Function at 0x1400f5200
Capabilities:
Get hostname
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3d0]
sub rsp, 0x4d0
mov rax, qword [0x140672360]
xor rax, rsp
mov qword [rbp + 0x3c0], rax
mov r13, r8
mov qword [rbp - 0x38], r8
mov r14, rdx
mov qword [rbp + 0x60], rcx
xor esi, esi
mov dword [rsp + 0x40], esi
mov qword [rbp + 0xd8], rsi
mov qword [rbp + 0xe8], rsi
mov qword [rbp + 0xf0], 0xf
mov byte [rbp + 0xd8], sil
mov qword [rbp + 0xb8], rsi
mov qword [rbp + 0xc8], rsi
mov qword [rbp + 0xd0], 0xf
mov byte [rbp + 0xb8], sil
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0xd8]
call fcn.1400f6ad0
lea rcx, [r14 + 0x18]
lea rdx, [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [rbp + 0x74]
movzx ecx, word [rbp + 0x72]
movzx edx, word [rbp + 0x70]
movzx r10d, word [rbp + 0x6e]
movzx r9d, word [rbp + 0x6a]
movzx r8d, word [rbp + 0x68]
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r10d
lea rdx, [0x1405f7dc0]
lea rcx, [rbp + 0x380]
call fcn.1400f6d20
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa8], rsi
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], sil
lea rax, [rbp + 0x380]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400f5315
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0x98]
call fcn.140073120
mov dword [rsp + 0x40], 0x30
mov r8d, 1
lea rdx, [0x1405f6950]
lea rcx, [rbp + 0x98]
call fcn.1400729d0
xor r8d, r8d
mov edx, dword [r14 + 0x20]
lea rcx, [rbp + 0x338]
call fcn.1401cb8b0
nop
cmp qword [rbp + 0x348], 0
jne 0x1400f53a8
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], 0
xor r8d, r8d
lea rdx, [0x1405e4ea8]
lea rcx, [rsp + 0x68]
call fcn.140073120
lea rcx, [rsp + 0x68]
mov ebx, 0x31
jmp 0x1400f53d0
lea rdx, [rbp + 0x338]
cmp qword [rbp + 0x350], 8
cmovae rdx, qword [rbp + 0x338]
lea rcx, [rbp - 0x30]
call fcn.140097490
mov rcx, rax
mov ebx, 0x32
mov eax, ebx
movups xmm0, xmmword [rcx]
movups xmmword [rbp + 0x1f8], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rbp + 0x208], xmm1
mov qword [rcx + 0x10], rsi
mov qword [rcx + 0x18], 0xf
mov byte [rcx], 0
test al, 2
je 0x1400f544a
and ebx, 0xfffffffd
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x1400f5438
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f5433
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6a7f
call fcn.140359090
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov eax, ebx
test al, 1
je 0x1400f5494
mov ebx, eax
and ebx, 0xfffffffe
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1400f548f
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f548a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6a85
call fcn.140359090
mov byte [rsp + 0x68], 0
mov ecx, dword [r14 + 0x24]
mov r8, qword [0x140688228]
mov rax, qword [r8 + 8]
mov rdx, r8
cmp byte [rax + 0x19], 0
jne 0x1400f54c7
nop dword [rax]
cmp dword [rax + 0x20], ecx
jge 0x1400f54bb
mov rax, qword [rax + 0x10]
jmp 0x1400f54c1
mov rdx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x1400f54b0
cmp byte [rdx + 0x19], 0
jne 0x1400f54d2
cmp ecx, dword [rdx + 0x20]
jge 0x1400f54d5
mov rdx, r8
cmp rdx, r8
jne 0x1400f5500
mov qword [rbp + 0x118], rsi
mov rax, rsi
mov qword [rbp + 0x128], rax
