Function at 0x140015b98
Capabilities:
Get client handle via schannel
Get outbound credentials handle via credssp

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x888
mov rbx, rdx
mov r13, rcx
mov rax, qword [rdx + 0x10]
lea rdx, [rsp + 0x690]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rbx]
movaps xmmword [rdx], xmm0
lea rdi, [rsp + 0x250]
mov rcx, rdi
call fcn.1400100b4
cmp qword [rdi], 0
movups xmm0, xmmword [rdi + 8]
movaps xmmword [rsp + 0x390], xmm0
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0x3a0], rax
je 0x140015c1b
mov rax, qword [rsp + 0x3a0]
mov qword [r13 + 0x18], rax
movaps xmm0, xmmword [rsp + 0x390]
movups xmmword [r13 + 8], xmm0
mov qword [r13], 1
jmp 0x140015fbf
mov rax, qword [rsp + 0x3a0]
mov qword [rbx + 0x10], rax
movaps xmm0, xmmword [rsp + 0x390]
movups xmmword [rbx], xmm0
lea rcx, [rsp + 0x1b0]
mov rdx, rbx
call fcn.140010156
mov qword [rsp + 0x20], 0
mov ecx, 2
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.crypt32.dll_CertOpenStore]
test rax, rax
je 0x140015cc9
mov qword [rsp + 0x118], 0
mov qword [rsp + 0x128], rax
mov dword [rsp + 0x130], 0x10501
mov word [rsp + 0x134], 0
lea r12, [rsp + 0x250]
mov rcx, r12
mov rdx, rbx
call fcn.140010628
cmp qword [r12], 0
mov rsi, qword [r12 + 8]
je 0x140015d1b
movups xmm0, xmmword [rsp + 0x260]
movups xmmword [r13 + 0x10], xmm0
mov qword [r13 + 8], rsi
mov qword [r13], 1
jmp 0x140015f79
call qword [sym.imp.kernel32.dll_GetLastError]
mov edi, eax
mov ecx, 8
mov edx, 8
call fcn.140003a50
test rax, rax
je 0x140017064
shl rdi, 0x20
or rdi, 2
mov qword [rax], rdi
lea r8, [0x14004d538]
mov cl, 0x27
mov rdx, rax
call fcn.14002bf30
mov ecx, 1
mov qword [r13 + 8], rcx
mov qword [r13 + 0x10], rax
mov qword [r13], rcx
jmp 0x140015f86
mov r15, qword [rbx]
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
xor eax, eax
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x238], 8
movzx eax, byte [rsp + 0x130]
cmp rax, 5
jne 0x140015d6c
mov edi, 4
lea r14, [0x14004e758]
jmp 0x140015d8b
lea r14, [0x14004e758]
add r14, rax
cmp al, 4
jne 0x140015d83
mov ebp, 1
xor edi, edi
jmp 0x140015da4
mov edi, 4
sub rdi, rax
mov edx, 1
mov rcx, rdi
call fcn.140003a50
test rax, rax
je 0x140017072
mov rbp, rax
mov rcx, rbp
mov rdx, r14
mov r8, rdi
call fcn.140035120
mov qword [rsp + 0x220], rbp
mov qword [rsp + 0x228], rdi
mov qword [rsp + 0x230], rdi
xorps xmm0, xmm0
movaps xmmword [rsp + 0x390], xmm0
movups xmmword [rsp + 0x290], xmm0
movups xmmword [rsp + 0x280], xmm0
movups xmmword [rsp + 0x270], xmm0
movups xmmword [rsp + 0x260], xmm0
mov dword [rsp + 0x250], 4
mov dword [rsp + 0x298], 0x400010
test rbp, rbp
je 0x140015e49
mov r8, rsi
mov rax, qword [rsp + 0x230]
test rax, rax
je 0x140015e3d
xor edx, edx
lea rdi, [0x140052050]
xor ecx, ecx
movzx esi, byte [rbp + rdx]
or ecx, dword [rdi + rsi*4]
inc rdx
cmp rax, rdx
jne 0x140015e2b
jmp 0x140015e3f
xor ecx, ecx
mov dword [rsp + 0x288], ecx
mov rsi, r8
mov dword [rsp + 0x254], 0
mov qword [rsp + 0x258], 8
lea rax, [0x14005fb60]
mov qword [rsp + 0x138], rax
mov rax, qword [0x14005fb78]
cmp rax, 3
jne 0x140016153
mov rax, qword [rsp + 0x138]
mov rdx, qword [rax]
lea rax, [rsp + 0x390]
mov qword [rsp + 0x38], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x40], 0
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call qword [sym.imp.secur32.dll_AcquireCredentialsHandleA]
test eax, eax
je 0x14001600d
mov r14d, eax
shl r14, 0x20
or r14, 2
lea rcx, [rsp + 0x208]
call fcn.14000d0f5
mov rcx, rsi
call qword [sym.imp.ws2_32.dll_closesocket]
lea rcx, [rsp + 0x598]
lea rdx, [rsp + 0x4a0]
mov r8d, pe_nt_image_headers64
call fcn.140035120
xor ebp, ebp
lea rcx, [rsp + 0x790]
mov r8d, pe_nt_image_headers64
mov rdx, r12
call fcn.140035120
mov ecx, 0x108
mov edx, 8
call fcn.140003a50
test rax, rax
je 0x14001706b
mov rdi, rax
mov qword [rax], rbp
mov qword [rax + 8], r14
mov rcx, rax
add rcx, 0x10
lea rdx, [rsp + 0x790]
mov r8d, pe_nt_image_headers64
call fcn.140035120
lea r8, [0x14004d4c0]
mov cl, 0x27
mov rdx, rdi
call fcn.14002bf30
mov ecx, 1
mov qword [r13 + 8], rcx
mov qword [r13 + 0x10], rax
mov qword [r13], rcx
lea rcx, [rsp + 0x118]
call fcn.1400172da
cmp qword [rsp + 0x1b8], 0
je 0x140015fa7
mov r8, qword [rsp + 0x1b0]
mov rcx, qword [0x14005fc80]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp qword [rbx + 8], 0
je 0x140015fbf
mov r8, qword [rbx]
mov rcx, qword [0x14005fc80]
xor edx, edx
call sub.kernel32.dll_HeapFree
cmp qword [rbx + 0x20], 0
je 0x140015fd8
mov r8, qword [rbx + 0x18]
mov rcx, qword [0x14005fc80]
xor edx, edx
call sub.kernel32.dll_HeapFree
lea rdi, [rbx + 0x30]
mov rcx, rdi
call fcn.140012fa4
mov rcx, rdi
call fcn.140013003
add rbx, 0x48
mov rcx, rbx
call fcn.14001302b
nop
add rsp, 0x888
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x110], rsi
mov rsi, qword [rsp + 0x390]
mov rdi, qword [rsp + 0x398]
mov ecx, 0x20
mov edx, 8
call fcn.140003a50
test rax, rax
je 0x14001707c
mov rbp, rax
mov eax, 1
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rdi
xor esi, esi
mov qword [rsp + 0xa0], rsi
mov word [rsp + 0xf0], 1
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd8], rsi
mov rcx, qword [rsp + 0x128]
call qword [sym.imp.crypt32.dll_CertDuplicateStore]
mov rdi, rax
cmp qword [rsp + 0xc8], rsi
je 0x1400160ac
