Function at 0x1400678d0
Capabilities:
Read file on windows

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x700
lea rdi, [rsp + 0x60]
mov ecx, 0x1a8
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x710]
mov rax, qword [0x1400dad40]
xor rax, rsp
mov qword [rsp + 0x6f8], rax
mov qword [rsp + 0x68], 0xffffffffffffffff
mov rax, qword [rsp + 0x710]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
movsxd rax, dword [rsp + 0x718]
imul rax, rax, 0x18
mov rcx, qword [rsp + 0x710]
lea rax, [rcx + rax + 0x548]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x268], 0
mov dword [rsp + 0x274], 0
mov qword [rsp + 0x288], 0
mov rax, qword [rsp + 0x710]
cmp dword [rax + 0x3dc], 2
jne 0x1400679e8
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x710]
cmp qword [rcx + rax + 0x4c0], 0xffffffffffffffff
jne 0x1400679a6
mov dword [rsp + 0x680], 0
jmp 0x1400679b1
mov dword [rsp + 0x680], 1
movsxd rax, dword [rsp + 0x680]
imul rax, rax, 0x18
mov rcx, qword [rsp + 0x710]
cmp dword [rcx + rax + 0x578], 2
je 0x1400679e8
mov rax, qword [rsp + 0x710]
mov rax, qword [rax + 0x3c8]
mov qword [rsp + 0x688], rax
jmp 0x1400679ff
mov rax, qword [rsp + 0x710]
mov rax, qword [rax + 0x340]
mov qword [rsp + 0x688], rax
mov rax, qword [rsp + 0x688]
mov qword [rsp + 0x2f8], rax
xor eax, eax
test eax, eax
jne 0x140067a0f
mov r9d, 1
mov r8d, 2
mov edx, 1
mov ecx, 5
call fcn.1400473f0
movzx eax, al
test eax, eax
je 0x140067a48
lea rdx, str.schannel:_Windows_version_is_old_and_may_not_be_able_to_connect_to_some_servers_due_to_lack_of_SNI__algorithms__etc._n
mov rcx, qword [rsp + 0x78]
call fcn.1400421c0
mov rax, qword [rsp + 0x710]
movzx eax, byte [rax + 0x671]
test eax, eax
je 0x140067aac
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.wine_get_version
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140067aac
mov r9d, 3
mov r8d, 2
mov edx, 3
mov ecx, 6
call fcn.1400473f0
movzx eax, al
test eax, eax
je 0x140067aac
mov dword [rsp + 0x690], 1
jmp 0x140067ab7
mov dword [rsp + 0x690], 0
cmp dword [rsp + 0x690], 0
jne 0x140067ace
mov dword [rsp + 0x694], 0
jmp 0x140067ad9
mov dword [rsp + 0x694], 1
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
movzx ecx, byte [rsp + 0x694]
mov byte [rax + 0x6a], cl
mov rax, qword [rsp + 0x710]
cmp dword [rax + 0x3dc], 2
jne 0x140067b6c
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x710]
cmp qword [rcx + rax + 0x4c0], 0xffffffffffffffff
jne 0x140067b2a
mov dword [rsp + 0x698], 0
jmp 0x140067b35
mov dword [rsp + 0x698], 1
movsxd rax, dword [rsp + 0x698]
imul rax, rax, 0x18
mov rcx, qword [rsp + 0x710]
cmp dword [rcx + rax + 0x578], 2
je 0x140067b6c
mov rax, qword [rsp + 0x710]
mov rax, qword [rax + 0x610]
mov qword [rsp + 0x6a0], rax
jmp 0x140067b83
mov rax, qword [rsp + 0x710]
mov rax, qword [rax + 0x5c0]
mov qword [rsp + 0x6a0], rax
cmp qword [rsp + 0x6a0], 0
je 0x140067bdf
mov r9d, 3
mov r8d, 2
mov edx, 1
mov ecx, 6
call fcn.1400473f0
movzx eax, al
test eax, eax
je 0x140067bc2
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov byte [rax + 0x6b], 1
