Function at 0x1400f2b20
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x9b0]
sub rsp, 0xab0
mov rax, qword [0x140672360]
xor rax, rsp
mov qword [rbp + 0x9a0], rax
mov r12, r9
mov rbx, r8
mov qword [rbp - 0x58], rdx
mov rsi, rcx
mov qword [rbp - 0x48], rcx
xor edi, edi
mov dword [rsp + 0x40], edi
mov qword [rbp + 0x1b0], rdi
mov qword [rbp + 0x1c0], rdi
mov qword [rbp + 0x1c8], 0xf
mov byte [rbp + 0x1b0], dil
mov qword [rbp + 0x190], rdi
mov qword [rbp + 0x1a0], rdi
mov qword [rbp + 0x1a8], 0xf
mov byte [rbp + 0x190], dil
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x1b0]
call fcn.1400f6ad0
lea rcx, [rsi + 0x18]
lea rdx, [rbp + 0x78]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [rbp + 0x84]
movzx ecx, word [rbp + 0x82]
movzx edx, word [rbp + 0x80]
movzx r10d, word [rbp + 0x7e]
movzx r9d, word [rbp + 0x7a]
movzx r8d, word [rbp + 0x78]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, [0x1405f7dc0]
lea rcx, [rbp + 0x550]
call fcn.1400f6d20
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x180], rdi
mov qword [rbp + 0x188], 0xf
mov byte [rbp + 0x170], dil
lea rax, [rbp + 0x550]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400f2c40
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x170]
call fcn.140073120
nop
lea r15, [r12 + 0x108]
mov rdx, r15
mov rcx, r12
call fcn.1401d0a60
mov r13, rax
mov qword [rbp - 0x50], rax
test dword [rax + 0x18], 0x200
je 0x1400f2c8a
mov rcx, qword [rax + 0x20]
call fcn.140359090
mov dword [r13 + 0x18], edi
mov qword [r13 + 0x20], rdi
mov qword [r13 + 0x28], rdi
mov ecx, 7
call fcn.140359a1c
mov qword [r13 + 0x20], rax
mov ecx, dword [str.Report]
mov dword [rax], ecx
movzx ecx, word [0x1405f7bd0]
mov word [rax + 4], cx
movzx ecx, byte [0x1405f7bd2]
mov byte [rax + 6], cl
mov rax, qword [r13 + 0x20]
add rax, 6
mov qword [r13 + 0x28], rax
mov dword [r13 + 0x18], 0x200
mov r8, rbx
lea rdx, [0x1405f638c]
mov rcx, r13
call fcn.1400f6e90
lea rdx, str.type
mov rcx, r13
call fcn.1401cdf40
mov rbx, rax
test dword [rax + 0x20], 0x200
je 0x1400f2d0b
mov rcx, qword [rax + 0x28]
call fcn.140359090
mov dword [rbx + 0x20], edi
mov qword [rbx + 0x28], rdi
mov qword [rbx + 0x30], rdi
mov ecx, 6
call fcn.140359a1c
mov qword [rbx + 0x28], rax
mov ecx, dword [str.Alert]
mov dword [rax], ecx
movzx ecx, word [0x1405f6310]
mov word [rax + 4], cx
mov rax, qword [rbx + 0x28]
add rax, 5
mov qword [rbx + 0x30], rax
mov dword [rbx + 0x20], 0x200
lea rbx, [rbp + 0x170]
cmp qword [rbp + 0x188], 0x10
cmovae rbx, qword [rbp + 0x170]
lea rdx, [0x1405f6d74]
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rcx, [rbp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
cmp eax, 0xffffffff
je 0x1400f2da4
movsxd r8, dword [rbp + 0x440]
lea rdx, [0x1405f7c40]
mov rcx, r13
call fcn.1400f6e90
lea rcx, [rbp + 0x40]
call fcn.14006b440
nop
cmp byte [rax + 0x20], 0
je 0x1400f2dd4
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
jmp 0x1400f2dfc
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], 0
xor r8d, r8d
lea rdx, [0x1405e4ea8]
lea rcx, [rbp - 0x78]
call fcn.140073120
nop
lea rbx, [rbp - 0x78]
cmp qword [rbp - 0x60], 0x10
cmovae rbx, qword [rbp - 0x78]
lea rdx, [0x1405f6d8c]
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x1400f2e61
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f2e5c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4e96
call fcn.140359090
mov byte [rbp - 0x78], 0
cmp byte [rbp + 0x60], 0
je 0x1400f2e74
lea rcx, [rbp + 0x40]
call fcn.140073500
lea rbx, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0x10
cmovae rbx, qword [rbp + 0x1b0]
lea rdx, [0x1405f7be0]
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rbx, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0x10
cmovae rbx, qword [rbp + 0x190]
lea rdx, [0x1405f7c3c]
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
call fcn.1401ecb40
mov rbx, rax
lea rdx, [0x1405f6d88]
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
cmp byte [rsi + 0x154], 0
je 0x1400f2fa4
lea rdx, str.suppressed
mov rcx, r13
call fcn.1401cdf40
mov r14, rax
lea r9, str.true
lea r8, [0x1406060c0]
mov edx, 0xc8
lea rcx, [rbp + 0x590]
call fcn.1401cbf00
test dword [r14 + 0x20], 0x200
je 0x1400f2f4c
mov rcx, qword [r14 + 0x28]
call fcn.140359090
mov dword [r14 + 0x20], edi
mov qword [r14 + 0x28], rdi
mov qword [r14 + 0x30], rdi
lea rax, [rbp + 0x590]
mov rdi, 0xffffffffffffffff
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400f2f66
lea rcx, [rdi + 1]
call fcn.140359a1c
mov qword [r14 + 0x28], rax
lea r8, [rdi + 1]
lea rdx, [rbp + 0x590]