mov rcx, qword [rsp + 0xd0]
xor edx, edx
call qword [sym.imp.crypt32.dll_CertCloseStore]
mov qword [rsp + 0xc8], 1
mov qword [rsp + 0xd0], rdi
mov rax, qword [rsp + 0x70]
lea r12, [r15 + rax]
test rax, rax
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x78], r13
mov qword [rsp + 0x90], rbp
je 0x14001613e
mov dl, byte [r15]
movzx ebx, dl
test bl, bl
js 0x1400160f5
inc r15
jmp 0x1400161c1
mov eax, ebx
and eax, 0x1f
movzx edi, byte [r15 + 1]
and edi, 0x3f
cmp bl, 0xdf
jbe 0x140016197
movzx ecx, byte [r15 + 2]
shl edi, 6
and ecx, 0x3f
or ecx, edi
cmp dl, 0xf0
jb 0x1400161a4
movzx ebx, byte [r15 + 3]
and eax, 7
shl eax, 0x12
shl ecx, 6
and ebx, 0x3f
or ebx, ecx
or ebx, eax
cmp ebx, 0x110000
jne 0x1400161b1
mov ecx, 3
xor ebx, ebx
xor r13d, r13d
xor r14d, r14d
xor r15d, r15d
jmp 0x1400161e7
lea rax, [rsp + 0x138]
lea rcx, [rsp + 0x1e8]
mov qword [rcx], rax
lea r8, [rsp + 0xa0]
mov qword [r8], rcx
lea rax, str.D:code.code_fire.cargo_registry_srcgithub.com_1ecc6299db9ec823lazy_static_1.4.0_srcinline_lazy.rs
mov qword [rsp + 0x20], rax
lea rcx, [0x14005fb78]
lea r9, [0x14004f2f8]
xor edx, edx
call fcn.140042f60
jmp 0x140015e80
add r15, 2
shl eax, 6
or eax, edi
mov ebx, eax
jmp 0x1400161b5
add r15, 3
shl eax, 0xc
or ecx, eax
mov ebx, ecx
jmp 0x1400161b5
add r15, 4
cmp ebx, 0xffff
ja 0x140016b4a
xor r14d, r14d
mov rax, r12
sub rax, r15
add rax, 3
shr rax, 2
inc rax
cmp rax, 4
mov ecx, 3
cmovae rcx, rax
mov r13w, 1
inc rcx
call fcn.1400223c9
mov word [rax], bx
lea rcx, [rsp + 0x258]
mov qword [rcx - 8], rax
mov qword [rcx], rdx
mov qword [rcx + 8], 1
mov ebx, 1
lea rsi, [rsp + 0x250]
mov rcx, r15
test rcx, rcx
je 0x140016249
test r14w, r14w
je 0x14001622b
xor edi, edi
jmp 0x1400162ef
cmp r12, rcx
je 0x140016246
mov r8b, byte [rcx]
movzx edx, r8b
test dl, dl
js 0x140016264
inc rcx
mov r15, rcx
jmp 0x1400162ea
xor r15d, r15d
cmp r13w, 1
jne 0x140016376
xor r13d, r13d
mov edi, r14d
xor ecx, ecx
xor r14d, r14d
jmp 0x1400162ef
mov edi, edx
and edi, 0x1f
movzx ebp, byte [rcx + 1]
and ebp, 0x3f
cmp dl, 0xdf
jbe 0x1400162b0
movzx esi, byte [rcx + 2]
shl ebp, 6
and esi, 0x3f
or esi, ebp
cmp r8b, 0xf0
jb 0x1400162c0
movzx edx, byte [rcx + 3]
and edi, 7
shl edi, 0x12
shl esi, 6
and edx, 0x3f
or edx, esi
or edx, edi
cmp edx, 0x110000
jne 0x1400162d0
xor r15d, r15d
lea rsi, [rsp + 0x250]
jmp 0x140016249
add rcx, 2
shl edi, 6
or edi, ebp
mov r15, rcx
mov edx, edi
jmp 0x1400162df
add rcx, 3
shl edi, 0xc
or esi, edi
mov r15, rcx
mov edx, esi
jmp 0x1400162d7
add rcx, 4
mov r15, rcx
lea rsi, [rsp + 0x250]
cmp edx, 0xffff
ja 0x14001634c
mov rcx, r15
xor edi, edi
mov r14d, edx
cmp rbx, qword [rsp + 0x258]
je 0x140016311
mov word [rax + rbx*2], r14w
inc rbx
mov qword [rsp + 0x260], rbx
mov r14d, edi
jmp 0x140016219
test r15, r15
jne 0x14001631c
movzx r8d, r13w
jmp 0x140016331
mov rax, r12
sub rax, r15
add rax, 3
shr rax, 2
movzx r8d, r13w
add r8, rax
inc r8
mov rcx, rsi
mov rdx, rbx
call fcn.140042eba
mov rax, qword [rsp + 0x250]
mov rcx, r15
jmp 0x1400162f9
add edx, 0xffff0000
mov r14d, edx
shr r14d, 0xa
or r14d, 0xd800
and edx, 0x3ff
or edx, 0xdc00
mov edi, edx
mov rcx, r15
jmp 0x1400162ef
mov rsi, qword [rsp + 0x250]
lea rax, [rsp + 0x258]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x390], xmm0
mov r8, qword [rsp + 0xa0]
test r8, r8
je 0x1400163be
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x1400163be
add rax, rax
je 0x1400163be
mov rcx, qword [0x14005fc80]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov qword [rsp + 0xa0], rsi
movaps xmm0, xmmword [rsp + 0x390]
movups xmmword [rsp + 0xa8], xmm0
movzx eax, word [rsp + 0x132]
mov word [rsp + 0xf0], ax
cmp byte [rsp + 0x134], 0
mov rbx, qword [rsp + 0x80]
mov r13, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x90]
je 0x140016455
mov ecx, 0x10
mov edx, 8
call fcn.140003a50
test rax, rax
je 0x140017083
mov rsi, rax
mov eax, 1
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov rax, qword [rsp + 0xb8]
test rax, rax
je 0x14001644c
lock dec qword [rax]
jne 0x14001644c
lea rcx, [rsp + 0xb8]
call fcn.14000d1dc
lea rax, [0x14004dc78]
jmp 0x1400164c2
cmp byte [rsp + 0x135], 0
je 0x1400164d2
mov rcx, qword [rsp + 0x128]
call qword [sym.imp.crypt32.dll_CertDuplicateStore]
mov rdi, rax
mov ecx, 0x18
mov edx, 8
call fcn.140003a50
test rax, rax
je 0x14001709d
mov rsi, rax
mov eax, 1
mov qword [rsi], rax
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdi
mov rax, qword [rsp + 0xb8]
test rax, rax
je 0x1400164bb
lock dec qword [rax]
jne 0x1400164bb
lea rcx, [rsp + 0xb8]
call fcn.14000d1dc
lea rax, [0x14004dc48]
mov qword [rsp + 0xb8], rsi
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x98], rbp
mov rax, qword [rsp + 0xa0]
xor ebp, ebp
cmp byte [rsp + 0xf0], 0
mov r14d, 0
cmovne r14, rax
test rax, rax
cmove r14, rax
xorps xmm0, xmm0
movaps xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x390], 8
movups xmmword [rsp + 0x398], xmm0
cmp qword [rsp + 0xd8], 0
je 0x1400165b2
mov rdx, qword [rsp + 0xd8]
mov r8, qword [rsp + 0xe8]
lea rdi, [rsp + 0x250]
mov rcx, rdi
call fcn.140022b60
mov r12, qword [rdi + 8]
test r12, r12
je 0x1400165d2
mov r13, qword [rsp + 0x260]
mov esi, dword [rsp + 0x250]
xor eax, eax
mov qword [rsp + 0x70], rax
lea rdi, [rsp + 0x390]
mov rcx, rdi
xor edx, edx
call fcn.14002291c
mov r15, qword [rdi]
mov rbp, qword [rdi + 0x10]
mov rax, rbp
shl rax, 4
mov dword [r15 + rax], esi
mov dword [r15 + rax + 4], 0x12
mov qword [r15 + rax + 8], r13
mov r13, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x80]
inc rbp
mov qword [rdi + 0x10], rbp
jmp 0x1400165e2
mov qword [rsp + 0x258], 0
mov r15d, 8
xor r12d, r12d
mov al, 1
mov qword [rsp + 0x70], rax
xor ebp, ebp
jmp 0x1400165e2
mov r15d, 8
mov al, 1
mov qword [rsp + 0x70], rax
xor r12d, r12d
xor eax, eax
lea rdx, [rsp + 0x490]
mov dword [rdx], eax
mov dword [rdx + 4], ebp
mov qword [rdx + 8], r15
xorps xmm0, xmm0
lea rcx, [rsp + 0x1d0]
movaps xmmword [rcx], xmm0
movabs rbp, 0x100000000
lea rdi, [rsp + 0x138]
mov qword [rdi], rbp
mov qword [rdi + 8], rcx
lea rbp, [rsp + 0x1cc]
mov dword [rbp], eax
mov rcx, qword [rsp + 0x90]
movups xmm0, xmmword [rcx + 0x10]
lea rcx, [rsp + 0x1e8]
movups xmmword [rcx], xmm0
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x48], rdi
lea rbp, [rsp + 0x150]
mov qword [rsp + 0x40], rbp
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x58], 0
xor edx, edx
mov r8, r14
mov r9d, 0x9819c
call qword [sym.imp.secur32.dll_InitializeSecurityContextW]
mov esi, eax
cmp eax, 0x90312
jne 0x1400166b2
mov r14, qword [rsp + 0x150]
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x198], rax
mov ebp, dword [rsp + 0x1d0]
mov rdi, qword [rsp + 0x1d8]
jmp 0x1400166bd
mov r14, rsi
shl r14, 0x20
or r14, 2
cmp byte [rsp + 0x70], 0
jne 0x1400166e4
mov r8, qword [rsp + 0x260]
cmp r12, 0x11
jb 0x1400166d6
mov r8, qword [r8 - 8]
mov rcx, qword [0x14005fc80]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov rax, qword [rsp + 0x398]
test rax, rax
je 0x14001670f
mov ecx, 0x10
mul rcx
test rax, rax
je 0x14001670f
mov rcx, qword [0x14005fc80]
xor edx, edx
mov r8, r15
call sub.kernel32.dll_HeapFree
cmp esi, 0x90312
jne 0x140016752
mov rsi, qword [rsp + 0x98]
cmp qword [rsp + 0xc8], 0
je 0x14001678c
mov r12, rdi
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.crypt32.dll_CertDuplicateStore]
mov qword [rsp + 0x178], rax
mov eax, 1
mov qword [rsp + 0x108], rax
jmp 0x140016799
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.ws2_32.dll_closesocket]
mov rax, qword [rsp + 0x98]
lock dec qword [rax]
lea rsi, [rsp + 0x250]
jne 0x140016be5
lea rcx, [rsp + 0x98]
call fcn.14000d48f
jmp 0x140016be5
mov r12, rdi
xor eax, eax
mov qword [rsp + 0x108], rax
mov rdi, qword [rsp + 0xa0]
test rdi, rdi
mov qword [rsp + 0x88], rsi
je 0x1400167e7
mov rsi, qword [rsp + 0xb0]
mov rcx, rsi
call fcn.1400223c9
mov qword [rsp + 0x168], rdx
mov qword [rsp + 0x170], rsi
lea r8, [rsi + rsi]
mov rcx, rax
mov qword [rsp + 0x100], rax
mov rdx, rdi
