, r12
mov r15d, edi
mov dword [rbp - 0x60], edi
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x2029
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov qword [rbp - 0x30], r12
mov rdi, qword [rsp + 0x70]
mov r10, qword [rbp + 0x120]
mov edx, dword [rsp + 0x78]
jmp 0x140059c75
mov ecx, r9d
mov edx, ecx
mov r8d, 0xff
dec edx
je 0x140059fda
cmp edx, 0xf
jne 0x140059fe0
mov r8d, 0xdf
jmp 0x140059fe0
mov r8d, 0xc3
movsxd rax, ecx
add ecx, edi
or byte [rbp + rax - 0x10], r8b
cmp ecx, 0x20
jl 0x140059fc1
mov r11d, dword [rsp + 0x7c]
test r11d, r11d
je 0x140059fa9
mov byte [r12], 2
add r12, rdi
mov ecx, pe_nt_image_headers64
mov rdx, r12
mov r15d, edi
mov dword [rbp - 0x60], edi
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x2027
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x2029
mov byte [r12], 2
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x7fffffff
jmp 0x140059f97
mov r11d, dword [rsp + 0x7c]
or byte [rbp - 0xf], 2
or byte [rbp - 0xc], dil
or byte [rbp + 4], dil
test r11d, r11d
je 0x140059fa9
mov byte [r12], dil
add r12, rdi
mov ecx, 0x1680
mov rdx, r12
mov r15d, edi
mov dword [rbp - 0x60], edi
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x180e
mov byte [r12], dil
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x2000
mov byte [r12], 2
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x200a
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x202f
mov byte [r12], dil
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x205f
mov byte [r12], dil
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x3000
mov byte [r12], dil
add r12, rdi
jmp 0x140059f97
mov edx, r9d
mov ecx, edx
mov r8d, 0xff
dec ecx
je 0x14005a13a
sub ecx, 3
je 0x14005a132
cmp ecx, 0x10
jne 0x14005a140
mov r8d, 0xfe
jmp 0x14005a140
mov r8d, 0xfd
movsxd rax, edx
add edx, edi
or byte [rbp + rax - 0x10], r8b
cmp edx, 0x20
jl 0x14005a11c
mov r11d, dword [rsp + 0x7c]
test r11d, r11d
je 0x140059fa9
mov byte [r12], 2
add r12, rdi
mov ecx, pe_nt_image_headers64
mov rdx, r12
mov r15d, edi
mov dword [rbp - 0x60], edi
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x167f
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x1681
mov byte [r12], 2
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x180d
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x180f
mov byte [r12], 2
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x1fff
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x200b
mov byte [r12], 2
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x202e
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x2030
mov byte [r12], 2
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x205e
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x2060
mov byte [r12], 2
add r12, rdi
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x2fff
