Function at 0x7ff7610ed3b0
Capabilities:
Compress data via zlib inflate or deflate
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x10], edx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov r12, rcx
test rcx, rcx
je case.0x7ff7610ed4ae.16211
cmp qword [rcx + 0x30], 0
je case.0x7ff7610ed4ae.16211
cmp qword [rcx + 0x38], 0
je case.0x7ff7610ed4ae.16211
mov rax, qword [rcx + 0x28]
test rax, rax
je case.0x7ff7610ed4ae.16211
cmp qword [rax], rcx
jne case.0x7ff7610ed4ae.16211
mov eax, dword [rax + 8]
sub eax, 0x3f34
cmp eax, 0x1f
ja case.0x7ff7610ed4ae.16211
cmp qword [rcx + 0x10], 0
je case.0x7ff7610ed4ae.16211
cmp qword [rcx], 0
jne 0x7ff7610ed428
cmp dword [rcx + 8], 0
jne case.0x7ff7610ed4ae.16211
mov r13, qword [rcx + 0x28]
mov eax, dword [r13 + 8]
cmp eax, 0x3f3f
jne 0x7ff7610ed444
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov eax, 0x3f40
mov r14d, dword [rcx + 0x18]
xor r11d, r11d
mov r10, qword [rcx + 0x10]
add eax, 0xffffc0cc
mov edi, dword [rcx + 8]
mov r8d, r14d
mov rsi, qword [rcx]
mov ebp, dword [r13 + 0x48]
mov ebx, dword [r13 + 0x4c]
mov qword [rsp + 0x40], r10
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x38], edi
mov dword [rsp + 0xa0], r14d
mov dword [rsp + 0xb0], r11d
cmp eax, 0x1f
ja case.0x7ff7610ed4ae.16211
cdqe
lea rcx, [0x7ff761040000]
lea r9, [r13 + 0x74]
lea r15, [r13 + 0x70]
mov ecx, dword [rcx + rax*4 + reloc.ucrtbase.dll_free]
lea rax, [0x7ff761040000]
add rcx, rax
jmp rcx
mov edx, dword [r13 + 0x10]
test edx, edx
jne 0x7ff7610ed4c5
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
cmp ebx, 0x10
jae 0x7ff7610ed4ee
nop word [rax + rax]
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x7ff7610ed4d0
test dl, 2
je 0x7ff7610ed57a
cmp ebp, 0x8b1f
jne 0x7ff7610ed57a
cmp dword [r13 + 0x30], 0
jne 0x7ff7610ed50e
mov dword [r13 + 0x30], 0xf
mov byte [rsp + 0xb8], bpl
lea r9, [rsp + 0xb8]
shr ebp, 8
lea r10, [0x7ff761040000]
mov byte [rsp + 0xb9], bpl
mov r8d, 2
mov dword [r13 + 0x20], r11d
mov edx, reloc.ucrtbase.dll_free
nop
movzx eax, byte [r9]
lea r9, [r9 + 1]
mov ecx, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + reloc.ucrtbase.dll_free]
add r8d, reloc.ucrtbase.dll_free
jne 0x7ff7610ed540
not edx
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov dword [r13 + 0x20], edx
mov ebp, r11d
mov ebx, r11d
jmp 0x7ff7610ee0d7
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x7ff7610ed58a
mov dword [rax + 0x40], reloc.ucrtbase.dll_free
test byte [r13 + 0x10], 1
je 0x7ff7610ed65c
movzx ecx, bpl
mov eax, ebp
shr eax, 8
shl ecx, 8
add ecx, eax
mov eax, 0x8421085
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 4
imul eax, eax, 0x1f
cmp ecx, eax
jne 0x7ff7610ed65c
mov eax, ebp
and al, 0xf
cmp al, 8
je 0x7ff7610ed5e1
lea rax, [0x7ff76116fc80]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
mov eax, dword [r13 + 0x30]
add ebx, 0xfffffffc
shr ebp, 4
mov ecx, ebp
and ecx, 0xf
add ecx, 8
test eax, eax
jne 0x7ff7610ed5fd
mov dword [r13 + 0x30], ecx
mov eax, ecx
cmp ecx, 0xf
ja 0x7ff7610ed643
cmp ecx, eax
ja 0x7ff7610ed643
shr ebp, 8
mov eax, 1
not ebp
shl eax, cl
and ebp, 2
mov dword [r13 + 0x1c], eax
or ebp, 0x3f3d
mov dword [r13 + 0x18], r11d
mov dword [r13 + 0x20], 1
mov ebx, r11d
mov dword [r12 + 0x4c], 1
mov dword [r13 + 8], ebp
mov ebp, r11d
jmp 0x7ff7610ee0dc
lea rax, [0x7ff76116fca0]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
lea rax, [0x7ff76116fc68]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
cmp ebx, 0x10
jae 0x7ff7610ed69e
nop word [rax + rax]
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x7ff7610ed680
mov dword [r13 + 0x18], ebp
cmp bpl, 8
je 0x7ff7610ed6c1