mov ecx, 7
mov qword [rbp + 0x130], rcx
mov word [rbp + 0x118], si
jmp 0x1400f551e
add rdx, 0x28
lea rcx, [rbp + 0x118]
call fcn.1400733c0
mov rcx, qword [rbp + 0x130]
mov rax, qword [rbp + 0x128]
or ebx, 0x40
mov dword [rsp + 0x40], ebx
test rax, rax
je 0x1400f554c
lea rdx, [rbp + 0x118]
cmp rcx, 8
cmovae rdx, qword [rbp + 0x118]
lea rcx, [rbp - 0x10]
call fcn.140097490
nop
or ebx, 4
jmp 0x1400f5576
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], 0xf
xor r8d, r8d
lea rdx, [0x1405e4ea8]
lea rcx, [rbp - 0x58]
call fcn.140073120
lea rax, [rbp - 0x58]
or ebx, 8
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x178], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x188], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
test bl, 8
je 0x1400f55e1
and ebx, 0xfffffff7
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400f55dd
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f55d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6a8b
call fcn.140359090
mov byte [rbp - 0x58], 0
test bl, 4
je 0x1400f5631
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x1400f5621
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f561c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6a91
call fcn.140359090
mov qword [rbp], rsi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
lea r12, [r13 + 0x108]
mov rdx, r12
mov rcx, r13
call fcn.1401d0a60
mov r15, rax
test dword [rax + 0x18], 0x200
je 0x1400f5658
mov rcx, qword [rax + 0x20]
call fcn.140359090
mov dword [r15 + 0x18], esi
mov qword [r15 + 0x20], rsi
mov qword [r15 + 0x28], rsi
mov ecx, 6
call fcn.140359a1c
mov qword [r15 + 0x20], rax
mov ecx, dword [str.event]
mov dword [rax], ecx
movzx ecx, word [0x1405f6d70]
mov word [rax + 4], cx
mov rax, qword [r15 + 0x20]
add rax, 5
mov qword [r15 + 0x28], rax
mov dword [r15 + 0x18], 0x200
lea rdx, str.type
mov rcx, r15
call fcn.1401cdf40
mov rbx, rax
test dword [rax + 0x20], 0x200
je 0x1400f56bd
mov rcx, qword [rax + 0x28]
call fcn.140359090
mov dword [rbx + 0x20], esi
mov qword [rbx + 0x28], rsi
mov qword [rbx + 0x30], rsi
mov ecx, 0x12
call fcn.140359a1c
mov qword [rbx + 0x28], rax
movups xmm0, xmmword [str.sophos.hmpa.alert]
movups xmmword [rax], xmm0
movzx ecx, word [0x1405f7d58]
mov word [rax + 0x10], cx
mov rax, qword [rbx + 0x28]
add rax, 0x11
mov qword [rbx + 0x30], rax
mov dword [rbx + 0x20], 0x200
mov rdx, r12
mov rcx, r13
call fcn.1401d0a60
mov rsi, rax
test dword [rax + 0x18], 0x200
je 0x1400f571e
mov rcx, qword [rax + 0x20]
call fcn.140359090
xor eax, eax
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x20], rax
mov qword [rsi + 0x28], rax
lea ecx, [rax + 6]
call fcn.140359a1c
mov qword [rsi + 0x20], rax
mov ecx, dword [str.Alert]
mov dword [rax], ecx
movzx ecx, word [0x1405f6310]
mov word [rax + 4], cx
mov rax, qword [rsi + 0x20]
add rax, 5
mov qword [rsi + 0x28], rax
mov dword [rsi + 0x18], 0x200
lea rbx, [rbp + 0x1f8]
cmp qword [rbp + 0x210], 0x10
cmovae rbx, qword [rbp + 0x1f8]
lea rdx, str.type
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
cmp qword [rbp + 0x188], 0
je 0x1400f57cb
lea rbx, [rbp + 0x178]
cmp qword [rbp + 0x190], 0x10
cmovae rbx, qword [rbp + 0x178]
lea rdx, str.feature
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rbx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0x10
cmovae rbx, qword [rbp + 0x98]
lea rdx, [0x1405f6d74]
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rcx, [rbp + 0x10]
call fcn.14006b440
nop
xor ecx, ecx
cmp byte [rax + 0x20], cl
je 0x1400f582f
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0xf
mov byte [rax], cl
jmp 0x1400f585b
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], cl
xor r8d, r8d
lea rdx, [0x1405e4ea8]
lea rcx, [rsp + 0x48]
call fcn.140073120
nop
lea rbx, [rsp + 0x48]
cmp qword [rsp + 0x60], 0x10
cmovae rbx, qword [rsp + 0x48]
lea rdx, [0x1405f6d8c]
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400f58c5
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f58c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6a97
call fcn.140359090
mov byte [rsp + 0x48], 0
cmp byte [rbp + 0x30], 0
je 0x1400f58d9
lea rcx, [rbp + 0x10]
call fcn.140073500
lea rbx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0x10
cmovae rbx, qword [rbp + 0xd8]
lea rdx, [0x1405f7be0]
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rbx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0x10
cmovae rbx, qword [rbp + 0xb8]
lea rdx, [0x1405f7c3c]
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
call fcn.1401ecb40
mov rbx, rax
lea rdx, [0x1405f6d88]
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
mov rbx, qword [rbp + 0x60]
cmp qword [rbx + 0x18], 0x10
jb 0x1400f596e
mov rbx, qword [rbx]
lea rdx, str.eventId
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rcx, [r14 + 8]
lea rdx, [rbp + 0x38]
call qword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
je 0x1400f59af
mov r8d, eax
lea rdx, str.UuidToStringA_was_not_succesful_and_returned_RPC_value__ld
mov ecx, 2
call fcn.140109e80
mov rbx, qword [rbp + 0x38]
lea rdx, str.familyId
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
mov dword [rbp + 0x60], 0x10
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x3a0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x1400f5a03
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x78]
call fcn.140097490
mov rax, qword [rbp + 0x88]
jmp 0x1400f5a1e
xor eax, eax
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x88], rax
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], al
test rax, rax
je 0x1400f5a4f
lea rbx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0x10
cmovae rbx, qword [rbp + 0x78]
lea rdx, str.computer
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
mov edx, dword [r14 + 0x2c]
cmp edx, 0xffffffff
je 0x1400f5aee
lea rcx, [rbp + 0x198]
call fcn.14011e0a0
nop
cmp qword [rbp + 0x1a8], 0
jbe 0x1400f5aa6
lea rbx, [rbp + 0x198]
cmp qword [rbp + 0x1b0], 0x10
cmovae rbx, qword [rbp + 0x198]
lea rdx, str.user
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x1b0]
cmp rdx, 0x10
jb 0x1400f5ae7
inc rdx
mov rcx, qword [rbp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f5ae2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6a9d
call fcn.140359090
mov byte [rbp + 0x198], 0
lea rax, vtable.Thumbprint.0
mov qword [rbp + 0x358], rax
movups xmm0, xmmword [0x1405e8ef0]
movups xmmword [rbp + 0x360], xmm0
movups xmm1, xmmword [0x1405e8f00]
movups xmmword [rbp + 0x370], xmm1
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], 7
xor r8d, r8d
lea rdx, [0x1405e4f00]
lea rcx, [rbp - 0x78]
call fcn.1400739a0
lea r9, [rbp - 0x78]
lea r8, [rbp + 0x358]
lea rcx, [r14 + 0xe8]
call fcn.1401d1d30
movzx ebx, al
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x1400f5b97
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f5b92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6ab5
call fcn.140359090
test bl, bl
je 0x1400f5c98
lea rdx, [rbp + 0x238]
lea rcx, [rbp + 0x358]
call fcn.1401d12c0
nop
lea rdx, [rbp + 0x238]
cmp qword [rbp + 0x250], 8
cmovae rdx, qword [rbp + 0x238]
lea rcx, [rbp + 0x218]
call fcn.1400a4cd0
nop
lea rbx, [rbp + 0x218]
cmp qword [rbp + 0x230], 0x10
cmovae rbx, qword [rbp + 0x218]
lea rdx, str.thumbprint
mov rcx, rsi
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x230]
cmp rdx, 0x10
jb 0x1400f5c4b
inc rdx
mov rcx, qword [rbp + 0x218]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f5c46
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6aa3
call fcn.140359090
mov byte [rbp + 0x218], 0
mov rdx, qword [rbp + 0x250]
cmp rdx, 8
jb 0x1400f5c98
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x238]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f5c93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6aa9
call fcn.140359090
xor ebx, ebx
mov rdx, rsi
mov rcx, r15
call fcn.1401ccb30
mov rdx, r15
mov rcx, r13
call fcn.1401ccb30
cmp byte [r14 + 0x155], bl
je 0x1400f5de3
mov eax, dword [r14 + 0x20]
sub eax, 0x1f4
cmp eax, 2
ja 0x1400f5de3
mov rdx, r12
mov rcx, r13
call fcn.1401d0a60
mov r15, rax
test dword [rax + 0x18], 0x200
je 0x1400f5cef
mov rcx, qword [rax + 0x20]
call fcn.140359090
mov dword [r15 + 0x18], ebx
mov qword [r15 + 0x20], rbx
mov qword [r15 + 0x28], rbx
mov ecx, 7
call fcn.140359a1c
mov qword [r15 + 0x20], rax
mov ecx, dword [str.Client]
mov dword [rax], ecx
movzx ecx, word [0x1405f7d60]
mov word [rax + 4], cx
movzx ecx, byte [0x1405f7d62]
mov byte [rax + 6], cl
mov rax, qword [r15 + 0x20]
add rax, 6
mov qword [r15 + 0x28], rax
mov dword [r15 + 0x18], 0x200
lea rdx, [r14 + 0x110]
cmp qword [rdx + 0x18], 8
jb 0x1400f5d4b
mov rdx, qword [rdx]
lea rcx, [rbp + 0x258]
call fcn.140097490
nop
lea rbx, [rbp + 0x258]
cmp qword [rbp + 0x270], 0x10
cmovae rbx, qword [rbp + 0x258]
lea rdx, [0x1405f7d7c]
mov rcx, r15
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
mov rdx, r15
mov rcx, rsi
call fcn.1401ccb30
nop
mov rdx, qword [rbp + 0x270]
cmp rdx, 0x10
jb 0x1400f5dd7
inc rdx
mov rcx, qword [rbp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f5dd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6ab5
call fcn.140359090
mov byte [rbp + 0x258], 0
jmp 0x1400f6666
mov eax, dword [r14 + 0x20]
sub eax, 0x1f5
cmp eax, 1
jbe 0x1400f643b
cmp qword [r14 + 0x68], 0
jbe 0x1400f6666
mov rdx, r12
mov rcx, r13
call fcn.1401d0a60
mov r15, rax
test dword [rax + 0x18], 0x200
je 0x1400f5e20
mov rcx, qword [rax + 0x20]
call fcn.140359090
mov dword [r15 + 0x18], ebx
mov qword [r15 + 0x20], rbx
mov qword [r15 + 0x28], rbx
mov ecx, 8
call fcn.140359a1c
mov qword [r15 + 0x20], rax
mov rcx, qword [0x1405f7c80]
mov qword [rax], rcx
mov rax, qword [r15 + 0x20]
add rax, 7
mov qword [r15 + 0x28], rax
mov dword [r15 + 0x18], 0x200
cmp qword [r14 + 0x88], 0
jbe 0x1400f5fa2
lea rdx, [r14 + 0x78]
cmp qword [rdx + 0x18], 8
jb 0x1400f5e74
mov rdx, qword [rdx]
lea rcx, [rbp + 0x298]
call fcn.140097490
nop
lea rbx, [rbp + 0x298]
cmp qword [rbp + 0x2b0], 0x10
cmovae rbx, qword [rbp + 0x298]
lea rdx, str.name
mov rcx, r15
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
cmp qword [r14 + 0xa8], 0
jbe 0x1400f5f5a
lea rdx, [r14 + 0x98]
cmp qword [rdx + 0x18], 8
jb 0x1400f5ed2
mov rdx, qword [rdx]
lea rcx, [rbp + 0x278]
call fcn.140097490
nop
lea rbx, [rbp + 0x278]
cmp qword [rbp + 0x290], 0x10
cmovae rbx, qword [rbp + 0x278]
lea rdx, str.version
mov rcx, r15
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x290]
cmp rdx, 0x10
jb 0x1400f5f53
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f5f4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6aaf
call fcn.140359090
mov byte [rbp + 0x278], 0
mov rdx, qword [rbp + 0x2b0]
cmp rdx, 0x10
jb 0x1400f5f9b
inc rdx
mov rcx, qword [rbp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f5f96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6ab5
call fcn.140359090
mov byte [rbp + 0x298], 0
cmp qword [r14 + 0x68], 0
jbe 0x1400f6421
lea rdx, [r14 + 0x58]
cmp qword [r14 + 0x70], 8
jb 0x1400f5fbc
mov rdx, qword [r14 + 0x58]
lea rcx, [rbp + 0x1b8]
call fcn.140097490
nop
lea rbx, [rbp + 0x1b8]
cmp qword [rbp + 0x1d0], 0x10
cmovae rbx, qword [rbp + 0x1b8]
lea rdx, str.path
mov rcx, r15
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rdx, [r14 + 0x58]
lea rcx, [rbp + 0xf8]
call fcn.1401d9930
nop
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 8
cmovae rdx, qword [rbp + 0xf8]
lea rcx, [rbp + 0x1d8]
call fcn.140097490
nop
lea rbx, [rbp + 0x1d8]
cmp qword [rbp + 0x1f0], 0x10
cmovae rbx, qword [rbp + 0x1d8]
lea rdx, str.aliasPath
mov rcx, r15
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rbx, [r14 + 0xb8]
test rbx, rbx
je 0x1400f6386
mov ecx, 0x82
call fcn.140368330
mov r8, rax
xor r12d, r12d
test rax, rax
je 0x1400f6389
mov r10d, r12d
lea r9, [rbx + 2]
lea r11, str.0123456789abcdef
lea r13d, [r12 + 2]
nop
movzx edx, byte [r9 - 2]
mov ecx, edx
shr rcx, 4
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2], ax
and edx, 0xf
movzx eax, word [r11 + rdx*2]
mov word [r8 + r10*2 + 2], ax
movzx ecx, byte [r9 - 1]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 4], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 6], ax
movzx ecx, byte [r9]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 8], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0xa], ax
movzx ecx, byte [r9 + 1]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0xc], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0xe], ax
movzx ecx, byte [r9 + 2]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x10], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x12], ax
movzx ecx, byte [r9 + 3]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x14], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x16], ax
movzx ecx, byte [r9 + 4]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x18], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x1a], ax
movzx ecx, byte [r9 + 5]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x1c], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x1e], ax
movzx ecx, byte [r9 + 6]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x20], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x22], ax
movzx ecx, byte [r9 + 7]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x24], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x26], ax
movzx ecx, byte [r9 + 8]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x28], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x2a], ax
movzx ecx, byte [r9 + 9]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x2c], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x2e], ax
movzx ecx, byte [r9 + 0xa]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x30], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x32], ax
movzx ecx, byte [r9 + 0xb]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x34], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x36], ax
movzx ecx, byte [r9 + 0xc]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x38], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x3a], ax
movzx ecx, byte [r9 + 0xd]
mov eax, ecx
shr rax, 4
movzx eax, word [r11 + rax*2]
mov word [r8 + r10*2 + 0x3c], ax
and ecx, 0xf
movzx eax, word [r11 + rcx*2]
mov word [r8 + r10*2 + 0x3e], ax
lea r10, [r10 + 0x20]
lea r9, [r9 + 0x10]
sub r13, 1
jne 0x1400f60a0
mov word [r8 + r10*2], r12w
mov rdx, r8
lea rcx, [rbp + 0x2b8]
call fcn.1400a4cd0
nop
lea rbx, [rbp + 0x2b8]
cmp qword [rbp + 0x2d0], 0x10
cmovae rbx, qword [rbp + 0x2b8]
lea rdx, str.sha256
mov rcx, r15
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x2d0]
cmp rdx, 0x10
mov r13, qword [rbp - 0x38]
jb 0x1400f637d
inc rdx
mov rcx, qword [rbp + 0x2b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f6378
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6abb
call fcn.140359090
mov byte [rbp + 0x2b8], 0
jmp 0x1400f6389
xor r12d, r12d
mov r8, qword [rbp + 0x1f0]
cmp r8, 0x10
jb 0x1400f63ac
inc r8
mov rdx, qword [rbp + 0x1d8]
lea rcx, [rbp + 0x1d8]
call fcn.1400734c0
mov byte [rbp + 0x1d8], 0
mov r8, qword [rbp + 0x110]
cmp r8, 8
jb 0x1400f63d6
inc r8
mov rdx, qword [rbp + 0xf8]
lea rcx, [rbp + 0xf8]
call fcn.140073b50
mov qword [rbp + 0x108], r12
mov qword [rbp + 0x110], 7
mov word [rbp + 0xf8], r12w
mov r8, qword [rbp + 0x1d0]
cmp r8, 0x10
jb 0x1400f6413
inc r8
mov rdx, qword [rbp + 0x1b8]
lea rcx, [rbp + 0x1b8]
call fcn.1400734c0
mov byte [rbp + 0x1b8], 0
lea r12, [r13 + 0x108]
mov r8d, dword [r14 + 0x30]
test r8d, r8d
je 0x1400f665b
mov rcx, r15
call fcn.1400f6db0
jmp 0x1400f665b
mov rdx, r12
mov rcx, r13
call fcn.1401d0a60
mov r15, rax
test dword [rax + 0x18], 0x200
je 0x1400f645b
mov rcx, qword [rax + 0x20]
call fcn.140359090
mov dword [r15 + 0x18], ebx
mov qword [r15 + 0x20], rbx
mov qword [r15 + 0x28], rbx
mov ecx, 8
call fcn.140359a1c
mov qword [r15 + 0x20], rax
mov rcx, qword [0x1405f7c80]
mov qword [rax], rcx
mov rax, qword [r15 + 0x20]
add rax, 7
mov qword [r15 + 0x28], rax
mov dword [r15 + 0x18], 0x200
cmp qword [r14 + 0x120], 0
jbe 0x1400f665b
lea rdx, [r14 + 0x110]
cmp qword [r14 + 0x128], 8
jb 0x1400f64b9
mov rdx, qword [r14 + 0x110]
lea rcx, [rbp + 0x2f8]
call fcn.140097490
nop
lea rbx, [rbp + 0x2f8]
cmp qword [rbp + 0x310], 0x10
cmovae rbx, qword [rbp + 0x2f8]
lea rdx, str.path
mov rcx, r15
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
lea rdx, [r14 + 0x110]
lea rcx, [rbp + 0x138]
call fcn.1401d9930
nop
lea rdx, [rbp + 0x138]
cmp qword [rbp + 0x150], 8
cmovae rdx, qword [rbp + 0x138]
lea rcx, [rbp + 0x2d8]
call fcn.140097490
nop
lea rbx, [rbp + 0x2d8]
cmp qword [rbp + 0x2f0], 0x10
cmovae rbx, qword [rbp + 0x2d8]
lea rdx, str.aliasPath
mov rcx, r15
call fcn.1401cdf40
lea rcx, [rax + 0x20]
mov rdx, rbx
call fcn.1401cc010
nop
mov rdx, qword [rbp + 0x2f0]
cmp rdx, 0x10
jb 0x1400f65a4
inc rdx
mov rcx, qword [rbp + 0x2d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f659f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6ac1
call fcn.140359090
mov byte [rbp + 0x2d8], 0
mov rdx, qword [rbp + 0x150]
cmp rdx, 8
jb 0x1400f65f1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f65ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6ac7
call fcn.140359090
xor eax, eax
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x150], 7
mov word [rbp + 0x138], ax
mov rdx, qword [rbp + 0x310]
cmp rdx, 0x10
jb 0x1400f664d
inc rdx
mov rcx, qword [rbp + 0x2f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f6648
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f6a79
call fcn.140359090
mov byte [rbp + 0x2f8], 0
lea r12, [r13 + 0x108]
mov rdx, r15
mov rcx, rsi
call fcn.1401ccb30
mov ecx, dword [r14 + 0x20]
call fcn.1401cba10
test al, al
jne 0x1400f667c
cmp byte [r14 + 0x156], al
je 0x1400f66e2
lea rdx, str.status
mov rcx, rsi
call fcn.1401cdf40
mov rbx, rax
test dword [rax + 0x20], 0x200
je 0x1400f66a0
mov rcx, qword [rax + 0x28]
call fcn.140359090
xor eax, eax
mov dword [rbx + 0x20], eax
mov qword [rbx + 0x28], rax
mov qword [rbx + 0x30], rax
lea ecx, [rax + 9]
call fcn.140359a1c
mov qword [rbx + 0x28], rax
movsd xmm0, qword [str.resolved]
movsd qword [rax], xmm0
movzx ecx, byte [0x1405f7da0]
mov byte [rax + 8], cl
mov rax, qword [rbx + 0x28]
add rax, 8
mov qword [rbx + 0x30], rax
mov dword [rbx + 0x20], 0x200
cmp qword [r14 + 0x140], 0
jbe 0x1400f6962
mov rdx, r12
mov rcx, r13
call fcn.1401d0a60
mov r15, rax
test dword [rax + 0x18], 0x200
je 0x1400f6710
mov rcx, qword [rax + 0x20]
call fcn.140359090
xor r12d, r12d
mov dword [r15 + 0x18], r12d
mov qword [r15 + 0x20], r12
mov qword [r15 + 0x28], r12
lea ecx, [r12 + 8]
call fcn.140359a1c
mov qword [r15 + 0x20], rax
mov rcx, qword [str.Details]
mov qword [rax], rcx
mov rax, qword [r15 + 0x20]
add rax, 7
mov qword [r15 + 0x28], rax
mov dword [r15 + 0x18], 0x200
lea rdx, [r14 + 0x130]
cmp qword [rdx + 0x18], 8
jb 0x1400f675c
mov rdx, qword [rdx]
lea rcx, [rbp + 0x318]
call fcn.140097490
nop
lea rbx, [rbp + 0x318]
cmp qword [rbp + 0x330], 0x10
jb 0x1400f67b1
mov rbx, qword [rbp + 0x318]
test rbx, rbx
jne 0x1400f67b1
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], bl
xor r8d, r8d
lea rdx, [0x1405e4ea8]
lea rcx, [rbp + 0x40]
call fcn.140073120
jmp 0x1400f68ce
mov rcx, rdi
inc rcx
cmp byte [rbx + rcx], 0
jne 0x1400f67b4
lfence
cmp rcx, 0x10000
ja 0x1400f67fd
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
nop dword [rax]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x1400f67e0
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp + 0x40]
call fcn.140073120
jmp 0x1400f68ce
mov edx, 0x7ff7
lea r14, [rcx - 0x7ff6]
nop dword [rax]
movzx eax, byte [rbx + rdx]
test al, al
jns 0x1400f6824
and al, 0xc0
cmp al, 0xc0
je 0x1400f6824
sub rdx, 1
jne 0x1400f6810
cmp r14, rcx
jae 0x1400f6847
nop dword [rax]
movzx eax, byte [rbx + r14]
test al, al
jns 0x1400f6847
and al, 0xc0
cmp al, 0xc0
je 0x1400f6847
inc r14
cmp r14, rcx
jb 0x1400f6830
lea r8, [rbx + rdx]
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], 0xf
mov byte [rbp + 0x158], 0
cmp rbx, r8
je 0x1400f6883
sub r8, rbx
mov rdx, rbx
lea rcx, [rbp + 0x158]
call fcn.140073120
nop
mov r8d, 0x13
lea rdx, str._r_n...truncated..._r_n
lea rcx, [rbp + 0x158]
call fcn.1400729d0
lea rdx, [rbx + r14]
inc rdi
cmp byte [rdx + rdi], 0
jne 0x1400f68a0
mov r8, rdi
lea rcx, [rbp + 0x158]
call fcn.1400729d0
movups xmm0, xmmword [rbp + 0x158]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rbp + 0x168]
movups xmmword [rbp + 0x50], xmm1
lea rdi, [rbp + 0x40]
cmp qword [rbp + 0x58], 0x10
cmovae rdi, qword [rbp + 0x40]
lea rdx, [r13 + 0x208]
mov rcx, r13
call fcn.1401d0940
mov rbx, rax
mov rdx, rdi
mov rcx, rax
call fcn.1401cc970
mov byte [rbx + 0x68], 1
mov rdx, rbx
mov rcx, r15
call fcn.1401ccb30
mov rdx, r15
mov rcx, rsi
call fcn.1401ccb30
nop
mov r8, qword [rbp + 0x58]
cmp r8, 0x10
jb 0x1400f692e
inc r8
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.1400734c0
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
mov r8, qword [rbp + 0x330]
cmp r8, 0x10
jb 0x1400f6962
inc r8
mov rdx, qword [rbp + 0x318]
lea rcx, [rbp + 0x318]
call fcn.1400734c0
nop
mov r8, qword [rbp + 0x90]
cmp r8, 0x10
jb 0x1400f6980
inc r8
mov rdx, qword [rbp + 0x78]
lea rcx, [rbp + 0x78]
call fcn.1400734c0
nop
mov r8, qword [rbp + 0x190]
cmp r8, 0x10
jb 0x1400f69a4
inc r8
mov rdx, qword [rbp + 0x178]
lea rcx, [rbp + 0x178]
call fcn.1400734c0
nop
lea rcx, [rbp + 0x118]
call fcn.140073b90
nop
mov r8, qword [rbp + 0x210]
cmp r8, 0x10
jb 0x1400f69d5
inc r8
mov rdx, qword [rbp + 0x1f8]
lea rcx, [rbp + 0x1f8]
call fcn.1400734c0
nop
lea rcx, [rbp + 0x338]
call fcn.140073b90
nop
mov r8, qword [rbp + 0xb0]
cmp r8, 0x10
jb 0x1400f6a06
inc r8
mov rdx, qword [rbp + 0x98]
lea rcx, [rbp + 0x98]
call fcn.1400734c0
nop
mov r8, qword [rbp + 0xd0]
cmp r8, 0x10
jb 0x1400f6a2a
inc r8
mov rdx, qword [rbp + 0xb8]
lea rcx, [rbp + 0xb8]
call fcn.1400734c0
nop
mov r8, qword [rbp + 0xf0]
cmp r8, 0x10
jb 0x1400f6a4d
inc r8
mov rdx, qword [rbp + 0xd8]
lea rcx, [rbp + 0xd8]
call fcn.1400734c0
mov al, 1
mov rcx, qword [rbp + 0x3c0]
xor rcx, rsp
call fcn.140359070
mov rbx, qword [rsp + 0x528]
add rsp, 0x4d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
nop
call fcn.140368068
int3