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, 0x3001
jmp 0x14005a032
mov rdi, qword [rsp + 0x70]
mov r9d, dword [rbp - 0x80]
jmp 0x140059f51
mov r11d, dword [rsp + 0x7c]
jmp 0x140059fa9
mov r10, qword [rbp + 0xf8]
mov r8, qword [rbp + 0x118]
mov r9d, dword [rbp - 0x80]
mov edx, dword [rsp + 0x78]
jmp 0x14005a2c5
mov r9d, dword [rbp - 0x80]
mov r10, qword [rbp + 0xf8]
mov r8, qword [rbp + 0x118]
xor ecx, ecx
cmp byte [rdi + 1], 0x5c
jne 0x14005a2e8
lea rax, [rdi + 2]
cmp byte [rax], 0x45
jne 0x14005a2e4
mov qword [rsp + 0x70], rax
cmp byte [rax + 1], 0x5c
mov edx, ecx
mov rdi, rax
je 0x14005a2cb
mov dword [rsp + 0x78], edx
mov eax, reloc.WSOCK32.dll_listen
mov r13, rdi
cmp ebx, eax
je 0x14005a2f9
cmp ebx, 0xa
jne 0x14005a2fe
or dword [r8 + 0x74], 0x20
test edx, edx
jne 0x14005a4f9
cmp byte [rdi + 1], 0x2d
jne 0x14005a4f9
add rdi, 2
mov qword [rsp + 0x70], rdi
cmp byte [rdi], 0x5c
jne 0x14005a35c
cmp byte [rdi + 1], 0x45
jne 0x14005a357
add rdi, 2
mov qword [rsp + 0x70], rdi
cmp byte [rdi], 0x5c
je 0x14005a31e
jmp 0x14005a357
cmp byte [rdi + 1], 0x51
jne 0x14005a35c
add rdi, 2
mov qword [rsp + 0x70], rdi
cmp byte [rdi], 0x5c
jne 0x14005a3b6
cmp byte [rdi + 1], 0x45
jne 0x14005a3b6
add rdi, 2
mov qword [rsp + 0x70], rdi
cmp byte [rdi], 0x5c
je 0x14005a334
mov eax, 1
cmp byte [rdi], cl
je 0x14005a690
test edx, edx
jne 0x14005a376
cmp byte [rdi], 0x5d
je 0x14005a690
test r11d, r11d
movzx r11d, byte [rdi]
je 0x14005a497
cmp r11d, 0xc0
jl 0x14005a497
test r11b, 0x20
jne 0x14005a3c3
inc rdi
and r11d, 0x1f
movzx ecx, byte [rdi]
mov eax, r11d
mov qword [rsp + 0x70], rdi
and ecx, 0x3f
shl eax, 6
mov r11d, ecx
jmp 0x14005a492
mov eax, 1
mov edx, eax
mov dword [rsp + 0x78], eax
jmp 0x14005a361
test r11b, 0x10
jne 0x14005a3e6
movzx ecx, byte [rdi + 1]
and r11d, 0xf
lea rdx, [rdi + 2]
and ecx, 0x3f
mov eax, r11d
mov r11d, ecx
shl eax, 6
jmp 0x14005a479
mov ecx, 8
test cl, r11b
movzx ecx, byte [rdi + 1]
jne 0x14005a411
and r11d, 7
and ecx, 0x3f
lea rdx, [rdi + 3]
mov eax, r11d
mov r11d, ecx
shl eax, 6
or r11d, eax
movzx eax, byte [rdi + 2]
jmp 0x14005a472
and ecx, 0x3f
test r11b, 4
jne 0x14005a442
and r11d, 3
lea rdx, [rdi + 4]
mov eax, r11d
mov r11d, ecx
shl eax, 6
or r11d, eax
movzx eax, byte [rdi + 2]
and eax, 0x3f
shl r11d, 6
or r11d, eax
movzx eax, byte [rdi + 3]
jmp 0x14005a472
and eax, r11d
mov r11d, ecx
lea rdx, [rdi + 5]
shl eax, 6
or r11d, eax
movzx eax, byte [rdi + 2]
and eax, 0x3f
shl r11d, 6
or r11d, eax
movzx eax, byte [rdi + 3]
and eax, 0x3f
shl r11d, 6
or r11d, eax
movzx eax, byte [rdi + 4]
shl r11d, 6
and eax, 0x3f
or r11d, eax
movzx eax, byte [rdx]
mov rdi, rdx
mov qword [rsp + 0x70], rdx
mov edx, dword [rsp + 0x78]
shl r11d, 6
and eax, 0x3f
or r11d, eax
xor ecx, ecx
test edx, edx
jne 0x14005a549
cmp r11d, 0x5c