jmp 0x140067bdd
lea rdx, [0x1400d4810]
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, Ordinal_79
jmp 0x140068f57
jmp 0x140067bef
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov byte [rax + 0x6b], 0
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov qword [rax], 0
mov rax, qword [rsp + 0x710]
cmp dword [rax + 0x3dc], 2
jne 0x140067c7a
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x710]
cmp qword [rcx + rax + 0x4c0], 0xffffffffffffffff
jne 0x140067c3c
mov dword [rsp + 0x6a8], 0
jmp 0x140067c47
mov dword [rsp + 0x6a8], 1
movsxd rax, dword [rsp + 0x6a8]
imul rax, rax, 0x18
mov rcx, qword [rsp + 0x710]
cmp dword [rcx + rax + 0x578], 2
je 0x140067c7a
mov rax, qword [rsp + 0x78]
movzx eax, byte [rax + 0xb03]
mov dword [rsp + 0x6ac], eax
jmp 0x140067c8d
mov rax, qword [rsp + 0x78]
movzx eax, byte [rax + 0xa5b]
mov dword [rsp + 0x6ac], eax
cmp dword [rsp + 0x6ac], 0
je 0x140067d25
mov rcx, qword [rsp + 0x710]
call fcn.1400368d0
mov r9d, dword [rsp + 0x718]
xor r8d, r8d
lea rdx, [rsp + 0x288]
mov rcx, qword [rsp + 0x710]
call fcn.140036990
movzx eax, al
test eax, eax
jne 0x140067d18
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov rcx, qword [rsp + 0x288]
mov qword [rax], rcx
xor eax, eax
test eax, eax
jne 0x140067ce6
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov rax, qword [rax]
mov eax, dword [rax + 0x18]
inc eax
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx]
mov dword [rcx + 0x18], eax
xor eax, eax
test eax, eax
jne 0x140067d12
mov rcx, qword [rsp + 0x710]
call fcn.140036930
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
cmp qword [rax], 0
jne 0x140068957
mov r8d, 0x50
xor edx, edx
lea rcx, [rsp + 0x200]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x200], 4
mov rax, qword [rsp + 0x710]
movzx eax, byte [rax + 0x5f8]
test eax, eax
je 0x140067e0e
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
movzx eax, byte [rax + 0x6b]
test eax, eax
je 0x140067d93
mov dword [rsp + 0x248], 8
jmp 0x140067d9e
mov dword [rsp + 0x248], reloc.WLDAP32.dll_Ordinal_32
mov rax, qword [rsp + 0x78]
movzx eax, byte [rax + 0xab3]
test eax, eax
je 0x140067dc9
mov eax, dword [rsp + 0x248]
or eax, 0x1800
mov dword [rsp + 0x248], eax
xor eax, eax
test eax, eax
jne 0x140067dc1
jmp 0x140067e0c
mov rax, qword [rsp + 0x78]
movzx eax, byte [rax + 0xab5]
test eax, eax
je 0x140067df4
mov eax, dword [rsp + 0x248]
or eax, 0x1a00
mov dword [rsp + 0x248], eax
xor eax, eax
test eax, eax
jne 0x140067dec
jmp 0x140067e0c
mov eax, dword [rsp + 0x248]
bts eax, 9
mov dword [rsp + 0x248], eax
xor eax, eax
test eax, eax
jne 0x140067e06
jmp 0x140067e1f
mov dword [rsp + 0x248], 0x1808
xor eax, eax
test eax, eax
jne 0x140067e19
mov rax, qword [rsp + 0x710]
movzx eax, byte [rax + 0x5f9]
test eax, eax
jne 0x140067e49
mov eax, dword [rsp + 0x248]
or eax, 4
mov dword [rsp + 0x248], eax
xor eax, eax
test eax, eax
jne 0x140067e43
mov rax, qword [rsp + 0x710]
mov eax, dword [rax + 0x5b0]
mov dword [rsp + 0x6b0], eax
cmp dword [rsp + 0x6b0], 7
ja case.default.0x140067e81
movsxd rax, dword [rsp + 0x6b0]