lea rax, [0x7ff76116fc80]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
test ebp, 0xe000
je 0x7ff7610ed6e2
lea rax, [0x7ff76116fcb8]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
mov rdx, qword [r13 + 0x28]
mov ecx, ebp
shr ecx, 8
test rdx, rdx
je 0x7ff7610ed6f7
mov eax, ecx
and eax, 1
mov dword [rdx], eax
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
lea r10, [0x7ff761040000]
je 0x7ff7610ed767
test byte [r13 + 0x10], 4
je 0x7ff7610ed767
mov edx, dword [r13 + 0x20]
lea r9, [rsp + 0xb8]
not edx
mov byte [rsp + 0xb8], bpl
mov byte [rsp + 0xb9], cl
mov r8d, 2
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9]
lea r9, [r9 + 1]
mov ecx, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + reloc.ucrtbase.dll_free]
add r8d, reloc.ucrtbase.dll_free
jne 0x7ff7610ed740
not edx
mov dword [r13 + 0x20], edx
mov ebp, r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov ebx, r11d
jmp 0x7ff7610ed783
lea r10, [0x7ff761040000]
cmp ebx, 0x20
jae 0x7ff7610ed7a1
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x7ff7610ed783
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x7ff7610ed7ad
mov dword [rax + 4], ebp
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610ed827
test byte [r13 + 0x10], 4
je 0x7ff7610ed827
mov edx, dword [r13 + 0x20]
lea r9, [rsp + 0xb8]
mov eax, ebp
mov byte [rsp + 0xb8], bpl
shr eax, 8
mov r8d, 4
mov byte [rsp + 0xb9], al
not edx
mov eax, ebp
shr eax, 0x10
shr ebp, 0x18
mov byte [rsp + 0xbb], bpl
mov byte [rsp + 0xba], al
nop dword [rax]
movzx eax, byte [r9]
lea r9, [r9 + 1]
mov ecx, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + reloc.ucrtbase.dll_free]
add r8d, reloc.ucrtbase.dll_free
jne 0x7ff7610ed800
not edx
mov dword [r13 + 0x20], edx
mov ebp, r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov ebx, r11d
jmp 0x7ff7610ed843
lea r10, [0x7ff761040000]
cmp ebx, 0x10
jae 0x7ff7610ed861
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x7ff7610ed843
mov rdx, qword [r13 + 0x28]
mov ecx, ebp
shr ecx, 8
test rdx, rdx
je 0x7ff7610ed87d
movzx eax, bpl
mov dword [rdx + 8], eax
mov rax, qword [r13 + 0x28]
mov dword [rax + 0xc], ecx
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610ed8e7
test byte [r13 + 0x10], 4
je 0x7ff7610ed8e7
mov edx, dword [r13 + 0x20]
lea r9, [rsp + 0xb8]
not edx
mov byte [rsp + 0xb8], bpl
mov byte [rsp + 0xb9], cl
mov r8d, 2
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9]
lea r9, [r9 + 1]
mov ecx, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + reloc.ucrtbase.dll_free]
add r8d, reloc.ucrtbase.dll_free
jne 0x7ff7610ed8c0
not edx
mov dword [r13 + 0x20], edx
mov ebp, r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov ebx, r11d
jmp 0x7ff7610ed8fe
lea r10, [0x7ff761040000]
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610ed9af
cmp ebx, 0x10
jae 0x7ff7610ed92f
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x7ff7610ed911
mov rax, qword [r13 + 0x28]
mov dword [r13 + 0x50], ebp
test rax, rax
je 0x7ff7610ed93f
mov dword [rax + 0x18], ebp
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610ed9a7
test byte [r13 + 0x10], 4
je 0x7ff7610ed9a7
mov edx, dword [r13 + 0x20]
lea r9, [rsp + 0xb8]
mov byte [rsp + 0xb8], bpl
mov r8d, 2
shr ebp, 8
not edx
mov byte [rsp + 0xb9], bpl
nop word [rax + rax]
movzx eax, byte [r9]
lea r9, [r9 + 1]
mov ecx, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r10 + rax*4 + reloc.ucrtbase.dll_free]
add r8d, reloc.ucrtbase.dll_free
jne 0x7ff7610ed980
not edx
mov dword [r13 + 0x20], edx
mov ebp, r11d
mov ebx, r11d
jmp 0x7ff7610ed9bc
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x7ff7610ed9bc
mov qword [rax + 0x10], r11
mov dword [r13 + 8], reloc.ucrtbase.dll_free