jne 0x14005a549
mov r8d, dword [r8 + 0x60]
lea eax, [rdx + 1]
lea rcx, [rsp + 0x70]
mov rdx, r10
mov dword [rsp + 0x20], eax
call fcn.140036940
mov r10, qword [rbp + 0xf8]
xor ecx, ecx
mov r11d, eax
cmp dword [r10], ecx
jne 0x14005a8f4
test eax, eax
jns 0x14005a544
cmp eax, 0xfffffffb
jne 0x14005a4ec
mov rdi, qword [rsp + 0x70]
lea eax, [rcx + 8]
mov r11d, eax
jmp 0x14005a54e
mov rdi, r13
mov qword [rsp + 0x70], r13
mov r11d, dword [rsp + 0x7c]
mov r9d, 1
test r11d, r11d
je 0x14005a69d
cmp ebx, 0xff
jg 0x14005a523
test byte [rbp - 0x80], r9b
je 0x14005a69d
cmp ebx, 0x7f
jle 0x14005a69d
mov byte [r12], r9b
add r12, r9
mov ecx, ebx
mov rdx, r12
mov r15d, r9d
mov dword [rbp - 0x60], r9d
call fcn.140035820
mov r13d, dword [rbp - 0x50]
jmp 0x140059f9f
mov rdi, qword [rsp + 0x70]
mov eax, 8
cmp r11d, ebx
jl 0x14005aaff
je 0x14005a4f4
mov eax, reloc.WSOCK32.dll_listen
cmp r11d, eax
je 0x14005a569
cmp r11d, 0xa
jne 0x14005a574
mov rax, qword [rbp + 0x118]
or dword [rax + 0x74], 0x20
mov edx, 1
cmp dword [rsp + 0x7c], ecx
je 0x14005a5f2
cmp r11d, 0xff
jg 0x14005a595
mov ecx, dword [rbp - 0x80]
test dl, cl
je 0x14005a5f5
cmp r11d, 0x7f
jle 0x14005a5f5
mov byte [r12], 2
add r12, rdx
mov r15d, edx
mov dword [rbp - 0x60], edx
mov ecx, ebx
mov rdx, r12
call fcn.140035820
movsxd rcx, eax
add r12, rcx
mov ecx, r11d
mov rdx, r12
call fcn.140035820
mov edx, 1
movsxd rcx, eax
add r12, rcx
mov ecx, dword [rbp - 0x80]
mov qword [rbp - 0x30], r12
test dl, cl
je 0x14005a5e4
cmp ebx, 0x7f
jg 0x14005a5e4
mov rdi, qword [rsp + 0x70]
lea r11d, [rdx + 0x7e]
jmp 0x14005a5f5
mov r11d, dword [rsp + 0x7c]
mov r13d, dword [rbp - 0x50]
jmp 0x140059fa9
mov ecx, dword [rbp - 0x80]
mov r10, qword [rbp + 0x120]
mov eax, r11d
mov r13d, r11d
sub eax, ebx
mov dword [rbp - 0x50], r11d
lea r14d, [r14 + rax + 1]
mov dword [rbp + 0x20], r14d
test r10, r10
jne 0x140059c6c
cmp ebx, r11d
jg 0x140059c6c
mov r15, qword [rbp + 0x118]
mov r14d, 1
mov r10d, ecx
lea r12d, [r14 + 7]
and r10d, edx
movsxd r9, ebx
mov eax, ebx
mov ecx, ebx
cdq
and ecx, 7
idiv r12d
mov edx, r14d
shl dl, cl
movsxd r8, eax
or byte [rbp + r8 - 0x10], dl
test r10d, r10d
je 0x14005a678
mov rax, qword [r15 + 8]
movzx ecx, byte [rax + r9]
mov eax, ecx
and ecx, 7
cdq
idiv r12d
movsxd rdx, eax
mov eax, r14d
shl al, cl
or byte [rbp + rdx - 0x10], al
add ebx, r14d
add r9, r14
cmp ebx, r11d
jle 0x14005a63d
mov r12, qword [rbp - 0x30]
mov r14d, dword [rbp + 0x20]
jmp 0x140059c5d
mov rdi, r13
mov qword [rsp + 0x70], r13
jmp 0x14005a4f9
mov eax, ebx
mov r10d, 8
mov ecx, ebx
cdq
and ecx, 7
idiv r10d
mov edx, r9d
shl dl, cl
movsxd r8, eax
or byte [rbp + r8 - 0x10], dl
test byte [rbp - 0x80], r9b
je 0x14005a6eb
mov rax, qword [rbp + 0x118]
movsxd rcx, ebx
mov rax, qword [rax + 8]
movzx ebx, byte [rax + rcx]
mov eax, ebx