mov rcx, rax
call fcn.14035bc80
mov rcx, qword [r14 + 0x28]
add rcx, rdi
mov qword [r14 + 0x30], rcx
mov dword [r14 + 0x20], 0x200
xor edi, edi
lea rcx, [rsi + 8]
lea rdx, [rbp + 0x68]
call qword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
je 0x1400f2fca
mov r8d, eax
lea rdx, str.UuidToStringA_was_not_succesful_and_returned_RPC_value__ld
mov ecx, 2
call fcn.140109e80
mov rbx, qword [rbp + 0x68]
lea rdx, str.alertId
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rcx, [rbp + 0x68]
call qword [sym.imp.RPCRT4.dll_RpcStringFreeA]
mov dword [rbp + 0x70], 0x10
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x570]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x1400f303d
lea rdx, [rbp + 0x570]
lea rcx, [rbp + 0x150]
call fcn.140097490
mov r14d, 0xf
mov dword [rsp + 0x40], r14d
mov rcx, qword [rbp + 0x168]
mov rax, qword [rbp + 0x160]
jmp 0x1400f3068
mov qword [rbp + 0x150], rdi
mov rax, rdi
mov qword [rbp + 0x160], rax
mov ecx, 0xf
mov qword [rbp + 0x168], rcx
mov byte [rbp + 0x150], 0
mov r14d, ecx
mov dword [rsp + 0x40], ecx
test rax, rax
je 0x1400f309b
lea rbx, [rbp + 0x150]
cmp rcx, 0x10
cmovae rbx, qword [rbp + 0x150]
lea rdx, str.computer
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
mov edx, dword [rsi + 0x2c]
lea rcx, [rbp + 0x390]
call fcn.14011e0a0
nop
cmp qword [rbp + 0x3a0], 0
jbe 0x1400f30e7
lea rbx, [rbp + 0x390]
cmp qword [rbp + 0x3a8], 0x10
cmovae rbx, qword [rbp + 0x390]
lea rdx, str.user
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rax, vtable.Thumbprint.0
mov qword [rbp + 0x410], rax
movups xmm0, xmmword [0x1405e8ef0]
movups xmmword [rbp + 0x418], xmm0
movups xmm1, xmmword [0x1405e8f00]
movups xmmword [rbp + 0x428], xmm1
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], 7
xor r8d, r8d
lea rdx, [0x1405e4f00]
lea rcx, [rbp - 0x40]
call fcn.1400739a0
lea r9, [rbp - 0x40]
lea r8, [rbp + 0x410]
lea rcx, [rsi + 0xe8]
call fcn.1401d1d30
movzx ebx, al
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x1400f318e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3189
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4e9c
call fcn.140359090
test bl, bl
je 0x1400f328f
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x410]
call fcn.1401d12c0
nop
lea rdx, [rbp + 0x210]
cmp qword [rbp + 0x228], 8
cmovae rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0x1f0]
call fcn.1400a4cd0
nop
lea rbx, [rbp + 0x1f0]
cmp qword [rbp + 0x208], 0x10
cmovae rbx, qword [rbp + 0x1f0]
lea rdx, str.thumbprint
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 0x10
jb 0x1400f3242
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f323d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ea2
call fcn.140359090
mov byte [rbp + 0x1f0], 0
mov rdx, qword [rbp + 0x228]
cmp rdx, 8
jb 0x1400f328f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f328a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ea8
call fcn.140359090
lea rcx, [rbp + 0x370]
call fcn.1400d1fd0
nop
cmp qword [rbp + 0x380], 0
jbe 0x1400f3349
lea rdx, [rbp + 0x370]
cmp qword [rbp + 0x388], 8
cmovae rdx, qword [rbp + 0x370]
lea rcx, [rbp + 0x230]
call fcn.1400a4cd0
nop
lea rbx, [rbp + 0x230]
cmp qword [rbp + 0x248], 0x10
cmovae rbx, qword [rbp + 0x230]
lea rdx, str.customerid
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x248]
cmp rdx, 0x10
jb 0x1400f3342
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f333d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4eae
call fcn.140359090
mov byte [rbp + 0x230], 0
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], 7
xor r8d, r8d
lea rdx, [0x1405e4f00]
lea rcx, [rbp + 0x20]
call fcn.1400739a0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x350]
call fcn.1400d2140
nop
cmp qword [rbp + 0x360], 0
jbe 0x1400f342a
lea rdx, [rbp + 0x350]
cmp qword [rbp + 0x368], 8
cmovae rdx, qword [rbp + 0x350]
lea rcx, [rbp + 0x250]
call fcn.1400a4cd0
nop
lea rbx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0x10
cmovae rbx, qword [rbp + 0x250]
lea rdx, str.endpointid
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, 0x10
jb 0x1400f3423
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f341e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4eb4
call fcn.140359090
mov byte [rbp + 0x250], 0
mov qword [rbp], rdi
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], 7
xor r8d, r8d
lea rdx, [0x1405e4f00]
lea rcx, [rbp]
call fcn.1400739a0
lea rdx, [rbp]
lea rcx, [rbp + 0x330]
call fcn.1400d2560
nop
cmp qword [rbp + 0x340], 0
jbe 0x1400f350b
lea rdx, [rbp + 0x330]
cmp qword [rbp + 0x348], 8
cmovae rdx, qword [rbp + 0x330]
lea rcx, [rbp + 0x270]
call fcn.1400a4cd0
nop
lea rbx, [rbp + 0x270]
cmp qword [rbp + 0x288], 0x10
cmovae rbx, qword [rbp + 0x270]
lea rdx, str.machineid
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x288]
cmp rdx, 0x10
jb 0x1400f3504
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f34ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4eba
call fcn.140359090
mov byte [rbp + 0x270], 0
mov rdx, r13
mov rcx, r12
call fcn.1401ccb30
mov edx, dword [rsi + 0x20]
lea r8, [0x140000000]
test edx, edx
je 0x1400f367c
mov rcx, rdi
mov rax, rdi
nop
cmp dword [rax + r8 + 0x5e8930], edx
je 0x1400f354e
inc rcx
add rax, 0x18
cmp rax, 0x4c8
jb 0x1400f3530
jmp 0x1400f367c
lea rax, [rcx + rcx*2]
mov rdx, qword [r8 + rax*8 + 0x5e8940]
test rdx, rdx
jne 0x1400f3570
mov rdx, qword [r8 + rax*8 + 0x5e8938]
test rdx, rdx
je 0x1400f367c
lea rcx, [rbp + 0x290]
call fcn.140097490
nop
mov rdx, r15
mov rcx, r12
call fcn.1401d0a60
mov r15, rax
test dword [rax + 0x18], 0x200
je 0x1400f359d
mov rcx, qword [rax + 0x20]
call fcn.140359090
mov dword [r15 + 0x18], edi
mov qword [r15 + 0x20], rdi
mov qword [r15 + 0x28], rdi
mov ecx, 6
call fcn.140359a1c
mov qword [r15 + 0x20], rax
mov ecx, dword [str.Alert]
mov dword [rax], ecx
movzx ecx, word [0x1405f6310]
mov word [rax + 4], cx
mov rax, qword [r15 + 0x20]
add rax, 5
mov qword [r15 + 0x28], rax
mov dword [r15 + 0x18], 0x200
lea rdi, [rbp + 0x290]
cmp qword [rbp + 0x2a8], 0x10
cmovae rdi, qword [rbp + 0x290]
lea rdx, [r12 + 0x208]
mov rcx, r12
call fcn.1401d0940
mov rbx, rax
mov rdx, rdi
mov rcx, rax
call fcn.1401cc970
mov rdx, rbx
mov rcx, r15
call fcn.1401ccb30
mov rdx, r15
mov rcx, r13
call fcn.1401ccb30
nop
mov rdx, qword [rbp + 0x2a8]
cmp rdx, 0x10
jb 0x1400f366b
inc rdx
mov rcx, qword [rbp + 0x290]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3666
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ec0
call fcn.140359090
mov byte [rbp + 0x290], 0
lea r15, [r12 + 0x108]
xor edi, edi
cmp qword [rsi + 0x68], 0
jbe 0x1400f3df2
mov rdx, r15
mov rcx, r12
call fcn.1401d0a60
mov rdi, rax
test dword [rax + 0x18], 0x200
je 0x1400f36a7
mov rcx, qword [rax + 0x20]
call fcn.140359090
xor eax, eax
mov dword [rdi + 0x18], eax
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rax
lea ecx, [rax + 8]
call fcn.140359a1c
mov qword [rdi + 0x20], rax
mov rcx, qword [0x1405f7c80]
mov qword [rax], rcx
mov rax, qword [rdi + 0x20]
add rax, 7
mov qword [rdi + 0x28], rax
mov dword [rdi + 0x18], 0x200
lea rdx, [rbp + 0x1d0]
mov rcx, rsi
call fcn.1400eee40
nop
cmp qword [rbp + 0x1e0], 0
jbe 0x1400f379a
lea rdx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 8
cmovae rdx, qword [rbp + 0x1d0]
lea rcx, [rbp + 0x2b0]
call fcn.140097490
nop
lea rbx, [rbp + 0x2b0]
cmp qword [rbp + 0x2c8], 0x10
cmovae rbx, qword [rbp + 0x2b0]
lea rdx, str.name
mov rcx, rdi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x2c8]
cmp rdx, 0x10
jb 0x1400f3793
inc rdx
mov rcx, qword [rbp + 0x2b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f378e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ec6
call fcn.140359090
mov byte [rbp + 0x2b0], 0
cmp qword [rsi + 0x68], 0
jbe 0x1400f3bd0
lea rdx, [rsi + 0x58]
cmp qword [rdx + 0x18], 8
jb 0x1400f37b3
mov rdx, qword [rdx]
lea rcx, [rbp + 0x2f0]
call fcn.140097490
nop
lea rbx, [rbp + 0x2f0]
cmp qword [rbp + 0x308], 0x10
cmovae rbx, qword [rbp + 0x2f0]
lea rdx, str.path
mov rcx, rdi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rbx, [rsi + 0xb8]
test rbx, rbx
je 0x1400f3b88
mov ecx, 0x82
call fcn.140368330
mov r8, rax
test rax, rax
je 0x1400f3b88
xor r10d, r10d
mov r9d, r10d
add rbx, 2
lea r15d, [r10 + 2]
lea r11, [0x140000000]
nop dword [rax]
movzx edx, byte [rbx - 2]
mov ecx, edx
shr rcx, 4
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2], ax
and edx, 0xf
movzx eax, word [r11 + rdx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 2], ax
movzx ecx, byte [rbx - 1]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 4], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 6], ax
movzx ecx, byte [rbx]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 8], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0xa], ax
movzx ecx, byte [rbx + 1]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0xc], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0xe], ax
movzx ecx, byte [rbx + 2]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x10], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x12], ax
