Function at 0x1400f73e0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x880]
sub rsp, 0x980
mov rax, qword [0x14039a678]
xor rax, rsp
mov qword [rbp + 0x870], rax
mov rsi, rdx
mov qword [rsp + 0x40], rdx
xor r12d, r12d
mov qword [rbp - 0x18], r12
mov qword [rbp - 8], r12
mov qword [rbp], SafeArrayGetLBound
lea ecx, [r12 + 0x20]
call fcn.1400d1570
mov rcx, rax
mov qword [rbp - 8], reloc.OLEAUT32.dll_SafeArrayPutElement
mov qword [rbp], 0x1f
movups xmm0, xmmword [str._APRP2020__GetServerTime_]
movups xmmword [rax], xmm0
movsd xmm1, qword [0x14029a030]
movsd qword [rax + 0x10], xmm1
movzx eax, byte [0x14029a038]
mov byte [rcx + 0x18], al
mov byte [rcx + 0x19], r12b
mov qword [rbp - 0x18], rcx
lea rcx, [rbp - 0x18]
call fcn.14017eab0
mov qword [rbp + 0x1b0], r12
mov qword [rbp + 0x1c0], r12
mov r15d, SafeArrayGetLBound
mov qword [rbp + 0x1c8], r15
mov byte [rbp + 0x1b0], r12b
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x270]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x470]
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov dword [rsp + 0x38], r12d
mov byte [rsp + 0x30], r12b
mov qword [rbp + 0x190], r12
mov qword [rbp + 0x1a0], r12
mov qword [rbp + 0x1a8], r15
mov byte [rbp + 0x190], r12b
lea ecx, [r12 + 0x40]
call fcn.1400d1570
mov rcx, rax
mov qword [rbp + 0x1a0], 0x39
mov qword [rbp + 0x1a8], 0x3f
movups xmm0, xmmword [str.https:__vip.asus.com.cn_OnlineRegister_ProductActChk.aspx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14029a050]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x14029a060]
movups xmmword [rax + 0x20], xmm0
movsd xmm1, qword [0x14029a070]
movsd qword [rax + 0x30], xmm1
movzx eax, byte [0x14029a078]
mov byte [rcx + 0x38], al
mov byte [rcx + 0x39], r12b
mov qword [rbp + 0x190], rcx
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x188], r15
mov byte [rbp + 0x170], r12b
lea ecx, [r12 + 0x40]
call fcn.1400d1570
mov rcx, rax
mov qword [rbp + 0x180], 0x36
mov qword [rbp + 0x188], 0x3f
movups xmm0, xmmword [str.https:__vip.asus.com_OnlineRegister_ProductActChk.aspx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14029a090]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x14029a0a0]
movups xmmword [rax + 0x20], xmm0
mov eax, dword [0x14029a0b0]
mov dword [rcx + 0x30], eax
movzx eax, word [0x14029a0b4]
mov word [rcx + 0x34], ax
mov byte [rcx + 0x36], r12b
mov qword [rbp + 0x170], rcx
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.1401cb4d0
lea rdi, [r12 - 1]
test al, al
je 0x1400f7ac4
cmp byte [rsp + 0x30], r12b
jne 0x1400f7ac4
mov qword [rbp + 8], r12
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x20], 7
lea r8d, [r12 + 0x2c]
lea rdx, str._s____Action_refer_to_previous_record__0x_x_
lea rcx, [rbp + 8]
call fcn.1400e83c0
mov r8d, dword [rsp + 0x38]
lea rdx, str.APRPClass2020::GetServerTime
lea rcx, [rbp + 8]
call fcn.14017f3e0
mov eax, dword [rsp + 0x38]
cmp eax, 9
ja 0x1400f767e
mov ecx, 0x214
bt ecx, eax
jae 0x1400f767e
lea r9, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0x10
cmovae r9, qword [rbp + 0x190]
lea r8, [rbp + 0x190]
cmovae r8, qword [rbp + 0x190]
mov rdx, rdi
inc rdx
cmp byte [r8 + rdx], 0
jne 0x1400f7672
jmp 0x1400f76ba
cmp eax, 3
jne 0x1400f76cc
lea r9, [rbp + 0x170]
cmp qword [rbp + 0x188], 0x10
cmovae r9, qword [rbp + 0x170]
lea r8, [rbp + 0x170]
cmovae r8, qword [rbp + 0x170]
mov rdx, rdi
nop dword [rax]
inc rdx
cmp byte [r8 + rdx], 0
jne 0x1400f76b0
mov r8, r9
inc rdx
lea rcx, [rbp + 0x270]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov dword [rsp + 0x28], 0x400
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp + 0x270]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x34], r12d
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
lea r9, [rbp + 0x470]
lea r8, [0x1400fa2f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r14, qword [0x14039d950]
test r14, r14
jne 0x1400f783e
lea ecx, [r14 + 0x20]
call fcn.1400d1570
mov r14, rax
mov qword [rbp + 0x1c0], reloc.OLEAUT32.dll_SafeArrayLock
mov r15d, 0x1f
mov qword [rbp + 0x1c8], r15
movups xmm0, xmmword [str.ERROR_CONNECTIONLESS]
movups xmmword [rax], xmm0
mov eax, dword [0x14029a170]
mov dword [r14 + 0x10], eax
mov byte [r14 + 0x14], 0
mov qword [rbp + 0x1b0], r14
mov qword [rbp + 0x1f0], r12
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x208], SafeArrayPutElement
mov byte [rbp + 0x1f0], 0
lea rax, [rbp + 0x270]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400f77b0
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x1f0]
call fcn.1400e82b0
nop
lea r8, [rbp + 0x1f0]
lea rdx, str._APRP2020__GetServerTime__ERROR_CONNECTIONLESS:
lea rcx, [rbp + 0x90]
call fcn.1400d13b0
mov rcx, rax
call fcn.14017eab0
nop
mov rdx, qword [rbp + 0x208]
cmp rdx, 0x10
jb 0x1400f7832
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f782d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c50
call fcn.1401e3784
mov byte [rbp + 0x1f0], 0
jmp 0x1400f7acb
mov ecx, SafeArrayPutElement
call fcn.1401e3748
mov rbx, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400f787c
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x1400f787f
test r14, r14
jne 0x1400f8c1d
jmp 0x1400f787f
mov rbx, r12
mov qword [rbp - 0x38], rbx
test rbx, rbx
je 0x1400f8c56
mov rax, qword [rbx + 8]
test rax, rax
jne 0x1400f78a1
mov rcx, qword [rbx]
call fcn.140218ed0
mov qword [rbx + 8], rax
lea r8, [rsp + 0x58]
lea rdx, str.__DATE_
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strtok_s
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400f78c0
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400e82b0
nop
lock xadd dword [rbx + 0x10], edi
cmp edi, 1
jne 0x1400f7914
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400f78f5
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400f7907
call fcn.1401e3efc
mov qword [rbx + 8], r12
mov edx, SafeArrayPutElement
mov rcx, rbx
call fcn.1401e3784
mov rcx, qword [0x14039d950]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [0x14039d950], r12
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov r13, qword [rbp + 0x1c0]
sub rax, r13
cmp rax, 0x27
jb 0x1400f8c61
lea r12, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0x10
cmovae r12, qword [rbp + 0x1b0]
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], rax
lea r15, [r13 + 0x27]
mov edi, SafeArrayGetLBound
lea r14, [rbp - 0x78]
cmp r15, rdi
jbe 0x1400f79ad
mov rdi, r15
or rdi, 0xf
cmp rdi, rbx
jbe 0x1400f7991
mov rdi, rbx
jmp 0x1400f799d
mov eax, SafeArrayPutElement
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
call fcn.1400d1570
mov r14, rax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], rdi
movups xmm0, xmmword [str._APRP2020__GetServerTime__ServerTime_]
movups xmmword [r14], xmm0
movups xmm1, xmmword [0x14029a1c8]
movups xmmword [r14 + 0x10], xmm1
mov eax, dword [0x14029a1d8]
mov dword [r14 + 0x20], eax
movzx eax, word [0x14029a1dc]
mov word [r14 + 0x24], ax
movzx eax, byte [0x14029a1de]
mov byte [r14 + 0x26], al
lea rcx, [r14 + 0x27]
mov r8, r13
mov rdx, r12
call fcn.14021bb20
mov byte [r14 + r15], 0
lea rcx, [rbp - 0x78]
call fcn.14017eab0
xor ebx, ebx
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rsi + 0x10], xmm1
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400f7a62
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f7a5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c67
call fcn.1401e3784
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], SafeArrayPutElement
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x1400f8aa8
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f8aa2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c28
jmp 0x1400f8aa2
mov r14, qword [rbp + 0x1b0]
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], 7
mov r8d, 0x38
lea rdx, str._s____Start_process_to_determine_if_user_is_in_CN_domain
lea rcx, [rbp + 0x28]
call fcn.1400e83c0
lea rdx, str.APRPClass2020::GetServerTime
lea rcx, [rbp + 0x28]
call fcn.14017f3e0
call fcn.1401c1c60
movzx ebx, al
call fcn.1401c1d20
movzx r13d, al
test bl, bl
je 0x1400f8006
test al, al
je 0x1400f8006
lea r9, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0x10
cmovae r9, qword [rbp + 0x190]
lea r8, [rbp + 0x190]
cmovae r8, qword [rbp + 0x190]
mov rdx, rdi
nop dword [rax + rax]
inc rdx
cmp byte [r8 + rdx], 0
jne 0x1400f7b50
inc rdx
mov r8, r9
lea rcx, [rbp + 0x270]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov dword [rsp + 0x28], 0x400
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp + 0x270]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x34], r12d
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
lea r9, [rbp + 0x470]
lea r8, [0x1400fa2f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r12, qword [0x14039d950]
test r12, r12
jne 0x1400f7d82
cmp r15, 0x14
jb 0x1400f7c1e
lea rbx, [rbp + 0x1b0]
cmp r15, 0x10
cmovae rbx, r14
mov qword [rbp + 0x1c0], reloc.OLEAUT32.dll_SafeArrayLock
lea r8d, [r12 + 0x14]
lea rdx, str.ERROR_CONNECTIONLESS
mov rcx, rbx
call fcn.14021bb20
mov byte [rbx + 0x14], r12b
jmp 0x1400f7cc1
mov rcx, r15
shr rcx, 1
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
sub rax, rcx
cmp r15, rax
ja 0x1400f7c49
lea rax, [r15 + rcx]
mov ebx, 0x1f
cmp rax, rbx
cmova rbx, rax
lea rcx, [rbx + 1]
call fcn.1400d1570
mov r13, rax
mov qword [rbp + 0x1c0], reloc.OLEAUT32.dll_SafeArrayLock
mov qword [rbp + 0x1c8], rbx
movups xmm0, xmmword [str.ERROR_CONNECTIONLESS]
movups xmmword [rax], xmm0
mov eax, dword [0x14029a170]
mov dword [r13 + 0x10], eax
mov byte [r13 + 0x14], 0
cmp r15, 0x10
jb 0x1400f7cba
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400f7caf
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c6d
lfence
mov rcx, r14
call fcn.1401e3784
mov qword [rbp + 0x1b0], r13
xor ebx, ebx
mov qword [rbp + 0x210], rbx
mov qword [rbp + 0x220], rbx
mov qword [rbp + 0x228], SafeArrayPutElement
mov byte [rbp + 0x210], bl
lea rax, [rbp + 0x270]
nop dword [rax]
inc rdi
cmp byte [rax + rdi], bl
jne 0x1400f7cf0
mov r8, rdi
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x210]
call fcn.1400e82b0
nop
lea r8, [rbp + 0x210]
lea rdx, str._APRP2020__GetServerTime__ERROR_CONNECTIONLESS:
lea rcx, [rbp + 0xb0]
call fcn.1400d13b0
mov rcx, rax
call fcn.14017eab0
nop
mov rdx, qword [rbp + 0x228]
cmp rdx, 0x10
jb 0x1400f7d73
inc rdx
mov rcx, qword [rbp + 0x210]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f7d6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c73
call fcn.1401e3784
mov ecx, 0xe02
call fcn.1401cff90
jmp 0x1400f7f54
mov ecx, SafeArrayPutElement
call fcn.1401e3748
mov rbx, rax
mov qword [rsp + 0x58], rax
xor r14d, r14d
test rax, rax
je 0x1400f7dc3
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x1400f7dc6
test r12, r12
jne 0x1400f8c2e
jmp 0x1400f7dc6
mov rbx, r14
mov qword [rbp - 0x30], rbx
test rbx, rbx
je 0x1400f8c79
mov rax, qword [rbx + 8]
test rax, rax
jne 0x1400f7de8
mov rcx, qword [rbx]
call fcn.140218ed0
mov qword [rbx + 8], rax
lea r8, [rbp - 0x28]
lea rdx, str.__DATE_
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strtok_s
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400f7e00
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400e82b0
nop
lock xadd dword [rbx + 0x10], edi
cmp edi, 1
jne 0x1400f7e54
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400f7e35
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400f7e47
call fcn.1401e3efc
mov qword [rbx + 8], r14
mov edx, SafeArrayPutElement
mov rcx, rbx
call fcn.1401e3784
mov rcx, qword [0x14039d950]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [0x14039d950], r14
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov r13, qword [rbp + 0x1c0]
sub rax, r13
cmp rax, 0x27
jb 0x1400f8c84
lea r12, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0x10
cmovae r12, qword [rbp + 0x1b0]
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
lea r15, [r13 + 0x27]
mov edi, SafeArrayGetLBound
lea r14, [rbp - 0x58]
cmp r15, rdi
jbe 0x1400f7eeb
mov rdi, r15
or rdi, 0xf
cmp rdi, rbx
jbe 0x1400f7ecf
mov rdi, rbx
jmp 0x1400f7edb
mov eax, SafeArrayPutElement
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
call fcn.1400d1570
mov r14, rax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], rdi
movups xmm0, xmmword [str._APRP2020__GetServerTime__ServerTime_]
movups xmmword [r14], xmm0
movups xmm1, xmmword [0x14029a1c8]
movups xmmword [r14 + 0x10], xmm1
mov eax, dword [0x14029a1d8]
mov dword [r14 + 0x20], eax
movzx eax, word [0x14029a1dc]
mov word [r14 + 0x24], ax
movzx eax, byte [0x14029a1de]
mov byte [r14 + 0x26], al
lea rcx, [r14 + 0x27]
mov r8, r13
mov rdx, r12
call fcn.14021bb20
mov byte [r14 + r15], 0
lea rcx, [rbp - 0x58]
call fcn.14017eab0
mov ecx, 2
call fcn.1401cff90
xor ebx, ebx
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rsi + 0x10], xmm1
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400f7faa
inc rdx
mov rcx, qword [rbp + 0x170]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400f7fa5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8cad
call fcn.1401e3784
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], SafeArrayPutElement
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x1400f8aa8
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f8aa2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jmp 0x1400f8a9c
lea r8, [rbp + 0x170]
cmp qword [rbp + 0x188], 0x10
cmovae r8, qword [rbp + 0x170]
lea r9, [rbp + 0x170]
cmovae r9, qword [rbp + 0x170]
mov rdx, rdi
nop
inc rdx
cmp byte [r9 + rdx], 0
jne 0x1400f8030
inc rdx
lea rcx, [rbp + 0x270]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov dword [rsp + 0x28], 0x400
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp + 0x270]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ebx, ebx
mov dword [rsp + 0x34], ebx
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9, [rbp + 0x470]
lea r8, [0x1400fa2f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r12, qword [0x14039d950]
test r12, r12
je 0x1400f8352
lea ecx, [rbx + 0x18]
call fcn.1401e3748
mov rbx, rax
mov qword [rbp - 0x28], rax
xor r14d, r14d
test rax, rax
je 0x1400f80fc
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
mov rcx, r12
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x1400f80ff
test r12, r12
jne 0x1400f8c39
jmp 0x1400f80ff
mov rbx, r14
mov qword [rbp - 0x20], rbx
test rbx, rbx
je 0x1400f8c8a
mov rax, qword [rbx + 8]
test rax, rax
jne 0x1400f8121
mov rcx, qword [rbx]
call fcn.140218ed0
mov qword [rbx + 8], rax
lea r8, [rsp + 0x60]
lea rdx, str.__DATE_
mov rcx, rax
call sub.api_ms_win_crt_string_l1_1_0.dll_strtok_s
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400f8140
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400e82b0
nop
lock xadd dword [rbx + 0x10], edi
cmp edi, 1
jne 0x1400f8194
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400f8175
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400f8187
call fcn.1401e3efc
mov qword [rbx + 8], r14
mov edx, SafeArrayPutElement
mov rcx, rbx
call fcn.1401e3784
mov rcx, qword [0x14039d950]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [0x14039d950], r14
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov r13, qword [rbp + 0x1c0]
sub rax, r13
cmp rax, 0x27
jb 0x1400f8c95
lea r12, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0x10
cmovae r12, qword [rbp + 0x1b0]
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], r14
lea r15, [r13 + 0x27]
mov edi, SafeArrayGetLBound
lea r14, [rsp + 0x68]
cmp r15, rdi
jbe 0x1400f822f
mov rdi, r15
or rdi, 0xf
cmp rdi, rbx
jbe 0x1400f8212
mov rdi, rbx
jmp 0x1400f821e
mov eax, SafeArrayPutElement
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
call fcn.1400d1570
mov r14, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x80], rdi
movups xmm0, xmmword [str._APRP2020__GetServerTime__ServerTime_]
movups xmmword [r14], xmm0
movups xmm1, xmmword [0x14029a1c8]
movups xmmword [r14 + 0x10], xmm1
mov eax, dword [0x14029a1d8]
mov dword [r14 + 0x20], eax
movzx eax, word [0x14029a1dc]
mov word [r14 + 0x24], ax
movzx eax, byte [0x14029a1de]
mov byte [r14 + 0x26], al
lea rcx, [r14 + 0x27]
mov r8, r13
mov rdx, r12
call fcn.14021bb20
mov byte [r14 + r15], 0
lea rcx, [rsp + 0x68]
call fcn.14017eab0
mov ecx, 3
call fcn.1401cff90
xor ebx, ebx
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rsi + 0x10], xmm1
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400f82f0
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f82eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c9b
call fcn.1401e3784
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], SafeArrayPutElement
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x1400f8aa8
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f8aa2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c44
jmp 0x1400f8aa2
mov byte [rsp + 0x31], bl
lea rcx, [rsp + 0x31]
call fcn.1401c1a40
cmp byte [rsp + 0x31], bl
je 0x1400f86db
test r13b, r13b
je 0x1400f858c
lea r8, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0x10
cmovae r8, qword [rbp + 0x190]
lea r9, [rbp + 0x190]
cmovae r9, qword [rbp + 0x190]
mov rdx, rdi
nop dword [rax]
inc rdx
cmp byte [r9 + rdx], bl
jne 0x1400f83a0
inc rdx
lea rcx, [rbp + 0x270]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov dword [rsp + 0x28], 0x400
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp + 0x270]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x34], ebx
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9, [rbp + 0x470]
lea r8, [0x1400fa2f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rdx, qword [0x14039d950]
test rdx, rdx
jne 0x1400f84fa
lea r8d, [rdx + 0x14]
lea rdx, str.ERROR_CONNECTIONLESS
lea rcx, [rbp + 0x1b0]
call fcn.1400e82b0
mov qword [rbp + 0x230], rbx
mov qword [rbp + 0x240], rbx
mov qword [rbp + 0x248], SafeArrayPutElement
mov byte [rbp + 0x230], bl
lea rax, [rbp + 0x270]
inc rdi
cmp byte [rax + rdi], bl
jne 0x1400f8468
mov r8, rdi
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x230]
call fcn.1400e82b0
nop
lea r8, [rbp + 0x230]
lea rdx, str._APRP2020__GetServerTime__ERROR_CONNECTIONLESS:
lea rcx, [rbp + 0xd0]
call fcn.1400d13b0
mov rcx, rax
call fcn.14017eab0
nop
mov rdx, qword [rbp + 0x248]
cmp rdx, 0x10
jb 0x1400f84eb
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f84e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8ca1
call fcn.1401e3784
mov ecx, 0xe04
call fcn.1401cff90
jmp 0x1400f7f54
lea rcx, [rsp + 0x50]
call fcn.1400f45c0
nop
mov rcx, rax
call fcn.1400f4670
mov rcx, rax
lea r8, [rsp + 0x48]
lea rdx, str.__DATE_
call sub.api_ms_win_crt_string_l1_1_0.dll_strtok_s
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400f8521
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400e82b0
nop
lea rcx, [rsp + 0x50]
call fcn.1400fa280
mov rcx, qword [0x14039d950]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [0x14039d950], rbx
lea r8, [rbp + 0x1b0]
lea rdx, str._APRP2020__GetServerTime__ServerTime_
lea rcx, [rbp + 0xf0]
call fcn.1400d14e0
mov rcx, rax
call fcn.14017eab0
mov ecx, 4
call fcn.1401cff90
jmp 0x1400f7f54
mov ecx, 5
call fcn.1401cff90
mov qword [rsi], rbx
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], SafeArrayGetLBound
mov byte [rsi], bl
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
lea rdx, str.ERROR_CONNECTIONLESS
mov rcx, rsi
call fcn.1400e82b0
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400f85fe
mov rcx, qword [rbp + 0x170]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f85f9
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8cad
call fcn.1401e3784
mov byte [rbp + 0x170], 0
mov qword [rbp + 0x188], SafeArrayPutElement
mov qword [rbp + 0x180], rbx
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x1400f8658
inc rdx
mov rcx, qword [rbp + 0x190]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400f8653
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c17
call fcn.1401e3784
mov qword [rbp + 0x1a0], rbx
mov qword [rbp + 0x1a8], SafeArrayPutElement
mov byte [rbp + 0x190], 0
cmp r15, 0x10
jb 0x1400f86a8
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400f86a0
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c4a
mov rcx, r14
call fcn.1401e3784
mov rax, rsi
mov rcx, qword [rbp + 0x870]
xor rcx, rsp
call fcn.1401e3ce0
lea r11, [rsp + 0x980]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test r13b, r13b
jne 0x1400f86ea
mov ecx, 6
jmp 0x1400f8591
mov ecx, 0x28
call fcn.1401e3748
mov qword [rsp + 0x48], rax
test rax, rax
je 0x1400f8708
mov rcx, rax
call fcn.1400fb9d0
jmp 0x1400f870b
mov rax, rbx
mov r8d, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
lea rdx, [rbp + 0x1d0]
mov rcx, rax
call fcn.1400fcb60
nop
movups xmm0, xmmword [rbp + 0x1d0]
movaps xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rbp + 0x1e0]
movaps xmmword [rbp + 0x80], xmm1
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x60], SafeArrayGetLBound
mov r8d, 0x2a
lea rdx, str._APRP2020__GetServerTime_____RedirUrl___s_
lea rcx, [rbp + 0x48]
call fcn.1400e82b0
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x48]
call fcn.14017eab0
lea rcx, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0x10
cmovae rcx, qword [rbp + 0x1d0]
mov qword [rsp + 0x20], 5
lea r9, str.zh_cn
xor r8d, r8d
mov rdx, qword [rbp + 0x1e0]
call fcn.1400f4240
cmp rax, 0xffffffffffffffff
je 0x1400f8af0
lea rdx, str.https:__www.google.com_
lea rcx, [rbp + 0x110]
call fcn.1400da710
mov rcx, rax
call fcn.1401c0dd0
test al, al
jne 0x1400f8aad
lea r8, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0x10
cmovae r8, qword [rbp + 0x190]
lea r9, [rbp + 0x190]
cmovae r9, qword [rbp + 0x190]
mov rdx, rdi
nop dword [rax]
inc rdx
cmp byte [r9 + rdx], 0
jne 0x1400f8800
inc rdx
lea rcx, [rbp + 0x270]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy_s
mov dword [rsp + 0x28], 0x400
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
mov r9d, edi
lea r8, [rbp + 0x270]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x34], ebx
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
lea r9, [rbp + 0x470]
lea r8, [0x1400fa2f0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, 0xffffffff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rdx, qword [0x14039d950]
test rdx, rdx
jne 0x1400f895e
lea r8d, [rdx + 0x14]
lea rdx, str.ERROR_CONNECTIONLESS
lea rcx, [rbp + 0x1b0]
call fcn.1400e82b0
mov qword [rbp + 0x250], rbx
mov qword [rbp + 0x260], rbx
mov qword [rbp + 0x268], SafeArrayPutElement
mov byte [rbp + 0x250], 0
lea rax, [rbp + 0x270]
nop word [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400f88d0
mov r8, rdi
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x250]
call fcn.1400e82b0
nop
lea r8, [rbp + 0x250]
lea rdx, str._APRP2020__GetServerTime__ERROR_CONNECTIONLESS:
lea rcx, [rbp + 0x130]
call fcn.1400d13b0
mov rcx, rax
call fcn.14017eab0
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, 0x10
jb 0x1400f8954
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f894f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8ca7
call fcn.1401e3784
mov ecx, 0xe09
jmp 0x1400f89e5
lea rcx, [rsp + 0x40]
call fcn.1400f45c0
nop
mov rcx, rax
call fcn.1400f4670
mov rcx, rax
lea r8, [rbp + 0x68]
lea rdx, str.__DATE_
call sub.api_ms_win_crt_string_l1_1_0.dll_strtok_s
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400f8984
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400e82b0
nop
lea rcx, [rsp + 0x40]
call fcn.1400fa280
mov rcx, qword [0x14039d950]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [0x14039d950], rbx
lea r8, [rbp + 0x1b0]
lea rdx, str._APRP2020__GetServerTime__ServerTime_
lea rcx, [rbp + 0x150]
call fcn.1400d14e0
mov rcx, rax
call fcn.14017eab0
mov ecx, 9
call fcn.1401cff90
movups xmm0, xmmword [rbp + 0x1b0]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbp + 0x1c0]
movups xmmword [rsi + 0x10], xmm1
lea rcx, [rbp + 0x1d0]
call fcn.1400db820
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400f8a4d
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f8a48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8cad
call fcn.1401e3784
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], SafeArrayPutElement
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x1400f8aa8
inc rdx
mov rcx, qword [rbp + 0x190]
mov r8, rcx
cmp rdx, 0x1000
jb 0x1400f8aa2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x1400f8c17
call fcn.1401e3784
nop
jmp 0x1400f86a8
mov ecx, 8
call fcn.1401cff90
mov qword [rsi], rbx
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], SafeArrayGetLBound
mov byte [rsi], 0
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
lea rdx, str.ERROR_CONNECTIONLESS
mov rcx, rsi
call fcn.1400e82b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400db820
jmp 0x1400f85bd
mov ecx, 7
call fcn.1401cff90
mov qword [rsi], rbx
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], SafeArrayGetLBound
mov byte [rsi], 0
mov r8d, reloc.OLEAUT32.dll_SafeArrayLock
lea rdx, str.ERROR_CONNECTIONLESS
mov rcx, rsi
call fcn.1400e82b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400db820
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400f8b70
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f8b6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8cad
call fcn.1401e3784
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], SafeArrayPutElement
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x1400f8bc6
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400f8bc1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c17
call fcn.1401e3784
mov qword [rbp + 0x1a0], rbx
mov qword [rbp + 0x1a8], SafeArrayPutElement
mov byte [rbp + 0x190], 0
cmp r15, 0x10
jb 0x1400f86a8
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400f86a0
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400f8c4a
jmp 0x1400f86a0
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
mov ecx, 0x8007000e
call fcn.140218d80
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
mov ecx, 0x8007000e
call fcn.140218d80
nop
mov ecx, 0x8007000e
call fcn.140218d80
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
mov ecx, 0x8007000e
call fcn.140218d80
int3
call fcn.1400e7e40
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3
mov ecx, 0x8007000e
call fcn.140218d80
int3
call fcn.1400e7e40
int3
mov ecx, 0x8007000e
call fcn.140218d80
int3
call fcn.1400e7e40
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
nop
call sub.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn
int3