lea rcx, [0x140000000]
mov eax, dword [rcx + rax*4 + 0x68f88]
add rax, rcx
jmp rax
mov rdx, qword [rsp + 0x710]
lea rcx, [rsp + 0x200]
call fcn.140066c80
mov dword [rsp + 0x2f0], eax
cmp dword [rsp + 0x2f0], 0
je 0x140067eb5
mov eax, dword [rsp + 0x2f0]
jmp 0x140068f57
jmp 0x140067eec
mov dword [rsp + 0x238], reloc.WLDAP32.dll_Ordinal_32
jmp 0x140067eec
mov dword [rsp + 0x238], 8
jmp 0x140067eec
lea rdx, str.Unrecognized_parameter_passed_via_CURLOPT_SSLVERSION
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, reloc.WLDAP32.dll_Ordinal_35
jmp 0x140068f57
mov rax, qword [rsp + 0x710]
cmp dword [rax + 0x3dc], 2
jne 0x140067f68
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x710]
cmp qword [rcx + rax + 0x4c0], 0xffffffffffffffff
jne 0x140067f26
mov dword [rsp + 0x6b4], 0
jmp 0x140067f31
mov dword [rsp + 0x6b4], 1
movsxd rax, dword [rsp + 0x6b4]
imul rax, rax, 0x18
mov rcx, qword [rsp + 0x710]
cmp dword [rcx + rax + 0x578], 2
je 0x140067f68
mov rax, qword [rsp + 0x710]
mov rax, qword [rax + 0x630]
mov qword [rsp + 0x6b8], rax
jmp 0x140067f7f
mov rax, qword [rsp + 0x710]
mov rax, qword [rax + 0x5e0]
mov qword [rsp + 0x6b8], rax
cmp qword [rsp + 0x6b8], 0
je 0x140068064
mov rax, qword [rsp + 0x710]
cmp dword [rax + 0x3dc], 2
jne 0x14006800a
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x710]
cmp qword [rcx + rax + 0x4c0], 0xffffffffffffffff
jne 0x140067fc8
mov dword [rsp + 0x6c0], 0
jmp 0x140067fd3
mov dword [rsp + 0x6c0], 1
movsxd rax, dword [rsp + 0x6c0]
imul rax, rax, 0x18
mov rcx, qword [rsp + 0x710]
cmp dword [rcx + rax + 0x578], 2
je 0x14006800a
mov rax, qword [rsp + 0x710]
mov rax, qword [rax + 0x630]
mov qword [rsp + 0x6c8], rax
jmp 0x140068021
mov rax, qword [rsp + 0x710]
mov rax, qword [rax + 0x5e0]
mov qword [rsp + 0x6c8], rax
mov rdx, qword [rsp + 0x6c8]
lea rcx, [rsp + 0x200]
call fcn.140067590
mov dword [rsp + 0x2f0], eax
cmp dword [rsp + 0x2f0], 0
je 0x140068064
lea rdx, str.Unable_to_set_ciphers_to_passed_via_SSL_CONN_CONFIG
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, dword [rsp + 0x2f0]
jmp 0x140068f57
mov rax, qword [rsp + 0x78]
cmp qword [rax + 0xa88], 0
je 0x14006876d
mov qword [rsp + 0x328], 0
mov qword [rsp + 0x3c0], 0
mov rax, qword [rsp + 0x78]
mov rax, qword [rax + 0xa88]
mov qword [rsp + 0x3c8], rax
cmp qword [rsp + 0x3c8], 0
jne 0x1400680b8
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140068f57
lea r9, [rsp + 0x348]
lea r8, [rsp + 0x328]
lea rdx, [rsp + 0x304]
mov rcx, qword [rsp + 0x3c8]
call fcn.140067690
mov dword [rsp + 0x2f0], eax
cmp dword [rsp + 0x2f0], 0
je 0x14006812b
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x78]
mov rcx, qword [rcx + 0xa88]
movsx eax, byte [rcx + rax]
test eax, eax
je 0x14006812b
lea rdx, [0x1400d43ac]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0xa88]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fopen
mov qword [rsp + 0x3c0], rax
cmp dword [rsp + 0x2f0], 0
je 0x14006817b
cmp qword [rsp + 0x3c0], 0
jne 0x14006817b
mov rax, qword [rsp + 0x78]
mov r8, qword [rax + 0xa88]