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610eda8a
mov r9d, dword [r13 + 0x50]
mov r15d, edi
cmp r9d, edi
cmovbe r15d, r9d
test r15d, r15d
je 0x7ff7610eda81
mov rax, qword [r13 + 0x28]
mov r14d, r9d
test rax, rax
je 0x7ff7610eda47
mov r10, qword [rax + 0x10]
test r10, r10
je 0x7ff7610eda47
mov ecx, dword [rax + 0x18]
mov rdx, rsi
mov r8d, dword [rax + 0x1c]
sub ecx, r9d
lea eax, [r15 + rcx]
cmp eax, r8d
jbe 0x7ff7610eda21
sub r8d, ecx
add rcx, r10
test r8d, r8d
je 0x7ff7610eda47
jmp 0x7ff7610eda30
mov r8d, r15d
add rcx, r10
nop word [rax + rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov byte [rcx], al
lea rcx, [rcx + 1]
add r8d, reloc.ucrtbase.dll_free
jne 0x7ff7610eda30
mov r14d, dword [r13 + 0x50]
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610eda6e
test byte [r13 + 0x10], 4
je 0x7ff7610eda6e
mov ecx, dword [r13 + 0x20]
mov r8d, r15d
mov rdx, rsi
call fcn.7ff7610ecaa0
mov dword [r13 + 0x20], eax
xor r11d, r11d
mov eax, r15d
sub edi, r15d
add rsi, rax
mov r9d, r14d
sub r9d, r15d
mov dword [r13 + 0x50], r9d
test r9d, r9d
jne 0x7ff7610edb21
mov dword [r13 + 0x50], r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610edbbc
test edi, edi
je 0x7ff7610edb21
mov r14d, r11d
nop dword [rax + rax]
mov eax, r14d
inc r14d
movzx r15d, byte [rax + rsi]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x7ff7610edade
mov rdx, qword [rax + 0x20]
test rdx, rdx
je 0x7ff7610edade
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x28]
jae 0x7ff7610edade
mov byte [rcx + rdx], r15b
inc dword [r13 + 0x50]
test r15b, r15b
je 0x7ff7610edae8
cmp r14d, edi
jb 0x7ff7610edab0
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610edb0f
test byte [r13 + 0x10], 4
je 0x7ff7610edb0f
mov ecx, dword [r13 + 0x20]
mov r8d, r14d
mov rdx, rsi
call fcn.7ff7610ecaa0
mov dword [r13 + 0x20], eax
xor r11d, r11d
mov eax, r14d
sub edi, r14d
add rsi, rax
test r15b, r15b
je 0x7ff7610edbc9
mov r14d, dword [rsp + 0xa0]
mov r15d, dword [rsp + 0xb0]
mov ecx, dword [rsp + 0xa8]
mov rax, qword [rsp + 0x40]
mov qword [r12 + 0x10], rax
mov eax, dword [rsp + 0x30]
mov dword [r12 + 0x18], eax
mov qword [r12], rsi
mov dword [r12 + 8], edi
cmp dword [r13 + 0x34], 0
mov dword [r13 + 0x48], ebp
mov dword [r13 + 0x4c], ebx
jne 0x7ff7610edb8d
cmp r14d, dword [r12 + 0x18]
je 0x7ff7610eeb1d
mov eax, dword [r13 + 8]
cmp eax, 0x3f51
jge 0x7ff7610eeb1d
cmp eax, 0x3f4e
jl 0x7ff7610edb8d
cmp ecx, 4
je 0x7ff7610eeb1d
mov rdx, qword [r12 + 0x10]
mov r8d, r14d
sub r8d, dword [r12 + 0x18]
mov rcx, r12
call fcn.7ff7610ef840
test eax, eax
je 0x7ff7610eeb1d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov eax, CertFindCertificateInStore
jmp 0x7ff7610eebf7
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x7ff7610edbc9
mov qword [rax + 0x20], r11
mov dword [r13 + 0x50], r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610edc63
test edi, edi
je 0x7ff7610edb21
mov r14d, r11d
nop
mov eax, r14d
inc r14d
movzx r15d, byte [rax + rsi]
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x7ff7610edc1e
mov rdx, qword [rax + 0x30]
test rdx, rdx
je 0x7ff7610edc1e
mov ecx, dword [r13 + 0x50]
cmp ecx, dword [rax + 0x38]
jae 0x7ff7610edc1e
mov byte [rcx + rdx], r15b
inc dword [r13 + 0x50]
test r15b, r15b
je 0x7ff7610edc28
cmp r14d, edi
jb 0x7ff7610edbf0
test dword [r13 + 0x18], reloc.ucrtbase.dll_free
je 0x7ff7610edc4f
test byte [r13 + 0x10], 4
je 0x7ff7610edc4f
mov ecx, dword [r13 + 0x20]
mov r8d, r14d
mov rdx, rsi
call fcn.7ff7610ecaa0
mov dword [r13 + 0x20], eax
xor r11d, r11d
mov eax, r14d
sub edi, r14d
add rsi, rax
test r15b, r15b
jne 0x7ff7610edb21
jmp 0x7ff7610edc70
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x7ff7610edc70