movzx ecx, byte [rbx + 3]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x14], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x16], ax
movzx ecx, byte [rbx + 4]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x18], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x1a], ax
movzx ecx, byte [rbx + 5]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x1c], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x1e], ax
movzx ecx, byte [rbx + 6]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x20], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x22], ax
movzx ecx, byte [rbx + 7]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x24], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x26], ax
movzx ecx, byte [rbx + 8]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x28], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x2a], ax
movzx ecx, byte [rbx + 9]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x2c], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x2e], ax
movzx ecx, byte [rbx + 0xa]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x30], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x32], ax
movzx ecx, byte [rbx + 0xb]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x34], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x36], ax
movzx ecx, byte [rbx + 0xc]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x38], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x3a], ax
movzx ecx, byte [rbx + 0xd]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x3c], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2 + 0x5e8f50]
mov word [r8 + r9*2 + 0x3e], ax
lea r9, [r9 + 0x20]
lea rbx, [rbx + 0x10]
sub r15, 1
jne 0x1400f3830
mov word [r8 + r9*2], r10w
mov rdx, r8
lea rcx, [rbp + 0x2d0]
call fcn.1400a4cd0
nop
lea rbx, [rbp + 0x2d0]
cmp qword [rbp + 0x2e8], 0x10
cmovae rbx, qword [rbp + 0x2d0]
lea rdx, str.sha256
mov rcx, rdi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0x10
lea r15, [r12 + 0x108]
jb 0x1400f3b81
inc rdx
mov rcx, qword [rbp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3b7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ecc
call fcn.140359090
mov byte [rbp + 0x2d0], 0
mov rdx, qword [rbp + 0x308]
cmp rdx, 0x10
jb 0x1400f3bc9
inc rdx
mov rcx, qword [rbp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3bc4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ed8
call fcn.140359090
mov byte [rbp + 0x2f0], 0
mov r8d, dword [rsi + 0x30]
cmp r8d, 4
jbe 0x1400f3be2
mov rcx, rdi
call fcn.1400f6db0
mov rax, qword [0x140688218]
cmp qword [rsi + 0xd8], rax
jne 0x1400f3bff
cmp qword [rsi + 0xe0], rax
je 0x1400f3d9e
mov rbx, qword [rsi + 0xd8]
or rbx, qword [rsi + 0xe0]
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], ax
mov dword [rsp + 0x40], 0x4f
mov r14d, eax
lea r15d, [rax + 0x30]
nop word [rax + rax]
mov ecx, ebx
and ecx, 0xf
mov edx, 0x37
cmp ecx, 9
cmovbe dx, r15w
add dx, cx
lea rcx, [rsp + 0x60]
call fcn.1400847d0
shr rbx, 4
add r14, 4
cmp r14, 0x40
jb 0x1400f3c40
lea rcx, [rsp + 0x60]
mov rax, qword [rsp + 0x70]
cmp qword [rsp + 0x78], 8
jb 0x1400f3c8a
mov rcx, qword [rsp + 0x60]
lea rdx, [rcx + rax*2]
jmp 0x1400f3c93
lea rdx, [rcx + rax*2]
lea rcx, [rsp + 0x60]
call fcn.1403342d8
nop
mov r14d, 0x2f
mov dword [rsp + 0x40], r14d
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rdx, qword [rsp + 0x60]
lea rcx, [rbp + 0x310]
call fcn.1400a4cd0
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
lea r15, [r12 + 0x108]
jb 0x1400f3d0c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3d07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ed2
call fcn.140359090
xor r10d, r10d
mov qword [rsp + 0x70], r10
mov qword [rsp + 0x78], 7
mov word [rsp + 0x60], r10w
lea rbx, [rbp + 0x310]
cmp qword [rbp + 0x328], 0x10
cmovae rbx, qword [rbp + 0x310]
lea rdx, str.features
mov rcx, rdi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x328]
cmp rdx, 0x10
jb 0x1400f3d97
inc rdx
mov rcx, qword [rbp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3d92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ed8
call fcn.140359090
mov byte [rbp + 0x310], 0
mov rdx, rdi
mov rcx, r13
call fcn.1401ccb30
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 8
jb 0x1400f3df0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f3deb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ede
call fcn.140359090
xor edi, edi
cmp qword [rsi + 0x108], 0
je 0x1400f4380
mov rdx, r15
mov rcx, r12
call fcn.1401d0a60
mov rbx, rax
mov qword [rsp + 0x50], rax
test dword [rax + 0x18], 0x200
je 0x1400f3e25
mov rcx, qword [rax + 0x20]
call fcn.140359090