lea rdx, str.schannel:_Failed_to_get_certificate_location_or_file_for__s
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov qword [rsp + 0x3c8], 0
xor eax, eax
test eax, eax
jne 0x14006815d
mov eax, dword [rsp + 0x2f0]
jmp 0x140068f57
cmp qword [rsp + 0x3c0], 0
je 0x140068591
mov qword [rsp + 0x3d0], 0
mov dword [rsp + 0x3d8], 0
mov qword [rsp + 0x410], 0
mov dword [rsp + 0x418], 0
mov r8d, 2
xor edx, edx
mov rcx, qword [rsp + 0x3c0]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fseek
test eax, eax
jne 0x1400681de
mov dword [rsp + 0x6d0], 1
jmp 0x1400681e9
mov dword [rsp + 0x6d0], 0
mov eax, dword [rsp + 0x6d0]
mov dword [rsp + 0x41c], eax
cmp dword [rsp + 0x41c], 0
je 0x140068215
mov rcx, qword [rsp + 0x3c0]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_ftell
mov dword [rsp + 0x3d8], eax
cmp dword [rsp + 0x3d8], 0
jge 0x14006822a
mov dword [rsp + 0x41c], 0
cmp dword [rsp + 0x41c], 0
je 0x140068270
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x3c0]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fseek
test eax, eax
jne 0x140068257
mov dword [rsp + 0x6d4], 1
jmp 0x140068262
mov dword [rsp + 0x6d4], 0
mov eax, dword [rsp + 0x6d4]
mov dword [rsp + 0x41c], eax
cmp dword [rsp + 0x41c], 0
je 0x140068296
movsxd rax, dword [rsp + 0x3d8]
inc rax
mov rcx, rax
call qword [section..data]
mov qword [rsp + 0x3d0], rax
cmp qword [rsp + 0x3d0], 0
je 0x1400682cc
movsxd rax, dword [rsp + 0x3d8]
mov r9, qword [rsp + 0x3c0]
mov r8d, 1
mov rdx, rax
mov rcx, qword [rsp + 0x3d0]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fread
cmp eax, 1
je 0x1400682d7
mov dword [rsp + 0x41c], 0
mov rcx, qword [rsp + 0x3c0]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
mov qword [rsp + 0x3c8], 0
xor eax, eax
test eax, eax
jne 0x1400682e4
cmp dword [rsp + 0x41c], 0
jne 0x140068335
mov rax, qword [rsp + 0x78]
mov r8, qword [rax + 0xa88]
lea rdx, str.schannel:_Failed_to_read_cert_file__s
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov rcx, qword [rsp + 0x3d0]
call qword [0x1400ce008]
mov eax, Ordinal_60
jmp 0x140068f57
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x3f0], rax
mov eax, dword [rsp + 0x3d8]
mov dword [rsp + 0x3e8], eax
mov rax, qword [rsp + 0x78]
cmp qword [rax + 0xaa8], 0
je 0x14006837b
mov rax, qword [rsp + 0x78]
mov rcx, qword [rax + 0xaa8]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov qword [rsp + 0x410], rax
mov rax, qword [rsp + 0x410]
lea rax, [rax + rax + 2]
mov rcx, rax
call qword [section..data]
mov qword [rsp + 0x408], rax
cmp qword [rsp + 0x410], 0
jbe 0x1400683eb
mov rax, qword [rsp + 0x410]
inc rax
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x408]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x410]
mov rax, qword [rsp + 0x78]
mov r8, qword [rax + 0xaa8]
mov edx, 8
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x418], eax
cmp dword [rsp + 0x418], 0
jl 0x14006841d
mov eax, dword [rsp + 0x410]
cmp dword [rsp + 0x418], eax
jg 0x14006841d
movsxd rax, dword [rsp + 0x418]
xor ecx, ecx
mov rdx, qword [rsp + 0x408]
mov word [rdx + rax*2], cx
