Function at 0x1401732d0
Capabilities:
Read file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x558
movdqa xmmword [rsp + 0x540], xmm15
movdqa xmmword [rsp + 0x530], xmm14
movdqa xmmword [rsp + 0x520], xmm13
movdqa xmmword [rsp + 0x510], xmm12
movdqa xmmword [rsp + 0x500], xmm11
movdqa xmmword [rsp + 0x4f0], xmm10
movdqa xmmword [rsp + 0x4e0], xmm9
movdqa xmmword [rsp + 0x4d0], xmm8
movaps xmmword [rsp + 0x4c0], xmm7
movaps xmmword [rsp + 0x4b0], xmm6
mov rbp, r9
mov rax, qword [0x140430040]
xor rax, rsp
mov qword [rsp + 0x4a8], rax
movsxd r12, edx
lea r14, [r12 + r12*2]
cmp dword [rcx + r14*8 + 0x548], 2
jne 0x14017349d
mov byte [rbp], 1
xor r13d, r13d
mov rcx, qword [rsp + 0x4a8]
xor rcx, rsp
cmp rcx, qword [0x140430040]
je 0x1401733bf
call fcn.140278ca0
int3
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, qword [rsp + 0x68]
call fcn.140158420
mov r13d, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140173375
lea rdx, str.SSL_TLS_connection_timeout
mov rcx, r15
call fcn.140158420
mov r13d, 0x1c
jmp 0x140173375
mov eax, r13d
movaps xmm6, xmmword [rsp + 0x4b0]
movaps xmm7, xmmword [rsp + 0x4c0]
movaps xmm8, xmmword [rsp + 0x4d0]
movaps xmm9, xmmword [rsp + 0x4e0]
movaps xmm10, xmmword [rsp + 0x4f0]
movaps xmm11, xmmword [rsp + 0x500]
movaps xmm12, xmmword [rsp + 0x510]
movaps xmm13, xmmword [rsp + 0x520]
movaps xmm14, xmmword [rsp + 0x530]
movaps xmm15, xmmword [rsp + 0x540]
add rsp, 0x558
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea r12, [rsp + 0x170]
jmp 0x140173440
lea r12, [rsp + 0x160]
mov r9d, dword [r12]
lea rdx, str.schannel:_failed_to_send_next_handshake_data:_sent__zd_of__lu_bytes
mov rcx, qword [rsp + 0x68]
call fcn.140158420
mov r13d, 0x23
jmp 0x140173375
mov rax, qword [rbx + 8]
mov byte [rax + 0x58], 1
mov eax, 2
mov sil, byte [rsp + 0x67]
mov dword [rbx + 4], eax
mov r15, qword [rsp + 0x90]
mov eax, dword [rbx + 4]
test sil, sil
je 0x140173542
lea ecx, [rax - 1]
xor r13d, r13d
cmp ecx, 3
jae 0x140173542
jmp 0x140173375
mov esi, r8d
mov rdi, rcx
mov dword [rsp + 0x9c], edx
mov r15, qword [rcx]
lea rbx, [rcx + r14*8]
add rbx, 0x548
mov rax, qword [rcx + r12*8 + 0x4c0]
mov qword [rsp + 0xa8], rax
mov eax, dword [rbx + 4]
test eax, eax
je 0x140173ffa
mov qword [rsp + 0x88], r12
mov qword [rsp + 0xa0], rbp
lea rcx, [rdi + 0x548]
lea rdx, [rdi + 0x578]
mov qword [rsp + 0x80], rdx
lea rdx, [rdi + 0x3c8]
mov qword [rsp + 0xb0], rdx
lea rdx, [rdi + 0x340]
mov qword [rsp + 0x70], rdx
lea rcx, [rcx + r14*8]
add rcx, 8
mov qword [rsp + 0x78], rcx
xor ebp, ebp
movaps xmm6, xmmword [0x1403d4b30]
xorps xmm7, xmm7
lea r12, [rsp + 0x150]
mov qword [rsp + 0x90], r15
mov byte [rsp + 0x67], sil
lea ecx, [rax - 1]
cmp ecx, 3
jae 0x140173e2c
mov rcx, r15
xor edx, edx
mov r8b, 1
call fcn.14015c980
test rax, rax
js 0x1401733a8
mov ecx, dword [rbx + 4]
mov edx, ecx
and edx, 0xfffffffe
cmp edx, 2
jne 0x1401735b9
cmp ecx, 3
mov r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0xa8]
cmove r8, rdx
cmp ecx, 2
mov rcx, 0xffffffffffffffff
cmove rcx, rdx
test sil, sil
cmovne rax, rbp
mov rdx, 0xffffffffffffffff
mov r9, rax
call fcn.1401801e0
test eax, eax
js 0x140175218
je 0x1401751d4
mov rax, 0xffffffffffffffff
mov qword [rsp + 0x130], rax
mov qword [rsp + 0xd0], rax
mov rax, qword [rdi]
mov qword [rsp + 0x68], rax
movaps xmmword [rsp + 0x170], xmm6
movaps xmmword [rsp + 0x160], xmm6
movaps xmmword [rsp + 0x150], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x1b0], xmm6
movaps xmmword [rsp + 0x1a0], xmm6
movaps xmmword [rsp + 0x110], xmm6
cmp dword [rdi + 0x3dc], 2
jne 0x140173640
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + rax*8], 2
mov rcx, qword [rsp + 0xb0]
jne 0x140173645
mov rcx, qword [rsp + 0x70]
mov rax, qword [rbx + 8]
mov r13d, 0x23
cmp qword [rax], 0
je 0x140173375
cmp qword [rax + 8], 0
je 0x140173375
mov r15, qword [rcx]
mov r14d, dword [rbx + 4]
cmp qword [rax + 0x50], 0
jne 0x1401736b2
mov qword [rax + 0x40], 0
mov rax, qword [rbx + 8]
mov qword [rax + 0x30], 0x1000
mov rax, qword [fcn.140119a10]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 0x30]
call qword [str._a_]
mov rcx, qword [rbx + 8]
mov qword [rcx + 0x50], rax
mov rax, qword [rbx + 8]
cmp qword [rax + 0x50], 0
je 0x14017338f
mov rcx, qword [rax + 0x48]
test rcx, rcx
jne 0x140173705
mov byte [rax + 0x58], 0
mov rax, qword [rbx + 8]
mov qword [rax + 0x38], 0
mov rax, qword [rbx + 8]
mov qword [rax + 0x28], 0x1000
mov rax, qword [fcn.140119a10]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 0x28]
call qword [str._a_]
mov rcx, qword [rbx + 8]
mov qword [rcx + 0x48], rax
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 0x48]
test rcx, rcx
je 0x14017338f
mov rdx, qword [rax + 0x28]
mov rsi, qword [rax + 0x38]
sub rdx, rsi
cmp rdx, 0x3ff
ja 0x140173745
add rsi, 0x400
mov rax, qword [fcn.140119a60]
mov rdx, rsi
call qword [str._a_]
test rax, rax
je 0x14017379d
mov rcx, qword [rbx + 8]
mov qword [rcx + 0x48], rax
mov rax, qword [rbx + 8]
mov qword [rax + 0x28], rsi
cmp r14d, 3
je 0x1401739f6
mov rax, qword [rbx + 8]
mov r8, qword [rax + 0x28]
mov rdx, qword [rax + 0x38]
sub r8, rdx
add rdx, qword [rax + 0x48]
mov rax, qword [rsp + 0x88]
mov rcx, qword [rdi + rax*8 + 0x4c0]
lea r9, [rsp + 0x130]
call fcn.140158fa0
cmp eax, 0x51
jne 0x1401737a9
mov eax, 2
cmp dword [rbx + 4], 3
mov sil, byte [rsp + 0x67]
jne 0x140173472
jmp 0x140173475
lea rdx, str.schannel:_unable_to_re_allocate_memory
jmp 0x140173396
test eax, eax
jne 0x140175202
mov rax, qword [rsp + 0x130]
test rax, rax
je 0x140175202
mov rcx, qword [rbx + 8]
add qword [rcx + 0x38], rax
mov rax, qword [rbx + 8]
mov byte [rax + 0x58], 0
jmp 0x1401739f6
cmp esi, 0x90320
jne 0x140173b93
mov rax, qword [rbx + 8]
mov ecx, dword [rax + 0x5c]
test cl, cl
js 0x140173fb7
or ecx, 0x80
mov dword [rax + 0x5c], ecx
mov eax, 3
jmp 0x14017346d
cmp esi, 0x90312
jne 0x1401737d7
cmp dword [rsp + 0x154], 2
jne 0x140173871
mov r9d, dword [rsp + 0x150]
test r9, r9
je 0x140173871
mov r8, qword [rsp + 0x158]
mov rax, qword [rsp + 0x88]
mov rdx, qword [rdi + rax*8 + 0x4c0]
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1401589a0
mov r8, qword [rsp + 0xd0]
test eax, eax
jne 0x140173440
mov eax, dword [rsp + 0x150]
cmp r8, rax
jne 0x140173440
mov rcx, qword [rsp + 0x158]
test rcx, rcx
je 0x140173892
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x80]
call qword [str._a_]
cmp dword [rsp + 0x164], 2
jne 0x1401738f6
mov r9d, dword [rsp + 0x160]
test r9, r9
je 0x1401738f6
mov r8, qword [rsp + 0x168]
mov rax, qword [rsp + 0x88]
mov rdx, qword [rdi + rax*8 + 0x4c0]
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1401589a0
mov r8, qword [rsp + 0xd0]
test eax, eax
jne 0x140173438
mov eax, dword [rsp + 0x160]
cmp r8, rax
jne 0x140173438
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x140173917
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x80]
call qword [str._a_]
cmp dword [rsp + 0x174], 2
jne 0x14017397b
mov r9d, dword [rsp + 0x170]
test r9, r9
je 0x14017397b
mov r8, qword [rsp + 0x178]
mov rax, qword [rsp + 0x88]
mov rdx, qword [rdi + rax*8 + 0x4c0]
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1401589a0
mov r8, qword [rsp + 0xd0]
test eax, eax
jne 0x14017342e
mov eax, dword [rsp + 0x170]
cmp r8, rax
jne 0x14017342e
mov rcx, qword [rsp + 0x178]
test rcx, rcx
je 0x14017399c
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x80]
call qword [str._a_]
cmp dword [rsp + 0x1b4], 5
jne 0x140173be9
mov r8d, dword [rsp + 0x1b0]
test r8d, r8d
je 0x140173be9
mov rax, qword [rbx + 8]
mov rdx, qword [rax + 0x38]
cmp rdx, r8
jbe 0x140173bf5
mov rcx, qword [rax + 0x48]
add rdx, rcx
sub rdx, r8
call fcn.1402b6370
mov eax, dword [rsp + 0x1b0]
mov rcx, qword [rbx + 8]
mov qword [rcx + 0x38], rax
cmp esi, 0x90312
jne 0x140173c01
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 0x38]
call fcn.140109920
mov esi, eax
mov rax, qword [fcn.140119a10]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 0x38]
call qword [str._a_]
mov dword [rsp + 0x1a0], esi
mov dword [rsp + 0x1a4], 2
mov qword [rsp + 0x1a8], rax
lea rcx, [rsp + 0x1b0]
movaps xmmword [rcx], xmm7
movabs rcx, 0x200000000
mov qword [rsp + 0x110], rcx
lea rdx, [rsp + 0x1a0]
mov qword [rsp + 0x118], rdx
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], rbp
movabs rcx, 0x1100000000
mov qword [rsp + 0x160], rcx
lea rcx, [rsp + 0x160]
mov qword [rcx + 0x18], rbp
movups xmmword [rcx + 8], xmm7
movabs rcx, 0x300000000
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], r12
test rax, rax
je 0x14017338f
mov rcx, qword [rbx + 8]
mov r8, qword [rcx + 0x38]
mov rdx, qword [rcx + 0x48]
mov rcx, rax
call fcn.1402b6370
mov rcx, r15
call fcn.1401a4610
mov r13d, reloc.WLDAP32.dll_Ordinal_27
test rax, rax
je 0x140173375
mov r14, rax
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x30]
mov r8, qword [rbx + 8]
mov rcx, qword [r8]
mov rdx, qword [r8 + 8]
lea r10, [rdx + 0x10]
mov r9d, dword [r8 + 0x5c]
add r8, 0x60
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x50], r8
lea r8, [rsp + 0x120]
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], rbp
mov dword [rsp + 0x38], ebp
lea r8, [rsp + 0x110]
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], ebp
mov r8, r14
call qword [str._a_]
mov esi, eax
mov rax, qword [fcn.140119970]
mov rcx, r14
call qword [str._a_]
mov rax, qword [fcn.140119970]
mov rcx, qword [rsp + 0x1a8]
call qword [str._a_]
mov qword [rsp + 0x1a8], rbp
cmp esi, 0x90311
jg 0x140173805
test esi, esi
je 0x14017380d
cmp esi, 0x80090318
je 0x140173460
lea rcx, [rsp + 0x2c0]
mov r8d, 0x100
mov dl, 0xaa
call fcn.1402b6a10
cmp esi, 0x80090322
je 0x140173df5
cmp esi, 0x80090300
jne 0x140173fcc
lea rdx, [rsp + 0x2c0]
mov r8d, 0x100
mov ecx, 0x80090300
call fcn.14017ab50
lea rdx, str.schannel:_next_InitializeSecurityContext_failed:__s
mov rcx, qword [rsp + 0x68]
jmp 0x1401745e5
mov rax, qword [rbx + 8]
mov qword [rax + 0x38], 0
cmp esi, 0x90312
je 0x140173468
test esi, esi
jne 0x140173c0c
mov dword [rbx + 4], 4
cmp dword [rdi + 0x3dc], 2
jne 0x140173c39
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rcx, [rax + rax*2]
mov eax, 0xcd0
mov rdx, qword [rsp + 0x80]
cmp dword [rdx + rcx*8], 2
jne 0x140173c3e
mov eax, 0xcc8
mov rcx, qword [rsp + 0x68]
mov r15, qword [rcx + rax]
test r15, r15
mov sil, byte [rsp + 0x67]
je 0x140173d21
mov r13, qword [rdi]
mov qword [rsp + 0xf0], 0
mov r8d, 0x1e0
lea rcx, [rsp + 0x2c0]
mov dl, 0xaa
call fcn.1402b6a10
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x58]
mov rcx, qword [rsp + 0x78]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 8]
mov edx, 0x53
lea r8, [rsp + 0xf0]
call qword [str._a_]
mov r14d, eax
test eax, eax
setne cl
mov rax, qword [rsp + 0xf0]
test rax, rax
sete dl
or dl, cl
cmp dl, 1
jne 0x140173d60
mov r8d, 0x100
lea r15, [rsp + 0x1c0]
mov rcx, r15
mov dl, 0xaa
call fcn.1402b6a10
mov r8d, 0x100
mov ecx, r14d
mov rdx, r15
call fcn.14017ab50
mov rcx, r13
lea rdx, str.schannel:_Failed_to_read_remote_certificate_context:__s
mov r8, rax
call fcn.140158420
mov r13d, 0x5a
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x140173d18
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test r13d, r13d
jne 0x140173fa1
cmp byte [rdi + 0x5f8], 1
jne 0x140173475
mov rax, qword [rbx + 8]
cmp byte [rax + 0x6b], 0
je 0x140173475
mov rcx, rdi
mov edx, dword [rsp + 0x9c]
call fcn.1401a4760
test eax, eax
mov r15, qword [rsp + 0x90]
je 0x14017347d
jmp 0x140175249
mov qword [rsp + 0xb8], r13
mov r13d, 0x5a
test byte [rax], 1
je 0x140173d05
mov r14d, dword [rax + 0x10]
test r14, r14
je 0x140173d05
mov rsi, qword [rax + 8]
mov r8d, 0x1e0
lea rcx, [rsp + 0x2c0]
xor edx, edx
call fcn.1402b6a10
add r14, rsi
lea rcx, [rsp + 0x2c0]
mov rdx, rsi
mov r8, r14
call fcn.1401a55c0
test eax, eax
je 0x140173db9
mov sil, byte [rsp + 0x67]
jmp 0x140173d05
mov r8, qword [rsp + 0x3e0]
test r8, r8
mov sil, byte [rsp + 0x67]
je 0x140173ddc
mov r9, qword [rsp + 0x3f0]
sub r9, r8
ja 0x140175265
mov rcx, qword [rsp + 0xb8]
lea rdx, str.SSL:_failed_retrieving_public_key_from_server_certificate
call fcn.140158420
jmp 0x140173d05
lea rdx, [rsp + 0x2c0]
mov r8d, 0x100
mov ecx, 0x80090322
call fcn.14017ab50
lea rdx, str.schannel:_SNI_or_certificate_check_failed:__s
mov rcx, qword [rsp + 0x68]
mov r8, rax
call fcn.140158420
mov r13d, 0x3c
jmp 0x140173375
cmp eax, 4
je 0x140173e95
cmp eax, 5
mov r15, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x88]
je 0x140173e51
xor eax, eax
jmp 0x140173e86
mov dword [rbx + 4], 5
mov dword [rbx], 2
lea rax, [0x140175ea0]
mov qword [rdi + r12*8 + 0x4e8], rax
lea rax, [0x140176560]
mov qword [rdi + r12*8 + 0x4f8], rax
mov rax, qword [rbx + 8]
mov rax, qword [rax + 8]
mov qword [rdi + 0x7b8], rax
mov al, 1
mov byte [r15], al
mov dword [rbx + 4], 0
jmp 0x140173372
mov r14, qword [rdi]
mov qword [rsp + 0x1c0], 0
lea rcx, [rsp + 0x2c0]
mov r8d, 0x108
mov dl, 0xaa
call fcn.1402b6a10
mov rcx, qword [rbx + 8]
mov r13d, 0x23
cmp qword [rcx], 0
mov r15, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x88]
je 0x140173375
mov eax, dword [rcx + 0x60]
cmp eax, dword [rcx + 0x5c]
jne 0x140173f22
cmp byte [rcx + 0x6a], 1
jne 0x14017530d
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x58]
mov rcx, qword [rcx + 8]
lea r8, [rsp + 0x2c0]
mov edx, 0x23
call qword [str._a_]
test eax, eax
je 0x140175296
lea rdx, str.schannel:_failed_to_retrieve_ALPN_result
jmp 0x140173f9c
test al, 8
jne 0x140173f3c
lea rdx, str.schannel:_failed_to_setup_sequence_detection
mov rcx, r14
call fcn.140158420
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0x60]
test al, 4
jne 0x140173f56
lea rdx, str.schannel:_failed_to_setup_replay_detection
mov rcx, r14
call fcn.140158420
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0x60]
test al, 0x10
jne 0x140173f70
lea rdx, str.schannel:_failed_to_setup_confidentiality
mov rcx, r14
call fcn.140158420
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0x60]
bt eax, 8
jb 0x140173f8c
lea rdx, str.schannel:_failed_to_setup_memory_allocation
mov rcx, r14
call fcn.140158420
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0x60]
test ax, ax
js 0x140173375
lea rdx, str.schannel:_failed_to_setup_stream_orientation
mov rcx, r14
jmp 0x140173fad
lea rdx, str.SSL:_public_key_does_not_match_pinned_public_key_
mov rcx, qword [rsp + 0x68]
call fcn.140158420
jmp 0x140173375
lea rcx, [rsp + 0x2c0]
mov r8d, 0x100
mov dl, 0xaa
call fcn.1402b6a10
lea rdx, [rsp + 0x2c0]
mov r8d, 0x100
mov ecx, esi
call fcn.14017ab50
lea rdx, str.schannel:_next_InitializeSecurityContext_failed:__s
mov rcx, qword [rsp + 0x68]
mov r8, rax
call fcn.140158420
jmp 0x140173455
mov rcx, r15
xor edx, edx
mov r8b, 1
call fcn.14015c980
test rax, rax
js 0x1401733a8
mov qword [rsp + 0x108], 0xffffffffffffffff
mov r13, qword [rdi]
movaps xmm6, xmmword [0x1403d4b30]
movaps xmmword [rsp + 0x1a0], xmm6
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0x230], xmm6
movaps xmmword [rsp + 0x220], xmm6
movaps xmmword [rsp + 0x210], xmm6
movaps xmmword [rsp + 0x200], xmm6
movaps xmmword [rsp + 0x1f0], xmm6
movaps xmmword [rsp + 0x1e0], xmm6
movaps xmmword [rsp + 0x1d0], xmm6
movaps xmmword [rsp + 0x1c0], xmm6
movaps xmmword [rsp + 0x190], xmm6
movaps xmmword [rsp + 0x180], xmm6
movaps xmmword [rsp + 0x170], xmm6
movaps xmmword [rsp + 0x160], xmm6
movaps xmmword [rsp + 0x150], xmm6
xor eax, eax
mov qword [rsp + 0x148], rax
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0xe4], 0xaaaaaaaa
movaps xmmword [rsp + 0x130], xmm6
cmp dword [rdi + 0x3dc], 2
jne 0x1401740fc
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rcx, [rax + rax*2]
mov eax, 0x3c8
cmp dword [rdi + rcx*8 + 0x578], 2
jne 0x140174101
mov eax, 0x340
mov rax, qword [rdi + rax]
mov qword [rsp + 0x68], rax
mov ecx, 5
mov edx, 1
mov r8d, 2
mov r9d, 1
call fcn.140157cb0
test al, al
je 0x140174138
lea rdx, str.schannel:_Windows_version_is_old_and_may_not_be_able_to_connect_to_some_servers_due_to_lack_of_SNI__algorithms__etc._n
mov rcx, r13
call fcn.1401581f0
cmp byte [rdi + 0x671], 1
jne 0x140174163
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.wine_get_version
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1401741d5
xor eax, eax
mov rcx, qword [rbx + 8]
mov byte [rcx + 0x6a], al
cmp dword [rdi + 0x3dc], 2
jne 0x140174190
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
cmp dword [rdi + rax*8 + 0x578], 2
jne 0x1401741f5
cmp qword [rdi + 0x5c0], 0
je 0x1401741ff
mov ecx, 6
mov edx, 1
mov r8d, 2
mov r9d, 3
call fcn.140157cb0
mov cl, 1
test al, al
jne 0x140174201
lea rdx, str.schannel:_this_version_of_Windows_is_too_old_to_support_certificate_verification_via_CA_bundle_file.
mov rcx, r13
call fcn.140158420
mov r13d, Ordinal_79
jmp 0x140173375
mov ecx, 6
mov edx, 3
mov r8d, 2
mov r9d, 3
call fcn.140157cb0
jmp 0x140174165
cmp qword [rdi + 0x610], 0
jne 0x14017419a
xor ecx, ecx
mov rax, qword [rbx + 8]
mov byte [rax + 0x6b], cl
mov rax, qword [rbx + 8]
mov qword [rax], 0
cmp dword [rdi + 0x3dc], 2
jne 0x140174243
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
cmp dword [rdi + rax*8 + 0x578], 2
je 0x140174243
cmp byte [r13 + 0xb03], 0
je 0x140174295
jmp 0x14017424d
cmp byte [r13 + 0xa5b], 1
jne 0x140174295
mov rcx, rdi
call fcn.14014b540
lea rdx, [rsp + 0xe8]
mov rcx, rdi
xor r8d, r8d
mov r9d, dword [rsp + 0x9c]
call fcn.14014b590
test al, al
jne 0x14017428d
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rax, qword [rbx + 8]
mov rax, qword [rax]
inc dword [rax + 0x18]
mov rcx, rdi
call fcn.14014b570
mov byte [rsp + 0x67], sil
mov rax, qword [rbx + 8]
cmp qword [rax], 0
je 0x1401745f2
lea r8, [rsp + 0xe4]
mov ecx, 2
mov rdx, qword [rsp + 0x68]
call fcn.140177d60
test eax, eax
je 0x1401742e4
lea rdx, str.schannel:_using_IP_address__SNI_is_not_supported_by_OS._n
mov rcx, r13
call fcn.1401581f0
mov rax, qword [rbx + 8]
cmp byte [rax + 0x6a], 1
je 0x140174301
xor ecx, ecx
xor edx, edx
xor esi, esi
jmp 0x14017435c
lea r8, [rsp + 0x130]
mov ecx, reloc.WS2_32.dll_socket
mov rdx, qword [rsp + 0x68]
call fcn.140177d60
test eax, eax
jne 0x1401742c3
jmp 0x1401742d2
lea rsi, [rsp + 0x1c0]
mov dword [rsi + 4], 2
mov byte [rsi + 0xa], 8
movabs rax, 0x312e312f70747468
mov qword [rsi + 0xb], rax
lea rdx, str.schannel:_ALPN__offering__s_n
lea r8, str.http_1.1
mov rcx, r13
call fcn.1401581f0
mov ecx, 9
call fcn.1401518a0
mov word [rsi + 8], ax
movzx eax, ax
add eax, 6
mov dword [rsi], eax
mov rax, qword [rbx + 8]
mov edx, reloc.WS2_32.dll_select
mov ecx, reloc.WS2_32.dll_send
lea r8, [rsp + 0x110]
mov dword [r8], ecx
mov dword [r8 + 4], edx
mov qword [r8 + 8], rsi
movabs rcx, 0x100000000
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], r8
pxor xmm0, xmm0
lea rdx, [rsp + 0x1a0]
movdqa xmmword [rdx], xmm0
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], rdx
mov dword [rax + 0x5c], 0x811c
mov rax, qword [fcn.140119ad0]
mov ecx, 1
mov edx, Ordinal_27
call qword [str._a_]
mov rcx, qword [rbx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rbx + 8]
cmp qword [rax + 8], 0
je 0x14017454a
mov qword [rsp + 0x70], r13
mov r13, r12
mov rcx, qword [rsp + 0x68]
call fcn.1401a4610
test rax, rax
je 0x1401733a0
mov r12, rax
mov qword [rsp + 0x90], r15
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x30]
mov rdx, qword [rbx + 8]
mov rcx, qword [rdx]
mov r8, qword [rdx + 8]
lea r10, [r8 + 0x10]
lea r11, [rdx + 0x60]
xor esi, esi
cmp byte [rdx + 0x6a], 0
lea r15, [rsp + 0xf0]
cmove r15, rsi
mov r9d, dword [rdx + 0x5c]
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x50], r11
lea rdx, [rsp + 0x120]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], r8
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor edx, edx
mov r8, r12
call qword [str._a_]
mov esi, eax
mov rax, qword [fcn.140119970]
mov rcx, r12
call qword [str._a_]
cmp esi, 0x90312
jne 0x140174559
mov r9d, dword [rsp + 0x1a0]
mov r8, qword [rsp + 0x1a8]
mov r12, r13
mov rdx, qword [rdi + r13*8 + 0x4c0]
lea r15, [rsp + 0x108]
mov qword [rsp + 0x20], r15
mov rcx, rdi
call fcn.1401589a0
mov esi, eax
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x80]
mov rcx, qword [rsp + 0x1a8]
call qword [str._a_]
test esi, esi
sete al
mov r9d, dword [rsp + 0x1a0]
mov r8, qword [r15]
mov ecx, r9d
cmp r8, rcx
sete cl
test al, cl
jne 0x14017450a
lea rdx, str.schannel:_failed_to_send_initial_handshake_data:_sent__zd_of__lu_bytes
mov rcx, qword [rsp + 0x70]
jmp 0x140173450
mov rax, qword [rbx + 8]
mov dword [rax + 0x64], 0
mov rax, qword [rbx + 8]
xor ecx, ecx
mov byte [rax + 0x68], cl
mov rax, qword [rbx + 8]
mov byte [rax + 0x69], cl
mov rax, qword [rbx + 8]
mov byte [rax + 0x58], cl
mov dword [rbx + 4], 1
mov eax, 1
mov r15, qword [rsp + 0x90]
mov sil, byte [rsp + 0x67]
jmp 0x1401734d3
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, r13
jmp 0x14017339b
lea rcx, [rsp + 0x2c0]
mov r8d, 0x100
mov dl, 0xaa
call fcn.1402b6a10
mov rax, qword [fcn.140119970]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 8]
call qword [str._a_]
mov rax, qword [rbx + 8]
mov qword [rax + 8], 0
lea rdi, str.schannel:_initial_InitializeSecurityContext_failed:__s
cmp esi, 0x80090300
je 0x1401745ae
cmp esi, 0x80090322
je 0x1401745b6
mov r13d, 0x23
jmp 0x1401745c8
mov r13d, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1401745c8
mov r13d, 0x3c
lea rdi, str.schannel:_SNI_or_certificate_check_failed:__s
mov esi, 0x80090322
lea rdx, [rsp + 0x2c0]
mov r8d, 0x100
mov ecx, esi
call fcn.14017ab50
mov rcx, qword [rsp + 0x70]
mov rdx, rdi
mov r8, rax
call fcn.140158420
jmp 0x140173375
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmmword [rsp + 0x190], xmm0
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x170], xmm0
movdqa xmmword [rsp + 0x160], xmm0
mov dword [rsp + 0x150], 4
cmp byte [rdi + 0x5f8], 1
jne 0x140174678
cmp byte [rax + 0x6b], 0
mov ecx, 8
mov eax, 0x20
cmovne eax, ecx
cmp byte [r13 + 0xab3], 1
je 0x14017466a
cmp byte [r13 + 0xab5], 1
je 0x140174663
or eax, 0x200
jmp 0x14017466f
or eax, 0x1a00
jmp 0x14017466f
or eax, 0x1800
mov dword [rsp + 0x198], eax
jmp 0x140174688
mov dword [rsp + 0x198], 0x1808
mov eax, 0x1808
cmp byte [rdi + 0x5f9], 0
jne 0x14017469b
or eax, 4
mov dword [rsp + 0x198], eax
mov eax, dword [rdi + 0x5b0]
cmp eax, 7
ja 0x1401751ed
mov ecx, 0xf3
bt ecx, eax
mov qword [rsp + 0x70], r13
jae 0x14017476b
cmp dword [rdi + 0x3dc], 2
jne 0x140174703
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
lea rcx, [rdi + 0x600]
cmp dword [rdi + rax*8 + 0x578], 2
lea rax, [rdi + 0x5b0]
cmove rcx, rax
mov eax, dword [rcx]
mov edx, 0x5b4
mov ecx, 0x604
cmove rcx, rdx
jmp 0x140174708
mov ecx, 0x5b4
mov edx, dword [rdi + rcx]
test edx, 0xfffeffff
jne 0x140174718
mov edx, 0x60000
sar edx, 0x10
cmp eax, edx
jg 0x140174781
mov rcx, qword [rdi]
inc edx
xor r8d, r8d
lea r9, [0x1403ff7ac]
jmp 0x140174747
mov r10d, 0x800
or r8d, r10d
mov dword [rsp + 0x188], r8d
inc eax
cmp edx, eax
je 0x140174781
lea r10d, [rax - 4]
cmp r10d, 3
ja case.default.0x140174758
movsxd r10, dword [r9 + r10*4]
add r10, r9
jmp r10
mov r10d, 0x200
jmp 0x140174736
mov r10d, Ordinal_133
jmp 0x140174736
mov ecx, 0x20
cmp eax, 2
jne 0x14017477a
mov ecx, 8
mov dword [rsp + 0x188], ecx
cmp dword [rdi + 0x3dc], 2
mov qword [rsp + 0x88], r12
jne 0x1401747be
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
cmp dword [rdi + rax*8 + 0x578], 2
je 0x1401747be
mov r13, qword [rdi + 0x630]
test r13, r13
jne 0x1401747dc
jmp 0x140174b3c
cmp qword [rdi + 0x5e0], 0
je 0x140174b3c
mov r13, qword [rdi + 0x5e0]
test r13, r13
je 0x140174867
mov qword [rsp + 0x90], r15
mov qword [rsp + 0xa0], rbp
lea r15, [0x14044c170]
movabs rsi, 0x4148535f474c4143
xor r12d, r12d
xorps xmm7, xmm7
movabs rax, 0x4843535f474c4143
movq xmm8, rax
movabs rax, 0x414d5f4c454e4e41
movq xmm0, rax
movdqa xmm14, xmmword [str.CALG_SCHANNEL_MACHANNEL_MAC_KEY]
punpcklqdq xmm8, xmm0
movdqa xmm15, xmmword [0x1403fe990]
movdqa xmm9, xmmword [str.CHANNEL_ENC_KEY]
movdqa xmm10, xmmword [str.CALG_SCHANNEL_ENASH_REPLACE_OWF]
movdqa xmm11, xmmword [0x1403fe9c0]
movdqa xmm12, xmmword [str.CALG_HASH_REPLACCALG_ECDH_EPHEM]
movdqa xmm13, xmmword [0x1403fe9e0]
jmp 0x1401748c4
xor r12d, r12d
jmp 0x140174b1d
mov eax, 0x8003
jmp 0x140174895
mov eax, 0x8002
jmp 0x140174895
mov rcx, r13
call fcn.14029c0d0
mov rsi, rax
jmp 0x140174919
mov eax, 0x8001
mov rsi, rbp
inc r12
mov dword [r15], eax
mov rcx, r13
mov edx, 0x3a
call fcn.14027a740
test rax, rax
je 0x140174b0d
mov r13, rax
inc r13
add r15, 4
test r13, r13
je 0x140174b0d
cmp byte [r13], 0
je 0x140174b0d
cmp r12, 0x2c
ja 0x140174b0d
mov rcx, r13
xor edx, edx
xor r8d, r8d
call fcn.140293930
test eax, eax
jne 0x140174895
mov rbp, rsi
movaps xmmword [rsp + 0x2d0], xmm7
movaps xmmword [rsp + 0x2c0], xmm7
mov rcx, r13
mov edx, 0x3a
call fcn.14027a740
test rax, rax
je 0x14017487d
mov rsi, rax
sub rsi, r13
cmp rsi, 0x1f
mov eax, 0x1f
cmovae rsi, rax
lea rcx, [rsp + 0x2c0]
mov rdx, r13
mov r8, rsi
call fcn.14029c220
mov byte [rsp + rsi + 0x2c0], 0
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x32444d5f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
je 0x14017488d
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x34444d5f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
mov rsi, rbp
je 0x140174876
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x35444d5f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
je 0x14017486f
mov rcx, qword [rsp + 0x2c0]
xor rcx, rsi
movzx edx, byte [rsp + 0x2c8]
mov eax, 0x8004
or rdx, rcx
je 0x140174895
mov rcx, qword [rsp + 0x2c0]
xor rcx, rsi
movzx edx, word [rsp + 0x2c8]
xor rdx, 0x31
or rdx, rcx
je 0x140174895
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x43414d5f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
je 0x140175235
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x4153525f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c6]
movabs rdx, 0x4e4749535f4153
xor rcx, rdx
or rcx, rax
je 0x14017523f
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5353445f474c4143
xor rax, rcx
lea rcx, [rdx + 0x1200]
xor rcx, qword [rsp + 0x2c6]
or rcx, rax
je 0x140175251
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5f4f4e5f474c4143
xor rax, rcx
lea rcx, [rdx + 0xdfb]
xor rcx, qword [rsp + 0x2c5]
or rcx, rax
je 0x14017525b
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x4153525f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c6]
movabs rdx, 0x5859454b5f4153
xor rcx, rdx
or rcx, rax
je 0x140175556
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5345445f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
jne 0x140175688
mov eax, 0x6601
jmp 0x140174895
mov rbp, qword [rsp + 0xa0]
mov r15, qword [rsp + 0x90]
lea rax, [0x14044c170]
mov qword [rsp + 0x180], rax
mov dword [rsp + 0x178], r12d
mov r12, qword [rsp + 0x88]
mov r13, qword [rsp + 0x70]
mov rcx, qword [r13 + 0xa88]
test rcx, rcx
je 0x140174e2f
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0x2c0], xmm6
mov dword [rsp + 0x2d0], 0xaaaaaaaa
call fcn.1401a4610
test rax, rax
je 0x1401733a0
mov r12, rax
mov rcx, rax
mov dx, 0x5c
call fcn.14027aae0
mov r13d, 0x3a
test rax, rax
mov qword [rsp + 0x80], r12
je 0x140174c60
mov qword [rsp + 0xb0], rax
mov rsi, rax
sub rsi, r12
sar rsi, 1
lea rdx, str.CurrentUser
mov rcx, r12
mov r8, rsi
call fcn.14029db40
test eax, eax
je 0x140174fae
lea rdx, str.LocalMachine
mov rcx, r12
mov r8, rsi
call fcn.14029db40
test eax, eax
je 0x140174fa4
lea rdx, str.CurrentService
mov rcx, r12
mov r8, rsi
call fcn.14029db40
test eax, eax
je 0x1401751a5
lea rdx, str.Services
mov rcx, r12
mov r8, rsi
call fcn.14029db40
test eax, eax
je 0x1401751b2
lea rdx, str.Users
mov rcx, r12
mov r8, rsi
call fcn.14029db40
test eax, eax
je 0x1401751bf
lea rdx, str.CurrentUserGroupPolicy
mov rcx, r12
mov r8, rsi
call fcn.14029db40
test eax, eax
jne 0x1401755cf
mov dword [rsp + 0x78], 0x70000
jmp 0x140174fb6
mov r13d, reloc.WLDAP32.dll_Ordinal_27
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 0xa88]
cmp byte [rcx], 0
je 0x140174f72
lea rdx, [0x1403dbf71]
call fcn.1402960cc
test rax, rax
je 0x140174f72
mov rsi, rax
movaps xmmword [rsp + 0xc0], xmm6
xor r13d, r13d
mov rcx, rax
xor edx, edx
mov r8d, 2
call fcn.140298f70
test eax, eax
mov qword [rsp + 0x90], r15
je 0x140175560
xor r12d, r12d
xor r15d, r15d
mov rcx, rsi
call fcn.140297f14
mov rax, qword [fcn.140119970]
mov rcx, qword [rsp + 0x80]
call qword [str._a_]
test r15d, r15d
je 0x140175122
mov qword [rsp + 0x80], r12
mov qword [rsp + 0xc8], r12
mov dword [rsp + 0xc0], r13d
mov r13, qword [rsp + 0x70]
mov rcx, qword [r13 + 0xaa8]
xor r15d, r15d
test rcx, rcx
je 0x1401751cc
call fcn.14029c0d0
mov r12, rax
mov rax, qword [fcn.140119a10]
lea rcx, [r12*2 + 2]
call qword [str._a_]
mov rsi, rax
mov eax, 0
test r12, r12
je 0x140174d69
lea rax, [r12 + 1]
mov r8, qword [r13 + 0xaa8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
mov ecx, 0xfde9
mov edx, 8
mov r9d, r12d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r15d, r12d
xor ecx, ecx
cmp eax, r15d
mov edx, eax
cmovg rdx, rcx
test eax, eax
cmovs rdx, rcx
mov word [rsi + rdx*2], 0
lea rcx, [rsp + 0xc0]
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.CRYPT32.dll_PFXImportCertStore]
mov r13, rax
mov rax, qword [fcn.140119970]
mov rcx, rsi
call qword [str._a_]
mov rax, qword [fcn.140119970]
mov rcx, qword [rsp + 0x80]
call qword [str._a_]
test r13, r13
je 0x140175155
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov rcx, r13
mov edx, 0x10001
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov qword [rsp + 0x148], rax
test rax, rax
je 0x1401750f4
mov dword [rsp + 0x154], 1
lea rax, [rsp + 0x148]
mov qword [rsp + 0x158], rax
mov rcx, r13
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
mov r12, qword [rsp + 0x88]
mov r15, qword [rsp + 0x90]
mov r13, qword [rsp + 0x70]
mov rax, qword [fcn.140119ad0]
mov ecx, 1
mov edx, 0x20
call qword [str._a_]
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rax, qword [rbx + 8]
mov rax, qword [rax]
test rax, rax
je 0x140174f41
mov dword [rax + 0x18], 1
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x18]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx]
lea rdx, [rcx + 0x10]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
lea rcx, [rsp + 0x150]
mov qword [rsp + 0x20], rcx
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call qword [str._a_]
mov esi, eax
mov rcx, qword [rsp + 0x148]
test rcx, rcx
je 0x140174ec8
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test esi, esi
je 0x1401742a8
lea rdi, [rsp + 0x2c0]
mov r8d, 0x100
mov rcx, rdi
mov dl, 0xaa
call fcn.1402b6a10
mov r8d, 0x100
mov ecx, esi
mov rdx, rdi
call fcn.14017ab50
lea rdx, str.schannel:_AcquireCredentialsHandle_failed:__s
mov rcx, r13
mov r8, rax
call fcn.140158420
mov rax, qword [fcn.140119970]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx]
call qword [str._a_]
mov rax, qword [rbx + 8]
mov qword [rax], 0
xor eax, eax
cmp esi, 0x80090300
setne al
lea r13d, [rax*8 + 0x1b]
jmp 0x140173375
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, r13
call fcn.140158420
mov rcx, qword [rsp + 0x148]
mov r13d, reloc.WLDAP32.dll_Ordinal_27
test rcx, rcx
je 0x140173375
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
jmp 0x140173375
mov rcx, qword [rsp + 0x70]
mov r8, qword [rcx + 0xa88]
lea rdx, str.schannel:_Failed_to_get_certificate_location_or_file_for__s
call fcn.140158420
mov rax, qword [fcn.140119970]
mov rcx, qword [rsp + 0x80]
call qword [str._a_]
jmp 0x140173375
mov dword [rsp + 0x78], 0x20000
jmp 0x140174fb6
mov dword [rsp + 0x78], 0x10000
mov r12, qword [rsp + 0xb0]
add r12, 2
mov rcx, r12
mov dx, 0x5c
call fcn.14027aae0
test rax, rax
je 0x140174c60
mov rsi, rax
mov word [rax], 0
mov rax, qword [0x140433128]
mov rcx, r12
call qword [str._a_]
mov word [rsi], 0x5c
test rax, rax
je 0x140174c5a
mov r12, rax
add rsi, 2
mov rcx, rsi
call fcn.14029c474
cmp rax, 0x28
jne 0x140174c60
mov r9d, dword [rsp + 0x78]
or r9d, 0x4000
mov qword [rsp + 0x20], r12
mov ecx, 0xa
xor edx, edx
xor r8d, r8d
call qword [sym.imp.CRYPT32.dll_CertOpenStore]
test rax, rax
je 0x140175619
mov r13, rax
mov qword [rsp + 0x90], r15
mov rax, qword [fcn.140119970]
mov rcx, r12
call qword [str._a_]
lea r9, [rsp + 0x2c0]
lea r15, [rsp + 0xd0]
mov qword [r15 + 8], r9
mov dword [r15], reloc.WS2_32.dll_sendto
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], r15
mov rcx, rsi
mov edx, Ordinal_41
mov r8d, 4
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x14017518b
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x28], 0
mov rcx, r13
mov edx, 0x10001
xor r8d, r8d
mov r9d, 0x10000
call qword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov qword [rsp + 0x148], rax
mov rax, qword [fcn.140119970]
mov rcx, qword [rsp + 0x80]
call qword [str._a_]
cmp qword [rsp + 0x148], 0
jne 0x140174df4
jmp 0x140175115
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x70]
mov r8, qword [rcx + 0xa88]
lea rdx, str.schannel:_Failed_to_get_certificate_from_file__s__last_error_is_0x_x
mov r9d, eax
call fcn.140158420
mov rcx, r13
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
jmp 0x14017514a
mov rcx, qword [rsp + 0x70]
mov r8, qword [rcx + 0xa88]
lea rdx, str.schannel:_Failed_to_read_cert_file__s
call fcn.140158420
mov rax, qword [fcn.140119970]
mov rcx, r12
call qword [str._a_]
mov r13d, 0x3a
jmp 0x140173375
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x70]
mov r8, qword [rcx + 0xa88]
cmp eax, 0x56
jne 0x14017517a
lea rdx, str.schannel:_Failed_to_import_cert_file__s__password_is_bad
call fcn.140158420
jmp 0x14017514a
lea rdx, str.schannel:_Failed_to_import_cert_file__s__last_error_is_0x_x
mov r9d, eax
call fcn.140158420
jmp 0x14017514a
mov rax, qword [fcn.140119970]
mov rcx, qword [rsp + 0x80]
call qword [str._a_]
jmp 0x140175115
mov dword [rsp + 0x78], 0x40000
jmp 0x140174fb6
mov dword [rsp + 0x78], 0x50000
jmp 0x140174fb6
mov dword [rsp + 0x78], 0x60000
jmp 0x140174fb6
xor r12d, r12d
jmp 0x140174d1c
test sil, sil
je 0x1401733a8
mov rax, qword [rsp + 0xa0]
mov byte [rax], 0
jmp 0x140173372
lea rdx, str.Unrecognized_parameter_passed_via_CURLOPT_SSLVERSION
mov rcx, r13
jmp 0x14017520e
lea rdx, str.schannel:_TLS_1.3_is_not_yet_supported
jmp 0x14017520e
lea rdx, str.schannel:_failed_to_receive_handshake__SSL_TLS_connection_failed
mov rcx, qword [rsp + 0x68]
call fcn.140158420
jmp 0x140173455
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
lea rdx, str.select_poll_on_SSL_TLS_socket__errno:__d
mov rcx, r15
mov r8d, eax
call fcn.140158420
jmp 0x140173455
mov eax, 0x8005
jmp 0x140174895
mov eax, 0x2400
jmp 0x140174895
mov r13d, eax
jmp 0x140173375
mov eax, 0x2200
jmp 0x140174895
mov eax, 0x2000
jmp 0x140174895
mov r14, qword [rsp + 0xb8]
mov rcx, r14
mov rdx, r15
call fcn.14014c050
test eax, eax
je 0x14017528e
mov r13d, eax
mov rcx, r14
lea rdx, str.SSL:_public_key_does_not_match_pinned_public_key_
jmp 0x140173deb
xor r13d, r13d
jmp 0x140173d05
cmp dword [rsp + 0x2c0], 1
jne 0x1401752e5
lea rsi, [rsp + 0x2c9]
movzx r8d, byte [rsi - 1]
lea rdx, str.schannel:_ALPN__server_accepted_to_use__.s_n
mov rcx, r14
mov r9, rsi
call fcn.1401581f0
cmp byte [rsi - 1], 8
jne 0x1401752f4
movabs rax, 0x312e312f70747468
cmp qword [rsp + 0x2c9], rax
jne 0x1401752f4
mov dword [rdi + 0xb18], 2
jmp 0x1401752f4
lea rdx, str.ALPN__server_did_not_agree_to_a_protocol_n
mov rcx, r14
call fcn.1401581f0
xor eax, eax
cmp dword [rdi + 0xb18], 3
sete al
lea edx, [rax + rax*2]
dec edx
mov rcx, rdi
call fcn.14015c760
cmp dword [rdi + 0x3dc], 2
jne 0x140175345
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + rax*8], 2
je 0x140175345
cmp byte [r14 + 0xb03], 0
je 0x1401753eb
jmp 0x140175353
cmp byte [r14 + 0xa5b], 1
jne 0x1401753eb
lea rsi, [rsp + 0x150]
mov qword [rsi], 0
mov rcx, rdi
call fcn.14014b540
mov rcx, rdi
mov rdx, rsi
xor r8d, r8d
mov esi, dword [rsp + 0x9c]
mov r9d, esi
call fcn.14014b590
test al, al
jne 0x1401753a6
mov rdx, qword [rsp + 0x150]
mov rax, qword [rbx + 8]
cmp rdx, qword [rax]
je 0x1401753e3
mov rcx, rdi
call fcn.14014b8b0
mov esi, dword [rsp + 0x9c]
mov rax, qword [rbx + 8]
mov rdx, qword [rax]
mov r8d, 0x20
mov rcx, rdi
mov r9d, esi
call fcn.14014b8e0
test eax, eax
je 0x1401753d9
mov r13d, eax
mov rcx, rdi
call fcn.14014b570
lea rdx, str.schannel:_failed_to_store_credential_handle
jmp 0x140173f9c
mov rax, qword [rbx + 8]
mov rax, qword [rax]
inc dword [rax + 0x18]
mov rcx, rdi
call fcn.14014b570
cmp byte [r14 + 0xab0], 1
jne 0x140173e4a
mov rax, qword [0x14044c238]
mov rax, qword [rax + 0x58]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 8]
lea rsi, [rsp + 0x1c0]
mov edx, 0x53
mov r8, rsi
call qword [str._a_]
test eax, eax
setne al
mov r15, qword [rsi]
test r15, r15
sete cl
or cl, al
je 0x140175448
lea rdx, str.schannel:_failed_to_retrieve_remote_cert_context
mov rcx, r14
call fcn.140158420
jmp 0x140173e21
xor esi, esi
mov r12, qword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
xor eax, eax
mov rcx, qword [r15 + 0x20]
mov rdx, rax
call r12
test rax, rax
je 0x140175477
test byte [rax], 1
je 0x140175453
cmp qword [rax + 8], 0
je 0x140175453
cmp dword [rax + 0x10], 1
sbb esi, 0xffffffff
jmp 0x140175453
mov rcx, r14
mov edx, esi
call fcn.14014be80
mov r13d, eax
test eax, eax
je 0x140175495
mov rcx, qword [rsp + 0x1c0]
jmp 0x140174f67
mov r13d, 0xaaaaaaaa
mov qword [rsp + 0x68], 0
mov rbp, qword [rsp + 0x1c0]
mov qword [rsp + 0xa8], 0
xor r14d, r14d
mov rcx, qword [rbp + 0x20]
mov rdx, r14
call r12
test rax, rax
jne 0x1401754de
jmp 0x1401758fd
mov rcx, qword [rbp + 0x20]
mov rdx, r14
call r12
test rax, rax
je 0x140175533
mov r14, rax
test byte [rax], 1
je 0x1401754cf
mov r8, qword [r14 + 8]
test r8, r8
je 0x1401754cf
mov eax, dword [r14 + 0x10]
test eax, eax
je 0x1401754cf
mov r9d, eax
add r9, r8
mov r13, qword [rsp + 0x68]
mov edx, r13d
not edx
add edx, esi
mov rcx, rdi
call fcn.1401a5ac0
mov r15d, eax
inc r13d
mov qword [rsp + 0x68], r13
xor r13d, r13d
mov al, 1
mov qword [rsp + 0xa8], rax
test r15d, r15d
je 0x1401754bb
jmp 0x14017592e
mov rcx, qword [rsp + 0x1c0]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov r15, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x88]
jmp 0x140173e4a
mov eax, 0xa400
jmp 0x140174895
mov rcx, rsi
call fcn.14029927c
mov r13d, eax
test eax, eax
js 0x140174cb8
xor r15d, r15d
mov rcx, rsi
xor edx, edx
xor r8d, r8d
call fcn.140298f70
test eax, eax
je 0x14017558f
xor r12d, r12d
jmp 0x140174cbe
mov rax, qword [fcn.140119a10]
lea ecx, [r13 + 1]
call qword [str._a_]
test rax, rax
je 0x140174cb8
mov r12, rax
mov edx, r13d
mov r8d, 1
mov rcx, rax
mov r9, rsi
call fcn.140298bf0
xor r15d, r15d
cmp eax, 1
sete r15b
jmp 0x140174cbe
lea rdx, str.LocalMachineGroupPolicy
mov rcx, r12
mov r8, rsi
call fcn.14029db40
test eax, eax
je 0x14017560c
lea rdx, str.LocalMachineEnterprise
mov rcx, r12
mov r8, rsi
call fcn.14029db40
test eax, eax
jne 0x140174c60
mov dword [rsp + 0x78], 0x90000
jmp 0x140174fb6
mov dword [rsp + 0x78], 0x80000
jmp 0x140174fb6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str.schannel:_Failed_to_open_cert_store__x__s__last_error_is_0x_x
mov rcx, qword [rsp + 0x70]
mov r8d, dword [rsp + 0x78]
mov r9, r12
call fcn.140158420
mov rax, qword [fcn.140119970]
mov rcx, r12
call qword [str._a_]
mov rax, qword [fcn.140119970]
mov rcx, qword [rsp + 0x80]
jmp 0x140175144
mov eax, 0x6602
jmp 0x140174895
mov eax, 0x6604
jmp 0x140174895
mov eax, 0x6603
jmp 0x140174895
mov eax, 0x6609
jmp 0x140174895
mov rax, qword [rsp + 0x2c0]
movabs rdx, 0x4544335f474c4143
xor rax, rdx
mov rcx, qword [rsp + 0x2c6]
movabs r8, 0x3231315f534544
xor rcx, r8
or rcx, rax
je 0x14017567e
mov rax, qword [rsp + 0x2c0]
xor rax, rdx
movzx ecx, word [rsp + 0x2c8]
xor rcx, 0x53
or rcx, rax
je 0x140175674
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5345445f474c4143
xor rax, rcx
movzx ecx, word [rsp + 0x2c8]
xor rcx, 0x58
or rcx, rax
je 0x14017566a
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x3243525f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
je 0x140175660
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x3443525f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
je 0x1401758ad
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x4145535f474c4143
xor rax, rcx
movzx ecx, word [rsp + 0x2c8]
xor rcx, 0x4c
or rcx, rax
je 0x1401758b7
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5f48445f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c3]
movabs rdx, 0x46535f48445f47
xor rcx, rdx
or rcx, rax
je 0x1401758c1
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5f48445f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c6]
movabs rdx, 0x4d454850455f48
xor rcx, rdx
or rcx, rax
je 0x1401758cb
movdqu xmm0, xmmword [rsp + 0x2c3]
pcmpeqb xmm0, xmmword [str.G_AGREEDKEY_ANY]
movdqa xmm1, xmmword [rsp + 0x2c0]
pcmpeqb xmm1, xmmword [str.CALG_AGREEDKEY_ACALG_HUGHES_MD5]
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1401758d5
movdqa xmm0, xmmword [rsp + 0x2c0]
pcmpeqb xmm0, xmmword [0x1403fe950]
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1401758df
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x494b535f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c6]
movabs rdx, 0x4b43414a50494b
xor rcx, rdx
or rcx, rax
je 0x1401758e9
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x4b45545f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
je 0x1401758f3
movdqa xmm0, xmmword [rsp + 0x2c0]
pcmpeqb xmm0, xmmword [str.CALG_CYLINK_MEK]
pmovmskb eax, xmm0
cmp eax, 0xffff
jne 0x14017595d
mov eax, 0x660c
jmp 0x140174892
mov eax, 0x6801
jmp 0x140174892
mov eax, 0x6802
jmp 0x140174892
mov eax, 0xaa01
jmp 0x140174892
mov eax, 0xaa02
jmp 0x140174892
mov eax, 0xaa03
jmp 0x140174892
mov eax, 0xa003
jmp 0x140174892
mov eax, 0x660a
jmp 0x140174892
mov eax, 0x660b
jmp 0x140174892
mov rcx, qword [rsp + 0x1c0]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test byte [rsp + 0xa8], 1
mov r15, qword [rsp + 0xa0]
mov r12, qword [rsp + 0x88]
je 0x140173375
jmp 0x140173e4a
mov rcx, r14
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov r13d, r15d
jmp 0x140175488
mov eax, 0x4c02
jmp 0x140174892
mov eax, 0x4c01
jmp 0x140174892
mov eax, 0x8008
jmp 0x140174892
mov rax, qword [rsp + 0x2c8]
movabs rcx, 0x35444d4148535f33
xor rax, rcx
mov rcx, qword [rsp + 0x2c0]
movabs rdx, 0x4c53535f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2d0]
or rdx, rcx
or rdx, rax
je 0x140175953
mov rax, qword [rsp + 0x2c8]
movabs rcx, 0x52455453414d5f33
xor rax, rcx
mov rcx, qword [rsp + 0x2c0]
movabs rdx, 0x4c53535f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2d0]
or rdx, rcx
or rdx, rax
je 0x140175949
movdqu xmm0, xmmword [rsp + 0x2ca]
pcmpeqb xmm0, xmmword [str.NEL_MASTER_HASH]
movdqa xmm1, xmmword [rsp + 0x2c0]
pcmpeqb xmm1, xmm14
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x14017593f
movdqu xmm0, xmmword [rsp + 0x2c6]
pcmpeqb xmm0, xmm15
movdqa xmm1, xmmword [rsp + 0x2c0]
pcmpeqb xmm1, xmm8
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x140175c0e
movdqu xmm0, xmmword [rsp + 0x2c6]
pcmpeqb xmm0, xmm9
movdqa xmm1, xmmword [rsp + 0x2c0]
pcmpeqb xmm1, xmm10
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x140175c18
mov rax, qword [rsp + 0x2c8]
movabs rcx, 0x52455453414d5f31
xor rax, rcx
mov rcx, qword [rsp + 0x2c0]
movabs rdx, 0x5443505f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2d0]
or rdx, rcx
or rdx, rax
je 0x140175c22
mov rax, qword [rsp + 0x2c8]
movabs rcx, 0x52455453414d5f32
xor rax, rcx
mov rcx, qword [rsp + 0x2c0]
movabs rdx, 0x4c53535f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2d0]
or rdx, rcx
or rdx, rax
je 0x140175c2c
mov rax, qword [rsp + 0x2c8]
movabs rcx, 0x52455453414d5f31
xor rax, rcx
mov rcx, qword [rsp + 0x2c0]
movabs rdx, 0x534c545f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2d0]
or rdx, rcx
or rdx, rax
je 0x140175c36
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x3543525f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
je 0x140175c40
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x414d485f474c4143
xor rax, rcx
movzx ecx, word [rsp + 0x2c8]
xor rcx, 0x43
or rcx, rax
je 0x140175c4a
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x534c545f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c5]
movabs rdx, 0x46525031534c54
xor rcx, rdx
or rcx, rax
je 0x140175c54
movdqu xmm0, xmmword [rsp + 0x2c6]
pcmpeqb xmm0, xmm11
movdqa xmm1, xmmword [rsp + 0x2c0]
pcmpeqb xmm1, xmm12
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x140175c5e
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5345415f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c5]
movabs rdx, 0x3832315f534541
xor rcx, rdx
or rcx, rax
jne 0x140175c86
mov eax, 0x660e
jmp 0x140174892
mov eax, 0x4c03
jmp 0x140174892
mov eax, 0x4c07
jmp 0x140174892
mov eax, 0x4c04
jmp 0x140174892
mov eax, 0x4c05
jmp 0x140174892
mov eax, 0x4c06
jmp 0x140174892
mov eax, 0x660d
jmp 0x140174892
mov eax, 0x8009
jmp 0x140174892
mov eax, 0x800a
jmp 0x140174892
mov eax, 0x800b
jmp 0x140174892
mov eax, 0x6611
jmp 0x140174892
mov eax, 0x6610
jmp 0x140174892
mov eax, 0x660f
jmp 0x140174892
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5345415f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c5]
movabs rdx, 0x3239315f534541
xor rcx, rdx
or rcx, rax
je 0x140175c7c
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5345415f474c4143
xor rax, rcx
movabs rcx, 0x3635325f414853
add rcx, 0x11fcee
xor rcx, qword [rsp + 0x2c5]
or rcx, rax
je 0x140175c72
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x5345415f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2c8]
or rcx, rax
je 0x140175c68
mov rax, qword [rsp + 0x2c0]
xor rax, rbp
mov rcx, qword [rsp + 0x2c5]
movabs rdx, 0x3635325f414853
xor rcx, rdx
or rcx, rax
je 0x140175e39
mov rax, qword [rsp + 0x2c0]
xor rax, rbp
mov rcx, qword [rsp + 0x2c5]
movabs rdx, 0x3438335f414853
xor rcx, rdx
or rcx, rax
je 0x140175e43
mov rax, qword [rsp + 0x2c0]
xor rax, rbp
mov rcx, qword [rsp + 0x2c5]
movabs rdx, 0x3231355f414853
xor rcx, rdx
or rcx, rax
je 0x140175e4d
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x4443455f474c4143
xor rax, rcx
movzx ecx, word [rsp + 0x2c8]
xor rcx, 0x48
or rcx, rax
je 0x140175e57
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x4d43455f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c3]
movabs rdx, 0x56514d43455f47
xor rcx, rdx
or rcx, rax
je 0x140175e61
mov rax, qword [rsp + 0x2c0]
movabs rcx, 0x4443455f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2c3]
movabs rdx, 0x41534443455f47
xor rcx, rdx
or rcx, rax
je 0x140175e6b
movdqa xmm0, xmmword [rsp + 0x2c0]
pcmpeqb xmm0, xmm13
pmovmskb ecx, xmm0
mov eax, 0xae06
cmp ecx, 0xffff
mov rsi, rbp
je 0x140174895
jmp 0x140175e75
mov eax, 0x800c
jmp 0x140174892
mov eax, 0x800d
jmp 0x140174892
mov eax, 0x800e
jmp 0x140174892
mov eax, 0xaa05
jmp 0x140174892
mov eax, 0xa001
jmp 0x140174892
mov eax, 0x2203
jmp 0x140174892
lea rdx, str.Unable_to_set_ciphers_to_passed_via_SSL_CONN_CONFIG
mov rcx, qword [rsp + 0x70]
call fcn.140158420
mov r13d, 0x3b
jmp 0x140173375