mov dword [rbx + 0x18], edi
mov qword [rbx + 0x20], rdi
mov qword [rbx + 0x28], rdi
mov ecx, 0xc
call fcn.140359a1c
mov qword [rbx + 0x20], rax
movsd xmm0, qword [str.Thumbprints]
movsd qword [rax], xmm0
mov ecx, dword [0x1405f7cc8]
mov dword [rax + 8], ecx
mov rax, qword [rbx + 0x20]
add rax, 0xb
mov qword [rbx + 0x28], rax
mov dword [rbx + 0x18], 0x200
mov r13, qword [rsi + 0x100]
mov rcx, qword [rsi + 0xe8]
mov qword [rbp - 0x80], rcx
mov rax, qword [rsi + 0x108]
add rax, r13
mov qword [rsp + 0x48], rax
cmp r13, rax
je 0x1400f4371
test rcx, rcx
je 0x1400f3e9a
mov rax, qword [rcx]
jmp 0x1400f3e9d
mov rax, rdi
mov rcx, qword [rax + 0x10]
dec rcx
and rcx, r13
mov rax, qword [rax + 8]
mov rbx, qword [rax + rcx*8]
mov qword [rsp + 0x58], rbx
mov rdx, r15
mov rcx, r12
call fcn.1401d0a60
mov rsi, rax
test dword [rax + 0x18], 0x200
je 0x1400f3ed4
mov rcx, qword [rax + 0x20]
call fcn.140359090
xor r15d, r15d
mov dword [rsi + 0x18], r15d
mov qword [rsi + 0x20], r15
mov qword [rsi + 0x28], r15
lea ecx, [r15 + 0xb]
call fcn.140359a1c
mov qword [rsi + 0x20], rax
movsd xmm0, qword [0x1405f7cb0]
movsd qword [rax], xmm0
movzx ecx, word [0x1405f7cb8]
mov word [rax + 8], cx
movzx ecx, byte [0x1405f7cba]
mov byte [rax + 0xa], cl
mov rax, qword [rsi + 0x20]
add rax, 0xa
mov qword [rsi + 0x28], rax
mov dword [rsi + 0x18], 0x200
mov edx, dword [rbx]
lea rcx, [rbp - 0x20]
call fcn.1401d15b0
mov rdi, rax
cmp qword [rax + 0x18], 8
jb 0x1400f3f3c
mov rdi, qword [rax]
test rdi, rdi
je 0x1400f4044
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [rdi + rbx*2], 0
jne 0x1400f3f50
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, ebx
mov r8, rdi
xor edx, edx
mov ecx, 0x4e4
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd r15, eax
test eax, eax
jle 0x1400f4041
lfence
xor r14d, r14d
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xe0], r14
mov qword [rbp + 0xe8], 0xf
mov rdx, r15
xor r8d, r8d
lea rcx, [rbp + 0xd0]
call fcn.14009ace0
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0x10
cmovae rcx, qword [rbp + 0xd0]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rcx
mov r9d, ebx
mov r8, rdi
xor edx, edx
mov ecx, 0x4e4
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [rbp + 0xe0]
movups xmmword [rbp + 0x120], xmm1
xor r15d, r15d
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 0xf
mov r14d, dword [rsp + 0x40]
mov byte [rbp + 0xd0], r15b
mov rdi, qword [rbp + 0x128]
jmp 0x1400f4065
xor r15d, r15d
mov qword [rbp + 0x110], r15
mov qword [rbp + 0x120], r15
mov edi, 0xf
mov qword [rbp + 0x128], rdi
mov byte [rbp + 0x110], 0
bts r14d, 7
mov dword [rsp + 0x40], r14d
mov rdx, qword [rbp - 8]
cmp rdx, 8
jb 0x1400f40af
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f40aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4ee4
call fcn.140359090
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r15w
lea rbx, [rbp + 0x110]
cmp rdi, 0x10
cmovae rbx, qword [rbp + 0x110]
lea rdx, str.name
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
mov rcx, qword [rsp + 0x58]
add rcx, 8
lea rdx, [rbp + 0x3b0]
call fcn.1401d12c0
nop
lea rdi, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 8
jb 0x1400f4125
mov rdi, qword [rbp + 0x3b0]
test rdi, rdi
je 0x1400f4229
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [rdi + rbx*2], 0
jne 0x1400f4130
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, ebx
mov r8, rdi
xor edx, edx
mov ecx, 0x4e4
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd r15, eax
test eax, eax
jle 0x1400f4226
lfence
xor r14d, r14d
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], 0xf
mov rdx, r15
xor r8d, r8d
lea rcx, [rbp + 0xf0]
call fcn.14009ace0
lea rcx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0x10
cmovae rcx, qword [rbp + 0xf0]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rcx
mov r9d, ebx
mov r8, rdi
xor edx, edx
mov ecx, 0x4e4
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rbp + 0xf0]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rbp + 0x100]
movups xmmword [rbp + 0x98], xmm1
mov r14d, dword [rsp + 0x40]
bts r14d, 8
xor r15d, r15d
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], r15b
mov rax, qword [rbp + 0xa0]
jmp 0x1400f424f
xor r15d, r15d
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x98], r15
mov eax, 0xf
mov qword [rbp + 0xa0], rax
mov byte [rbp + 0x88], 0
bts r14d, 8
mov dword [rsp + 0x40], r14d
lea rdi, [rbp + 0x88]
cmp rax, 0x10
cmovae rdi, qword [rbp + 0x88]
lea rdx, [r12 + 0x208]
mov rcx, r12
call fcn.1401d0940
mov rbx, rax
mov rdx, rdi
mov rcx, rax