jmp 0x140068434
mov eax, 2
imul rax, rax, 0
xor ecx, ecx
mov rdx, qword [rsp + 0x408]
mov word [rdx + rax], cx
xor r8d, r8d
mov rdx, qword [rsp + 0x408]
lea rcx, [rsp + 0x3e8]
call qword [sym.imp.CRYPT32.dll_PFXImportCertStore]
mov qword [rsp + 0x3b8], rax
mov rcx, qword [rsp + 0x408]
call qword [0x1400ce008]
mov rcx, qword [rsp + 0x3d0]
call qword [0x1400ce008]
cmp qword [rsp + 0x3b8], 0
jne 0x1400684e1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x420], eax
cmp dword [rsp + 0x420], 0x56
jne 0x1400684b2
mov rax, qword [rsp + 0x78]
mov r8, qword [rax + 0xa88]
lea rdx, str.schannel:_Failed_to_import_cert_file__s__password_is_bad
mov rcx, qword [rsp + 0x78]
call fcn.140042340
jmp 0x1400684d7
mov r9d, dword [rsp + 0x420]
mov rax, qword [rsp + 0x78]
mov r8, qword [rax + 0xa88]
lea rdx, str.schannel:_Failed_to_import_cert_file__s__last_error_is_0x_x
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, Ordinal_60
jmp 0x140068f57
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10001
mov rcx, qword [rsp + 0x3b8]
call qword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov ecx, 8
imul rcx, rcx, 0
mov qword [rsp + rcx + 0x268], rax
mov eax, 8
imul rax, rax, 0
cmp qword [rsp + rax + 0x268], 0
jne 0x140068571
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov rax, qword [rsp + 0x78]
mov r8, qword [rax + 0xa88]
lea rdx, str.schannel:_Failed_to_get_certificate_from_file__s__last_error_is_0x_x
mov rcx, qword [rsp + 0x78]
call fcn.140042340
xor edx, edx
mov rcx, qword [rsp + 0x3b8]
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, Ordinal_60
jmp 0x140068f57
mov dword [rsp + 0x204], 1
lea rax, [rsp + 0x268]
mov qword [rsp + 0x208], rax
jmp 0x14006875d
mov eax, dword [rsp + 0x304]
bts eax, 0xe
mov rcx, qword [rsp + 0x328]
mov qword [rsp + 0x20], rcx
mov r9d, eax
xor r8d, r8d
xor edx, edx
mov ecx, 9
call qword [sym.imp.CRYPT32.dll_CertOpenStore]
mov qword [rsp + 0x3b8], rax
cmp qword [rsp + 0x3b8], 0
jne 0x140068624
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x328]
mov r8d, dword [rsp + 0x304]
lea rdx, str.schannel:_Failed_to_open_cert_store__x__s__last_error_is_0x_x
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov rcx, qword [rsp + 0x328]
call qword [0x1400ce008]
mov qword [rsp + 0x3c8], 0
xor eax, eax
test eax, eax
jne 0x140068608
mov eax, Ordinal_60
jmp 0x140068f57
mov rcx, qword [rsp + 0x328]
call qword [0x1400ce008]
lea rax, [rsp + 0x398]
mov qword [rsp + 0x370], rax
mov dword [rsp + 0x368], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x368]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x398]
mov r8d, 4
mov edx, Ordinal_41
mov rcx, qword [rsp + 0x348]
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
jne 0x1400686bd
mov qword [rsp + 0x3c8], 0
xor eax, eax
test eax, eax
jne 0x140068691
xor edx, edx
mov rcx, qword [rsp + 0x3b8]
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, Ordinal_60
jmp 0x140068f57
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x368]
mov qword [rsp + 0x20], rax
mov r9d, 0x10000
xor r8d, r8d
mov edx, 0x10001
mov rcx, qword [rsp + 0x3b8]
call qword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov ecx, 8
imul rcx, rcx, 0
mov qword [rsp + rcx + 0x268], rax
mov qword [rsp + 0x3c8], 0
xor eax, eax
test eax, eax
jne 0x140068700
mov eax, 8
imul rax, rax, 0
cmp qword [rsp + rax + 0x268], 0
je 0x140068743
mov dword [rsp + 0x204], 1
lea rax, [rsp + 0x268]
mov qword [rsp + 0x208], rax
jmp 0x14006875d
xor edx, edx
mov rcx, qword [rsp + 0x3b8]
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
mov eax, Ordinal_60
jmp 0x140068f57
xor edx, edx
mov rcx, qword [rsp + 0x3b8]
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
mov edx, reloc.WLDAP32.dll_Ordinal_32
mov ecx, 1
call qword [0x1400ce020]
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx + 8]
mov qword [rcx], rax
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
cmp qword [rax], 0
jne 0x1400687e4
lea rdx, [0x1400d4a58]
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, 8
imul rax, rax, 0
cmp qword [rsp + rax + 0x268], 0
je 0x1400687da
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + rax + 0x268]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140068f57
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov rax, qword [rax]
mov dword [rax + 0x18], 1
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov rax, qword [rax]
add rax, 0x10
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx + 8]
mov rcx, qword [rcx]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x200]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 2
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov rax, qword [0x1400db9c0]
call qword [rax + Ordinal_26]
mov dword [rsp + 0x274], eax
mov eax, 8
imul rax, rax, 0
cmp qword [rsp + rax + 0x268], 0
je 0x140068893
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + rax + 0x268]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
cmp dword [rsp + 0x274], 0
je 0x140068957
mov r8d, 0x100
lea rdx, [rsp + 0x440]
mov ecx, dword [rsp + 0x274]
call fcn.14001c820
mov r8, rax
lea rdx, str.schannel:_AcquireCredentialsHandle_failed:__s
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov rcx, qword [rax]
call qword [0x1400ce008]
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov qword [rax], 0
xor eax, eax
test eax, eax
jne 0x1400688cf
mov eax, dword [rsp + 0x274]
mov dword [rsp + 0x6d8], eax
mov eax, dword [rsp + 0x6d8]
add eax, 0x7ff6fd00
mov dword [rsp + 0x6d8], eax
cmp dword [rsp + 0x6d8], 0xe
ja case.0x140068941.2146893055
movsxd rax, dword [rsp + 0x6d8]
lea rcx, [0x140000000]
mov eax, dword [rcx + rax*4 + 0x68fa8]
add rax, rcx
jmp rax
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140068f57
mov eax, reloc.WLDAP32.dll_Ordinal_35
jmp 0x140068f57
lea r8, [rsp + 0x2a4]
mov rdx, qword [rsp + 0x2f8]
mov ecx, 2
call fcn.140063070
test eax, eax
jne 0x140068993
lea r8, [rsp + 0x2c8]
mov rdx, qword [rsp + 0x2f8]
mov ecx, reloc.WS2_32.dll_socket
call fcn.140063070
test eax, eax
je 0x1400689a4
lea rdx, str.schannel:_using_IP_address__SNI_is_not_supported_by_OS._n
mov rcx, qword [rsp + 0x78]
call fcn.1400421c0
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
movzx eax, byte [rax + 0x6a]
test eax, eax
je 0x140068b5e
mov dword [rsp + 0x544], 0
mov dword [rsp + 0x548], 0
mov qword [rsp + 0x550], 0
mov qword [rsp + 0x558], 0
movsxd rax, dword [rsp + 0x544]
lea rax, [rsp + rax + 0x160]
mov qword [rsp + 0x550], rax
movsxd rax, dword [rsp + 0x544]
add rax, 4
mov dword [rsp + 0x544], eax
movsxd rax, dword [rsp + 0x544]
mov dword [rsp + rax + 0x160], 2
movsxd rax, dword [rsp + 0x544]
add rax, 4
mov dword [rsp + 0x544], eax
movsxd rax, dword [rsp + 0x544]
lea rax, [rsp + rax + 0x160]
mov qword [rsp + 0x558], rax
movsxd rax, dword [rsp + 0x544]
add rax, 2
mov dword [rsp + 0x544], eax
mov eax, dword [rsp + 0x544]
mov dword [rsp + 0x548], eax
movsxd rax, dword [rsp + 0x544]
mov byte [rsp + rax + 0x160], 8
mov eax, dword [rsp + 0x544]
inc eax
mov dword [rsp + 0x544], eax
movsxd rax, dword [rsp + 0x544]
lea rax, [rsp + rax + 0x160]
mov r8d, 8
lea rdx, [0x1400d4b20]
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x544]
add eax, 8
mov dword [rsp + 0x544], eax
lea r8, [0x1400d4b30]
lea rdx, str.schannel:_ALPN__offering__s_n
mov rcx, qword [rsp + 0x78]
call fcn.1400421c0
mov eax, dword [rsp + 0x548]
mov ecx, dword [rsp + 0x544]
sub ecx, eax
mov eax, ecx
mov ecx, eax
call fcn.140046c00
mov rcx, qword [rsp + 0x558]
mov word [rcx], ax
mov rax, qword [rsp + 0x558]
movzx eax, word [rax]
add rax, 6
mov rcx, qword [rsp + 0x550]
mov dword [rcx], eax
mov r9d, dword [rsp + 0x544]
lea r8, [rsp + 0x160]
mov edx, reloc.WS2_32.dll_select
lea rcx, [rsp + 0xf8]
call fcn.140066bf0
mov r8d, 1
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x128]
call fcn.140066c40
jmp 0x140068b8e
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0xf8]
call fcn.140066bf0
mov r8d, 1
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x128]
call fcn.140066c40
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x98]
call fcn.140066bf0
mov r8d, 1
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xc8]
call fcn.140066c40
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov dword [rax + 0x5c], 0x811c
mov edx, Ordinal_27
mov ecx, 1
call qword [0x1400ce020]
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
cmp qword [rax + 8], 0
jne 0x140068c1f
lea rdx, [0x1400d4b60]
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140068f57
mov rax, qword [rsp + 0x2f8]
mov qword [rsp + 0x2e8], rax
cmp qword [rsp + 0x2e8], 0
jne 0x140068c44
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140068f57
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
movzx eax, byte [rax + 0x6a]
test eax, eax
je 0x140068c6a
lea rax, [rsp + 0x128]
mov qword [rsp + 0x6e0], rax
jmp 0x140068c76
mov qword [rsp + 0x6e0], 0
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov rax, qword [rax + 8]
add rax, 0x10
mov rcx, qword [rsp + 0x80]
mov rcx, qword [rcx + 8]
add rcx, 0x60
mov rdx, qword [rsp + 0x80]
mov rdx, qword [rdx + 8]
mov rdx, qword [rdx + 8]
mov r8, qword [rsp + 0x80]
mov r8, qword [r8 + 8]
mov r9, qword [rsp + 0x80]
mov r9, qword [r9 + 8]
mov r9, qword [r9]
mov qword [rsp + 0x6e8], r9
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rcx
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdx
mov dword [rsp + 0x38], 0
mov rax, qword [rsp + 0x6e0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, dword [r8 + 0x5c]
mov r8, qword [rsp + 0x2e8]
xor edx, edx
mov rax, qword [rsp + 0x6e8]
mov rcx, rax
mov rax, qword [0x1400db9c0]
call qword [rax + Ordinal_50]
mov dword [rsp + 0x274], eax
mov qword [rsp + 0x2e8], 0
xor eax, eax
test eax, eax
jne 0x140068d38
cmp dword [rsp + 0x274], 0x90312
je 0x140068e5d
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov rcx, qword [rax + 8]
call qword [0x1400ce008]
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov qword [rax + 8], 0
xor eax, eax
test eax, eax
jne 0x140068d5b
mov eax, dword [rsp + 0x274]
mov dword [rsp + 0x6f0], eax
cmp dword [rsp + 0x6f0], 0x80090300
je 0x140068db5
cmp dword [rsp + 0x6f0], 0x80090322
je 0x140068ded
jmp 0x140068e25
mov r8d, 0x100
lea rdx, [rsp + 0x570]
mov ecx, dword [rsp + 0x274]
call fcn.14001c820
mov r8, rax
lea rdx, [0x1400d4b88]
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140068f57
mov r8d, 0x100
lea rdx, [rsp + 0x570]
mov ecx, dword [rsp + 0x274]
call fcn.14001c820
mov r8, rax
lea rdx, [0x1400d4bc0]
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, reloc.WLDAP32.dll_Ordinal_60
jmp 0x140068f57
mov r8d, 0x100
lea rdx, [rsp + 0x570]
mov ecx, dword [rsp + 0x274]
call fcn.14001c820
mov r8, rax
lea rdx, str.schannel:_initial_InitializeSecurityContext_failed:__s
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, reloc.WLDAP32.dll_Ordinal_35
jmp 0x140068f57
xor eax, eax
test eax, eax
jne 0x140068e5d
mov eax, dword [rsp + 0x98]
movsxd rcx, dword [rsp + 0x718]
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
mov r9d, eax
mov r8, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x710]
mov rdx, qword [rax + rcx*8 + 0x4c0]
mov rcx, qword [rsp + 0x710]
call fcn.140042cb0
mov dword [rsp + 0x2f0], eax
mov rcx, qword [rsp + 0xa0]
mov rax, qword [0x1400db9c0]
call qword [rax + 0x80]
cmp dword [rsp + 0x2f0], 0
jne 0x140068ed8
mov eax, dword [rsp + 0x98]
cmp rax, qword [rsp + 0x68]
je 0x140068efd
mov r9d, dword [rsp + 0x98]
mov r8, qword [rsp + 0x68]
lea rdx, str.schannel:_failed_to_send_initial_handshake_data:_sent__zd_of__lu_bytes
mov rcx, qword [rsp + 0x78]
call fcn.140042340
mov eax, reloc.WLDAP32.dll_Ordinal_35
jmp 0x140068f57
xor eax, eax
test eax, eax
jne 0x140068efd
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov dword [rax + 0x64], 0
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov byte [rax + 0x68], 0
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov byte [rax + 0x69], 0
mov rax, qword [rsp + 0x80]
mov rax, qword [rax + 8]
mov byte [rax + 0x58], 0
mov rax, qword [rsp + 0x80]
mov dword [rax + 4], 1
xor eax, eax
mov rdi, rax
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_send
call fcn.1400abe64
mov rax, rdi
mov rcx, qword [rsp + 0x6f8]
xor rcx, rsp
call fcn.1400ab680
add rsp, 0x700
pop rdi
ret