mov qword [rax + 0x30], r11
mov r10, qword [rsp + 0x40]
mov r14d, dword [rsp + 0x30]
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov edx, dword [r13 + 0x18]
bt edx, 9
jae 0x7ff7610edcde
cmp ebx, 0x10
jae 0x7ff7610edcaf
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x10
jb 0x7ff7610edc91
test byte [r13 + 0x10], 4
je 0x7ff7610edcd8
movzx eax, word [r13 + 0x20]
cmp ebp, eax
je 0x7ff7610edcd8
lea rax, [0x7ff76116fcd8]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
mov ebp, r11d
mov ebx, r11d
mov rax, qword [r13 + 0x28]
test rax, rax
je 0x7ff7610edcfb
sar edx, 9
and edx, 1
mov dword [rax + 0x3c], edx
mov rax, qword [r13 + 0x28]
mov dword [rax + 0x40], 1
mov dword [r13 + 0x20], r11d
mov dword [r12 + 0x4c], r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
cmp ebx, 0x20
jae 0x7ff7610edd34
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x7ff7610edd16
mov ecx, ebp
mov eax, ebp
shl eax, 0x10
and ecx, 0xff00
add ecx, eax
mov ebx, r11d
mov eax, ebp
shl ecx, 8
shr eax, 8
and eax, 0xff00
shr ebp, 0x18
add eax, ecx
add eax, ebp
mov ebp, r11d
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
cmp dword [r13 + 0x14], 0
je 0x7ff7610eeaa9
mov dword [r13 + 0x20], 1
mov dword [r12 + 0x4c], 1
mov dword [r13 + 8], reloc.ucrtbase.dll_free
lea eax, [rdx - 5]
cmp eax, 1
jbe 0x7ff7610edb21
cmp dword [r13 + 0xc], 0
je 0x7ff7610eddbb
mov ecx, ebx
mov dword [r13 + 8], reloc.ucrtbase.dll_free
and ecx, 7
shr ebp, cl
sub ebx, ecx
jmp 0x7ff7610ee0dc
cmp ebx, 3
jae 0x7ff7610eddde
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 3
jb 0x7ff7610eddc0
mov eax, ebp
shr ebp, 1
and eax, 1
mov dword [r13 + 0xc], eax
mov eax, ebp
and eax, 3
je 0x7ff7610ede6d
sub eax, 1
je 0x7ff7610ede31
sub eax, 1
je 0x7ff7610ede1e
cmp eax, 1
jne 0x7ff7610ede75
lea rax, [0x7ff76116fcf0]
shr ebp, 2
mov qword [r12 + 0x20], rax
add ebx, 0xfffffffd
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
shr ebp, 2
add ebx, 0xfffffffd
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
mov dword [r15], 9
lea rax, [0x7ff76116ed20]
mov qword [r13 + 0x60], rax
lea rax, [0x7ff76116f520]
mov qword [r13 + 0x68], rax
mov dword [r9], 5
mov dword [r13 + 8], reloc.ucrtbase.dll_free
cmp edx, 6
jne 0x7ff7610ede75
shr ebp, 2
add ebx, 0xfffffffd
jmp 0x7ff7610edb21
mov dword [r13 + 8], reloc.ucrtbase.dll_free
shr ebp, 2
add ebx, 0xfffffffd
jmp 0x7ff7610ee0dc
mov ecx, ebx
and ecx, 7
shr ebp, cl
sub ebx, ecx
cmp ebx, 0x20
jae 0x7ff7610edeae
nop
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x7ff7610ede90
mov eax, ebp
movzx ecx, bp
not eax
shr eax, 0x10
cmp ecx, eax
je 0x7ff7610eded5
lea rax, [0x7ff76116fd08]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
mov dword [r13 + 0x50], ecx
mov ebp, r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov ebx, r11d
cmp edx, 6
je 0x7ff7610edb21
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov eax, dword [r13 + 0x50]
test eax, eax
je 0x7ff7610edd04
cmp eax, edi
mov r9d, edi
cmovbe r9d, eax
cmp r9d, r14d
cmova r9d, r14d
test r9d, r9d
je 0x7ff7610edb21
mov r8, r10
mov edx, r9d
sub r8, rsi
mov rcx, rsi
nop dword [rax]
movzx eax, byte [rcx]
mov byte [r8 + rcx], al
lea rcx, [rcx + 1]
add edx, reloc.ucrtbase.dll_free
jne 0x7ff7610edf30
mov eax, r9d
sub r14d, r9d
add r10, rax
mov dword [rsp + 0x30], r14d
add rsi, rax
mov qword [rsp + 0x40], r10
sub edi, r9d
sub dword [r13 + 0x50], r9d
jmp 0x7ff7610ee0dc
cmp ebx, 0xe
jae 0x7ff7610edf85
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0xe
jb 0x7ff7610edf67
mov ecx, ebp
add ebx, 0xfffffff2
shr ebp, 5
and ecx, 0x1f
mov edx, ebp
add ecx, 0x101
shr ebp, 5
and edx, 0x1f
mov eax, ebp
mov dword [r13 + 0x7c], ecx