mov ecx, ebx
cdq
and ecx, 7
idiv r10d
mov edx, r9d
shl dl, cl
movsxd r8, eax
or byte [rbp + r8 - 0x10], dl
add r14d, r9d
mov r13d, ebx
mov dword [rbp - 0x50], ebx
jmp 0x140059fae
test r11d, r11d
je 0x14005a726
cmp r13d, 0x7f
jle 0x14005a726
lea rdx, [rbp + 0x28]
mov ecx, r13d
call fcn.140035820
mov r12b, byte [rbp + 0x28]
mov r8d, dword [rbp - 0x80]
mov r13d, eax
mov r11d, 1
jmp 0x140058e99
mov r8d, dword [rbp - 0x80]
mov r11, rax
mov r12b, r13b
mov byte [rbp + 0x28], r13b
mov r13d, r11d
jmp 0x140058e99
mov rax, qword [rbp + 0x118]
mov edx, dword [rbp - 0x78]
mov ebx, dword [rbp - 0x18]
mov dword [rbp - 0x50], r15d
cmp edx, 0xfffffffe
jne 0x14005a78e
or dword [rbp - 0x60], 0xffffffff
cmp r13d, r11d
je 0x14005a76d
test ebx, ebx
je 0x14005a76d
or eax, 0xffffffff
mov dword [rbp - 0x68], eax
mov dword [rbp - 0x78], eax
jmp 0x140058e2b
movzx ecx, r12b
or ecx, ebx
mov dword [rbp - 0x78], ecx
cmp r13d, r11d
je 0x140059850
movzx ecx, byte [rsi - 1]
or ecx, dword [rax + 0x78]
mov dword [rbp - 0x68], ecx
jmp 0x140058e2b
mov dword [rbp - 0x60], edx
cmp r13d, r11d
je 0x14005a79e
test ebx, ebx
jne 0x140059850
movzx r15d, byte [rsi - 1]
or r15d, dword [rax + 0x78]
or r15d, ebx
mov dword [rbp - 0x68], r15d
jmp 0x140058e2b
mov ebx, dword [rbp - 0x78]
mov eax, 0xffffffff
cmp ebx, 0xfffffffe
cmove ebx, eax
mov eax, dword [rbp - 0x68]
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x78], ebx
mov dword [rbp - 0x60], ebx
test r15d, r15d
je 0x14005a871
test r9d, r9d
je 0x14005a7e8
test dword [rbp - 0x80], 0x20000000
je 0x14005a871
xor r9d, r9d
mov byte [r12], r9b
mov byte [rsi], 0x50
add rsi, 3
lea r11d, [r9 + 1]
mov eax, r9d
add r12, r11
test ecx, ecx
setne al
mov byte [rsi], al
test r14d, r14d
jle 0x14005a848
or al, 2
mov r8, r12
mov byte [rsi], al
add rsi, r11
lea rcx, [rsi + 0x20]
sub r8, rsi
mov rdx, rsi
call fcn.140014740
lea rdx, [rbp - 0x10]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
mov rcx, rsi
call fcn.140014740
mov edx, dword [rsp + 0x78]
lea rsi, [r12 + 0x20]
mov r11d, 1
jmp 0x14005a84b
mov rsi, r12
mov r14, qword [rbp - 0x70]
mov rax, rsi
sub rax, r14
sar rax, 8
mov byte [r14 + 1], al
mov al, sil
sub al, r14b
mov byte [r14 + 2], al
mov rdi, qword [rsp + 0x70]
jmp 0x140058f80
cmp ecx, r9d
mov eax, edi
mov r11d, 1
setne al
add eax, 0x4e
mov byte [rsi], al
add rsi, r11
test ecx, ecx
je 0x14005a8af
test r10, r10
jne 0x14005a8d2
lea rdx, [rbp - 0x10]
mov rcx, rsi
lea r8d, [r11 + 0x1f]
sub rdx, rsi
mov al, byte [rdx + rcx]
not al
mov byte [rcx], al
add rcx, r11
sub r8, r11
jne 0x14005a89e
jmp 0x14005a8ce
lea rdx, [rbp - 0x10]
mov r8d, reloc.OLEAUT32.dll_RegisterActiveObject
mov rcx, rsi
call fcn.140014740
mov r10, qword [rbp + 0x120]
mov r11d, 1
mov edx, dword [rsp + 0x78]
add rsi, 0x20
jmp 0x140059d07
mov dword [r15], reloc.WSOCK32.dll_sendto
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 0x42
mov rdi, qword [rsp + 0x70]
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 0x3b
jmp 0x14005a8f4
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 0x3c
jmp 0x14005ab2e
mov dword [r15], 0x3c
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], reloc.WSOCK32.dll_ntohs
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 0x3a
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], reloc.WSOCK32.dll_ntohs
jmp 0x14005a8f4
mov rcx, qword [rbp + 0xf8]
neg ebx
sbb eax, eax
and eax, 0xffffffec
add eax, 0x23
mov dword [rcx], eax
jmp 0x14005a8f4
mov rcx, qword [rbp + 0xf8]
sub rdi, rdx
mov dword [rcx], CreateStdDispatch
jmp 0x14005ab2e
add rdi, rbx
mov dword [r15], RegisterActiveObject
jmp 0x14005ab2e
mov dword [r15], reloc.WSOCK32.dll_select
jmp 0x14005ab2e
mov dword [r15], reloc.OLEAUT32.dll_SafeArrayDestroyData
jmp 0x14005ab2e
mov eax, reloc.OLEAUT32.dll_SafeArrayRedim
mov dword [r15], eax
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], gethostbyname
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 0x2a
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 0x2b
jmp 0x14005a8f4
add rdi, rbx
mov dword [r15], reloc.OLEAUT32.dll_SafeArrayGetElement
jmp 0x14005ab2e
sub esi, r8d
add esi, dword [rdx]
mov dword [rdx], esi
mov eax, r10d
jmp 0x14005ab3a
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], gethostname
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], reloc.WSOCK32.dll_sendto
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 9
jmp 0x14005ab2e
mov dword [r15], 0x40
jmp 0x14005ab2e
mov dword [r15], recvfrom
sub rdi, rbx
jmp 0x14005ab2e
mov dword [r15], gethostname
jmp 0x14005a8f4
mov dword [r15], RegisterActiveObject
jmp 0x14005a8f4
mov dword [r15], recvfrom
jmp 0x14005ab2e
mov dword [r15], reloc.WSOCK32.dll_ntohs
jmp 0x14005ab2e
mov dword [r15], 0x3a
jmp 0x14005ab2e
mov dword [r15], RegisterActiveObject
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], edx
jmp 0x14005ab2e
mov dword [r15], reloc.WSOCK32.dll_ntohs
jmp 0x14005a8f4
mov dword [r15], SafeArrayCreateEx
jmp 0x14005a8f4
mov dword [r15], 0x2d
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], RegisterActiveObject
jmp 0x14005a8f4
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], reloc.OLEAUT32.dll_CreateStdDispatch
jmp 0x14005ab2e
mov dword [r10], 7
jmp 0x14005ab2e
mov dword [r10], eax
jmp 0x14005ab2e
mov rcx, qword [rbp + 0xf8]
mov dword [rcx], 6
jmp 0x14005ab2e
cmp byte [rdi + 1], 0x3a
mov eax, reloc.OLEAUT32.dll_CreateStdDispatch
lea ecx, [rax - 0x12]
cmove eax, ecx
jmp 0x14005a9b4
mov dword [r15], reloc.WSOCK32.dll_gethostbyname
mov r9, qword [rbp + 0xf0]
mov qword [r9], rdi
xor eax, eax
add rsp, 0x198
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret