Function at 0x1400c17d0
Capabilities:
Read file on windows
Receive data
Receive data on socket

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x548
movdqa xmmword [rsp + 0x530], xmm15
movdqa xmmword [rsp + 0x520], xmm14
movdqa xmmword [rsp + 0x510], xmm13
movdqa xmmword [rsp + 0x500], xmm12
movdqa xmmword [rsp + 0x4f0], xmm11
movdqa xmmword [rsp + 0x4e0], xmm10
movdqa xmmword [rsp + 0x4d0], xmm9
movdqa xmmword [rsp + 0x4c0], xmm8
movaps xmmword [rsp + 0x4b0], xmm7
movaps xmmword [rsp + 0x4a0], xmm6
mov r12, r9
mov rax, qword [0x1402b3040]
xor rax, rsp
mov qword [rsp + 0x498], rax
movsxd r15, edx
lea rbp, [r15 + r15*2]
cmp dword [rcx + rbp*8 + 0x548], 2
jne 0x1400c199f
mov byte [r12], 1
xor r13d, r13d
mov rcx, qword [rsp + 0x498]
xor rcx, rsp
call fcn.140191d70
mov eax, r13d
movaps xmm6, xmmword [rsp + 0x4a0]
movaps xmm7, xmmword [rsp + 0x4b0]
movaps xmm8, xmmword [rsp + 0x4c0]
movaps xmm9, xmmword [rsp + 0x4d0]
movaps xmm10, xmmword [rsp + 0x4e0]
movaps xmm11, xmmword [rsp + 0x4f0]
movaps xmm12, xmmword [rsp + 0x500]
movaps xmm13, xmmword [rsp + 0x510]
movaps xmm14, xmmword [rsp + 0x520]
movaps xmm15, xmmword [rsp + 0x530]
add rsp, 0x548
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, str.SSL_TLS_connection_timeout
mov rcx, rsi
call fcn.1400b0f00
mov r13d, 0x1c
jmp 0x1400c1875
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, qword [rsp + 0x68]
call fcn.1400b0f00
mov r13d, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1400c1875
lea rdx, str.schannel:_failed_to_send_next_handshake_data:_sent__zd_of__lu_bytes
mov rcx, qword [rsp + 0x68]
mov r8, rax
call fcn.1400b0f00
mov r13d, 0x23
jmp 0x1400c1875
lea rdx, str.schannel:_failed_to_receive_handshake__SSL_TLS_connection_failed
mov rcx, qword [rsp + 0x68]
call fcn.1400b0f00
jmp 0x1400c193e
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
cmp eax, 0x2733
jne 0x1400c1949
mov eax, 2
cmp dword [rbx + 4], 3
je 0x1400c1977
mov dword [rbx + 4], eax
mov rsi, qword [rsp + 0xa0]
mov eax, dword [rbx + 4]
test r14b, r14b
je 0x1400c1a47
lea ecx, [rax - 1]
xor r13d, r13d
cmp ecx, 3
jae 0x1400c1a47
jmp 0x1400c1875
mov r14d, r8d
mov rdi, rcx
mov dword [rsp + 0x94], edx
mov rsi, qword [rcx]
lea rbx, [rcx + rbp*8]
add rbx, 0x548
mov rax, qword [rcx + r15*8 + 0x4c0]
mov qword [rsp + 0xb0], rax
mov eax, dword [rbx + 4]
test eax, eax
je 0x1400c2403
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x98], r12
lea rcx, [rdi + 0x548]
lea rdx, [rdi + 0x578]
mov qword [rsp + 0x80], rdx
lea rdx, [rdi + 0x3c8]
mov qword [rsp + 0x78], rdx
lea rdx, [rdi + 0x340]
mov qword [rsp + 0xa8], rdx
lea rcx, [rcx + rbp*8]
add rcx, 8
mov qword [rsp + 0x70], rcx
xor r12d, r12d
movaps xmm6, xmmword [0x14026f080]
xorps xmm7, xmm7
movabs r15, 0x200000000
mov qword [rsp + 0xa0], rsi
mov byte [rsp + 0x67], r14b
lea ecx, [rax - 1]
cmp ecx, 3
jae 0x1400c363c
mov rcx, rsi
xor edx, edx
mov r8b, 1
call fcn.1400b5e20
test rax, rax
js 0x1400c18f4
mov ecx, dword [rbx + 4]
mov edx, ecx
and edx, 0xfffffffe
cmp edx, 2
jne 0x1400c1abe
cmp ecx, 3
mov r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0xb0]
cmove r8, rdx
cmp ecx, 2
mov rcx, 0xffffffffffffffff
cmove rcx, rdx
test r14b, r14b
cmovne rax, r12
mov rdx, 0xffffffffffffffff
mov r9, rax
call fcn.1400cebd0
test eax, eax
js 0x1400c360b
je 0x1400c35e6
mov rax, qword [rdi]
mov qword [rsp + 0x68], rax
movaps xmmword [rsp + 0x160], xmm6
movaps xmmword [rsp + 0x150], xmm6
movaps xmmword [rsp + 0x140], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x1a0], xmm6
movaps xmmword [rsp + 0x190], xmm6
movaps xmmword [rsp + 0x100], xmm6
cmp dword [rdi + 0x3dc], 2
jne 0x1400c1b2b
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + rax*8], 2
mov rcx, qword [rsp + 0x78]
jne 0x1400c1b33
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rbx + 8]
mov r13d, 0x23
cmp qword [rax], 0
je 0x1400c1875
cmp qword [rax + 8], 0
je 0x1400c1875
mov rsi, qword [rcx]
mov ebp, dword [rbx + 4]
cmp qword [rax + 0x50], 0
jne 0x1400c1b9f
mov qword [rax + 0x40], 0
mov rax, qword [rbx + 8]
mov qword [rax + 0x30], 0x1000
mov rax, qword [fcn.140136bd0]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 0x30]
call qword [0x1402a3ee8]
mov rcx, qword [rbx + 8]
mov qword [rcx + 0x50], rax
mov rax, qword [rbx + 8]
cmp qword [rax + 0x50], 0
je 0x1400c1ca3
mov rcx, qword [rax + 0x48]
test rcx, rcx
jne 0x1400c1bf2
mov byte [rax + 0x58], 0
mov rax, qword [rbx + 8]
mov qword [rax + 0x38], 0
mov rax, qword [rbx + 8]
mov qword [rax + 0x28], 0x1000
mov rax, qword [fcn.140136bd0]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 0x28]
call qword [0x1402a3ee8]
mov rcx, qword [rbx + 8]
mov qword [rcx + 0x48], rax
mov rax, qword [rbx + 8]
mov rcx, qword [rax + 0x48]
test rcx, rcx
je 0x1400c1ca3
mov rdx, qword [rax + 0x28]
mov r14, qword [rax + 0x38]
sub rdx, r14
cmp rdx, 0x3ff
ja 0x1400c1c32
add r14, 0x400
mov rax, qword [fcn.14018db60]
mov rdx, r14
call qword [0x1402a3ee8]
test rax, rax
je 0x1400c1c94
mov rcx, qword [rbx + 8]
mov qword [rcx + 0x48], rax
mov rax, qword [rbx + 8]
mov qword [rax + 0x28], r14
cmp ebp, 3
je 0x1400c1ef4
mov rax, qword [rbx + 8]
mov r8d, dword [rax + 0x28]
mov rdx, qword [rax + 0x38]
sub r8d, edx
add rdx, qword [rax + 0x48]
mov rax, qword [rsp + 0x88]
mov rcx, qword [rdi + rax*8 + 0x4c0]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_recv]
cmp eax, 0xffffffff
mov r14b, byte [rsp + 0x67]
je 0x1400c195c
test eax, eax
je 0x1400c1949
cdqe
mov rcx, qword [rbx + 8]
add qword [rcx + 0x38], rax
mov rax, qword [rbx + 8]
mov byte [rax + 0x58], 0
jmp 0x1400c1ef4
mov r13d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.schannel:_unable_to_re_allocate_memory
jmp 0x1400c1cb0
mov r13d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, qword [rsp + 0x68]
call fcn.1400b0f00
jmp 0x1400c1875
test r14d, r14d
jne 0x1400c2131
cmp dword [rsp + 0x144], 2
jne 0x1400c1d42
mov r9d, dword [rsp + 0x140]
test r9, r9
je 0x1400c1d42
mov r8, qword [rsp + 0x148]
mov rax, qword [rsp + 0x88]
mov rax, qword [rdi + rax*8 + 0x4c0]
mov dword [rsp + 0x2b0], 0xaaaaaaaa
xor edx, edx
cmp qword [rdi + 0x4c8], rax
sete dl
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1400b12d0
cmp dword [rsp + 0x2b0], 0
mov r9d, dword [rsp + 0x140]
jne 0x1400c192a
cmp rax, r9
jne 0x1400c192a
mov rcx, qword [rsp + 0x148]
test rcx, rcx
je 0x1400c1d63
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x80]
call qword [0x1402a3ee8]
cmp dword [rsp + 0x154], 2
jne 0x1400c1ddd
mov r9d, dword [rsp + 0x150]
test r9, r9
je 0x1400c1ddd
mov r8, qword [rsp + 0x158]
mov rax, qword [rsp + 0x88]
mov rax, qword [rdi + rax*8 + 0x4c0]
mov dword [rsp + 0x2b0], 0xaaaaaaaa
xor edx, edx
cmp qword [rdi + 0x4c8], rax
sete dl
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1400b12d0
cmp dword [rsp + 0x2b0], 0
mov r9d, dword [rsp + 0x150]
jne 0x1400c192a
cmp rax, r9
jne 0x1400c192a
mov rcx, qword [rsp + 0x158]
test rcx, rcx
je 0x1400c1dfe
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x80]
call qword [0x1402a3ee8]
cmp dword [rsp + 0x164], 2
jne 0x1400c1e78
mov r9d, dword [rsp + 0x160]
test r9, r9
je 0x1400c1e78
mov r8, qword [rsp + 0x168]
mov rax, qword [rsp + 0x88]
mov rax, qword [rdi + rax*8 + 0x4c0]
mov dword [rsp + 0x2b0], 0xaaaaaaaa
xor edx, edx
cmp qword [rdi + 0x4c8], rax
sete dl
lea rax, [rsp + 0x2b0]
mov qword [rsp + 0x20], rax
mov rcx, rdi
call fcn.1400b12d0
cmp dword [rsp + 0x2b0], 0
mov r9d, dword [rsp + 0x160]
jne 0x1400c192a
cmp rax, r9
jne 0x1400c192a
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x1400c1e99
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x80]
call qword [0x1402a3ee8]
cmp dword [rsp + 0x1a4], 5
mov rax, qword [rbx + 8]
jne 0x1400c2161
mov r8d, dword [rsp + 0x1a0]
test r8d, r8d
je 0x1400c2161
mov rdx, qword [rax + 0x38]
cmp rdx, r8
jbe 0x1400c2169
mov rcx, qword [rax + 0x48]
add rdx, rcx
sub rdx, r8
call fcn.1401cd6e0
mov eax, dword [rsp + 0x1a0]
mov rcx, qword [rbx + 8]
mov qword [rcx + 0x38], rax
cmp r14d, 0x90312
jne 0x1400c218b
mov rax, qword [rbx + 8]
mov r14, qword [rax + 0x38]
mov rax, qword [fcn.140136bd0]
mov rcx, r14
call qword [0x1402a3ee8]
mov dword [rsp + 0x190], r14d
mov dword [rsp + 0x194], 2
mov qword [rsp + 0x198], rax
lea rcx, [rsp + 0x1a0]
movaps xmmword [rcx], xmm7
mov qword [rsp + 0x100], r15
lea rcx, [rsp + 0x190]
mov qword [rsp + 0x108], rcx
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x148], r12
movabs rcx, 0x1100000000
mov qword [rsp + 0x150], rcx
lea rcx, [rsp + 0x158]
mov qword [rcx + 0x10], r12
movups xmmword [rcx], xmm7
movabs rcx, 0x300000000
mov qword [rsp + 0x110], rcx
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x118], rcx
test rax, rax
je 0x1400c190e
mov rcx, qword [rbx + 8]
mov r8, qword [rcx + 0x38]
mov rdx, qword [rcx + 0x48]
mov rcx, rax
call fcn.1401cd6e0
mov r13d, reloc.WLDAP32.dll_Ordinal_27
test rsi, rsi
je 0x1400c1875
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov ecx, 0xfde9
mov edx, 8
mov r8, rsi
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400c1875
mov r14d, eax
mov rax, qword [fcn.140136bd0]
lea ecx, [r14 + r14]
call qword [0x1402a3ee8]
test rax, rax
je 0x1400c1875
mov rbp, rax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
xor edx, edx
mov r8, rsi
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x1400c211c
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x30]
mov r8, qword [rbx + 8]
mov rcx, qword [r8]
mov rdx, qword [r8 + 8]
lea r10, [rdx + 0x10]
mov r9d, dword [r8 + 0x5c]
add r8, 0x60
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x50], r8
lea r8, [rsp + 0x110]
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x38], r12d
lea r8, [rsp + 0x100]
mov qword [rsp + 0x30], r8
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
mov r8, rbp
call qword [0x1402a3ee8]
mov r14d, eax
mov rax, qword [fcn.14018db40]
mov rcx, rbp
call qword [0x1402a3ee8]
mov rax, qword [fcn.14018db40]
mov rcx, qword [rsp + 0x198]
call qword [0x1402a3ee8]
mov qword [rsp + 0x198], r12
cmp r14d, 0x90311
jle 0x1400c1cbf
cmp r14d, 0x90312
je 0x1400c1cc8
cmp r14d, 0x90320
jne 0x1400c238d
mov rax, qword [rbx + 8]
mov ecx, dword [rax + 0x5c]
test cl, cl
js 0x1400c3cb5
or ecx, 0x80
mov dword [rax + 0x5c], ecx
mov eax, 3
jmp 0x1400c214b
mov rax, qword [fcn.14018db40]
mov rcx, rbp
call qword [0x1402a3ee8]
jmp 0x1400c1875
cmp r14d, 0x80090318
jne 0x1400c238d
mov rax, qword [rbx + 8]
mov byte [rax + 0x58], 1
mov eax, 2
mov r14b, byte [rsp + 0x67]
jmp 0x1400c1974
mov rax, qword [fcn.14018db40]
mov rcx, r14
jmp 0x1400c2126
mov qword [rax + 0x38], 0
test r14d, r14d
je 0x1400c2190
cmp r14d, 0x90312
jne 0x1400c2197
mov dword [rbx + 4], 2
mov rsi, qword [rsp + 0xa0]
jmp 0x1400c22bc
test r14d, r14d
jne 0x1400c2197
mov dword [rbx + 4], 4
cmp dword [rdi + 0x3dc], 2
mov rsi, qword [rsp + 0xa0]
jne 0x1400c21cc
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rcx, [rax + rax*2]
mov eax, 0xcd0
mov rdx, qword [rsp + 0x80]
cmp dword [rdx + rcx*8], 2
jne 0x1400c21d1
mov eax, 0xcc8
mov rcx, qword [rsp + 0x68]
mov r14, qword [rcx + rax]
test r14, r14
je 0x1400c22a9
mov r13, qword [rdi]
mov qword [rsp + 0xf0], 0
mov r8d, 0x1e0
lea rcx, [rsp + 0x2b0]
mov dl, 0xaa
call fcn.1401cdd80
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x58]
mov rcx, qword [rsp + 0x70]
mov rcx, qword [rcx]
mov rcx, qword [rcx + 8]
mov edx, 0x53
lea r8, [rsp + 0xf0]
call qword [0x1402a3ee8]
mov ebp, eax
test eax, eax
setne cl
mov rax, qword [rsp + 0xf0]
test rax, rax
sete dl
or dl, cl
cmp dl, 1
jne 0x1400c22c6
mov r8d, 0x100
lea r14, [rsp + 0x1b0]
mov rcx, r14
mov dl, 0xaa
call fcn.1401cdd80
mov r8d, 0x100
mov ecx, ebp
mov rdx, r14
call fcn.1400c8fd0
mov rcx, r13
lea rdx, str.schannel:_Failed_to_read_remote_certificate_context:__s
mov r8, rax
call fcn.1400b0f00
mov r13d, 0x5a
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x1400c22a0
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test r13d, r13d
jne 0x1400c2342
cmp byte [rdi + 0x5f8], 1
jne 0x1400c22bc
mov rax, qword [rbx + 8]
cmp byte [rax + 0x6b], 0
jne 0x1400c2321
mov r14b, byte [rsp + 0x67]
jmp 0x1400c197f
mov qword [rsp + 0xb8], r13
mov r13d, 0x5a
test byte [rax], 1
je 0x1400c228d
mov ebp, dword [rax + 0x10]
test rbp, rbp
je 0x1400c228d
mov rsi, qword [rax + 8]
mov r8d, 0x1e0
lea rcx, [rsp + 0x2b0]
xor edx, edx
call fcn.1401cdd80
add rbp, rsi
lea rcx, [rsp + 0x2b0]
mov rdx, rsi
mov r8, rbp
call fcn.1400f0cf0
test eax, eax
je 0x1400c234e
mov rsi, qword [rsp + 0xa0]
jmp 0x1400c228d
mov rcx, rdi
mov edx, dword [rsp + 0x94]
call fcn.1400efdb0
test eax, eax
mov r14b, byte [rsp + 0x67]
je 0x1400c197f
jmp 0x1400c3c44
lea rdx, str.SSL:_public_key_does_not_match_pinned_public_key_
jmp 0x1400c1cb0
mov r8, qword [rsp + 0x3d0]
test r8, r8
mov rsi, qword [rsp + 0xa0]
je 0x1400c2374
mov r9, qword [rsp + 0x3e0]
sub r9, r8
ja 0x1400c3c84
mov rcx, qword [rsp + 0xb8]
lea rdx, str.SSL:_failed_retrieving_public_key_from_server_certificate
call fcn.1400b0f00
jmp 0x1400c228d
lea rcx, [rsp + 0x2b0]
mov r8d, 0x100
mov dl, 0xaa
call fcn.1401cdd80
cmp r14d, 0x80090300
je 0x1400c23c3
cmp r14d, 0x80090322
jne 0x1400c23cb
mov r13d, 0x3c
lea rsi, str.schannel:_SNI_or_certificate_check_failed:__s
jmp 0x1400c23d8
mov r13d, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1400c23d1
mov r13d, 0x23
lea rsi, str.schannel:_next_InitializeSecurityContext_failed:__s
lea rdx, [rsp + 0x2b0]
mov r8d, 0x100
mov ecx, r14d
call fcn.1400c8fd0
mov rcx, qword [rsp + 0x68]
mov rdx, rsi
mov r8, rax
call fcn.1400b0f00
jmp 0x1400c1875
mov rcx, rsi
xor edx, edx
mov r8b, 1
call fcn.1400b5e20
test rax, rax
js 0x1400c18f4
mov r13, qword [rdi]
movaps xmm6, xmmword [0x14026f080]
movaps xmmword [rsp + 0x190], xmm6
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0x220], xmm6
movaps xmmword [rsp + 0x210], xmm6
movaps xmmword [rsp + 0x200], xmm6
movaps xmmword [rsp + 0x1f0], xmm6
movaps xmmword [rsp + 0x1e0], xmm6
movaps xmmword [rsp + 0x1d0], xmm6
movaps xmmword [rsp + 0x1c0], xmm6
movaps xmmword [rsp + 0x1b0], xmm6
movaps xmmword [rsp + 0x180], xmm6
movaps xmmword [rsp + 0x170], xmm6
movaps xmmword [rsp + 0x160], xmm6
movaps xmmword [rsp + 0x150], xmm6
movaps xmmword [rsp + 0x140], xmm6
xor eax, eax
mov qword [rsp + 0x138], rax
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0xe4], 0xaaaaaaaa
movaps xmmword [rsp + 0x120], xmm6
cmp dword [rdi + 0x3dc], 2
jne 0x1400c24f9
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rcx, [rax + rax*2]
mov eax, 0x3c8
cmp dword [rdi + rcx*8 + 0x578], 2
jne 0x1400c24fe
mov eax, 0x340
mov rax, qword [rdi + rax]
mov qword [rsp + 0xa8], rax
mov ecx, 5
mov edx, 1
mov r8d, 2
mov r9d, 1
call fcn.1400b0770
test al, al
je 0x1400c2538
lea rdx, str.schannel:_Windows_version_is_old_and_may_not_be_able_to_connect_to_some_servers_due_to_lack_of_SNI__algorithms__etc._n
mov rcx, r13
call fcn.1400b0c00
cmp byte [rdi + 0x671], 1
jne 0x1400c2563
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.wine_get_version
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400c25d5
xor eax, eax
mov rcx, qword [rbx + 8]
mov byte [rcx + 0x6a], al
cmp dword [rdi + 0x3dc], 2
jne 0x1400c2590
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
cmp dword [rdi + rax*8 + 0x578], 2
jne 0x1400c25f5
cmp qword [rdi + 0x5c0], 0
je 0x1400c25ff
mov ecx, 6
mov edx, 1
mov r8d, 2
mov r9d, 3
call fcn.1400b0770
mov cl, 1
test al, al
jne 0x1400c2601
lea rdx, str.schannel:_this_version_of_Windows_is_too_old_to_support_certificate_verification_via_CA_bundle_file.
mov rcx, r13
call fcn.1400b0f00
mov r13d, Ordinal_79
jmp 0x1400c1875
mov ecx, 6
mov edx, 3
mov r8d, 2
mov r9d, 3
call fcn.1400b0770
jmp 0x1400c2565
cmp qword [rdi + 0x610], 0
jne 0x1400c259a
xor ecx, ecx
mov rax, qword [rbx + 8]
mov byte [rax + 0x6b], cl
mov rax, qword [rbx + 8]
mov qword [rax], 0
cmp dword [rdi + 0x3dc], 2
jne 0x1400c263b
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
cmp dword [rdi + rax*8 + 0x578], 2
jne 0x1400c26e1
cmp byte [r13 + 0xa5b], 1
jne 0x1400c26ef
mov rcx, qword [rdi]
mov rdx, qword [rcx + 0xe0]
test rdx, rdx
je 0x1400c267b
test byte [rdx], 0x10
je 0x1400c267b
mov rax, qword [rdx + 8]
test rax, rax
je 0x1400c267b
mov r9, qword [rdx + 0x18]
mov edx, 4
mov r8d, 2
call qword [0x1402a3ee8]
lea rdx, [rsp + 0xe8]
mov rcx, rdi
xor r8d, r8d
mov r9d, dword [rsp + 0x94]
call fcn.1400a35d0
test al, al
jne 0x1400c26b3
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rax, qword [rbx + 8]
mov rax, qword [rax]
inc dword [rax + 0x18]
mov rcx, qword [rdi]
mov rdx, qword [rcx + 0xe0]
test rdx, rdx
je 0x1400c26ef
test byte [rdx], 0x10
je 0x1400c26ef
mov rax, qword [rdx + 0x10]
test rax, rax
je 0x1400c26ef
mov r8, qword [rdx + 0x18]
mov edx, 4
call qword [0x1402a3ee8]
jmp 0x1400c26ef
cmp byte [r13 + 0xb03], 0
jne 0x1400c2649
mov qword [rsp + 0xa0], rsi
mov rax, qword [rbx + 8]
cmp qword [rax], 0
je 0x1400c2a2a
lea r8, [rsp + 0xe4]
mov ecx, 2
mov rsi, qword [rsp + 0xa8]
mov rdx, rsi
call fcn.1400c61d0
test eax, eax
je 0x1400c2747
lea rdx, str.schannel:_using_IP_address__SNI_is_not_supported_by_OS._n
mov rcx, r13
call fcn.1400b0c00
mov rax, qword [rbx + 8]
cmp byte [rax + 0x6a], 1
je 0x1400c2771
xor ecx, ecx
xor edx, edx
xor esi, esi
jmp 0x1400c27c2
lea r8, [rsp + 0x120]
mov ecx, Ordinal_26
mov rdx, rsi
call fcn.1400c61d0
test eax, eax
jne 0x1400c2726
jmp 0x1400c2735
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, r13
jmp 0x1400c191a
lea rsi, [rsp + 0x1b0]
mov dword [rsi + 4], 2
mov byte [rsi + 0xa], 8
movabs rax, 0x312e312f70747468
mov qword [rsi + 0xb], rax
lea rdx, str.schannel:_ALPN__offering__s_n
lea r8, str.http_1.1
mov rcx, r13
call fcn.1400b0c00
mov word [rsi + 8], 9
mov dword [rsi], 0xf
mov rax, qword [rbx + 8]
mov edx, 0x12
mov ecx, 0x13
lea r8, [rsp + 0x100]
mov dword [r8], ecx
mov dword [r8 + 4], edx
mov qword [r8 + 8], rsi
movabs rcx, 0x100000000
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], r8
pxor xmm0, xmm0
lea rdx, [rsp + 0x190]
movdqa xmmword [rdx], xmm0
mov qword [rsp + 0x110], rcx
mov qword [rsp + 0x118], rdx
mov dword [rax + 0x5c], 0x811c
mov rax, qword [fcn.14018dbe0]
mov ecx, 1
mov edx, Ordinal_26
call qword [0x1402a3ee8]
mov rcx, qword [rbx + 8]
mov qword [rcx + 8], rax
mov rax, qword [rbx + 8]
cmp qword [rax + 8], 0
je 0x1400c2762
mov qword [rsp + 0x68], r13
mov r13d, reloc.WLDAP32.dll_Ordinal_27
mov r8, qword [rsp + 0xa8]
test r8, r8
je 0x1400c1875
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov ecx, 0xfde9
mov edx, 8
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x1400c1875
mov esi, eax
mov byte [rsp + 0x67], r14b
mov rax, qword [fcn.140136bd0]
lea ecx, [rsi + rsi]
call qword [0x1402a3ee8]
test rax, rax
je 0x1400c1875
mov r14, rax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
xor esi, esi
mov ecx, 0xfde9
xor edx, edx
mov r8, qword [rsp + 0xa8]
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x1400c2155
mov r13, r15
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x30]
mov rdx, qword [rbx + 8]
mov rcx, qword [rdx]
mov r8, qword [rdx + 8]
lea r10, [r8 + 0x10]
lea r11, [rdx + 0x60]
cmp byte [rdx + 0x6a], 0
lea r15, [rsp + 0xf0]
cmove r15, rsi
mov r9d, dword [rdx + 0x5c]
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x50], r11
lea rdx, [rsp + 0x110]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], r8
mov dword [rsp + 0x38], esi
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor edx, edx
mov r8, r14
call qword [0x1402a3ee8]
mov esi, eax
mov rax, qword [fcn.14018db40]
mov rcx, r14
call qword [0x1402a3ee8]
cmp esi, 0x90312
jne 0x1400c3bb8
mov r9d, dword [rsp + 0x190]
mov r8, qword [rsp + 0x198]
mov r15, r13
mov rax, qword [rdi + r13*8 + 0x4c0]
lea r14, [rsp + 0x2b0]
mov dword [r14], 0xaaaaaaaa
xor edx, edx
cmp qword [rdi + 0x4c8], rax
sete dl
mov qword [rsp + 0x20], r14
mov rcx, rdi
call fcn.1400b12d0
mov rsi, rax
mov r14d, dword [r14]
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x80]
mov rcx, qword [rsp + 0x198]
call qword [0x1402a3ee8]
mov r9d, dword [rsp + 0x190]
test r14d, r14d
jne 0x1400c3c4c
cmp rsi, r9
jne 0x1400c3c4c
mov rax, qword [rbx + 8]
mov dword [rax + 0x64], 0
mov rax, qword [rbx + 8]
xor ecx, ecx
mov byte [rax + 0x68], cl
mov rax, qword [rbx + 8]
mov byte [rax + 0x69], cl
mov rax, qword [rbx + 8]
mov byte [rax + 0x58], cl
mov dword [rbx + 4], 1
mov eax, 1
mov rsi, qword [rsp + 0xa0]
mov r14b, byte [rsp + 0x67]
jmp 0x1400c19d5
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x140], xmm0
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x170], xmm0
movdqa xmmword [rsp + 0x160], xmm0
movdqa xmmword [rsp + 0x150], xmm0
mov dword [rsp + 0x140], 4
cmp byte [rdi + 0x5f8], 1
jne 0x1400c2ab0
cmp byte [rax + 0x6b], 0
mov ecx, 8
mov eax, 0x20
cmovne eax, ecx
cmp byte [r13 + 0xab3], 1
je 0x1400c2aa2
cmp byte [r13 + 0xab5], 1
je 0x1400c2a9b
or eax, 0x200
jmp 0x1400c2aa7
or eax, 0x1a00
jmp 0x1400c2aa7
or eax, 0x1800
mov dword [rsp + 0x188], eax
jmp 0x1400c2ac0
mov dword [rsp + 0x188], 0x1808
mov eax, 0x1808
cmp byte [rdi + 0x5f9], 0
jne 0x1400c2ad3
or eax, 4
mov dword [rsp + 0x188], eax
mov edx, dword [rdi + 0x5b0]
cmp edx, 7
ja 0x1400c2afe
mov eax, 0xf3
bt eax, edx
jae 0x1400c2bb3
mov eax, dword [rdi + 0x3dc]
cmp eax, 2
je 0x1400c2b0d
mov ecx, 0x5b4
jmp 0x1400c2b49
lea rdx, str.Unrecognized_parameter_passed_via_CURLOPT_SSLVERSION
mov rcx, r13
jmp 0x1400c1955
xor ecx, ecx
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne cl
lea rcx, [rcx + rcx*2]
lea rdx, [rdi + 0x600]
cmp dword [rdi + rcx*8 + 0x578], 2
lea rcx, [rdi + 0x5b0]
cmove rdx, rcx
mov edx, dword [rdx]
mov r8d, 0x5b4
mov ecx, 0x604
cmove rcx, r8
mov r8d, dword [rdi + rcx]
test r8d, 0xfffeffff
jne 0x1400c2b5c
mov r8d, 0x60000
sar r8d, 0x10
cmp edx, r8d
jg 0x1400c2bcf
mov rcx, qword [rdi]
inc r8d
xor r9d, r9d
lea r10, [0x140291ce8]
jmp 0x1400c2b8f
mov r11d, 0x800
or r9d, r11d
mov dword [rsp + 0x178], r9d
inc edx
cmp r8d, edx
je 0x1400c2bcf
lea r11d, [rdx - 4]
cmp r11d, 3
ja case.default.0x1400c2ba0
movsxd r11, dword [r10 + r11*4]
add r11, r10
jmp r11
mov r11d, 0x200
jmp 0x1400c2b7d
mov r11d, Ordinal_133
jmp 0x1400c2b7d
mov eax, 0x20
cmp edx, 2
jne 0x1400c2bc2
mov eax, 8
mov dword [rsp + 0x178], eax
mov eax, dword [rdi + 0x3dc]
cmp eax, 2
mov byte [rsp + 0x67], r14b
mov qword [rsp + 0x68], r13
jne 0x1400c2c02
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
cmp dword [rdi + rax*8 + 0x578], 2
je 0x1400c2c02
mov r13, qword [rdi + 0x630]
jmp 0x1400c2c09
mov r13, qword [rdi + 0x5e0]
test r13, r13
je 0x1400c2f6a
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x98], r12
lea r15, [0x1402cbd70]
movabs rsi, 0x4148535f474c4143
xor r14d, r14d
xorps xmm7, xmm7
movabs rax, 0x4843535f474c4143
movq xmm8, rax
movabs rax, 0x414d5f4c454e4e41
movq xmm0, rax
movdqa xmm14, xmmword [str.CALG_SCHANNEL_MACHANNEL_MAC_KEY]
punpcklqdq xmm8, xmm0
movdqa xmm15, xmmword [0x140290f00]
movdqa xmm9, xmmword [str.CHANNEL_ENC_KEY]
movdqa xmm10, xmmword [str.CALG_SCHANNEL_ENASH_REPLACE_OWF]
movdqa xmm11, xmmword [0x140290f30]
movdqa xmm12, xmmword [str.CALG_HASH_REPLACCALG_ECDH_EPHEM]
movdqa xmm13, xmmword [0x140290f50]
jmp 0x1400c2cf5
mov eax, 0x2400
jmp 0x1400c2cd1
mov eax, 0x8005
jmp 0x1400c2cd1
mov eax, 0x8003
jmp 0x1400c2cd1
mov eax, 0x8002
jmp 0x1400c2cd1
mov rcx, r13
call fcn.1401b34d0
mov rsi, rax
jmp 0x1400c2d4a
mov eax, 0x8001
mov rsi, r12
inc r14
mov dword [r15], eax
mov rcx, r13
mov edx, 0x3a
call fcn.14019053c
lea r13, [rax + 1]
add r15, 4
test rax, rax
je 0x1400c2f3e
cmp byte [r13], 0
je 0x1400c2f3e
cmp r14, 0x2c
ja 0x1400c2f3e
mov rcx, r13
xor edx, edx
xor r8d, r8d
call fcn.1401ab590
test eax, eax
jne 0x1400c2cd1
mov r12, rsi
movaps xmmword [rsp + 0x2c0], xmm7
movaps xmmword [rsp + 0x2b0], xmm7
mov rcx, r13
mov edx, 0x3a
call fcn.14019053c
test rax, rax
je 0x1400c2cb9
mov rsi, rax
sub rsi, r13
cmp rsi, 0x1f
mov eax, 0x1f
cmovae rsi, rax
lea rcx, [rsp + 0x2b0]
mov rdx, r13
mov r8, rsi
call fcn.1401b3620
mov byte [rsp + rsi + 0x2b0], 0
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x32444d5f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
je 0x1400c2cc9
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x34444d5f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
mov rsi, r12
je 0x1400c2cb2
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x35444d5f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
je 0x1400c2cab
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsi
movzx edx, byte [rsp + 0x2b8]
mov eax, 0x8004
or rdx, rcx
je 0x1400c2cd1
mov rcx, qword [rsp + 0x2b0]
xor rcx, rsi
movzx edx, word [rsp + 0x2b8]
xor rdx, 0x31
or rdx, rcx
je 0x1400c2cd1
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x43414d5f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
je 0x1400c2ca4
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x4153525f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b6]
movabs rdx, 0x4e4749535f4153
xor rcx, rdx
or rcx, rax
je 0x1400c2c9d
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5353445f474c4143
xor rax, rcx
lea rcx, [rdx + 0x1200]
xor rcx, qword [rsp + 0x2b6]
or rcx, rax
je 0x1400c3628
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5f4f4e5f474c4143
xor rax, rcx
lea rcx, [rdx + 0xdfb]
xor rcx, qword [rsp + 0x2b5]
or rcx, rax
je 0x1400c3632
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x4153525f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b6]
movabs rdx, 0x5859454b5f4153
xor rcx, rdx
or rcx, rax
je 0x1400c3c6d
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5345445f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
jne 0x1400c3dfd
mov eax, 0x6601
jmp 0x1400c2cd1
lea rax, [0x1402cbd70]
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x168], r14d
mov r12, qword [rsp + 0x98]
mov r15, qword [rsp + 0x88]
mov r14b, byte [rsp + 0x67]
mov r13, qword [rsp + 0x68]
mov rsi, qword [r13 + 0xa88]
test rsi, rsi
je 0x1400c30f8
movaps xmmword [rsp + 0xd0], xmm6
movaps xmmword [rsp + 0x2b0], xmm6
mov dword [rsp + 0x2c0], 0xaaaaaaaa
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov ecx, 0xfde9
mov edx, 8
mov r8, rsi
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r13d, reloc.WLDAP32.dll_Ordinal_27
test eax, eax
jle 0x1400c1875
mov r14d, eax
mov rax, qword [fcn.140136bd0]
lea ecx, [r14 + r14]
call qword [0x1402a3ee8]
test rax, rax
je 0x1400c1875
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rax
mov r14, rax
mov ecx, 0xfde9
xor edx, edx
mov r8, rsi
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
je 0x1400c2155
mov rcx, r14
mov dx, 0x5c
call fcn.140193c74
mov r13d, 0x3a
test rax, rax
mov qword [rsp + 0x80], r14
je 0x1400c337f
mov qword [rsp + 0x78], rax
mov rsi, rax
sub rsi, r14
sar rsi, 1
lea rdx, str.CurrentUser
mov rcx, r14
mov r8, rsi
call fcn.1401b5ab0
test eax, eax
je 0x1400c323b
lea rdx, str.LocalMachine
mov rcx, r14
mov r8, rsi
call fcn.1401b5ab0
test eax, eax
je 0x1400c3c60
lea rdx, str.CurrentService
mov rcx, r14
mov r8, rsi
call fcn.1401b5ab0
test eax, eax
je 0x1400c3c77
lea rdx, str.Services
mov rcx, r14
mov r8, rsi
call fcn.1401b5ab0
test eax, eax
jne 0x1400c3d18
mov dword [rsp + 0x70], 0x50000
jmp 0x1400c3243
mov dword [rsp + 0x144], 1
lea rax, [rsp + 0x138]
mov qword [rsp + 0x148], rax
mov r15, qword [rsp + 0x88]
mov rcx, r13
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
mov r14b, byte [rsp + 0x67]
mov r13, qword [rsp + 0x68]
mov rax, qword [fcn.14018dbe0]
mov ecx, 1
mov edx, 0x20
call qword [0x1402a3ee8]
mov rcx, qword [rbx + 8]
mov qword [rcx], rax
mov rax, qword [rbx + 8]
mov rax, qword [rax]
test rax, rax
je 0x1400c320a
mov dword [rax + 0x18], 1
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x18]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx]
lea rdx, [rcx + 0x10]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
lea rcx, [rsp + 0x140]
mov qword [rsp + 0x20], rcx
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call qword [0x1402a3ee8]
mov esi, eax
mov rcx, qword [rsp + 0x138]
test rcx, rcx
je 0x1400c3191
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test esi, esi
je 0x1400c2705
lea rdi, [rsp + 0x2b0]
mov r8d, 0x100
mov rcx, rdi
mov dl, 0xaa
call fcn.1401cdd80
mov r8d, 0x100
mov ecx, esi
mov rdx, rdi
call fcn.1400c8fd0
lea rdx, str.schannel:_AcquireCredentialsHandle_failed:__s
mov rcx, r13
mov r8, rax
call fcn.1400b0f00
mov rax, qword [fcn.14018db40]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx]
call qword [0x1402a3ee8]
mov rax, qword [rbx + 8]
mov qword [rax], 0
xor eax, eax
cmp esi, 0x80090300
setne al
lea r13d, [rax*8 + 0x1b]
jmp 0x1400c1875
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, r13
call fcn.1400b0f00
mov rcx, qword [rsp + 0x138]
mov r13d, reloc.WLDAP32.dll_Ordinal_27
test rcx, rcx
je 0x1400c1875
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
jmp 0x1400c1875
mov dword [rsp + 0x70], 0x10000
mov rsi, qword [rsp + 0x78]
add rsi, 2
mov rcx, rsi
mov dx, 0x5c
call fcn.140193c74
test rax, rax
je 0x1400c337f
mov r14, rax
mov word [rax], 0
mov rax, qword [fcn.1401904b0]
mov rcx, rsi
call qword [0x1402a3ee8]
mov word [r14], 0x5c
test rax, rax
je 0x1400c3379
mov rsi, rax
add r14, 2
mov rcx, r14
call fcn.14018f978
cmp rax, 0x28
jne 0x1400c337f
mov r9d, dword [rsp + 0x70]
or r9d, 0x4000
mov qword [rsp + 0x20], rsi
mov ecx, 0xa
xor edx, edx
xor r8d, r8d
call qword [sym.imp.CRYPT32.dll_CertOpenStore]
test rax, rax
je 0x1400c4072
mov r13, rax
mov rax, qword [fcn.14018db40]
mov rcx, rsi
call qword [0x1402a3ee8]
lea r9, [rsp + 0x2b0]
lea rsi, [rsp + 0xd0]
mov qword [rsi + 8], r9
mov dword [rsi], 0x14
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], rsi
mov rcx, r14
mov edx, Ordinal_41
mov r8d, 4
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryW]
test eax, eax
je 0x1400c3d9b
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], 0
mov rcx, r13
mov edx, 0x10001
xor r8d, r8d
mov r9d, 0x10000
call qword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov qword [rsp + 0x138], rax
mov rax, qword [fcn.14018db40]
mov rcx, qword [rsp + 0x80]
call qword [0x1402a3ee8]
cmp qword [rsp + 0x138], 0
jne 0x1400c3db5
jmp 0x1400c3533
mov r13d, reloc.WLDAP32.dll_Ordinal_27
mov rax, qword [rsp + 0x68]
mov r8, qword [rax + 0xa88]
cmp byte [r8], 0
je 0x1400c3540
lea rdx, [0x140275d51]
mov rcx, r8
call fcn.1401ada1c
test rax, rax
je 0x1400c3565
mov r14, rax
movaps xmmword [rsp + 0xc0], xmm6
xor r13d, r13d
mov rcx, rax
xor edx, edx
mov r8d, 2
call fcn.1401b0950
test eax, eax
je 0x1400c35a8
xor eax, eax
mov qword [rsp + 0x78], rax
xor esi, esi
mov rcx, r14
call fcn.1401af6c4
mov rax, qword [fcn.14018db40]
mov rcx, qword [rsp + 0x80]
call qword [0x1402a3ee8]
test esi, esi
je 0x1400c3573
mov qword [rsp + 0x88], r15
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0xc8], rax
mov dword [rsp + 0xc0], r13d
mov r13, qword [rsp + 0x68]
mov rcx, qword [r13 + 0xaa8]
xor r15d, r15d
test rcx, rcx
je 0x1400c35de
call fcn.1401b34d0
mov r14, rax
mov rax, qword [fcn.140136bd0]
lea rcx, [r14*2 + 2]
call qword [0x1402a3ee8]
mov rsi, rax
mov eax, 0
test r14, r14
je 0x1400c348a
lea rax, [r14 + 1]
mov r8, qword [r13 + 0xaa8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
mov ecx, 0xfde9
mov edx, 8
mov r9d, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r15d, r14d
xor ecx, ecx
cmp eax, r15d
mov edx, eax
cmovg rdx, rcx
test eax, eax
cmovs rdx, rcx
mov word [rsi + rdx*2], 0
lea rcx, [rsp + 0xc0]
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.CRYPT32.dll_PFXImportCertStore]
mov r13, rax
mov rax, qword [fcn.14018db40]
mov rcx, rsi
call qword [0x1402a3ee8]
mov rax, qword [fcn.14018db40]
mov rcx, qword [rsp + 0x78]
call qword [0x1402a3ee8]
test r13, r13
je 0x1400c3ccf
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov rcx, r13
mov edx, 0x10001
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov qword [rsp + 0x138], rax
test rax, rax
jne 0x1400c30c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rcx + 0xa88]
lea rdx, str.schannel:_Failed_to_get_certificate_from_file__s__last_error_is_0x_x
mov r9d, eax
call fcn.1400b0f00
mov rcx, r13
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
jmp 0x1400c359d
mov rcx, qword [rsp + 0x68]
lea rdx, str.schannel:_Failed_to_get_certificate_location_or_file_for__s
call fcn.1400b0f00
mov rax, qword [fcn.14018db40]
mov rcx, qword [rsp + 0x80]
jmp 0x1400c2126
mov rcx, qword [rsp + 0x68]
mov r8, qword [rcx + 0xa88]
jmp 0x1400c3545
mov rcx, qword [rsp + 0x68]
mov r8, qword [rcx + 0xa88]
lea rdx, str.schannel:_Failed_to_read_cert_file__s
call fcn.1400b0f00
mov rax, qword [fcn.14018db40]
mov rcx, qword [rsp + 0x78]
call qword [0x1402a3ee8]
mov r13d, 0x3a
jmp 0x1400c1875
mov rcx, r14
call fcn.1401b0c5c
mov r13d, eax
test eax, eax
js 0x1400c33d3
xor esi, esi
mov rcx, r14
xor edx, edx
xor r8d, r8d
call fcn.1401b0950
test eax, eax
je 0x1400c40b9
xor eax, eax
mov qword [rsp + 0x78], rax
jmp 0x1400c33dc
xor r14d, r14d
jmp 0x1400c343e
test r14b, r14b
je 0x1400c18f4
mov rax, qword [rsp + 0x98]
mov byte [rax], 0
jmp 0x1400c1872
lea rdx, str.schannel:_TLS_1.3_is_not_yet_supported
jmp 0x1400c1955
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
lea rdx, str.select_poll_on_SSL_TLS_socket__errno:__d
mov rcx, rsi
mov r8d, eax
call fcn.1400b0f00
jmp 0x1400c193e
mov eax, 0x2200
jmp 0x1400c2cd1
mov eax, 0x2000
jmp 0x1400c2cd1
cmp eax, 4
je 0x1400c36bb
cmp eax, 5
mov r15, qword [rsp + 0x98]
je 0x1400c366f
xor eax, eax
jmp 0x1400c36ac
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov r15, qword [rsp + 0x98]
mov dword [rbx + 4], 5
mov dword [rbx], 2
lea rax, [0x1400c4660]
mov rcx, qword [rsp + 0x88]
mov qword [rdi + rcx*8 + 0x4e8], rax
lea rax, [0x1400c4d20]
mov qword [rdi + rcx*8 + 0x4f8], rax
mov rax, qword [rbx + 8]
mov rax, qword [rax + 8]
mov qword [rdi + 0x7b8], rax
mov al, 1
mov byte [r15], al
mov dword [rbx + 4], 0
jmp 0x1400c1872
mov r14, qword [rdi]
mov qword [rsp + 0x1b0], 0
lea rcx, [rsp + 0x2b0]
mov r8d, 0x108
mov dl, 0xaa
call fcn.1401cdd80
mov rcx, qword [rbx + 8]
mov r13d, 0x23
cmp qword [rcx], 0
mov r15, qword [rsp + 0x98]
je 0x1400c1875
mov eax, dword [rcx + 0x60]
cmp eax, dword [rcx + 0x5c]
jne 0x1400c3740
cmp byte [rcx + 0x6a], 1
jne 0x1400c389b
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x58]
mov rcx, qword [rcx + 8]
lea r8, [rsp + 0x2b0]
mov edx, 0x23
call qword [0x1402a3ee8]
test eax, eax
je 0x1400c37c2
lea rdx, str.schannel:_failed_to_retrieve_ALPN_result
jmp 0x1400c37ba
test al, 8
jne 0x1400c375a
lea rdx, str.schannel:_failed_to_setup_sequence_detection
mov rcx, r14
call fcn.1400b0f00
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0x60]
test al, 4
jne 0x1400c3774
lea rdx, str.schannel:_failed_to_setup_replay_detection
mov rcx, r14
call fcn.1400b0f00
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0x60]
test al, 0x10
jne 0x1400c378e
lea rdx, str.schannel:_failed_to_setup_confidentiality
mov rcx, r14
call fcn.1400b0f00
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0x60]
bt eax, 8
jb 0x1400c37aa
lea rdx, str.schannel:_failed_to_setup_memory_allocation
mov rcx, r14
call fcn.1400b0f00
mov rax, qword [rbx + 8]
mov eax, dword [rax + 0x60]
test ax, ax
js 0x1400c1875
lea rdx, str.schannel:_failed_to_setup_stream_orientation
mov rcx, r14
jmp 0x1400c1cb5
cmp dword [rsp + 0x2b0], 1
jne 0x1400c3811
lea rsi, [rsp + 0x2b9]
movzx r8d, byte [rsi - 1]
lea rdx, str.schannel:_ALPN__server_accepted_to_use__.s_n
mov rcx, r14
mov r9, rsi
call fcn.1400b0c00
cmp byte [rsi - 1], 8
jne 0x1400c3820
movabs rax, 0x312e312f70747468
cmp qword [rsp + 0x2b9], rax
jne 0x1400c3820
mov dword [rdi + 0xb18], 2
jmp 0x1400c3820
lea rdx, str.ALPN__server_did_not_agree_to_a_protocol_n
mov rcx, r14
call fcn.1400b0c00
xor eax, eax
cmp dword [rdi + 0xb18], 3
sete al
lea eax, [rax + rax*2 - 1]
mov rcx, qword [rdi + 0xb10]
mov dword [rcx], eax
mov rax, qword [rdi]
mov rcx, qword [rax + 0xd0]
mov rdx, qword [rcx + 0x40]
test rdx, rdx
je 0x1400c389b
add rcx, 0x40
mov rsi, qword [rdx]
cmp dword [rsi + 0x48], 2
je 0x1400c387c
mov dword [rsi + 0x48], 2
mov rax, qword [rsi + 0x690]
mov r8, qword [rsi + 0x700]
mov qword [rsi + 0x1518], r8
mov qword [rsi + 0x1520], rax
xor r8d, r8d
call fcn.1400c7e90
mov rcx, rsi
xor edx, edx
mov r8d, 7
call fcn.1400b2050
mov byte [rsi + 0x15a2], 1
cmp dword [rdi + 0x3dc], 2
jne 0x1400c3938
xor eax, eax
cmp qword [rdi + 0x4c8], 0xffffffffffffffff
setne al
lea rax, [rax + rax*2]
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + rax*8], 2
je 0x1400c3938
cmp byte [r14 + 0xb03], 0
jne 0x1400c3942
cmp byte [r14 + 0xab0], 1
jne 0x1400c3668
mov rax, qword [0x1402cbe38]
mov rax, qword [rax + 0x58]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 8]
lea rsi, [rsp + 0x1b0]
mov edx, 0x53
mov r8, rsi
call qword [0x1402a3ee8]
test eax, eax
setne al
mov r15, qword [rsi]
test r15, r15
sete cl
or cl, al
je 0x1400c3a86
lea rdx, str.schannel:_failed_to_retrieve_remote_cert_context
mov rcx, r14
call fcn.1400b0f00
mov r13d, 0x3c
jmp 0x1400c1875
cmp byte [r14 + 0xa5b], 1
jne 0x1400c38d1
mov qword [rsp + 0x140], 0
mov rcx, qword [rdi]
mov rdx, qword [rcx + 0xe0]
test rdx, rdx
je 0x1400c3980
test byte [rdx], 0x10
je 0x1400c3980
mov rax, qword [rdx + 8]
test rax, rax
je 0x1400c3980
mov r9, qword [rdx + 0x18]
mov edx, 4
mov r8d, 2
call qword [0x1402a3ee8]
lea rdx, [rsp + 0x140]
mov rcx, rdi
xor r8d, r8d
mov r9d, dword [rsp + 0x94]
call fcn.1400a35d0
mov rdx, qword [rbx + 8]
test al, al
jne 0x1400c39e7
mov rax, qword [rsp + 0x140]
cmp rax, qword [rdx]
je 0x1400c3a49
mov rcx, qword [rdi]
mov r8, qword [rcx + 0xb60]
test r8, r8
je 0x1400c39e7
mov rcx, qword [rcx + 0x1150]
cmp qword [rcx + 0x18], rax
je 0x1400c39de
add rcx, 0x88
dec r8
jne 0x1400c39ca
jmp 0x1400c39e7
call fcn.1400a37e0
mov rdx, qword [rbx + 8]
mov rdx, qword [rdx]
mov r8d, 0x20
mov rcx, rdi
mov r9d, dword [rsp + 0x94]
call fcn.1400a38f0
test eax, eax
je 0x1400c3a3f
mov r13d, eax
mov rcx, qword [rdi]
mov rdx, qword [rcx + 0xe0]
test rdx, rdx
je 0x1400c3a33
test byte [rdx], 0x10
je 0x1400c3a33
mov rax, qword [rdx + 0x10]
test rax, rax
je 0x1400c3a33
mov r8, qword [rdx + 0x18]
mov edx, 4
call qword [0x1402a3ee8]
lea rdx, str.schannel:_failed_to_store_credential_handle
jmp 0x1400c37ba
mov rax, qword [rbx + 8]
mov rax, qword [rax]
inc dword [rax + 0x18]
mov rcx, qword [rdi]
mov rdx, qword [rcx + 0xe0]
test rdx, rdx
je 0x1400c38d1
test byte [rdx], 0x10
je 0x1400c38d1
mov rax, qword [rdx + 0x10]
test rax, rax
je 0x1400c38d1
mov r8, qword [rdx + 0x18]
mov edx, 4
call qword [0x1402a3ee8]
jmp 0x1400c38d1
mov rcx, qword [r15 + 0x20]
xor esi, esi
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
test rax, rax
je 0x1400c3ac8
xor esi, esi
mov r12, qword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
jmp 0x1400c3aba
cmp dword [rax + 0x10], 1
sbb esi, 0xffffffff
mov rcx, qword [r15 + 0x20]
mov rdx, rax
call r12
test rax, rax
je 0x1400c3ac8
test byte [rax], 1
je 0x1400c3aab
cmp qword [rax + 8], 0
jne 0x1400c3aa4
jmp 0x1400c3aab
mov rcx, r14
mov edx, esi
call fcn.1400a3c70
mov r13d, eax
test eax, eax
je 0x1400c3ae6
mov rcx, qword [rsp + 0x1b0]
jmp 0x1400c3230
mov r12, qword [rsp + 0x1b0]
mov rcx, qword [r12 + 0x20]
xor ebp, ebp
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
test rax, rax
je 0x1400c3b16
mov r15, qword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
mov qword [rsp + 0xb0], rax
mov r14, rax
jmp 0x1400c3b46
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov r13d, 0xaaaaaaaa
jmp 0x1400c1875
mov rcx, qword [r12 + 0x20]
mov rdx, r14
call r15
mov r14, rax
test rax, rax
je 0x1400c3652
test byte [r14], 1
je 0x1400c3b2f
mov r8, qword [r14 + 8]
test r8, r8
je 0x1400c3b2f
mov eax, dword [r14 + 0x10]
test eax, eax
je 0x1400c3b2f
mov r9d, eax
add r9, r8
mov edx, ebp
not edx
add edx, esi
mov rcx, rdi
call fcn.1400f11c0
test eax, eax
jne 0x1400c40fa
inc ebp
mov rcx, qword [r12 + 0x20]
mov rdx, r14
call r15
mov r14, rax
test rax, rax
jne 0x1400c3b46
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
cmp qword [rsp + 0xb0], 0
mov r15, qword [rsp + 0x98]
jne 0x1400c3668
jmp 0x1400c1872
lea rcx, [rsp + 0x2b0]
mov r8d, 0x100
mov dl, 0xaa
call fcn.1401cdd80
mov rax, qword [fcn.14018db40]
mov rcx, qword [rbx + 8]
mov rcx, qword [rcx + 8]
call qword [0x1402a3ee8]
mov rax, qword [rbx + 8]
mov qword [rax + 8], 0
lea rdi, str.schannel:_initial_InitializeSecurityContext_failed:__s
cmp esi, 0x80090300
je 0x1400c3c0d
cmp esi, 0x80090322
je 0x1400c3c15
mov r13d, 0x23
jmp 0x1400c3c22
mov r13d, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1400c3c22
mov r13d, 0x3c
lea rdi, str.schannel:_SNI_or_certificate_check_failed:__s
lea rdx, [rsp + 0x2b0]
mov r8d, 0x100
mov ecx, esi
call fcn.1400c8fd0
mov rcx, qword [rsp + 0x68]
mov rdx, rdi
jmp 0x1400c23f6
mov r13d, eax
jmp 0x1400c1875
lea rdx, str.schannel:_failed_to_send_initial_handshake_data:_sent__zd_of__lu_bytes
mov rcx, qword [rsp + 0x68]
mov r8, rsi
jmp 0x1400c1939
mov dword [rsp + 0x70], 0x20000
jmp 0x1400c3243
mov eax, 0xa400
jmp 0x1400c2cd1
mov dword [rsp + 0x70], 0x40000
jmp 0x1400c3243
mov rbp, qword [rsp + 0xb8]
mov rcx, rbp
mov rdx, r14
call fcn.1400a3ed0
test eax, eax
je 0x1400c3cad
mov r13d, eax
mov rcx, rbp
lea rdx, str.SSL:_public_key_does_not_match_pinned_public_key_
jmp 0x1400c2383
xor r13d, r13d
jmp 0x1400c228d
lea rcx, [rsp + 0x2b0]
mov r8d, 0x100
mov dl, 0xaa
call fcn.1401cdd80
jmp 0x1400c23cb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rcx + 0xa88]
cmp eax, 0x56
jne 0x1400c3cf7
lea rdx, str.schannel:_Failed_to_import_cert_file__s__password_is_bad
call fcn.1400b0f00
jmp 0x1400c359d
lea rdx, str.schannel:_Failed_to_import_cert_file__s__last_error_is_0x_x
mov r9d, eax
call fcn.1400b0f00
jmp 0x1400c359d
mov dword [rsp + 0x70], 0x60000
jmp 0x1400c3243
lea rdx, str.Users
mov rcx, r14
mov r8, rsi
call fcn.1401b5ab0
test eax, eax
je 0x1400c3d0b
lea rdx, str.CurrentUserGroupPolicy
mov rcx, r14
mov r8, rsi
call fcn.1401b5ab0
test eax, eax
je 0x1400c3d8e
lea rdx, str.LocalMachineGroupPolicy
mov rcx, r14
mov r8, rsi
call fcn.1401b5ab0
test eax, eax
je 0x1400c3d81
lea rdx, str.LocalMachineEnterprise
mov rcx, r14
mov r8, rsi
call fcn.1401b5ab0
test eax, eax
jne 0x1400c337f
mov dword [rsp + 0x70], 0x90000
jmp 0x1400c3243
mov dword [rsp + 0x70], 0x80000
jmp 0x1400c3243
mov dword [rsp + 0x70], 0x70000
jmp 0x1400c3243
mov rax, qword [fcn.14018db40]
mov rcx, qword [rsp + 0x80]
call qword [0x1402a3ee8]
jmp 0x1400c3533
mov dword [rsp + 0x144], 1
lea rax, [rsp + 0x138]
mov qword [rsp + 0x148], rax
jmp 0x1400c30e3
mov eax, 0x6602
jmp 0x1400c2cd1
mov eax, 0x6604
jmp 0x1400c2cd1
mov eax, 0x6603
jmp 0x1400c2cd1
mov eax, 0x6609
jmp 0x1400c2cd1
mov rax, qword [rsp + 0x2b0]
movabs rdx, 0x4544335f474c4143
xor rax, rdx
mov rcx, qword [rsp + 0x2b6]
movabs r8, 0x3231315f534544
xor rcx, r8
or rcx, rax
je 0x1400c3df3
mov rax, qword [rsp + 0x2b0]
xor rax, rdx
movzx ecx, word [rsp + 0x2b8]
xor rcx, 0x53
or rcx, rax
je 0x1400c3de9
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5345445f474c4143
xor rax, rcx
movzx ecx, word [rsp + 0x2b8]
xor rcx, 0x58
or rcx, rax
je 0x1400c3ddf
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x3243525f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
je 0x1400c3dd5
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x3443525f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
je 0x1400c4022
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x4145535f474c4143
xor rax, rcx
movzx ecx, word [rsp + 0x2b8]
xor rcx, 0x4c
or rcx, rax
je 0x1400c402c
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5f48445f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b3]
movabs rdx, 0x46535f48445f47
xor rcx, rdx
or rcx, rax
je 0x1400c4036
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5f48445f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b6]
movabs rdx, 0x4d454850455f48
xor rcx, rdx
or rcx, rax
je 0x1400c4040
movdqu xmm0, xmmword [rsp + 0x2b3]
pcmpeqb xmm0, xmmword [str.G_AGREEDKEY_ANY]
movdqa xmm1, xmmword [rsp + 0x2b0]
pcmpeqb xmm1, xmmword [str.CALG_AGREEDKEY_ACALG_HUGHES_MD5]
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1400c404a
movdqa xmm0, xmmword [rsp + 0x2b0]
pcmpeqb xmm0, xmmword [0x140290ec0]
pmovmskb eax, xmm0
cmp eax, 0xffff
je 0x1400c4054
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x494b535f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b6]
movabs rdx, 0x4b43414a50494b
xor rcx, rdx
or rcx, rax
je 0x1400c405e
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x4b45545f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
je 0x1400c4068
movdqa xmm0, xmmword [rsp + 0x2b0]
pcmpeqb xmm0, xmmword [str.CALG_CYLINK_MEK]
pmovmskb eax, xmm0
cmp eax, 0xffff
jne 0x1400c4129
mov eax, 0x660c
jmp 0x1400c2cce
mov eax, 0x6801
jmp 0x1400c2cce
mov eax, 0x6802
jmp 0x1400c2cce
mov eax, 0xaa01
jmp 0x1400c2cce
mov eax, 0xaa02
jmp 0x1400c2cce
mov eax, 0xaa03
jmp 0x1400c2cce
mov eax, 0xa003
jmp 0x1400c2cce
mov eax, 0x660a
jmp 0x1400c2cce
mov eax, 0x660b
jmp 0x1400c2cce
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str.schannel:_Failed_to_open_cert_store__x__s__last_error_is_0x_x
mov rcx, qword [rsp + 0x68]
mov r8d, dword [rsp + 0x70]
mov r9, rsi
call fcn.1400b0f00
mov rax, qword [fcn.14018db40]
mov rcx, rsi
call qword [0x1402a3ee8]
mov rax, qword [fcn.14018db40]
mov rcx, qword [rsp + 0x80]
jmp 0x1400c3597
mov rax, qword [fcn.140136bd0]
lea ecx, [r13 + 1]
call qword [0x1402a3ee8]
test rax, rax
je 0x1400c33d3
mov edx, r13d
mov r8d, 1
mov rcx, rax
mov qword [rsp + 0x78], rax
mov r9, r14
call fcn.1401b05d0
xor esi, esi
cmp eax, 1
sete sil
jmp 0x1400c33dc
mov r13d, eax
mov rcx, r14
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
jmp 0x1400c3ad9
mov eax, 0x4c02
jmp 0x1400c2cce
mov eax, 0x4c01
jmp 0x1400c2cce
mov eax, 0x8008
jmp 0x1400c2cce
mov rax, qword [rsp + 0x2b8]
movabs rcx, 0x35444d4148535f33
xor rax, rcx
mov rcx, qword [rsp + 0x2b0]
movabs rdx, 0x4c53535f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2c0]
or rdx, rcx
or rdx, rax
je 0x1400c411f
mov rax, qword [rsp + 0x2b8]
movabs rcx, 0x52455453414d5f33
xor rax, rcx
mov rcx, qword [rsp + 0x2b0]
movabs rdx, 0x4c53535f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2c0]
or rdx, rcx
or rdx, rax
je 0x1400c4115
movdqu xmm0, xmmword [rsp + 0x2ba]
pcmpeqb xmm0, xmmword [str.NEL_MASTER_HASH]
movdqa xmm1, xmmword [rsp + 0x2b0]
pcmpeqb xmm1, xmm14
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1400c410b
movdqu xmm0, xmmword [rsp + 0x2b6]
pcmpeqb xmm0, xmm15
movdqa xmm1, xmmword [rsp + 0x2b0]
pcmpeqb xmm1, xmm8
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1400c43da
movdqu xmm0, xmmword [rsp + 0x2b6]
pcmpeqb xmm0, xmm9
movdqa xmm1, xmmword [rsp + 0x2b0]
pcmpeqb xmm1, xmm10
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1400c43e4
mov rax, qword [rsp + 0x2b8]
movabs rcx, 0x52455453414d5f31
xor rax, rcx
mov rcx, qword [rsp + 0x2b0]
movabs rdx, 0x5443505f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2c0]
or rdx, rcx
or rdx, rax
je 0x1400c43ee
mov rax, qword [rsp + 0x2b8]
movabs rcx, 0x52455453414d5f32
xor rax, rcx
mov rcx, qword [rsp + 0x2b0]
movabs rdx, 0x4c53535f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2c0]
or rdx, rcx
or rdx, rax
je 0x1400c43f8
mov rax, qword [rsp + 0x2b8]
movabs rcx, 0x52455453414d5f31
xor rax, rcx
mov rcx, qword [rsp + 0x2b0]
movabs rdx, 0x534c545f474c4143
xor rcx, rdx
movzx edx, byte [rsp + 0x2c0]
or rdx, rcx
or rdx, rax
je 0x1400c4402
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x3543525f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
je 0x1400c440c
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x414d485f474c4143
xor rax, rcx
movzx ecx, word [rsp + 0x2b8]
xor rcx, 0x43
or rcx, rax
je 0x1400c4416
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x534c545f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b5]
movabs rdx, 0x46525031534c54
xor rcx, rdx
or rcx, rax
je 0x1400c4420
movdqu xmm0, xmmword [rsp + 0x2b6]
pcmpeqb xmm0, xmm11
movdqa xmm1, xmmword [rsp + 0x2b0]
pcmpeqb xmm1, xmm12
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1400c442a
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5345415f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b5]
movabs rdx, 0x3832315f534541
xor rcx, rdx
or rcx, rax
jne 0x1400c4452
mov eax, 0x660e
jmp 0x1400c2cce
mov eax, 0x4c03
jmp 0x1400c2cce
mov eax, 0x4c07
jmp 0x1400c2cce
mov eax, 0x4c04
jmp 0x1400c2cce
mov eax, 0x4c05
jmp 0x1400c2cce
mov eax, 0x4c06
jmp 0x1400c2cce
mov eax, 0x660d
jmp 0x1400c2cce
mov eax, 0x8009
jmp 0x1400c2cce
mov eax, 0x800a
jmp 0x1400c2cce
mov eax, 0x800b
jmp 0x1400c2cce
mov eax, 0x6611
jmp 0x1400c2cce
mov eax, 0x6610
jmp 0x1400c2cce
mov eax, 0x660f
jmp 0x1400c2cce
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5345415f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b5]
movabs rdx, 0x3239315f534541
xor rcx, rdx
or rcx, rax
je 0x1400c4448
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5345415f474c4143
xor rax, rcx
movabs rcx, 0x3635325f414853
add rcx, 0x11fcee
xor rcx, qword [rsp + 0x2b5]
or rcx, rax
je 0x1400c443e
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x5345415f474c4143
xor rax, rcx
movzx ecx, byte [rsp + 0x2b8]
or rcx, rax
je 0x1400c4434
mov rax, qword [rsp + 0x2b0]
xor rax, r12
mov rcx, qword [rsp + 0x2b5]
movabs rdx, 0x3635325f414853
xor rcx, rdx
or rcx, rax
je 0x1400c4605
mov rax, qword [rsp + 0x2b0]
xor rax, r12
mov rcx, qword [rsp + 0x2b5]
movabs rdx, 0x3438335f414853
xor rcx, rdx
or rcx, rax
je 0x1400c460f
mov rax, qword [rsp + 0x2b0]
xor rax, r12
mov rcx, qword [rsp + 0x2b5]
movabs rdx, 0x3231355f414853
xor rcx, rdx
or rcx, rax
je 0x1400c4619
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x4443455f474c4143
xor rax, rcx
movzx ecx, word [rsp + 0x2b8]
xor rcx, 0x48
or rcx, rax
je 0x1400c4623
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x4d43455f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b3]
movabs rdx, 0x56514d43455f47
xor rcx, rdx
or rcx, rax
je 0x1400c462d
mov rax, qword [rsp + 0x2b0]
movabs rcx, 0x4443455f474c4143
xor rax, rcx
mov rcx, qword [rsp + 0x2b3]
movabs rdx, 0x41534443455f47
xor rcx, rdx
or rcx, rax
je 0x1400c4637
movdqa xmm0, xmmword [rsp + 0x2b0]
pcmpeqb xmm0, xmm13
pmovmskb ecx, xmm0
mov eax, 0xae06
cmp ecx, 0xffff
mov rsi, r12
je 0x1400c2cd1
jmp 0x1400c4641
mov eax, 0x800c
jmp 0x1400c2cce
mov eax, 0x800d
jmp 0x1400c2cce
mov eax, 0x800e
jmp 0x1400c2cce
mov eax, 0xaa05
jmp 0x1400c2cce
mov eax, 0xa001
jmp 0x1400c2cce
mov eax, 0x2203
jmp 0x1400c2cce
lea rdx, str.Unable_to_set_ciphers_to_passed_via_SSL_CONN_CONFIG
mov rcx, qword [rsp + 0x68]
call fcn.1400b0f00
mov r13d, 0x3b
jmp 0x1400c1875