call fcn.1401cc970
mov rdx, rbx
mov rcx, rsi
call fcn.1401ccb30
mov rdx, rsi
mov rbx, qword [rsp + 0x50]
mov rcx, rbx
call fcn.1401ccb30
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x1400f42e2
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f42dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4eea
call fcn.140359090
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
lea rcx, [rbp + 0x3b0]
call fcn.140073b90
nop
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x1400f4349
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f4344
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f4e90
call fcn.140359090
mov byte [rbp + 0x110], 0
inc r13
lea r15, [r12 + 0x108]
xor edi, edi
cmp r13, qword [rsp + 0x48]
je 0x1400f436d
mov rcx, qword [rbp - 0x80]
jmp 0x1400f3e90
mov rsi, qword [rbp - 0x48]
mov rdx, rbx
mov r13, qword [rbp - 0x50]
mov rcx, r13
call fcn.1401ccb30
cmp qword [rsi + 0x140], 0
jbe 0x1400f4460
mov rdx, r15
mov rcx, r12
call fcn.1401d0a60
mov r15, rax
test dword [rax + 0x18], 0x200
je 0x1400f43ae
mov rcx, qword [rax + 0x20]
call fcn.140359090
mov dword [r15 + 0x18], edi
mov qword [r15 + 0x20], rdi
mov qword [r15 + 0x28], rdi
mov ecx, 8
call fcn.140359a1c
mov qword [r15 + 0x20], rax
mov rcx, qword [str.Details]
mov qword [rax], rcx
mov rax, qword [r15 + 0x20]
add rax, 7
mov qword [r15 + 0x28], rax
mov dword [r15 + 0x18], 0x200
lea rdx, [rsi + 0x130]
cmp qword [rdx + 0x18], 8
jb 0x1400f43f7
mov rdx, qword [rdx]
lea rcx, [rbp + 0x3d0]
call fcn.140097490
nop
lea rdi, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 0x10
cmovae rdi, qword [rbp + 0x3d0]
lea rdx, [r12 + 0x208]
mov rcx, r12
call fcn.1401d0940
mov rbx, rax
mov rdx, rdi
mov rcx, rax
call fcn.1401cc970
mov byte [rbx + 0x68], 1
mov rdx, rbx
mov rcx, r15
call fcn.1401ccb30
mov rdx, r15
mov rcx, r13
call fcn.1401ccb30
nop
lea rcx, [rbp + 0x3d0]
call fcn.140073500
mov rbx, qword [rbp - 0x58]
cmp qword [rbx + 0x10], 0
jbe 0x1400f4dff
mov eax, dword [rsi + 0x1c]
mov dword [rbp + 0x74], eax
mov eax, dword [rsi + 0x18]
mov dword [rbp + 0x70], eax
lea rsi, [r12 + 0x108]
mov rdx, rsi
mov rcx, r12
call fcn.1401d0a60
mov rdi, rax
mov qword [rsp + 0x48], rax
test dword [rax + 0x18], 0x200
je 0x1400f44a8
mov rcx, qword [rax + 0x20]
call fcn.140359090
xor eax, eax
mov dword [rdi + 0x18], eax
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rax
lea ecx, [rax + 0xc]
call fcn.140359a1c
mov qword [rdi + 0x20], rax
movsd xmm0, qword [str.Collaterals]
movsd qword [rax], xmm0
mov ecx, dword [0x1405f7cd8]
mov dword [rax + 8], ecx
mov rax, qword [rdi + 0x20]
add rax, 0xb
mov qword [rdi + 0x28], rax
mov dword [rdi + 0x18], 0x200
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
mov qword [rbp + 0xc8], rax
cmp rax, rcx
je 0x1400f4df2
mov rbx, qword [rbp + 0x70]
mov r15, qword [rax + 0x28]
mov eax, dword [r15 + 8]
cmp eax, 1
jne 0x1400f475f
mov rdx, rsi
mov rcx, r12
call fcn.1401d0a60
mov r13, rax
test dword [rax + 0x18], 0x200
je 0x1400f4535
mov rcx, qword [rax + 0x20]
call fcn.140359090
xor esi, esi
mov dword [r13 + 0x18], esi
mov qword [r13 + 0x20], rsi
mov qword [r13 + 0x28], rsi
lea ecx, [rsi + 5]
call fcn.140359a1c
mov qword [r13 + 0x20], rax
mov ecx, dword [str.Http]
mov dword [rax], ecx
movzx ecx, byte [0x1405f7cf0]
mov byte [rax + 4], cl
mov rax, qword [r13 + 0x20]
add rax, 4
mov qword [r13 + 0x28], rax
mov dword [r13 + 0x18], 0x200
mov eax, dword [r15 + 0x14]
mov dword [rsp + 0x54], eax
mov eax, dword [r15 + 0x10]
mov dword [rsp + 0x50], eax
lea rdx, [0x1405f7ce8]
mov rcx, r13
call fcn.1401cdf40
mov rdi, rax
mov rcx, qword [rsp + 0x50]
sub rcx, rbx
movabs rax, 0x346dc5d63886594b
imul rcx
sar rdx, 0xb
mov r9, rdx
shr r9, 0x3f
add r9, rdx
lea r8, str._lld
mov edx, 0xc8
lea rcx, [rbp + 0x660]
call fcn.1401cbf00
test dword [rdi + 0x20], 0x200
je 0x1400f45e4
mov rcx, qword [rdi + 0x28]
call fcn.140359090
mov dword [rdi + 0x20], esi
mov qword [rdi + 0x28], rsi
mov qword [rdi + 0x30], rsi
lea rax, [rbp + 0x660]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400f4600
lea rcx, [rsi + 1]
call fcn.140359a1c
mov qword [rdi + 0x28], rax
lea r8, [rsi + 1]
lea rdx, [rbp + 0x660]
mov rcx, rax
call fcn.14035bc80
mov rcx, qword [rdi + 0x28]
add rcx, rsi
mov qword [rdi + 0x30], rcx
mov dword [rdi + 0x20], 0x200
mov edi, dword [r15 + 0x18]
lea rdx, str.status
mov rcx, r13
call fcn.1401cdf40
mov rsi, rax
mov qword [rbp + 0x70], rax
mov r9d, edi
lea r8, [0x1405feef8]
mov edx, 0xc8
lea rcx, [rbp + 0x730]
call fcn.1401cbf00
test dword [rsi + 0x20], 0x200
je 0x1400f4682
mov rcx, qword [rsi + 0x28]
call fcn.140359090
xor eax, eax
mov dword [rsi + 0x20], eax
mov qword [rsi + 0x28], rax
mov qword [rsi + 0x30], rax
lea rax, [rbp + 0x730]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400f46a0
lea rcx, [rsi + 1]
call fcn.140359a1c
mov rcx, qword [rbp + 0x70]
mov qword [rcx + 0x28], rax
lea r8, [rsi + 1]
lea rdx, [rbp + 0x730]
mov rcx, rax
call fcn.14035bc80
mov rdx, qword [rbp + 0x70]
mov rcx, qword [rdx + 0x28]
add rcx, rsi
mov qword [rdx + 0x30], rcx
mov dword [rdx + 0x20], 0x200
cmp qword [r15 + 0x50], 0
jbe 0x1400f4713
lea rdi, [r15 + 0x40]
cmp qword [rdi + 0x18], 0x10
jb 0x1400f46f8
mov rdi, qword [rdi]
lea rdx, str.referer
mov rcx, r13
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rdi
call fcn.1401cc010
add r15, 0x20
cmp qword [r15 + 0x18], 0x10
jb 0x1400f4721
mov r15, qword [r15]
lea rdx, [r12 + 0x208]
mov rcx, r12
call fcn.1401d0940
mov rdi, rax
mov rdx, r15
mov rcx, rax
call fcn.1401cc970
mov rdx, rdi
mov rcx, r13
call fcn.1401ccb30
mov rdx, r13
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
call fcn.1401ccb30
jmp 0x1400f4dc9
cmp eax, 3
jne 0x1400f4bfa
mov rdx, rsi
mov rcx, r12
call fcn.1401d0a60
mov r13, rax
test dword [rax + 0x18], 0x200
je 0x1400f4788
mov rcx, qword [rax + 0x20]
call fcn.140359090
xor esi, esi
mov dword [r13 + 0x18], esi
mov qword [r13 + 0x20], rsi
mov qword [r13 + 0x28], rsi
lea ecx, [rsi + 0xa]
call fcn.140359a1c
mov qword [r13 + 0x20], rax
movsd xmm0, qword [0x1405f7cf8]
movsd qword [rax], xmm0
movzx ecx, word [0x1405f7d00]
mov word [rax + 8], cx
mov rax, qword [r13 + 0x20]
add rax, 9
mov qword [r13 + 0x28], rax
mov dword [r13 + 0x18], 0x200
mov eax, dword [r15 + 0x14]
mov dword [rsp + 0x5c], eax
mov eax, dword [r15 + 0x10]
mov dword [rsp + 0x58], eax
lea rdx, [0x1405f7ce8]
mov rcx, r13
call fcn.1401cdf40
mov rdi, rax
mov rcx, qword [rsp + 0x58]
sub rcx, rbx
movabs rax, 0x346dc5d63886594b
imul rcx
sar rdx, 0xb
mov r9, rdx
shr r9, 0x3f
add r9, rdx
lea r8, str._lld
mov edx, 0xc8
lea rcx, [rbp + 0x800]
call fcn.1401cbf00
test dword [rdi + 0x20], 0x200
je 0x1400f483c
mov rcx, qword [rdi + 0x28]
call fcn.140359090
mov dword [rdi + 0x20], esi
mov qword [rdi + 0x28], rsi
mov qword [rdi + 0x30], rsi
lea rax, [rbp + 0x800]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400f4855
lea rcx, [rsi + 1]
call fcn.140359a1c
mov qword [rdi + 0x28], rax
lea r8, [rsi + 1]
lea rdx, [rbp + 0x800]
mov rcx, rax
call fcn.14035bc80
mov rcx, qword [rdi + 0x28]
add rcx, rsi
mov qword [rdi + 0x30], rcx
mov dword [rdi + 0x20], 0x200
mov edi, dword [r15 + 0x18]
lea rdx, [0x1405f41c0]
mov rcx, r13
call fcn.1401cdf40
mov rsi, rax
mov qword [rbp + 0x70], rax
mov r9d, edi
lea r8, [0x1405feef8]
mov edx, 0xc8
lea rcx, [rbp + 0x8d0]
call fcn.1401cbf00
test dword [rsi + 0x20], 0x200
je 0x1400f48d7
mov rcx, qword [rsi + 0x28]
call fcn.140359090
xor eax, eax
mov dword [rsi + 0x20], eax
mov qword [rsi + 0x28], rax
mov qword [rsi + 0x30], rax
lea rax, [rbp + 0x8d0]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400f48f2
lea rcx, [rsi + 1]
call fcn.140359a1c
mov rcx, qword [rbp + 0x70]
mov qword [rcx + 0x28], rax
lea r8, [rsi + 1]
lea rdx, [rbp + 0x8d0]
mov rcx, rax
call fcn.14035bc80
mov rdx, qword [rbp + 0x70]
mov rcx, qword [rdx + 0x28]
add rcx, rsi
mov qword [rdx + 0x30], rcx
mov dword [rdx + 0x20], 0x200
mov r8, qword [r15 + 0x60]
lea rdx, str.0x_p
lea rcx, [rbp + 0x538]
call fcn.1400f6c50
mov r8, qword [r15 + 0x68]
lea rdx, str.0x_llX
lea rcx, [rbp + 0x520]
call fcn.1400f6c50
lea rdx, str.address
mov rcx, r13
call fcn.1401cdf40
mov rdi, rax
test dword [rax + 0x20], 0x200
je 0x1400f4987
mov rcx, qword [rax + 0x28]
call fcn.140359090
xor eax, eax
mov dword [rdi + 0x20], eax
mov qword [rdi + 0x28], rax
mov qword [rdi + 0x30], rax
lea rax, [rbp + 0x538]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400f49a2
lea rcx, [rsi + 1]
call fcn.140359a1c
mov qword [rdi + 0x28], rax
lea r8, [rsi + 1]
lea rdx, [rbp + 0x538]
mov rcx, rax
call fcn.14035bc80
mov rcx, qword [rdi + 0x28]
add rcx, rsi
mov qword [rdi + 0x30], rcx
mov dword [rdi + 0x20], 0x200
lea rdx, str.size
mov rcx, r13
call fcn.1401cdf40
mov rdi, rax
test dword [rax + 0x20], 0x200
je 0x1400f4a01
mov rcx, qword [rax + 0x28]
call fcn.140359090
xor eax, eax
mov dword [rdi + 0x20], eax
mov qword [rdi + 0x28], rax
mov qword [rdi + 0x30], rax
lea rax, [rbp + 0x520]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400f4a20
lea rcx, [rsi + 1]
call fcn.140359a1c
mov qword [rdi + 0x28], rax
lea r8, [rsi + 1]
lea rdx, [rbp + 0x520]
mov rcx, rax
call fcn.14035bc80
mov rcx, qword [rdi + 0x28]
add rcx, rsi
mov qword [rdi + 0x30], rcx
mov dword [rdi + 0x20], 0x200
add r15, 0x20
cmp qword [r15 + 0x18], 8
jb 0x1400f4a69
mov r15, qword [r15]
xor edi, edi
test r15, r15
je 0x1400f4b76
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi - 1]
mov r8, r15
mov edx, 0x80
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jle 0x1400f4b76
lfence
mov qword [rbp + 0xa8], rdi
mov qword [rbp + 0xb8], rdi
mov qword [rbp + 0xc0], 0xf
dec eax
movsxd rdx, eax
xor r8d, r8d
lea rcx, [rbp + 0xa8]
call fcn.14009ace0
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rcx, qword [rbp + 0xa8]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov eax, dword [rbp + 0xb8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rcx
lea r9d, [rdi - 1]
mov r8, r15
mov edx, 0x80
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rbp + 0xa8]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rbp + 0xb8]
movups xmmword [rbp + 0x140], xmm1
mov qword [rbp + 0xb8], rdi
mov qword [rbp + 0xc0], 0xf
mov byte [rbp + 0xa8], dil
mov r14d, dword [rsp + 0x40]
bts r14d, 9
mov dword [rsp + 0x40], r14d
lea rcx, [rbp + 0xa8]
call fcn.140073500
mov rax, qword [rbp + 0x148]
jmp 0x1400f4ba1
mov qword [rbp + 0x130], rdi
mov qword [rbp + 0x140], rdi
mov eax, 0xf
mov qword [rbp + 0x148], rax
mov byte [rbp + 0x130], 0
bts r14d, 9
mov dword [rsp + 0x40], r14d
lea rsi, [rbp + 0x130]
cmp rax, 0x10
cmovae rsi, qword [rbp + 0x130]
lea rdx, [r12 + 0x208]
mov rcx, r12
call fcn.1401d0940
mov rdi, rax
mov rdx, rsi
mov rcx, rax
call fcn.1401cc970
mov rdx, rdi
mov rcx, r13
call fcn.1401ccb30
mov rdx, r13
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
call fcn.1401ccb30
nop
lea rcx, [rbp + 0x130]
jmp 0x1400f4dc4
cmp eax, 2
jne 0x1400f4dd1
lea rdx, [r15 + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x1400f4c11
mov rdx, qword [rdx]
lea rcx, [rbp + 0x3f0]
call fcn.140097490
nop
mov r8, qword [r15 + 0x30]
lea rdx, [0x1405f5704]
lea rcx, [rbp + 0x508]
call fcn.1400f6c50
mov r8, qword [r15 + 0x38]
lea rdx, [0x1405f7d38]
lea rcx, [rbp + 0x4f0]
call fcn.1400f6c50
mov rdx, rsi
mov rcx, r12
call fcn.1401d0a60
mov r13, rax
lea rdx, [0x1405f7d30]
mov rcx, rax
call fcn.1401cc970
lea rdx, str.base
mov rcx, r13
call fcn.1401cdf40
mov r15, rax
test dword [rax + 0x20], 0x200
je 0x1400f4c8d
mov rcx, qword [rax + 0x28]
call fcn.140359090
xor eax, eax
mov dword [r15 + 0x20], eax
mov qword [r15 + 0x28], rax
mov qword [r15 + 0x30], rax
lea rax, [rbp + 0x508]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400f4cb0
lea rcx, [rsi + 1]
call fcn.140359a1c
mov qword [r15 + 0x28], rax
lea r8, [rsi + 1]
lea rdx, [rbp + 0x508]
mov rcx, rax
call fcn.14035bc80
mov rcx, qword [r15 + 0x28]
add rcx, rsi
mov qword [r15 + 0x30], rcx
mov dword [r15 + 0x20], 0x200
lea rdx, str.size
mov rcx, r13
call fcn.1401cdf40
mov r15, rax
test dword [rax + 0x20], 0x200
je 0x1400f4d10
mov rcx, qword [rax + 0x28]
call fcn.140359090
xor eax, eax
mov dword [r15 + 0x20], eax
mov qword [r15 + 0x28], rax
mov qword [r15 + 0x30], rax
lea rax, [rbp + 0x4f0]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400f4d30
lea rcx, [rsi + 1]
call fcn.140359a1c
mov qword [r15 + 0x28], rax
lea r8, [rsi + 1]
lea rdx, [rbp + 0x4f0]
mov rcx, rax
call fcn.14035bc80
mov rcx, qword [r15 + 0x28]
add rcx, rsi
mov qword [r15 + 0x30], rcx
mov dword [r15 + 0x20], 0x200
lea rsi, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 0x10
cmovae rsi, qword [rbp + 0x3f0]
lea rdx, [r12 + 0x208]
mov rcx, r12
call fcn.1401d0940
mov rdi, rax
mov rdx, rsi
mov rcx, rax
call fcn.1401cc970
mov rdx, rdi
mov rcx, r13
call fcn.1401ccb30
mov rdx, r13
mov rdi, qword [rsp + 0x48]
mov rcx, rdi
call fcn.1401ccb30
nop
lea rcx, [rbp + 0x3f0]
call fcn.140073500
lea rsi, [r12 + 0x108]
lea rcx, [rbp + 0xc8]
call fcn.140080fb0
mov rax, qword [rbp + 0xc8]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + 8]
jne 0x1400f4504
mov rdx, rdi
mov rcx, qword [rbp - 0x50]
call fcn.1401ccb30
nop
lea rcx, [rbp + 0x330]
call fcn.140073b90
nop
lea rcx, [rbp + 0x350]
call fcn.140073b90
nop
lea rcx, [rbp + 0x370]
call fcn.140073b90
nop
lea rcx, [rbp + 0x390]
call fcn.140073500
nop
lea rcx, [rbp + 0x150]
call fcn.140073500
nop
lea rcx, [rbp + 0x170]
call fcn.140073500
nop
lea rcx, [rbp + 0x190]
call fcn.140073500
nop
lea rcx, [rbp + 0x1b0]
call fcn.140073500
mov rcx, qword [rbp + 0x9a0]
xor rcx, rsp
call fcn.140359070
mov rbx, qword [rsp + 0xaf8]
add rsp, 0xab0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
int3
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
int3