call fcn.140035120
jmp 0x1400167f1
xor eax, eax
mov qword [rsp + 0x100], rax
mov cl, byte [rsp + 0xf0]
mov al, byte [rsp + 0xf1]
mov rdi, qword [rsp + 0xb8]
test rdi, rdi
mov byte [rsp + 0x6f], cl
mov byte [rsp + 0x6e], al
je 0x140016830
lock inc qword [rdi]
jle 0x14001708a
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x160], rax
jmp 0x140016832
xor edi, edi
mov esi, ebp
mov rcx, rsi
call fcn.14001b13e
mov rbp, rax
mov r15, rdx
mov rcx, rax
mov rdx, r12
mov r8, rsi
call fcn.140035120
mov rcx, r12
call qword [sym.imp.secur32.dll_FreeContextBuffer]
test rbp, rbp
cmove rsi, rbp
mov qword [rsp + 0x188], rsi
cmove r15, rbp
mov qword [rsp + 0x180], r15
mov eax, 1
cmove rbp, rax
mov qword [rsp + 0x190], rbp
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x90], rax
test rax, rax
je 0x1400168d6
mov rbp, qword [rsp + 0xe8]
mov ecx, 0x18
xor ebx, ebx
mov rax, rbp
mul rcx
mov rsi, rax
setno al
jo 0x14001708e
mov bl, al
shl rbx, 3
test rsi, rsi
je 0x1400168dd
mov rcx, rsi
mov rdx, rbx
call fcn.140003a50
mov rdx, rax
jmp 0x1400168e0
xor edx, edx
jmp 0x14001698e
mov rdx, rbx
test rdx, rdx
je 0x140017095
test rbp, rbp
je 0x140016981
movabs rax, 0x1fffffffffffffff
and rax, rbp
mov qword [rsp + 0x1a8], rax
xor r13d, r13d
xor r15d, r15d
mov qword [rsp + 0x1a0], rdi
cmp qword [rsp + 0x1a8], r15
je 0x140016981
inc r15
mov rax, qword [rsp + 0x90]
mov rcx, qword [rax + r13]
mov qword [rsp + 0x70], rcx
mov rdi, qword [rax + r13 + 0x10]
mov rcx, rdi
mov rbx, rdx
call fcn.14001b13e
mov rsi, r14
mov r14, rax
mov r12, rdx
mov rcx, rax
mov rdx, qword [rsp + 0x70]
mov r8, rdi
call fcn.140035120
mov rdx, rbx
mov qword [rbx + r13], r14
mov r14, rsi
mov qword [rbx + r13 + 8], r12
mov qword [rbx + r13 + 0x10], rdi
mov rdi, qword [rsp + 0x1a0]
add r13, 0x18
cmp rbp, r15
jne 0x140016915
mov rbx, qword [rsp + 0x80]
mov r13, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x88]
xorps xmm0, xmm0
lea rsi, [rsp + 0x250]
movups xmmword [rsi + 0x68], xmm0
movups xmmword [rsi + 0x88], xmm0
mov rax, qword [rsp + 0x180]
mov qword [rsi + 0xa8], rax
mov rax, qword [rsp + 0x188]
mov qword [rsi + 0xb0], rax
mov qword [rsi + 0xc8], rdx
mov qword [rsi + 0xd0], rbp
mov qword [rsi + 0xd8], rbp
movups xmm1, xmmword [rsp + 0x138]
movups xmmword [rsi + 0xe5], xmm1
mov eax, dword [rsp + 0x147]
mov dword [rsi + 0xf4], eax
mov qword [rsi], rcx
mov qword [rsi + 8], r14
mov rax, qword [rsp + 0x198]
mov qword [rsi + 0x10], rax
mov rax, qword [rsp + 0x108]
mov qword [rsi + 0x18], rax
mov rax, qword [rsp + 0x178]
mov qword [rsi + 0x20], rax
mov rax, qword [rsp + 0x100]
mov qword [rsi + 0x28], rax
mov rax, qword [rsp + 0x168]
mov qword [rsi + 0x30], rax
mov rax, qword [rsp + 0x170]
mov qword [rsi + 0x38], rax
mov qword [rsi + 0x40], rdi
mov rax, qword [rsp + 0x160]
mov qword [rsi + 0x48], rax
mov rax, qword [rsp + 0x110]
mov qword [rsi + 0x50], rax
mov ecx, 1
mov qword [rsi + 0x58], rcx
mov qword [rsi + 0x60], rcx
xor eax, eax
mov qword [rsi + 0x78], rax
mov qword [rsi + 0x80], rcx
mov qword [rsi + 0x98], rax
mov rax, qword [rsp + 0x190]
mov qword [rsi + 0xa0], rax
movups xmmword [rsi + 0xb8], xmm0
mov dword [rsi + 0xe0], 0x10000
mov byte [rsi + 0xe4], 0
mov al, byte [rsp + 0x6f]
mov byte [rsi + 0xf8], al
mov al, byte [rsp + 0x6e]
mov byte [rsi + 0xf9], al
mov word [rsi + 0xfa], 0x100
lea rdi, [rsp + 0x1e8]
mov rcx, rdi
mov rdx, rsi
call fcn.14000d4cb
cmp dword [rdi], 0
je case.default.0x140016aff
mov r14, qword [rsp + 0x1f0]
mov eax, r14d
and eax, 3
lea rcx, [0x1400170b0]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov al, byte [r14 + 0x10]
jmp 0x140016b82
lea rdx, [rsp + 0x260]
mov rbp, qword [rdx - 0x10]
mov r14, qword [rdx - 8]
lea rdi, [rsp + 0x390]
mov r8d, 0xf0
mov rcx, rdi
call fcn.140035120
lea rcx, [rsp + 0x4a0]
mov r8d, 0xf0
mov rdx, rdi
call fcn.140035120
xor esi, esi
jmp 0x140016c02
add ebx, 0xffff0000
mov eax, ebx
shr eax, 0xa
or eax, 0xd800
and ebx, 0x3ff
or ebx, 0xdc00
mov r14d, ebx
mov ebx, eax
jmp 0x1400161c4
cmp al, 0xd
jne 0x140016bd0
lea rdi, [rsp + 0x1f0]
lea rdx, [rsp + 0x258]
mov r14, qword [rdx - 8]
lea rbp, [rsp + 0x390]
mov r8d, pe_nt_image_headers64
mov rcx, rbp
call fcn.140035120
mov rcx, rdi
call fcn.1400012b9
mov r8d, pe_nt_image_headers64
mov rcx, rsi
mov rdx, rbp
call fcn.140035120
mov ebp, 1
jmp 0x140016be7
lea rcx, [rsp + 0x250]
call fcn.14000e233
lea rsi, [rsp + 0x250]
xor ebp, ebp
lea rcx, [rsp + 0x4a0]
mov r8d, pe_nt_image_headers64
mov rdx, rsi
call fcn.140035120
mov esi, 1
lea rdi, [rsp + 0xa0]
mov rcx, rdi
call fcn.14000d1b7
mov rax, qword [rdi + 0x18]
test rax, rax
je 0x140016c2e
lock dec qword [rax]
jne 0x140016c2e
lea rcx, [rsp + 0xb8]
call fcn.14000d1dc
lea rdi, [rsp + 0xd8]
cmp qword [rdi - 0x10], 0
je 0x140016c4d
mov rcx, qword [rsp + 0xd0]
xor edx, edx
call qword [sym.imp.crypt32.dll_CertCloseStore]
mov rcx, rdi
call fcn.14000d256
lea rcx, [rsp + 0x208]
call fcn.14000d0f5
test rsi, rsi
je 0x140016cb3
lea rcx, [rsp + 0x598]
lea rdx, [rsp + 0x4a0]
mov r8d, pe_nt_image_headers64
call fcn.140035120
lea r12, [rsp + 0x250]
test rbp, rbp
je 0x140015f03
lea rdx, [rsp + 0x598]
mov r8d, pe_nt_image_headers64
mov rcx, r12
call fcn.140035120
mov ebp, 1
jmp 0x140015f05
lea rdi, [rsp + 0x598]
lea rdx, [rsp + 0x4a0]
mov r8d, 0xf0
mov rcx, rdi
call fcn.140035120
lea rsi, [rsp + 0x790]
mov r8d, 0xf0
mov rcx, rsi
mov rdx, rdi
call fcn.140035120
lea rcx, [rsp + 0x6a0]
mov qword [rcx - 0x10], rbp
mov qword [rcx - 8], r14
mov r8d, 0xf0
mov rdx, rsi
call fcn.140035120
mov rax, qword [rbx + 0x138]
lea rdx, [rsp + 0x390]
mov qword [rdx + 0x10], rax
movups xmm0, xmmword [rbx + 0x128]
movaps xmmword [rdx], xmm0
lea rdi, [rsp + 0x250]
mov rcx, rdi
call fcn.140018f44
cmp qword [rdi], 0
je 0x140016d45
mov rax, qword [rsp + 0x258]
jmp 0x140016db0
mov rax, qword [rsp + 0x258]
movups xmm0, xmmword [rsp + 0x260]
lea rdx, [rsp + 0x4a0]
movups xmmword [rdx + 8], xmm0
mov qword [rdx], rax
mov rcx, qword [rsp + 0x6e0]
call fcn.14002fa70
mov qword [rsp + 0x598], rax
test rax, rax
je 0x140016d8b
lea rcx, [rsp + 0x598]
call fcn.1400012b9
mov rbp, qword [rsp + 0x1b0]
mov r8, qword [rsp + 0x1c0]
lea rcx, [rsp + 0x690]
mov rdx, rbp
call fcn.140017304
test rax, rax
je 0x140016dfc
mov ecx, 1
mov qword [r13 + 8], rcx
mov qword [r13 + 0x10], rax
mov qword [r13], rcx
lea rcx, [rsp + 0x690]
call fcn.14000e233
jmp 0x140015f79
lea rsi, [rbx + 0x128]
lea rdi, [rsp + 0x250]
lea rdx, [rsp + 0x690]
mov r8d, 0x100
mov rcx, rdi
call fcn.140035120
mov rax, qword [rsi + 0x10]
lea r8, [rsp + 0xa0]
mov qword [r8 + 0x10], rax
movups xmm0, xmmword [rsi]
movaps xmmword [r8], xmm0
lea rsi, [rsp + 0x790]
mov rcx, rsi
mov rdx, rdi
call fcn.140017804
mov r8, qword [rbx + 0xf0]
mov r9, qword [rbx + 0xf8]
movups xmm0, xmmword [rbx + 0x100]
movups xmmword [rsp + 0x20], xmm0
lea rdi, [rsp + 0x390]
mov rcx, rdi
mov rdx, rsi
call fcn.14001183a
cmp qword [rdi], 0
lea rdx, [rsp + 0x398]
je 0x140016eab
mov rax, qword [rdx + 0x10]
mov qword [rsp + 0x4b0], rax
movups xmm0, xmmword [rdx]
movaps xmmword [rsp + 0x4a0], xmm0
mov qword [r13 + 0x18], rax
movups xmmword [r13 + 8], xmm0
jmp 0x140015cbc
lea rdi, [rsp + 0x4a0]
mov r8d, 0xc8
mov rcx, rdi
call fcn.140035120
lea r14, [rsp + 0x598]
mov r8d, 0xc8
mov rcx, r14
mov rdx, rdi
call fcn.140035120
lea rdi, [rsp + 0x250]
mov r8d, 0x140
mov rcx, rdi
mov rdx, rbx
call fcn.140035120
lea rsi, [rsp + 0x390]
mov r8d, 0xc8
mov rcx, rsi
mov rdx, r14
call fcn.140035120
mov rcx, r13
mov rdx, rdi
mov r8, rsi
call fcn.140012349
lea rcx, [rsp + 0x118]
call fcn.1400172da
cmp qword [rsp + 0x1b8], 0
je 0x140015ff8
mov rcx, qword [0x14005fc80]
xor edx, edx
mov r8, rbp
call sub.kernel32.dll_HeapFree
jmp 0x140015ff8
mov ecx, 8
jmp 0x1400170a2
mov ecx, 0x108
jmp 0x1400170a2
mov edx, 1
mov rcx, rdi
jmp 0x1400170a7
mov ecx, 0x20
jmp 0x1400170a2
mov ecx, 0x10
jmp 0x1400170a2
ud2
call fcn.140003af0
ud2
mov rcx, rsi
mov rdx, rbx
jmp 0x1400170a7
mov ecx, 0x18
mov edx, 8
call fcn.1400421c0
ud2