and eax, 0xf
shr ebp, 4
add eax, 4
inc edx
mov dword [r13 + 0x80], edx
mov dword [r13 + 0x78], eax
cmp ecx, 0x11e
ja 0x7ff7610ee105
cmp edx, 0x1e
ja 0x7ff7610ee105
mov dword [r13 + 0x84], r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov eax, dword [r13 + 0x84]
lea rdx, [0x7ff761040000]
cmp eax, dword [r13 + 0x78]
jae 0x7ff7610ee04e
cmp ebx, 3
jae 0x7ff7610ee015
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 3
jb 0x7ff7610edff7
mov eax, dword [r13 + 0x84]
movzx ecx, bp
and cx, 7
shr ebp, 3
add ebx, 0xfffffffd
movzx eax, word [rdx + rax*2 + 0x12fad0]
mov word [r13 + rax*2 + 0x90], cx
inc dword [r13 + 0x84]
mov eax, dword [r13 + 0x84]
cmp eax, dword [r13 + 0x78]
jb 0x7ff7610edff2
cmp eax, 0x13
jae 0x7ff7610ee079
movzx eax, word [rdx + rax*2 + 0x12fad0]
mov word [r13 + rax*2 + 0x90], r11w
mov eax, dword [r13 + 0x84]
inc eax
mov dword [r13 + 0x84], eax
cmp eax, 0x13
jb 0x7ff7610ee053
lea rax, [r13 + 0x550]
mov dword [r15], 7
lea r9, [r13 + 0x88]
mov qword [r13 + 0x60], rax
xor ecx, ecx
mov qword [r9], rax
lea rax, [r13 + 0x310]
mov qword [rsp + 0x28], rax
lea rdx, [r13 + 0x90]
mov qword [rsp + 0x20], r15
lea r8d, [rcx + 0x13]
call fcn.7ff7610ef2a0
mov dword [rsp + 0xb0], eax
test eax, eax
je 0x7ff7610ee11b
lea rax, [0x7ff76116fd50]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov r10, qword [rsp + 0x40]
mov eax, dword [r13 + 8]
sub eax, 0x3f34
cmp eax, 0x1f
ja case.0x7ff7610ed4ae.16211
mov r8d, dword [rsp + 0xa0]
xor r11d, r11d
mov edx, dword [rsp + 0xa8]
jmp 0x7ff7610ed48c
lea rax, [0x7ff76116fd28]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
xor r11d, r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov dword [r13 + 0x84], r11d
mov eax, dword [r13 + 0x80]
add eax, dword [r13 + 0x7c]
cmp dword [r13 + 0x84], eax
jae 0x7ff7610ee36d
nop word [rax + rax]
mov ecx, dword [r15]
mov r9d, 1
mov r10, qword [r13 + 0x60]
shl r9d, cl
dec r9d
mov eax, ebp
mov ecx, r9d
and rcx, rax
mov eax, dword [r10 + rcx*4]
mov r8d, eax
shr r8d, 8
mov edx, eax
movzx ecx, r8b
shr edx, 0x10
mov dword [rsp + 0x34], eax
cmp ecx, ebx
jbe 0x7ff7610ee1c7
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
mov ecx, ebp
add ebx, 8
mov eax, r9d
and rax, rcx
mov eax, dword [r10 + rax*4]
mov r8d, eax
shr r8d, 8
mov ecx, eax
movzx edx, r8b
shr ecx, 0x10
mov dword [rsp + 0x34], eax
cmp edx, ebx
ja 0x7ff7610ee187
movzx edx, cx
cmp dx, 0x10
jae 0x7ff7610ee202
mov ecx, r8d
shr ebp, cl
mov ecx, eax
shr ecx, 8
movzx ecx, cl
sub ebx, ecx
shr eax, 0x10
mov ecx, dword [r13 + 0x84]
mov word [r13 + rcx*2 + 0x90], ax
inc dword [r13 + 0x84]
mov r8d, dword [r13 + 0x84]
jmp 0x7ff7610ee343
jne 0x7ff7610ee268
shr eax, 8
movzx edx, r8b
add edx, 2
movzx r9d, al
cmp ebx, edx
jae 0x7ff7610ee233
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x7ff7610ee216
mov eax, dword [r13 + 0x84]
mov ecx, r9d
shr ebp, cl
sub ebx, r9d
test eax, eax
je 0x7ff7610ee359
mov edx, ebp
add ebx, 0xfffffffe
and edx, 3
shr ebp, 2
add edx, 3
dec eax
movzx r9d, word [r13 + rax*2 + 0x90]
jmp 0x7ff7610ee2fc
movzx r9d, byte [rsp + 0x35]
cmp dx, 0x11
movzx edx, r8b
jne 0x7ff7610ee2ba
add edx, 3
cmp ebx, edx
jae 0x7ff7610ee29d
nop
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x7ff7610ee280
mov ecx, r9d
mov eax, CertFindCertificateInStore
shr ebp, cl
mov edx, ebp
shr ebp, 3
and edx, 7
add edx, 3
sub eax, r9d
mov r9d, r11d
jmp 0x7ff7610ee2fa
add edx, 7
cmp ebx, edx
jae 0x7ff7610ee2de
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x7ff7610ee2c1
mov ecx, r9d
mov eax, 0xfffffff9
shr ebp, cl
mov edx, ebp
shr ebp, 7
and edx, 0x7f
add edx, 0xb
sub eax, r9d
movzx r9d, r11w
add ebx, eax
mov r8d, dword [r13 + 0x84]
mov eax, dword [r13 + 0x7c]
add eax, dword [r13 + 0x80]
lea ecx, [r8 + rdx]
cmp ecx, eax
ja 0x7ff7610ee359
nop word [rax + rax]
mov eax, r8d
mov word [r13 + rax*2 + 0x90], r9w
mov r8d, dword [r13 + 0x84]
lea r8d, [r8 + 1]
mov dword [r13 + 0x84], r8d
add edx, reloc.ucrtbase.dll_free
jne 0x7ff7610ee320
mov eax, dword [r13 + 0x7c]
add eax, dword [r13 + 0x80]
cmp r8d, eax
jb 0x7ff7610ee150
jmp 0x7ff7610ee36d
lea rax, [0x7ff76116fd70]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
cmp dword [r13 + 8], reloc.ucrtbase.dll_free
je 0x7ff7610ee0d7
cmp word [r13 + 0x290], 0
jne 0x7ff7610ee392
lea rax, [0x7ff76116fd90]
jmp 0x7ff7610ee0ca
mov r8d, dword [r13 + 0x7c]
lea rax, [r13 + 0x550]
mov dword [r15], 9
lea rdx, [r13 + 0x90]
mov qword [r13 + 0x88], rax
lea r15, [r13 + 0x310]
mov qword [r13 + 0x60], rax
lea r9, [r13 + 0x88]
lea rax, [r13 + 0x70]
mov qword [rsp + 0x28], r15
mov ecx, 1
mov qword [rsp + 0x20], rax
call fcn.7ff7610ef2a0
mov dword [rsp + 0xb0], eax
test eax, eax
je 0x7ff7610ee3f8
mov r14d, dword [rsp + 0x30]
lea rax, [0x7ff76116fdb8]
jmp 0x7ff7610ee0ca
mov rax, qword [r13 + 0x88]
lea rcx, [r13 + 0x74]
mov r8d, dword [r13 + 0x80]
lea r9, [r13 + 0x88]
mov qword [r13 + 0x68], rax
mov eax, dword [r13 + 0x7c]
mov dword [rcx], 6
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rcx
mov ecx, 2
lea rdx, [rax*2 + 0x90]
add rdx, r13
call fcn.7ff7610ef2a0
mov dword [rsp + 0xb0], eax
test eax, eax
je 0x7ff7610ee45a
mov r14d, dword [rsp + 0x30]
lea rax, [0x7ff76116fdd8]
jmp 0x7ff7610ee0ca
mov ecx, dword [rsp + 0xa8]
mov dword [r13 + 8], reloc.ucrtbase.dll_free
cmp ecx, 6
je 0x7ff7610eeb0d
mov r10, qword [rsp + 0x40]
lea r15, [r13 + 0x70]
mov r8d, dword [rsp + 0xa0]
xor r11d, r11d
mov r14d, dword [rsp + 0x30]
mov dword [r13 + 8], reloc.ucrtbase.dll_free
cmp edi, 6
jb 0x7ff7610ee50a
cmp r14d, 0x102
jb 0x7ff7610ee50a
mov qword [r12 + 0x10], r10
mov edx, r8d
mov dword [r12 + 0x18], r14d
mov rcx, r12
mov qword [r12], rsi
mov dword [r12 + 8], edi
mov dword [r13 + 0x48], ebp
mov dword [r13 + 0x4c], ebx
call fcn.7ff7610eeda0
cmp dword [r13 + 8], reloc.ucrtbase.dll_free
mov r10, qword [r12 + 0x10]
mov r14d, dword [r12 + 0x18]
mov rsi, qword [r12]
mov edi, dword [r12 + 8]
mov ebp, dword [r13 + 0x48]
mov ebx, dword [r13 + 0x4c]
mov qword [rsp + 0x40], r10
mov dword [rsp + 0x30], r14d
jne 0x7ff7610ee0dc
mov dword [r13 + reloc.ucrtbase.dll_free], 0xffffffff
jmp 0x7ff7610ee0dc
mov ecx, dword [r15]
mov edx, 1
mov r9, qword [r13 + 0x60]
shl edx, cl
dec edx
mov eax, ebp
mov ecx, edx
and rcx, rax
mov dword [r13 + reloc.ucrtbase.dll_free], r11d
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x7ff7610ee568
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
mov ecx, ebp
add ebx, 8
mov eax, edx
and rax, rcx
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x7ff7610ee538
test al, al
je 0x7ff7610ee601
test al, 0xf0
jne 0x7ff7610ee601
mov ecx, eax
mov r10d, eax
shr ecx, 8
mov r11d, 1
movzx r8d, cl
movzx ecx, al
add ecx, r8d
shr r10d, 0x10
shl r11d, cl
mov ecx, r8d
lea eax, [r11 - 1]
and eax, ebp
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
jbe 0x7ff7610ee5f2
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
mov ecx, r8d
lea eax, [r11 - 1]
inc rsi
and eax, ebp
add ebx, 8
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
ja 0x7ff7610ee5b8
mov ecx, r8d
mov dword [r13 + reloc.ucrtbase.dll_free], r8d
shr ebp, cl
sub ebx, r8d
mov ecx, eax
shr ecx, 8
movzx ecx, cl
add dword [r13 + reloc.ucrtbase.dll_free], ecx
sub ebx, ecx
shr ebp, cl
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x50], ecx
test al, al
jne 0x7ff7610ee62e
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0d7
test al, 0x20
je 0x7ff7610ee64a
mov dword [r13 + reloc.ucrtbase.dll_free], 0xffffffff
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0d7
test al, 0x40
je 0x7ff7610ee65a
lea rax, [0x7ff76116fc48]
jmp 0x7ff7610ee0ca
movzx ecx, al
lea r9, [r13 + 0x74]
and ecx, 0xf
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x7ff7610ee6b9
cmp ebx, edx
jae 0x7ff7610ee69d
nop dword [rax]
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x7ff7610ee680
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, ebp
shr ebp, cl
add dword [r13 + 0x50], eax
add dword [r13 + reloc.ucrtbase.dll_free], edx
mov eax, dword [r13 + 0x50]
mov dword [r13 + reloc.ucrtbase.dll_free], eax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov ecx, dword [r9]
mov edx, 1
mov r9, qword [r13 + 0x68]
shl edx, cl
dec edx
mov eax, ebp
mov ecx, edx
and rcx, rax
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
jbe 0x7ff7610ee723
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
mov eax, edx
add ebx, 8
mov ecx, ebp
and rcx, rax
mov eax, dword [r9 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
cmp ecx, ebx
ja 0x7ff7610ee6f3
test al, 0xf0
jne 0x7ff7610ee7b9
mov ecx, eax
mov r10d, eax
shr ecx, 8
mov r11d, 1
movzx r8d, cl
movzx ecx, al
add ecx, r8d
shr r10d, 0x10
shl r11d, cl
mov ecx, r8d
lea eax, [r11 - 1]
and eax, ebp
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
jbe 0x7ff7610ee7aa
nop dword [rax + rax]
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
mov ecx, r8d
lea eax, [r11 - 1]
inc rsi
and eax, ebp
add ebx, 8
shr eax, cl
add eax, r10d
mov eax, dword [r9 + rax*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
add edx, r8d
cmp edx, ebx
ja 0x7ff7610ee770
mov ecx, r8d
sub ebx, r8d
shr ebp, cl
add dword [r13 + reloc.ucrtbase.dll_free], r8d
mov r10, qword [rsp + 0x40]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
add dword [r13 + reloc.ucrtbase.dll_free], ecx
sub ebx, ecx
shr ebp, cl
test al, 0x40
je 0x7ff7610ee7ee
lea rax, [0x7ff76116fc30]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
mov r8d, dword [rsp + 0xa0]
mov ecx, eax
shr ecx, 0x10
mov dword [r13 + 0x54], ecx
movzx ecx, al
and ecx, 0xf
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov dword [r13 + 0x58], ecx
mov edx, dword [r13 + 0x58]
test edx, edx
je 0x7ff7610ee859
cmp ebx, edx
jae 0x7ff7610ee83d
nop dword [rax]
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, edx
jb 0x7ff7610ee820
mov ecx, edx
mov eax, 1
shl eax, cl
sub ebx, edx
dec eax
and eax, ebp
shr ebp, cl
add dword [r13 + 0x54], eax
add dword [r13 + reloc.ucrtbase.dll_free], edx
mov dword [r13 + 8], reloc.ucrtbase.dll_free
test r14d, r14d
je 0x7ff7610edb21
mov eax, r8d
mov r8d, dword [r13 + 0x54]
sub eax, r14d
cmp r8d, eax
jbe 0x7ff7610ee8d5
sub r8d, eax
cmp r8d, dword [r13 + 0x38]
jbe 0x7ff7610ee8a5
cmp dword [r13 + reloc.ucrtbase.dll_free], 0
je 0x7ff7610ee8a5
lea rax, [0x7ff76116fc10]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
mov eax, dword [r13 + 0x3c]
mov rcx, qword [r13 + 0x40]
cmp r8d, eax
jbe 0x7ff7610ee8be
mov edx, dword [r13 + 0x34]
sub r8d, eax
sub edx, r8d
jmp 0x7ff7610ee8c3
sub eax, r8d
mov edx, eax
mov eax, dword [r13 + 0x50]
add rdx, rcx
cmp r8d, eax
mov ecx, eax
cmovbe ecx, r8d
jmp 0x7ff7610ee8e1
mov eax, dword [r13 + 0x50]
mov rdx, r10
sub rdx, r8
mov ecx, eax
cmp ecx, r14d
cmova ecx, r14d
sub r14d, ecx
sub eax, ecx
mov dword [rsp + 0x30], r14d
sub rdx, r10
mov dword [r13 + 0x50], eax
nop dword [rax]
movzx eax, byte [rdx + r10]
mov byte [r10], al
inc r10
add ecx, reloc.ucrtbase.dll_free
jne 0x7ff7610ee900
mov qword [rsp + 0x40], r10
cmp dword [r13 + 0x50], ecx
jne 0x7ff7610ee0dc
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
test r14d, r14d
je 0x7ff7610edb21
movzx eax, byte [r13 + 0x50]
mov byte [r10], al
inc r10
dec r14d
mov qword [rsp + 0x40], r10
mov dword [rsp + 0x30], r14d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
cmp dword [r13 + 0x10], 0
je 0x7ff7610eea46
cmp ebx, 0x20
jae 0x7ff7610ee98e
nop word [rax + rax]
test edi, edi
je 0x7ff7610edb21
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x7ff7610ee970
sub r8d, r14d
add dword [r12 + 0x1c], r8d
add dword [r13 + 0x24], r8d
test byte [r13 + 0x10], 4
je 0x7ff7610ee9d7
test r8d, r8d
je 0x7ff7610ee9d7
mov ecx, dword [r13 + 0x20]
mov rdx, r10
mov eax, r8d
sub rdx, rax
cmp dword [r13 + 0x18], 0
je 0x7ff7610ee9c1
call fcn.7ff7610ecaa0
jmp 0x7ff7610ee9c6
call fcn.7ff7610ec7c0
mov r10, qword [rsp + 0x40]
xor r11d, r11d
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
test byte [r13 + 0x10], 4
mov dword [rsp + 0xa0], r14d
je 0x7ff7610eea36
cmp dword [r13 + 0x18], 0
mov ecx, ebp
jne 0x7ff7610eea12
and ecx, 0xff00
mov eax, ebp
shl eax, 0x10
add ecx, eax
mov eax, ebp
shr eax, 8
and eax, 0xff00
shl ecx, 8
add ecx, eax
mov eax, ebp
shr eax, 0x18
add ecx, eax
cmp ecx, dword [r13 + 0x20]
je 0x7ff7610eea36
lea rax, [0x7ff76116fdf0]
mov r14d, dword [rsp + 0x30]
mov qword [r12 + 0x20], rax
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610ee0dc
mov ebp, r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov ebx, r11d
jmp 0x7ff7610eea60
mov r14d, dword [rsp + 0xa0]
mov dword [r13 + 8], reloc.ucrtbase.dll_free
jmp 0x7ff7610eea60
mov r14d, dword [rsp + 0xa0]
mov edx, dword [r13 + 0x10]
test edx, edx
je 0x7ff7610eead4
cmp dword [r13 + 0x18], 0
je 0x7ff7610eead4
cmp ebx, 0x20
jae 0x7ff7610eea92
test edi, edi
je 0x7ff7610edb29
movzx eax, byte [rsi]
mov ecx, ebx
shl eax, cl
dec edi
add ebp, eax
inc rsi
add ebx, 8
cmp ebx, 0x20
jb 0x7ff7610eea74
test dl, 4
je 0x7ff7610eeace
cmp ebp, dword [r13 + 0x24]
je 0x7ff7610eeace
lea rax, [0x7ff76116fe08]
jmp 0x7ff7610eea1f
mov qword [r12 + 0x10], r10
mov eax, 2
mov dword [r12 + 0x18], r14d
mov qword [r12], rsi
mov dword [r12 + 8], edi
mov dword [r13 + 0x48], ebp
mov dword [r13 + 0x4c], ebx
jmp 0x7ff7610eebf7
mov ebp, r11d
mov ebx, r11d
mov dword [r13 + 8], reloc.ucrtbase.dll_free
mov r15d, 1
jmp 0x7ff7610edb31
mov r14d, dword [rsp + 0xa0]
mov r15d, 1
jmp 0x7ff7610edb31
mov r14d, dword [rsp + 0xa0]
mov r15d, CertFindCertificateInStore
jmp 0x7ff7610edb31
mov r14d, dword [rsp + 0xa0]
mov r15d, eax
jmp 0x7ff7610edb38
sub r14d, dword [r12 + 0x18]
mov r10d, dword [rsp + 0x38]
sub r10d, dword [r12 + 8]
add dword [r12 + 0xc], r10d
add dword [r12 + 0x1c], r14d
add dword [r13 + 0x24], r14d
test byte [r13 + 0x10], 4
mov dword [rsp + 0x38], r10d
je 0x7ff7610eeb7e
test r14d, r14d
je 0x7ff7610eeb7e
mov rdx, qword [r12 + 0x10]
mov r8d, r14d
mov ecx, dword [r13 + 0x20]
mov eax, r14d
sub rdx, rax
cmp dword [r13 + 0x18], 0
je 0x7ff7610eeb6b
call fcn.7ff7610ecaa0
jmp 0x7ff7610eeb70
call fcn.7ff7610ec7c0
mov r10d, dword [rsp + 0x38]
mov dword [r13 + 0x20], eax
mov dword [r12 + 0x4c], eax
mov edx, dword [r13 + 8]
cmp edx, 0x3f47
je 0x7ff7610eeb9a
cmp edx, 0x3f42
je 0x7ff7610eeb9a
xor r9d, r9d
mov r8d, r9d
jmp 0x7ff7610eeba3
mov r8d, 0x100
xor r9d, r9d
mov eax, dword [r13 + 0xc]
neg eax
mov eax, 0x80
sbb ecx, ecx
and ecx, 0x40
cmp edx, 0x3f3f
cmove r9d, eax
lea eax, [r8 + rcx]
add r9d, eax
add r9d, dword [r13 + 0x4c]
mov dword [r12 + 0x48], r9d
test r10d, r10d
jne 0x7ff7610eebd7
test r14d, r14d
je 0x7ff7610eebe1
cmp dword [rsp + 0xa8], 4
jne 0x7ff7610eebed
test r15d, r15d
mov eax, CertFindCertificateInStore
cmove r15d, eax
mov eax, r15d
jmp 0x7ff7610eebf7
mov eax, CertFindCertificateInStore
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret