Function at 0x14001b830
Capabilities:
Contain obfuscated stackstrings
Parse credit card information

Disassembly:
mov byte [rsp + 0x20], r9b
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x10d28]
mov eax, 0x10e28
call fcn.1400ae8c0
sub rsp, rax
mov r10, qword [rbp + 0x10d70]
xor edi, edi
mov rbx, rdx
test r10, r10
je 0x14001b8a9
lea r11, [rbp + 0x100]
sub r11, r10
nop dword [rax + rax]
movzx eax, word [r10]
mov word [r11 + r10], ax
add r10, 2
test ax, ax
jne 0x14001b880
mov rax, qword [rbp + 0x10d78]
test rax, rax
jne 0x14001c095
xor cl, cl
jmp 0x14001c11c
cmp r8b, 3
jne 0x14001b8c4
mov word [rbp + 0x100], di
xor cl, cl
mov qword [rbp + 0x10d78], rdi
jmp 0x14001c11c
mov r8d, 6
lea rdx, [0x1400d3378]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
mov rax, qword [0x1400edaa8]
jne 0x14001b8fe
add rbx, 0xc
mov esi, 0xc1
cmp qword [rax + 0xd8], rdi
mov ecx, 0x41
cmovne esi, ecx
jmp 0x14001b953
cmp qword [rax + 0xd8], rdi
je 0x14001c06c
mov r8d, 5
lea rdx, [0x1400d3388]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x14001b92d
add rbx, 0xa
lea esi, [rax + 0x42]
jmp 0x14001b953
mov r8d, 6
lea rdx, [0x1400be5d8]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x14001c06c
add rbx, 0xc
mov esi, 0x62
movzx eax, word [rbx]
mov dword [rsp + 0x44], esi
test ax, ax
je 0x14001c006
cmp ax, 0x20
je 0x14001b973
cmp ax, 9
jne 0x14001c065
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001b982
cmp ax, 9
jne 0x14001b988
add rbx, 2
jmp 0x14001b973
cmp word [rbx], di
je 0x14001c006
movzx edi, word [rbx + 2]
xor edx, edx
mov rcx, rbx
mov word [rbx + 2], dx
call fcn.14007e110
mov word [rbx + 2], di
test eax, eax
je 0x14001c063
mov r9, qword [rbp + 0x10d50]
cmp byte [r9 + 0x74], 0
je 0x14001ba15
mov rax, qword [0x1400edaa8]
mov rcx, qword [rax + 0xd8]
cmp byte [rcx + 0x5c], 0
jne 0x14001ba15
cmp esi, 0x62
je 0x14001b9e1
cmp esi, 0x42
setne al
add al, 0x41
mov byte [rcx + 0x5c], al
mov rax, qword [r9 + 8]
test rax, rax
je 0x14001ba7e
movzx ecx, byte [rax]
lea eax, [rcx - 9]
cmp al, 0x18
jbe 0x14001ba0e
sub cl, 0x69
cmp cl, 8
ja 0x14001ba7e
mov eax, 0x1c7
bt eax, ecx
jae 0x14001ba7e
mov byte [rsp + 0x40], 1
jmp 0x14001ba83
mov rax, qword [0x1400edaa8]
mov rcx, qword [rax + 0xd8]
test rcx, rcx
je 0x14001b9e1
movzx eax, byte [rcx + 0x5c]
cmp esi, eax
jne 0x14001b9e1
cmp esi, 0x41
jne 0x14001ba57
mov r8, qword [rbp + 0x10d58]
lea rdx, [0x1400d33a0]
mov rcx, r9
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
cmp esi, 0x42
jne 0x14001b9e1
mov r8, qword [rbp + 0x10d58]
lea rdx, [0x1400d3410]
mov rcx, r9
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov byte [rsp + 0x40], 0
cmp word [rbx], 0
mov edx, 1
mov byte [rbp + 0x10d70], 0
je 0x14001bff8
lea rdx, [0x1400d3480]
mov rcx, rbx
or r11, 0xffffffffffffffff
call fcn.14000a670
mov rdi, rax
test rax, rax
jne 0x14001bad0
mov rax, r11
nop word [rax + rax]
cmp word [rbx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x14001bac0
lea rdi, [rbx + rax*2]
mov rcx, qword [0x1400edaa8]
mov r8, rdi
add rcx, 0xd8
sub r8, rbx
sar r8, 1
mov qword [rsp + 0x60], r8
mov rax, qword [rcx]
test rax, rax
je 0x14001bc38
xor edx, edx
mov esi, edx
cmp dword [rax + 0x20], edx
jle 0x14001bb64
mov qword [rsp + 0x58], rdx
nop word [rax + rax]
mov rax, qword [rcx]
mov r9, r11
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + rdx]
mov rcx, rbx
mov rdx, qword [rdx + 0x28]
call fcn.14007a0c0
test eax, eax
je 0x14001bf30
mov rdx, qword [rsp + 0x58]
inc esi
mov rcx, qword [0x1400edaa8]
add rdx, 0x18
mov r8, qword [rsp + 0x60]
add rcx, 0xd8
mov qword [rsp + 0x58], rdx
mov r11, 0xffffffffffffffff
mov rax, qword [rcx]
cmp esi, dword [rax + 0x20]
jl 0x14001bb10
mov rcx, qword [rbp + 0x10d50]
xor esi, esi
mov qword [rsp + 0x28], rsi
xor r9d, r9d
mov rdx, rbx
mov dword [rsp + 0x20], 2
call fcn.1400228f0
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14001bbb5
movzx ecx, byte [rax + 0x22]
mov eax, dword [rsp + 0x44]
xor ecx, eax
test ecx, 0xffffffbf
jne 0x14001bf52
cmp eax, 0x62
je 0x14001bf52
mov qword [rsp + 0x50], rsi
jmp 0x14001bbb9
mov eax, dword [rsp + 0x44]
cmp eax, 0x41
je 0x14001bc25
mov rax, qword [0x1400edaa8]
mov dword [rsp + 0x48], esi
mov rcx, qword [rax + 0xd8]
cmp dword [rcx + 0x54], esi
jle 0x14001bc25
nop word [rax + rax]
mov rax, qword [rcx + 0x40]
or r8, 0xffffffffffffffff
mov r9, qword [rsp + 0x60]
mov rdx, rbx
mov rcx, qword [rax + rsi*8]
mov rcx, qword [rcx + 0x28]
call fcn.14007a0c0
test eax, eax
mov rax, qword [0x1400edaa8]
mov rcx, qword [rax + 0xd8]
je 0x14001bccb
mov edx, dword [rsp + 0x48]
inc rsi
inc edx
mov dword [rsp + 0x48], edx
cmp edx, dword [rcx + 0x54]
jl 0x14001bbe0
mov rcx, qword [rsp + 0x50]
test rcx, rcx
jne 0x14001bf57
mov r8, qword [rsp + 0x60]
mov r9d, dword [rsp + 0x44]
mov rdx, rbx
mov rcx, qword [rbp + 0x10d50]
call fcn.140022860
mov rsi, rax
test rax, rax
je 0x14001bf22
movzx eax, byte [rax + 0x23]
test al, al
jne 0x14001bc68
mov rax, qword [rsi + 0x10]
movzx eax, byte [rax + 0x23]
cmp al, 1
jne 0x14001bfd1
mov r8, qword [rsp + 0x60]
lea rdx, str.ErrorLevel
or r9, 0xffffffffffffffff
mov rcx, rbx
call fcn.14007a0c0
test eax, eax
je 0x14001bfd1
mov eax, dword [rsp + 0x44]
cmp eax, 0x41
jne 0x14001bcd8
mov rdx, qword [0x1400edaa8]
mov rax, qword [rdx + 0xd8]
movsxd rcx, dword [rax + 0x54]
cmp ecx, 0x7d0
jge 0x14001bf8d
mov rax, qword [rax + 0x40]
mov qword [rax + rcx*8], rsi
mov rax, qword [rdx + 0xd8]
inc dword [rax + 0x54]
jmp 0x14001bce2
mov rax, qword [rcx + 0x40]
mov rcx, qword [rax + rsi*8]
jmp 0x14001bc2a
cmp eax, 0xc1
jne 0x14001bce2
mov byte [rsi + 0x22], al
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14001bcf1
cmp ax, 9
jne 0x14001bcf7
add rdi, 2
jmp 0x14001bce2
movzx eax, word [rdi]
test eax, eax
je 0x14001bee5
cmp eax, 0x2c
je 0x14001beca
cmp eax, 0x3a
je 0x14001bd1e
cmp eax, 0x3d
jne 0x14001bd2d
add rdi, 2
mov sil, 1
jmp 0x14001bd30
cmp word [rdi + 2], 0x3d
jne 0x14001bfaf
add rdi, 4
xor sil, sil
mov edx, 0x2c
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
call fcn.14007c980
movsxd rcx, eax
lea rax, [rdi + rcx*2]
lea rdi, [rdi + rcx*2]
mov qword [rsp + 0x58], rax
add rdi, 0xfffffffffffffffe
cmp rdi, rbx
jbe 0x14001bd78
nop dword [rax]
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14001bd6f
cmp ax, 9
jne 0x14001bd78
sub rdi, 2
cmp rdi, rbx
ja 0x14001bd60
movzx eax, word [rdi + 2]
xor edx, edx
mov word [rsp + 0x48], ax
mov word [rdi + 2], dx
test sil, sil
je 0x14001bdf2
lea rcx, [rbp + 0x8d10]
sub rcx, rbx
nop word [rax + rax]
movzx eax, word [rbx]
mov word [rcx + rbx], ax
lea rbx, [rbx + 2]
test ax, ax
jne 0x14001bda0
mov qword [rsp + 0x38], rdx
lea r8, [0x1400be5b0]
mov qword [rsp + 0x30], rdx
lea rcx, [rbp + 0x8d10]
mov eax, 1
mov qword [rsp + 0x28], 0xffffffffffffffff
mov r9d, eax
mov dword [rsp + 0x20], eax
lea rdx, [0x1400be5ac]
call fcn.14007a860
xor edx, edx
lea rbx, [rbp + 0x8d10]
mov esi, dword [rsp + 0x44]
cmp esi, 0x62
jne 0x14001be08
mov rax, qword [rbp + 0x10d50]
mov byte [rax + 0x75], 1
jmp 0x14001be40
cmp byte [rsp + 0x40], 0
je 0x14001be40
cmp byte [rbp + 0x10d70], 0
jne 0x14001be40
mov rcx, qword [rbp + 0x10d50]
xor r9d, r9d
mov qword [rsp + 0x20], rdx
xor r8d, r8d
mov dl, reloc.WSOCK32.dll_WSAStartup
call fcn.14001dee0
test eax, eax
je 0x14001bf22
mov byte [rbp + 0x10d70], 1
xor eax, eax
mov rdx, rbx
mov rbx, qword [rbp + 0x10d50]
xor r9d, r9d
mov qword [rsp + 0x38], rax
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rcx, rbx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
call fcn.14001b830
test eax, eax
je 0x14001bf22
cmp esi, 0x62
jne 0x14001be91
mov rcx, qword [rbx + 8]
mov byte [rbx + 0x75], 0
movzx eax, byte [rcx]
mov qword [rcx + 0x10], rax
mov rax, qword [rbx + 8]
mov byte [rax], 8
movzx eax, word [rsp + 0x48]
mov word [rdi + 2], ax
mov rax, qword [rsp + 0x58]
cmp word [rax], 0x2c
jne 0x14001bec5
lea rbx, [rax + 2]
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001bebf
cmp ax, 9
jne 0x14001bee8
add rbx, 2
jmp 0x14001beb0
mov rbx, rax
jmp 0x14001bee8
lea rbx, [rdi + 2]
nop
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001bedf
cmp ax, 9
jne 0x14001bee8
add rbx, 2
jmp 0x14001bed0
mov rbx, rdi
cmp word [rbx], 0
jne 0x14001ba99
cmp byte [rbp + 0x10d70], 0
je 0x14001bff3
mov rcx, qword [rbp + 0x10d50]
xor edx, edx
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov dl, reloc.WSOCK32.dll_WSACleanup
xor r8d, r8d
call fcn.14001dee0
test eax, eax
jne 0x14001bff3
xor eax, eax
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rdx, [0x1400d3490]
mov r8, rbx
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rsp + 0x50]
movzx eax, byte [rcx + 0x22]
lea rdx, [0x1400d3510]
shr al, 6
lea rcx, [0x1400d34d8]
and al, 1
mov r8, rbx
cmovne rdx, rcx
mov rcx, qword [rbp + 0x10d50]
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rdx, [0x1400d35c8]
mov r8, rbx
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rdx, [0x1400d2c70]
mov r8, rbx
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rdx, [0x1400d3570]
mov r8, rbx
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edx, 1
mov eax, edx
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r10, qword [rbp + 0x10d50]
cmp esi, 0x42
je 0x14001c041
cmp byte [r10 + 0x74], dil
je 0x14001c041
mov rax, qword [0x1400edaa8]
mov rcx, qword [rax + 0xd8]
cmp byte [rcx + 0x5c], dil
jne 0x14001c041
mov byte [rcx + 0x5c], sil
mov eax, 1
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r8, qword [rbp + 0x10d58]
lea rdx, [0x1400d2c70]
mov rcx, r10
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor edi, edi
mov rbx, qword [rbp + 0x10d58]
mov rcx, qword [rbp + 0x10d50]
lea rdx, [rbp + 0x100]
mov r9b, 1
mov r8, rbx
call fcn.14001dbf0
mov qword [rbp + 0x10d78], rax
test rax, rax
je 0x14001bf22
lea rcx, [rax + 2]
mov rbx, rcx
nop dword [rax]
movzx eax, word [rbx]
cmp ax, 0x20
je 0x14001c0af
cmp ax, 9
jne 0x14001c0b5
add rbx, 2
jmp 0x14001c0a0
movzx ecx, word [rcx]
cmp cx, word [0x1400ef424]
je 0x14001c112
cmp cx, 0x20
ja 0x14001c0da
movzx eax, cx
movabs rdx, 0x100000201
bt rdx, rax
jb 0x14001c112
cmp cx, 0x28
jne 0x14001c10e
lea rdx, [0x1400d2754]
lea rcx, [rbp + 0x100]
call fcn.140099630
test eax, eax
je 0x14001c112
lea rdx, [0x1400d2760]
lea rcx, [rbp + 0x100]
call fcn.140099630
test eax, eax
je 0x14001c112
xor cl, cl
jmp 0x14001c114
mov cl, 1
movzx r8d, byte [rbp + 0x10d60]
movzx eax, word [0x1400ef424]
lea r9, [0x140000000]
or r11, 0xffffffffffffffff
mov byte [rbp + 0x10d70], cl
mov byte [rsp + 0x40], 0
lea esi, [r11 + 0x21]
cmp word [rbx], ax
jne 0x14001c1be
movzx eax, word [rbx + 2]
add rbx, 2
cmp ax, si
je 0x14001c142
cmp ax, 9
je 0x14001c142
mov rsi, qword [rbp + 0x10d58]
test r8b, r8b
jne 0x14001cbfe
movzx eax, byte [rbp + 0x10d68]
cmp byte [rbp + 0x10d70], 0
je 0x14001ca72
test al, al
jne 0x14001ca72
lea rcx, [rbp + 0x100]
call fcn.14001dd70
mov byte [rbp + 0x10d60], al
movzx r8d, al
test al, al
jne 0x14001cbfe
lea rcx, [rbp + 0x100]
call fcn.14001dde0
movzx r8d, byte [rbp + 0x10d60]
mov byte [rbp + 0x10d68], al
jmp 0x14001ca7b
test r8b, r8b
jne 0x14001cbfe
movzx eax, byte [rbp + 0x10d68]
test al, al
jne 0x14001ca66
test cl, cl
je 0x14001c723
lea rdx, [0x1400d2754]
lea rcx, [rbp + 0x100]
call fcn.140099630
test eax, eax
jne 0x14001c718
movzx eax, word [rbx]
cmp ax, 0x28
je case.0x14001c320.34
cmp ax, word [0x1400ef420]
jne 0x14001c226
movzx eax, word [rbx + 2]
cmp ax, si
je case.0x14001c320.34
cmp ax, 9
je case.0x14001c320.34
movzx eax, word [0x1400ef424]
lea rdx, [rsp + 0x68]
mov rcx, rbx
mov word [rsp + 0x6a], ax
mov word [rsp + 0x68], si
mov dword [rsp + 0x6c], 0x90028
mov dword [rsp + 0x70], 0x3e003c
mov dword [rsp + 0x74], 0x3d003a
mov dword [rsp + 0x78], 0x2d002b
mov dword [rsp + 0x7c], 0x2f002a
mov dword [rbp - 0x80], 0x7e0021
mov dword [rbp - 0x7c], 0x7c0026
mov dword [rbp - 0x78], 0x5b005e
mov dword [rbp - 0x74], 0x3f002e
mov dword [rbp - 0x70], 0x7b
call fcn.14000a670
mov rdi, rax
test rax, rax
je 0x14001c2ab
movzx eax, word [rdi]
cmp ax, si
je 0x14001c2a5
cmp ax, 9
jne 0x14001c2c0
add rdi, 2
jmp 0x14001c297
or rax, 0xffffffffffffffff
nop
cmp word [rbx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x14001c2b0
lea rdi, [rbx + rax*2]
mov r8d, 3
lea rdx, [0x1400d1660]
mov rcx, rbx
call fcn.14009bc18
test eax, eax
jne 0x14001c2f1
movzx edx, word [rbx + 6]
lea rcx, [rsp + 0x68]
call fcn.1400977e8
test rax, rax
je 0x14001c2f1
mov sil, 1
jmp 0x14001c2f4
xor sil, sil
movzx eax, word [rdi]
add eax, 0xffffffdf
cmp eax, 0x4d
ja case.0x14001c320.34
lea r9, [0x140000000]
cdqe
movzx eax, byte [r9 + rax + 0x1da88]
mov ecx, dword [r9 + rax*4 + 0x1da64]
add rcx, r9
jmp rcx
movzx eax, word [0x1400ef424]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetUBound
mov word [rdi], ax
jmp 0x14001cbf7
movzx ecx, word [rdi + 2]
sub ecx, 0x3d
je 0x14001c351
cmp ecx, 1
je 0x14001c3a5
mov r8b, reloc.OLEAUT32.dll_SafeArrayAccessData
mov byte [rbp + 0x10d60], r8b
jmp 0x14001c612
mov r8b, reloc.OLEAUT32.dll_SafeArrayUnaccessData
mov eax, SafeArrayAllocDescriptor
mov byte [rbp + 0x10d60], r8b
mov word [rdi + 2], ax
jmp 0x14001c612
cmp word [rdi + 2], 0x3d
jne 0x14001c38b
mov r8b, reloc.OLEAUT32.dll_SafeArrayUnlock
mov eax, SafeArrayAllocDescriptor
mov word [rdi + 2], ax
movzx eax, word [0x1400ef424]
mov word [rdi], ax
jmp 0x14001cbf7
mov r8b, reloc.OLEAUT32.dll_SafeArrayLock
mov byte [rbp + 0x10d60], r8b
jmp 0x14001c612
cmp word [rdi + 2], 0x3d
jne case.0x14001c320.34
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetLBound
jmp 0x14001c373
test sil, sil
jne case.0x14001c320.34
mov r8d, 7
lea rdx, [0x1400be650]
mov rcx, rdi
call fcn.14009bc18
test eax, eax
jne case.0x14001c320.34
mov r8b, reloc.OLEAUT32.dll_SafeArrayDestroy
mov dword [rdi], 0x200020
mov edx, SafeArrayAllocDescriptor
mov byte [rbp + 0x10d60], r8b
mov word [rdi + 0xc], dx
mov dword [rdi + 4], 0x200020
mov dword [rdi + 8], 0x200020
jmp 0x14001c612
test sil, sil
jne case.0x14001c320.34
mov r8d, 8
lea rdx, [0x1400be600]
mov rcx, rdi
call fcn.14009bc18
test eax, eax
jne case.0x14001c320.34
mov r8b, reloc.WSOCK32.dll_inet_ntoa
mov dword [rdi], 0x200020
mov byte [rbp + 0x10d60], r8b
mov dword [rdi + 4], 0x200020
mov dword [rdi + 8], 0x200020
mov dword [rdi + 0xc], 0x200020
jmp 0x14001c612
movzx ecx, word [rdi + 2]
call fcn.14000a640
movzx eax, ax
cmp eax, 0x4e
je 0x14001c4e0
cmp eax, 0x53
je 0x14001c474
cmp eax, 0x6e
je 0x14001c4e0
cmp eax, 0x73
jne case.0x14001c320.34
test sil, sil
jne case.0x14001c320.34
lea rsi, [rdi + 4]
movzx eax, word [rsi]
cmp ax, 0x20
je 0x14001c490
cmp ax, 9
jne 0x14001c496
add rsi, 2
jmp 0x14001c481
mov r8d, 3
lea rdx, [0x1400d35f8]
mov rcx, rsi
call fcn.14009bc18
mov edx, SafeArrayAllocDescriptor
test eax, eax
je 0x14001c4b9
mov r8b, SafeArrayDestroy
jmp 0x14001c4c6
mov r8b, SafeArrayGetDim
mov dword [rsi], 0x200020
mov word [rsi + 4], dx
mov byte [rbp + 0x10d60], r8b
mov word [rdi + 2], dx
cmp r8b, 0x11
jne 0x14001c612
jmp 0x14001c6d0
test sil, sil
jne case.0x14001c320.34
mov r8b, 9
mov eax, SafeArrayAllocDescriptor
mov byte [rbp + 0x10d60], r8b
mov word [rdi + 2], ax
jmp 0x14001c612
mov r8d, 3
lea rdx, [0x1400d35f8]
mov rcx, rdi
call fcn.14009bc18
test eax, eax
jne case.0x14001c320.34
movzx eax, word [rdi + 6]
lea rsi, [rdi + 6]
cmp ax, 0x20
je 0x14001c536
cmp ax, 9
jne case.0x14001c320.34
mov eax, SafeArrayAllocDescriptor
mov dword [rdi], 0x200020
mov word [rdi + 4], ax
movzx eax, word [rsi]
cmp ax, 0x20
je 0x14001c554
cmp ax, 9
jne 0x14001c55a
add rsi, 2
jmp 0x14001c545
mov r8d, 2
lea rdx, [0x1400be5e8]
mov rcx, rsi
call fcn.14009bc18
test eax, eax
jne 0x14001c588
mov r8b, 0xa
mov dword [rsi], 0x200020
mov byte [rbp + 0x10d60], r8b
jmp 0x14001c612
mov r8d, 7
lea rdx, [0x1400be650]
mov rcx, rsi
call fcn.14009bc18
test eax, eax
jne 0x14001c5ca
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetDim
mov dword [rsi], 0x200020
mov edx, SafeArrayAllocDescriptor
mov byte [rbp + 0x10d60], r8b
mov word [rsi + 0xc], dx
mov dword [rsi + 4], 0x200020
mov dword [rsi + 8], 0x200020
jmp 0x14001c612
mov r8d, 8
lea rdx, [0x1400be600]
mov rcx, rsi
call fcn.14009bc18
test eax, eax
jne 0x14001c60a
mov r8b, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
mov dword [rsi], 0x200020
mov byte [rbp + 0x10d60], r8b
mov dword [rsi + 4], 0x200020
mov dword [rsi + 8], 0x200020
mov dword [rsi + 0xc], 0x200020
jmp 0x14001c612
movzx r8d, byte [rbp + 0x10d60]
movzx eax, word [0x1400ef424]
mov word [rdi], ax
lea eax, [r8 - 0xf]
cmp al, 1
ja 0x14001c155
lea rdx, [0x1400d2848]
mov rcx, rdi
call fcn.14007a410
mov rdi, rax
test rax, rax
je 0x14001c682
nop
movzx edx, word [rdi - 2]
lea rcx, [0x1400d18a0]
call fcn.1400977e8
test rax, rax
je 0x14001c66a
movzx edx, word [rdi + 6]
lea rcx, [0x1400d18a0]
call fcn.1400977e8
test rax, rax
jne 0x14001c6a8
lea rcx, [rdi + 6]
lea rdx, [0x1400d2848]
call fcn.14007a410
mov rdi, rax
test rax, rax
jne 0x14001c640
mov r8, qword [rbp + 0x10d58]
lea rdx, [0x1400d3600]
mov rcx, qword [rbp + 0x10d50]
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
movzx eax, word [0x1400ef424]
movzx r8d, byte [rbp + 0x10d60]
mov word [rdi], ax
mov dword [rdi + 2], 0x200020
jmp 0x14001c155
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElemsize
mov byte [rbp + 0x10d60], r8b
or rax, 0xffffffffffffffff
cmp word [rbx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x14001c6d4
lea rdx, [rax - 1]
xor edi, edi
cmp word [rbx + rdx*2], 0x7b
lea rdx, [rbx + rdx*2]
jne 0x14001cc00
mov word [rdx], di
mov rcx, rbx
sub rdx, rbx
sar rdx, 1
call fcn.140014170
movzx r8d, byte [rbp + 0x10d60]
mov byte [rsp + 0x40], 1
jmp 0x14001cc00
or r11, 0xffffffffffffffff
lea r9, [0x140000000]
movzx r8d, word [rbx]
lea rsi, [rbx + 2]
movzx edx, word [rsi]
lea eax, [r8 - 0x26]
cmp eax, 0x56
ja case.0x14001c751.47
cdqe
movzx eax, byte [r9 + rax + 0x1db00]
mov ecx, dword [r9 + rax*4 + 0x1dad8]
add rcx, r9
jmp rcx
movzx eax, word [0x1400ef424]
mov r8b, 1
mov rsi, qword [rbp + 0x10d58]
mov word [rbx], ax
mov rbx, rsi
mov byte [rbp + 0x10d60], r8b
jmp 0x14001c15c
cmp dx, 0x3d
jne case.0x14001c751.47
mov dil, 2
jmp 0x14001c8b0
cmp word [rbp + 0x100], 0x2b
jne 0x14001c7a3
cmp word [rbp + 0x102], 0
jne 0x14001c7a3
mov al, 1
mov r8b, 4
jmp 0x14001c7db
xor al, al
cmp dx, 0x3d
jne case.0x14001c751.47
mov r8b, 4
jmp 0x14001c7db
cmp word [rbp + 0x100], 0x2d
jne 0x14001c7cc
cmp word [rbp + 0x102], 0
jne 0x14001c7cc
mov al, 1
jmp 0x14001c7d8
xor al, al
cmp dx, 0x3d
jne case.0x14001c751.47
mov r8b, 5
mov byte [rbp + 0x10d60], r8b
test al, al
je 0x14001c877
nop word [rax + rax]
movzx eax, word [rsi]
cmp ax, 0x20
je 0x14001c7ff
cmp ax, 9
jne 0x14001c805
add rsi, 2
jmp 0x14001c7f0
lea rdx, [0x1400d3660]
mov rcx, rsi
call fcn.14000a670
test rax, rax
jne 0x14001c955
mov rbx, r11
cmp word [rsi + rbx*2 + 2], 0
lea rbx, [rbx + 1]
jne 0x14001c820
mov rcx, qword [rbp + 0x10d58]
lea r8, [rbx*2 + 2]
mov rdx, rsi
call fcn.1400973b0
mov r8, qword [rbp + 0x10d58]
movzx eax, word [0x1400ef424]
mov rsi, qword [rbp + 0x10d58]
mov word [r8 + rbx*2], ax
mov eax, gethostbyname
mov dword [r8 + rbx*2 + 2], eax
mov rbx, rsi
movzx r8d, byte [rbp + 0x10d60]
jmp 0x14001c15c
cmp r8b, 3
je 0x14001c95f
cmp r8b, 1
je 0x14001c913
movzx edi, byte [rbp + 0x10d60]
jmp 0x14001c8b7
cmp dx, 0x3d
jne case.0x14001c751.47
mov dil, 6
jmp 0x14001c8b0
cmp dx, 0x3d
jne 0x14001c940
mov dil, 7
mov byte [rbp + 0x10d60], dil
movzx edx, word [0x1400ef424]
xor r9d, r9d
mov rcx, rbx
lea r8d, [r9 + 2]
call fcn.14007c980
movsxd rcx, eax
cmp word [rbx + rcx*2], r9w
je 0x14001c90b
lea eax, [rdi - 4]
cmp al, 1
ja 0x14001c955
inc rcx
lea rcx, [rbx + rcx*2]
movzx eax, word [rcx]
cmp ax, 0x20
je 0x14001c8f4
cmp ax, 9
jne 0x14001c8fa
add rcx, 2
jmp 0x14001c8e5
lea rdx, [0x1400d3660]
call fcn.14000a670
test rax, rax
jne 0x14001c955
movzx r8d, byte [rbp + 0x10d60]
cmp r8b, 3
je 0x14001c95f
movzx eax, word [0x1400ef424]
mov word [rbx], ax
cmp r8b, 1
je 0x14001c95f
mov eax, SafeArrayAllocDescriptor
mov word [rsi], ax
mov rsi, qword [rbp + 0x10d58]
mov rbx, rsi
jmp 0x14001c15c
cmp dx, 0x2f
jne case.0x14001c751.47
cmp word [rbx + 4], 0x3d
jne case.0x14001c751.47
mov r8b, 3
mov byte [rbp + 0x10d60], r8b
mov rsi, qword [rbp + 0x10d58]
mov rbx, rsi
jmp 0x14001c15c
cmp dx, 0x3d
jmp 0x14001c94f
cmp dx, r8w
jmp 0x14001c944
cmp dx, 0x3d
je 0x14001c955
mov rcx, rsi
call fcn.140032bf0
mov rdi, rax
cmp word [rax], 0x28
je 0x14001c955
cmp rdi, rsi
je case.0x14001c751.47
nop word [rax + rax]
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14001c9af
cmp ax, 9
jne 0x14001c9b5
add rdi, 2
jmp 0x14001c9a0
movzx edx, word [rdi]
cmp dx, 0x5b
je 0x14001c955
test dx, dx
je 0x14001c955
cmp word [rdi + 2], 0x3d
lea rsi, [rdi + 2]
jne 0x14001c9e3
lea rcx, [0x1400d3640]
call fcn.1400977e8
test rax, rax
jne 0x14001c955
movzx ecx, word [rdi]
cmp word [rsi], cx
jne 0x14001ca1e
movzx edx, cx
lea rcx, [0x1400d3658]
call fcn.1400977e8
test rax, rax
je 0x14001ca0a
cmp word [rdi + 4], 0x3d
je 0x14001c955
movzx ecx, word [rdi]
mov edx, 0xfffd
lea eax, [rcx - 0x2b]
test dx, ax
je 0x14001c955
cmp cx, 0x2e
jne case.0x14001c751.47
mov rcx, rsi
call fcn.140032bf0
mov rdi, rax
cmp word [rax], 0x28
jne 0x14001c991
mov rsi, qword [rbp + 0x10d58]
mov r8b, 3
mov byte [rbp + 0x10d60], r8b
mov rbx, rsi
jmp 0x14001c15c
movzx r8d, byte [rbp + 0x10d60]
mov rsi, qword [rbp + 0x10d58]
jmp 0x14001c165
mov rsi, qword [rbp + 0x10d58]
jmp 0x14001c16c
test r8b, r8b
jne 0x14001cbfe
test al, al
jne 0x14001cbfe
cmp word [rbx], 0x7b
jne 0x14001cac6
lea rcx, [rbp + 0x100]
call fcn.14001dd70
mov byte [rbp + 0x10d60], al
movzx r8d, al
cmp al, 0x21
je 0x14001cabd
cmp al, 0x69
je 0x14001cab1
lea eax, [r8 - 0x6f]
cmp al, 2
jbe 0x14001cabd
jmp 0x14001cac6
cmp word [rbx + 2], 0
mov byte [rsp + 0x40], 1
jne 0x14001cac6
test r8b, r8b
jne 0x14001cbfe
movzx edx, word [rbx]
lea rcx, [0x1400d3660]
call fcn.1400977e8
test rax, rax
je 0x14001cb6d
movzx ecx, word [rbx]
mov edx, 0xfffd
lea eax, [rcx - 0x2b]
test dx, ax
jne 0x14001cb3b
cmp word [rbx + 2], cx
jne 0x14001cb3b
cmp word [rbx + 4], 0
je 0x14001cb00
mov r8b, 3
jmp 0x14001cb1f
movzx eax, word [0x1400ef424]
cmp cx, 0x2b
mov word [rbx], ax
mov eax, gethostbyname
setne r8b
mov word [rbx + 2], ax
add r8b, 4
mov rdi, qword [rbp + 0x10d58]
mov byte [rbp + 0x10d60], r8b
mov rbx, rdi
test r8b, r8b
jne 0x14001cbfe
jmp 0x14001cb74
cmp cx, 0x3f
je 0x14001cb65
mov edx, 0x3f
mov rcx, rbx
call fcn.1400977e8
test rax, rax
je 0x14001cb6d
mov edx, 0x3a
mov rcx, rax
call fcn.1400977e8
test rax, rax
je 0x14001cb6d
mov rbx, rsi
jmp 0x14001cbf4
mov rdi, qword [rbp + 0x10d58]
movzx eax, word [rbx]
cmp ax, 0x28
je 0x14001cbf1
cmp ax, 0x5b
je 0x14001cbf1
cmp word [rdi], 0x28
je 0x14001cbf1
mov r8d, 3
lea rdx, [0x1400d3698]
mov rcx, rdi
call fcn.14009bc18
test eax, eax
jne 0x14001cbb2
movzx eax, word [rdi + 6]
cmp ax, 0x20
je 0x14001cbf1
cmp ax, 9
je 0x14001cbf1
lea rdx, [0x1400d288c]
mov rcx, rdi
call fcn.140097874
test rax, rax
lea rcx, [0x1400d36a0]
lea rdx, [0x1400d2c70]
mov r8, rdi
cmovne rdx, rcx
mov rcx, qword [rbp + 0x10d50]
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rbx, rdi
mov r8b, 3
mov byte [rbp + 0x10d60], r8b
xor edi, edi
movzx ecx, r8b
sub ecx, 0x21
je 0x14001d9c8
sub ecx, 0x4e
je 0x14001d9c8
sub ecx, 1
je 0x14001cc20
cmp ecx, 1
jmp 0x14001cc24
cmp word [rbx], 0x7b
je 0x14001d9c8
test r8b, r8b
je 0x14001cc50
movzx eax, r8b
lea rcx, [rax + rax*8]
lea rax, [0x140000000]
lea rsi, [rax + 0xee360]
lea rsi, [rsi + rcx*2]
mov qword [rsp + 0x60], rsi
jmp 0x14001cc72
movzx eax, byte [rbp + 0x10d68]
lea rcx, [rax + rax*8]
lea rax, [0x140000000]
lea rax, [rax + rcx*2]
lea rax, [rax + 0xee260]
mov qword [rsp + 0x60], rax
xor edx, edx
lea rcx, [rbp + 0xd00]
mov r8d, 0x8002
call fcn.140098640
mov rdx, qword [rbp + 0x10d80]
mov r11d, 1
test rdx, rdx
je 0x14001cd2b
mov ecx, dword [rbp + 0x10d88]
mov rax, rbx
sub rax, qword [rbp + 0x10d78]
sar rax, 1
sub ecx, eax
test ecx, ecx
jle 0x14001ccd3
movsxd r8, ecx
lea rcx, [rbp + 0xd00]
cdqe
add r8, r8
lea rdx, [rdx + rax*2]
call fcn.1400973b0
mov r11d, 1
movzx ecx, byte [rbp + 0x10d60]
xor r9d, r9d
mov dword [rbp + 0x10d70], r9d
cmp cl, 0x22
jne 0x14001cfe5
mov ecx, r9d
mov dword [rsp + 0x44], r11d
mov esi, r11d
cmp word [rbx], cx
je 0x14001d104
cmp esi, 1
jle 0x14001cd08
inc ecx
movsxd rax, ecx
lea rdx, [rbx + rax*2]
nop
movzx eax, word [rdx]
cmp ax, 0x20
je 0x14001cd23
cmp ax, 9
jne 0x14001ce23
inc ecx
add rdx, 2
jmp 0x14001cd10
mov esi, edi
cmp word [rbx + rdi*2], 0
lea rax, [rbx + rdi*2]
mov r10d, reloc.WSOCK32.dll_inet_ntoa
lea r9d, [r10 + 2]
lea r8d, [r10 - 1]
lea edx, [r10 + 1]
je 0x14001cd66
movzx ecx, word [0x1400ef41c]
cmp word [rax], cx
je 0x14001cd66
inc rdi
inc esi
cmp word [rbx + rdi*2], 0
lea rax, [rbx + rdi*2]
jne 0x14001cd51
cmp word [rbx + rdi*2], 0
je 0x14001ccd3
movzx eax, word [rbx + rdi*2 + 2]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x14001cd92.99
lea r11, [0x140000000]
cdqe
mov ecx, dword [r11 + rax*4 + 0x1db58]
add rcx, r11
jmp rcx
mov eax, 7
mov word [rbx + rdi*2 + 2], ax
jmp case.0x14001cd92.99
mov eax, 8
mov word [rbx + rdi*2 + 2], ax
jmp case.0x14001cd92.99
mov word [rbx + rdi*2 + 2], dx
jmp case.0x14001cd92.99
mov word [rbx + rdi*2 + 2], r8w
jmp case.0x14001cd92.99
mov word [rbx + rdi*2 + 2], r9w
jmp case.0x14001cd92.99
mov eax, 9
mov word [rbx + rdi*2 + 2], ax
jmp case.0x14001cd92.99
mov word [rbx + rdi*2 + 2], r10w
movsxd rax, esi
or r8, 0xffffffffffffffff
lea rcx, [rbx + rax*2]
lea rdx, [rcx + 2]
nop dword [rax]
nop dword [rax + rax]
cmp word [rdx + r8*2 + 2], 0
lea r8, [r8 + 1]
jne 0x14001cdf0
lea r8, [r8*2 + 2]
call fcn.1400973b0
mov r11d, 1
inc esi
mov word [rbp + rdi*2 + 0xd00], r11w
inc rdi
jmp 0x14001cd2d
cmp ax, word [0x1400ef420]
jne 0x14001ce7b
movsxd rax, ecx
cmp word [rbp + rax*2 + 0xd00], 0
jne 0x14001ce7b
movzx eax, word [rbx + rax*2 + 2]
cmp ax, 0x20
je 0x14001ce4b
cmp ax, 9
jne 0x14001ce7b
cmp esi, 3
jge 0x14001d0db
movzx edx, word [0x1400ef424]
lea r8d, [rcx + 2]
mov rcx, rbx
lea r9, [rbp + 0xd00]
call fcn.14007c980
mov edi, eax
mov r11d, 1
jmp 0x14001cf25
movsxd r8, ecx
mov edi, ecx
lea rdx, [r8 + r8]
cmp word [rdx + rbx], 0
lea r10, [rdx + rbx]
je 0x14001cec1
mov r9, r10
movzx eax, word [0x1400ef424]
cmp word [r9], ax
jne 0x14001ceaa
cmp word [rbp + rdx + 0xd00], 0
je 0x14001cebe
inc r8
inc edi
lea rdx, [r8 + r8]
cmp word [rdx + rbx], 0
lea r9, [rdx + rbx]
jne 0x14001ce92
xor r9d, r9d
cmp esi, 1
jne 0x14001cf20
movsxd rax, edi
cmp word [rbx + rax*2], 0
lea rsi, [rbx + rax*2]
je 0x14001d0db
mov word [rsi], r9w
mov r8d, r11d
mov dword [rsp + 0x20], r9d
xor edx, edx
xor r9d, r9d
mov rcx, r10
call fcn.140079dc0
mov r8d, dword [rbp + 0x10d70]
test eax, eax
movzx eax, word [0x1400ef424]
mov r11d, 1
cmove r8d, r11d
mov word [rsi], ax
mov dword [rbp + 0x10d70], r8d
test r8d, r8d
jne 0x14001cf43
mov esi, dword [rsp + 0x44]
jmp 0x14001cf25
cmp esi, 4
je 0x14001cf52
inc esi
movsxd rax, edi
mov ecx, edi
mov dword [rsp + 0x44], esi
cmp word [rbx + rax*2], 0
je 0x14001d0db
xor r9d, r9d
jmp 0x14001cd01
movzx ecx, byte [rbp + 0x10d60]
mov eax, r8d
jmp 0x14001d112
movsxd rax, ecx
mov r8d, r11d
add rax, rax
mov dword [rsp + 0x20], r9d
mov r9d, r11d
mov qword [rsp + 0x58], rax
xor edx, edx
lea rsi, [rax + rbx]
mov rcx, rsi
call fcn.140079dc0
test eax, eax
jne 0x14001d0db
movsxd rax, edi
cmp word [rbx + rax*2], 0
jne 0x14001cfd4
movzx edx, word [0x1400ef420]
cmp word [rsi], dx
jne 0x14001cfd4
mov rax, qword [rsp + 0x58]
cmp word [rbp + rax + 0xd00], 0
jne 0x14001cfd4
lea rcx, [rsi + 2]
call fcn.1400977e8
test rax, rax
je 0x14001cfd4
lea rcx, [rax + 2]
xor edx, edx
mov eax, 1
mov dword [rsp + 0x20], edx
mov r9d, eax
mov r8d, eax
call fcn.140079dc0
test eax, eax
jne 0x14001d0db
movzx ecx, byte [rbp + 0x10d60]
mov eax, 3
jmp 0x14001d112
cmp cl, 0x6a
jne 0x14001d10f
mov rdi, rbx
cmp word [rbx], r9w
je 0x14001d03c
movzx eax, word [rdi]
cmp ax, 0x20
je 0x14001d006
cmp ax, 9
jne 0x14001d032
movzx ecx, word [rdi + 2]
call fcn.1400a1744
cmp eax, 0x69
jne 0x14001d032
movzx ecx, word [rdi + 4]
call fcn.1400a1744
cmp eax, 0x6e
jne 0x14001d032
movzx eax, word [rdi + 6]
cmp ax, 0x20
je 0x14001d03c
cmp ax, 9
je 0x14001d03c
add rdi, 2
cmp word [rdi], 0
jne 0x14001cff7
cmp word [rdi], 0
jne 0x14001d068
mov r8, qword [rbp + 0x10d58]
lea rdx, [0x1400d36c0]
mov rcx, qword [rbp + 0x10d50]
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rax, rdi
mov edx, 1
sub rax, rbx
sar rax, 1
movsxd rcx, eax
test eax, eax
jle 0x14001d097
nop dword [rax]
movzx eax, word [0x1400ef424]
cmp word [rbx + rcx*2], ax
jne 0x14001d08f
inc edx
dec rcx
test rcx, rcx
jg 0x14001d080
movzx eax, word [0x1400ef424]
mov word [rdi + 2], ax
cmp edx, 1
jle 0x14001d0ea
cmp edx, 2
jle 0x14001d0d2
mov r8, qword [rbp + 0x10d58]
lea rdx, [0x1400d3700]
mov rcx, qword [rbp + 0x10d50]
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov eax, SafeArrayAllocDescriptor
mov word [rdi + 4], ax
mov eax, dword [rbp + 0x10d70]
movzx ecx, byte [rbp + 0x10d60]
jmp 0x14001d112
movzx eax, word [0x1400ef424]
movzx ecx, byte [rbp + 0x10d60]
mov word [rdi + 4], ax
mov eax, dword [rbp + 0x10d70]
jmp 0x14001d112
mov eax, ecx
movzx ecx, byte [rbp + 0x10d60]
jmp 0x14001d112
mov eax, r9d
xor r11d, r11d
xor r8b, r8b
xor r10b, r10b
mov byte [rsp + 0x48], r8b
mov byte [rbp + 0x10d70], r10b
mov qword [rbp - 0x60], r11
mov qword [rsp + 0x58], r11
test eax, eax
jne 0x14001d13d
mov rax, qword [rsp + 0x60]
movsx eax, byte [rax + 9]
mov esi, r11d
mov dword [rsp + 0x44], r11d
mov edi, r11d
cmp word [rbx], si
je 0x14001d458
movsxd rdx, eax
mov r10, r11
dec eax
mov qword [rsp + 0x50], r11
movsxd r8, eax
mov qword [rbp - 0x68], r8
mov qword [rbp - 0x50], rdx
nop dword [rax]
cmp r10, rdx
jge 0x14001d448
cmp esi, 2
jne 0x14001d1f7
lea eax, [rcx - 0x18]
cmp al, 3
ja 0x14001d1ea
mov rcx, qword [rbp + 0x10d50]
lea rdx, [rbp + 0x300]
movsxd rax, edi
xor r9d, r9d
lea rax, [rbx + rax*2]
mov r8, rax
mov qword [rsp + 0x58], rax
call fcn.14001dbf0
mov qword [rbp - 0x60], rax
test rax, rax
je 0x14001d1e1
lea rcx, [rbp + 0x300]
call fcn.14001dd70
mov byte [rsp + 0x48], al
movzx r9d, al
test al, al
jne 0x14001d434
lea rcx, [rbp + 0x300]
call fcn.14001dde0
mov byte [rbp + 0x10d70], al
mov r8, qword [rbp - 0x68]
mov r10, qword [rsp + 0x50]
cmp byte [rbp + 0x10d70], 0
jne 0x14001d448
movsxd rdx, edi
lea rcx, [rbp + 0xd00]
mov qword [rbp - 0x58], rdx
lea rsi, [rdx + rdx]
add rcx, rsi
lea r9, [rsi + rbx]
mov qword [rbp + r10*8 - 0x40], r9
mov qword [rbp + r10*8 + 0x60], rcx
cmp r10, r8
je 0x14001d43e
movzx eax, word [0x1400ef420]
cmp word [r9], ax
jne 0x14001d24f
cmp word [rcx], 0
jne 0x14001d24f
movzx eax, word [r9 + 2]
cmp ax, 9
je 0x14001d391
cmp ax, 0x20
je 0x14001d391
cmp byte [rbp + 0x10d60], 0x2b
mov r8d, dword [rsp + 0x44]
jne 0x14001d34d
lea eax, [r8 - 2]
cmp eax, 1
ja 0x14001d34d
mov rcx, qword [rbp - 0x38]
call fcn.140015370
cmp eax, 5
ja 0x14001d391
mov ecx, 0x2b
bt ecx, eax
jae 0x14001d391
mov rdx, qword [rbp - 0x58]
lea r9, [rsi + rbx]
movzx eax, word [r9]
test ax, ax
je 0x14001d2c6
nop
cmp ax, word [0x1400ef424]
jne 0x14001d2b4
cmp word [rbp + rsi + 0xd00], 0
je 0x14001d2c6
inc rdx
inc edi
lea rsi, [rdx + rdx]
movzx eax, word [rsi + rbx]
test ax, ax
jne 0x14001d2a0
mov r10, qword [rsp + 0x50]
movsxd rax, edi
cmp word [rbx + rax*2], 0
je 0x14001d404
mov r8, qword [rbp + r10*8 - 0x40]
xor r11d, r11d
mov rdx, qword [rbp + r10*8 + 0x60]
mov word [rbx + rax*2], r11w
cmp word [r8], r11w
je 0x14001d3c9
or rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [r8 + rax*2], r11w
jne 0x14001d300
dec rax
mov r9, r8
sub r9, rdx
lea rcx, [rdx + rax*2]
nop word [rax + rax]
movzx edx, word [r9 + rcx]
cmp dx, 0x20
je 0x14001d335
cmp dx, 9
jne 0x14001d3c3
cmp word [rcx], r11w
jne 0x14001d3c3
test rax, rax
je 0x14001d3b1
dec rax
sub rcx, 2
jmp 0x14001d320
mov rax, qword [rsp + 0x60]
lea rcx, [rax + 0xb]
test rcx, rcx
je 0x14001d296
movzx eax, byte [rcx]
inc r8d
test al, al
je 0x14001d296
nop dword [rax]
movzx eax, al
cmp eax, r8d
je 0x14001d388
movzx eax, byte [rcx + 1]
inc rcx
test al, al
jne 0x14001d370
jmp 0x14001d296
cmp byte [rcx], 0
je 0x14001d296
movzx edx, word [0x1400ef424]
lea r9, [rbp + 0xd00]
mov r8d, edi
mov rcx, rbx
call fcn.14007c980
mov edi, eax
jmp 0x14001d2c6
cmp dx, 0x20
je 0x14001d3bd
cmp dx, 9
jne 0x14001d3c9
mov word [r8], r11w
jmp 0x14001d3c9
mov word [r8 + rax*2 + 2], r11w
inc edi
lea rcx, [rbp + 0xd00]
movsxd rax, edi
mov rdx, rbx
lea rcx, [rcx + rax*2]
lea rax, [rbp + 0xd00]
sub rdx, rax
movzx eax, word [rdx + rcx]
cmp ax, 0x20
je 0x14001d3f6
cmp ax, 9
jne 0x14001d404
cmp word [rcx], r11w
jne 0x14001d404
inc edi
add rcx, 2
jmp 0x14001d3e6
mov esi, dword [rsp + 0x44]
inc r10
inc esi
movsxd rax, edi
mov dword [rsp + 0x44], esi
mov qword [rsp + 0x50], r10
cmp word [rbx + rax*2], 0
je 0x14001d448
movzx ecx, byte [rbp + 0x10d60]
mov rdx, qword [rbp - 0x50]
mov r8, qword [rbp - 0x68]
jmp 0x14001d170
movzx r10d, byte [rbp + 0x10d70]
jmp 0x14001d45b
mov esi, dword [rsp + 0x44]
inc esi
mov dword [rsp + 0x44], esi
movzx r10d, byte [rbp + 0x10d70]
movzx r9d, byte [rsp + 0x48]
jmp 0x14001d45b
xor r9b, r9b
mov rdi, qword [rsp + 0x60]
movsx r8d, byte [rdi + 8]
mov ecx, r8d
cmp esi, r8d
jge 0x14001d4cd
mov r9, qword [rdi]
lea rdx, reloc.WSOCK32.dll_WSAStartup
cmp r8b, 1
lea rax, [0x1400bdf7c]
lea r8, [0x1400d3780]
cmovg rax, rdx
mov edx, 0x400
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ecx
lea rcx, [rbp + 0x500]
call fcn.140079fa0
lea rdx, [rbp + 0x500]
mov r8, qword [rbp + 0x10d58]
mov rcx, qword [rbp + 0x10d50]
call fcn.140031460
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor r11d, r11d
movsx r8, r8b
mov edx, r11d
mov ecx, r11d
test r8, r8
jle 0x14001d4f5
nop
mov rax, qword [rbp + rcx*8 - 0x40]
cmp word [rax], r11w
je 0x14001d528
inc edx
inc rcx
cmp rcx, r8
jl 0x14001d4e0
movzx edx, byte [rbp + 0x10d68]
test dl, dl
je case.default.0x14001d526
movzx eax, dl
dec eax
cmp eax, 0xc
ja case.default.0x14001d526
lea r8, [0x140000000]
cdqe
mov ecx, dword [r8 + rax*4 + 0x1dbb0]
add rcx, r8
jmp rcx
mov r9, qword [rdi]
lea eax, [rdx + 1]
mov edx, 0x400
mov dword [rsp + 0x20], eax
lea r8, [0x1400d37d0]
lea rcx, [rbp + 0x500]
call fcn.140079fa0
jmp 0x14001d4a7
mov rcx, qword [rbp + 0x10d50]
lea rbx, [0x1400d3830]
movsxd rax, esi
lea r9d, [rsi + 1]
lea r8, [rbp - 0x40]
mov dl, 0x89
mov qword [rbp + rax*8 - 0x40], rbx
mov qword [rbp + rax*8 + 0x60], r11
lea rax, [rbp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.14001dee0
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rsi, qword [rbp + 0x10d50]
lea rax, [rbp + 0x60]
mov rdi, qword [rbp - 0x38]
lea rbx, [0x1400d3830]
mov rcx, rsi
mov qword [rbp - 0x38], rbx
mov r9d, 2
mov qword [rbp + 0x68], r11
lea r8, [rbp - 0x40]
mov qword [rsp + 0x20], rax
mov dl, 0x89
call fcn.14001dee0
test eax, eax
je 0x14001bf22
mov rax, qword [rbp - 0x28]
lea r8, [rbp - 0x40]
mov qword [rbp - 0x40], rax
xor edx, edx
mov rax, qword [rbp + 0x78]
mov rcx, rsi
mov qword [rbp + 0x60], rax
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x28], rax
lea r9d, [rdx + 5]
mov rax, qword [rbp + 0x70]
mov qword [rbp + 0x78], rax
mov rax, qword [rbp - 0x20]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x68], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x70], rdx
mov qword [rbp + 0x80], rdx
mov dl, 0x8c
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x20], rbx
call fcn.14001dee0
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rax, [rbp + 0x60]
mov r9d, esi
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x40]
mov dl, 1
call fcn.14001dee0
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rax, [rbp + 0x60]
mov r9d, esi
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x40]
mov dl, 4
call fcn.14001dee0
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rax, [rbp + 0x60]
mov r9d, esi
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x40]
mov dl, 5
call fcn.14001dee0
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rax, [rbp + 0x60]
mov r9d, esi
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x40]
mov dl, 6
call fcn.14001dee0
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [rbp + 0x10d50]
lea rax, [rbp + 0x60]
mov r9d, esi
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x40]
mov dl, 7
call fcn.14001dee0
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov cl, reloc.OLEAUT32.dll_SafeArrayGetUBound
mov byte [rbp + 0x10d60], cl
jmp 0x14001d751
mov cl, reloc.OLEAUT32.dll_SafeArrayGetLBound
mov byte [rbp + 0x10d60], cl
jmp 0x14001d751
mov cl, reloc.OLEAUT32.dll_SafeArrayLock
mov byte [rbp + 0x10d60], cl
jmp 0x14001d751
mov cl, reloc.OLEAUT32.dll_SafeArrayUnlock
mov byte [rbp + 0x10d60], cl
jmp 0x14001d751
mov cl, reloc.OLEAUT32.dll_SafeArrayAccessData
mov byte [rbp + 0x10d60], cl
jmp 0x14001d751
mov cl, reloc.OLEAUT32.dll_SafeArrayUnaccessData
mov byte [rbp + 0x10d60], cl
jmp 0x14001d751
movzx ecx, byte [rbp + 0x10d60]
test esi, esi
je 0x14001d87b
test r9b, r9b
jne 0x14001d87b
test r10b, r10b
jne 0x14001d87b
lea eax, [rcx - 0x12]
cmp al, 0xe
ja 0x14001d87b
cmp cl, 0x17
ja 0x14001d787
sub dl, 6
cmp dl, 5
ja 0x14001d87b
movsxd rax, esi
mov rsi, qword [rbp + rax*8 - 0x48]
mov rcx, rsi
sub rcx, rbx
sar rcx, 1
movsxd r8, ecx
lea rdx, [r8 + r8]
movzx eax, word [rdx + rbx]
test ax, ax
je 0x14001d877
nop dword [rax]
cmp ax, word [0x1400ef424]
jne 0x14001d7c4
cmp word [rbp + rdx + 0xd00], r11w
je 0x14001d7db
inc r8
inc ecx
lea rdx, [r8 + r8]
movzx eax, word [rdx + rbx]
test ax, ax
jne 0x14001d7b0
jmp 0x14001d877
movsxd rax, ecx
inc ecx
lea rdi, [rbx + rax*2]
movsxd rax, ecx
lea rdx, [rbx + rax*2]
nop dword [rax + rax]
movzx eax, word [rdx]
cmp ax, 0x20
je 0x14001d7ff
cmp ax, 9
jne 0x14001d807
inc ecx
add rdx, 2
jmp 0x14001d7f0
movsxd rax, ecx
lea rdx, [rbp + 0x300]
mov rcx, qword [rbp + 0x10d50]
xor r9d, r9d
lea rax, [rbx + rax*2]
mov r8, rax
mov qword [rsp + 0x58], rax
call fcn.14001dbf0
mov qword [rbp - 0x60], rax
test rax, rax
je 0x14001d874
lea rcx, [rbp + 0x300]
call fcn.14001dd70
mov byte [rsp + 0x48], al
test al, al
jne 0x14001d85f
lea rcx, [rbp + 0x300]
call fcn.14001dde0
mov byte [rbp + 0x10d70], al
test al, al
je 0x14001d874
xor r11d, r11d
or rdx, 0xffffffffffffffff
mov rcx, rsi
mov word [rdi], r11w
call fcn.140014170
jmp 0x14001d877
xor r11d, r11d
mov esi, dword [rsp + 0x44]
movzx r10d, byte [rbp + 0x10d60]
lea eax, [r10 - 0x69]
test al, 0xfd
jne 0x14001d89a
cmp esi, 1
jne 0x14001d89a
mov rax, qword [rbp - 0x40]
cmp word [rax], 0
jne 0x14001d8aa
cmp r10b, 0x6a
je 0x14001d8a6
cmp r10b, 0x70
jne 0x14001d908
test esi, esi
je 0x14001d908
movsxd rax, esi
mov rcx, qword [rbp + rax*8 - 0x48]
or rax, 0xffffffffffffffff
nop word [rax + rax]
cmp word [rcx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x14001d8c0
cmp word [rcx + rax*2 - 2], 0x7b
jne 0x14001d908
or rdx, 0xffffffffffffffff
mov byte [rsp + 0x40], 1
mov word [rcx + rax*2 - 2], r11w
call fcn.140014170
test rax, rax
jne 0x14001d908
cmp r10b, 0x69
je 0x14001d905
cmp r10b, 0x70
je 0x14001d905
lea rdx, [0x1400d3210]
jmp 0x14001d4ae
mov esi, r11d
mov rdi, qword [rbp + 0x10d50]
lea rax, [rbp + 0x60]
mov rcx, rdi
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [rbp - 0x40]
movzx edx, r10b
call fcn.14001dee0
test eax, eax
je 0x14001bf22
cmp byte [rsp + 0x40], 0
je 0x14001d959
xor edx, edx
xor r9d, r9d
mov qword [rsp + 0x20], rdx
xor r8d, r8d
mov dl, reloc.WSOCK32.dll_WSAStartup
mov rcx, rdi
call fcn.14001dee0
test eax, eax
je 0x14001bf22
movzx r8d, byte [rsp + 0x48]
movzx edx, byte [rbp + 0x10d70]
test r8b, r8b
jne 0x14001d973
test dl, dl
je 0x14001c030
mov rcx, qword [rbp - 0x60]
or r9, 0xffffffffffffffff
nop dword [rax + rax]
inc r9
cmp word [rcx + r9*2], 0
jne 0x14001d980
mov qword [rsp + 0x38], r9
mov rax, rcx
sub rax, rbx
movzx r9d, dl
mov rdx, qword [rsp + 0x58]
sar rax, 1
lea rax, [rbp + rax*2 + 0xd00]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x300]
mov qword [rsp + 0x28], rcx
mov rcx, rdi
mov qword [rsp + 0x20], rax
jmp 0x14001da52
mov rsi, qword [rbp + 0x10d50]
xor r9d, r9d
movzx edx, byte [rbp + 0x10d60]
mov rcx, rsi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
call fcn.14001dee0
test eax, eax
je 0x14001bf22
cmp word [rbx], 0x7b
jne 0x14001da28
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
mov dl, reloc.WSOCK32.dll_WSAStartup
mov rcx, rsi
call fcn.14001dee0
test eax, eax
je 0x14001bf22
movzx eax, word [rbx + 2]
add rbx, 2
cmp ax, 0x20
je 0x14001da14
cmp ax, 9
je 0x14001da14
cmp word [rbx], 0
je 0x14001c030
mov qword [rsp + 0x38], rdi
xor r9d, r9d
mov qword [rsp + 0x30], rdi
xor r8d, r8d
mov qword [rsp + 0x28], rdi
mov rdx, rbx
mov qword [rsp + 0x20], rdi
mov rcx, rsi
call fcn.14001b830
add rsp, 0x10e28
pop rdi
pop rsi
pop rbx
pop rbp
ret