Function at 0x1401eaa30
Capabilities:
Convert ip address from string
Read file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x498
movdqa xmmword [rsp + 0x480], xmm14
movdqa xmmword [rsp + 0x470], xmm13
movdqa xmmword [rsp + 0x460], xmm12
movdqa xmmword [rsp + 0x450], xmm11
movdqa xmmword [rsp + 0x440], xmm10
movdqa xmmword [rsp + 0x430], xmm9
movdqa xmmword [rsp + 0x420], xmm8
movdqa xmmword [rsp + 0x410], xmm7
movdqa xmmword [rsp + 0x400], xmm6
mov r13, r9
mov ebp, r8d
mov rbx, rdx
mov r14, rcx
mov rdi, qword [rcx + 0x10]
call fcn.1401a7280
cmp dword [rdi], 2
jne 0x1401eab23
mov byte [r13], 1
xor r13d, r13d
mov eax, r13d
movaps xmm6, xmmword [rsp + 0x400]
movaps xmm7, xmmword [rsp + 0x410]
movaps xmm8, xmmword [rsp + 0x420]
movaps xmm9, xmmword [rsp + 0x430]
movaps xmm10, xmmword [rsp + 0x440]
movaps xmm11, xmmword [rsp + 0x450]
movaps xmm12, xmmword [rsp + 0x460]
movaps xmm13, xmmword [rsp + 0x470]
movaps xmm14, xmmword [rsp + 0x480]
add rsp, 0x498
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x1d0], rax
cmp dword [rdi + 4], 0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0xe0], rdi
mov qword [rsp + 0x70], r14
je 0x1401eb2c8
mov qword [rsp + 0xd8], r13
pxor xmm6, xmm6
mov r14, qword [0x140277f40]
mov eax, dword [rdi + 4]
lea ecx, [rax - 1]
cmp ecx, 3
jae 0x1401eb419
mov rcx, rbx
xor edx, edx
mov r8b, 1
call fcn.1401a7d30
test rax, rax
js 0x1401eb823
mov ecx, dword [rdi + 4]
mov edx, ecx
and edx, 0xfffffffe
cmp edx, 2
jne 0x1401eabd9
cmp ecx, 3
mov r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0x1d0]
cmove r8, rdx
cmp ecx, 2
mov rcx, 0xffffffffffffffff
cmove rcx, rdx
test bpl, bpl
mov edx, 0
cmovne rax, rdx
mov rdx, 0xffffffffffffffff
mov r9, rax
call fcn.140213420
test eax, eax
js 0x1401eb7e0
je 0x1401eb80e
mov esi, ebp
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rcx + 0x10]
mov rbp, qword [rbx + 0x28]
call fcn.140195e70
mov r13d, 0x23
cmp qword [rbp], 0
je 0x1401eaabd
cmp qword [rbp + 8], 0
je 0x1401eaabd
mov r12, rax
mov edi, dword [rbx + 4]
cmp qword [rbp + 0x50], 0
jne 0x1401eac41
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x30], 0x1000
mov ecx, 0x1000
mov rax, qword [0x1402654c8]
call qword [rax]
mov qword [rbp + 0x50], rax
test rax, rax
je 0x1401eb3a6
mov rax, qword [rbp + 0x48]
test rax, rax
jne 0x1401eac79
mov byte [rbp + 0x58], 0
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x28], 0x1000
mov ecx, 0x1000
mov rax, qword [0x1402654c8]
call qword [rax]
mov qword [rbp + 0x48], rax
test rax, rax
je 0x1401eb3a6
mov rcx, qword [rbp + 0x28]
mov r15, qword [rbp + 0x38]
mov rdx, rcx
sub rdx, r15
cmp rdx, 0x3ff
ja 0x1401ead20
add r15, 0x400
mov rcx, rax
mov rdx, r15
mov rax, qword [str.h__]
call qword [rax]
test rax, rax
je 0x1401eb83d
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x28], r15
cmp edi, 3
je 0x1401ead28
mov rcx, qword [rsp + 0x70]
mov rcx, qword [rcx + 8]
mov rdx, qword [rbp + 0x38]
add rax, rdx
sub r15, rdx
lea rdx, [rsp + 0xb0]
mov qword [rsp + 0x20], rdx
mov rdx, qword [rsp + 0x68]
mov r8, rax
mov r9, r15
call fcn.1401a6d20
mov rcx, rax
mov eax, dword [rsp + 0xb0]
cmp eax, 0x51
jne 0x1401ead2e
mov eax, 2
cmp dword [rbx + 4], 3
jne 0x1401eb0ac
jmp 0x1401eb0af
mov r15, rcx
cmp edi, 3
jne 0x1401eacc0
mov rcx, qword [rbp + 0x38]
jmp 0x1401ead4b
test eax, eax
jne 0x1401ebca2
test rcx, rcx
je 0x1401ebca2
add rcx, qword [rbp + 0x38]
mov qword [rbp + 0x38], rcx
mov byte [rbp + 0x58], 0
lea rdi, [rbp + 0x60]
mov rax, qword [0x1402654c8]
call qword [rax]
mov r15, rax
mov rcx, qword [rbp + 0x38]
call fcn.1401a1db0
mov dword [rsp + 0x150], eax
mov dword [rsp + 0x154], 2
mov qword [rsp + 0x158], r15
lea rax, [rsp + 0x160]
movdqa xmmword [rax], xmm6
movabs rcx, 0x200000000
mov qword [rsp + 0x1b0], rcx
lea rax, [rsp + 0x150]
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], 0
movabs rax, 0x1100000000
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0x108]
movdqu xmmword [rax], xmm6
mov qword [rax + 0x10], 0
movabs rax, 0x300000000
mov qword [rsp + 0x180], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x188], rax
test r15, r15
je 0x1401eb3a6
mov r8, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x48]
mov rcx, r15
call sub.msvcrt.dll_memcpy
mov rax, qword [r14]
mov rcx, qword [rbp]
mov rdx, qword [rbp + 8]
mov r8, qword [rcx + 0x18]
mov r9d, dword [rbp + 0x5c]
lea r10, [rdx + 0x10]
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x50], rdi
lea r10, [rsp + 0x180]
mov qword [rsp + 0x48], r10
lea r10, [rsp + 0x1b0]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [rax + 0x30]
mov r15d, eax
mov rcx, qword [rsp + 0x158]
mov rax, qword [0x1402654c0]
call qword [rax]
mov qword [rsp + 0x158], 0
cmp r15d, 0x90320
je 0x1401eb071
cmp r15d, 0x80090318
je 0x1401eb08b
cmp r15d, 0x90312
je 0x1401eaecc
test r15d, r15d
jne 0x1401eb3db
cmp dword [rsp + 0xf4], 2
jne 0x1401eaf2a
mov r9d, dword [rsp + 0xf0]
test r9, r9
je 0x1401eaf2a
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 8]
mov r8, qword [rsp + 0xf8]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov rdx, qword [rsp + 0x68]
call fcn.1401a6cf0
cmp dword [rsp + 0xb0], 0
mov r9d, dword [rsp + 0xf0]
jne 0x1401eb3c2
cmp rax, r9
jne 0x1401eb3c2
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x1401eaf40
mov rax, qword [r14]
call qword [rax + 0x80]
cmp dword [rsp + 0x104], 2
jne 0x1401eaf9e
mov r9d, dword [rsp + 0x100]
test r9, r9
je 0x1401eaf9e
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 8]
mov r8, qword [rsp + 0x108]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov rdx, qword [rsp + 0x68]
call fcn.1401a6cf0
cmp dword [rsp + 0xb0], 0
mov r9d, dword [rsp + 0x100]
jne 0x1401eb3c2
cmp rax, r9
jne 0x1401eb3c2
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x1401eafb4
mov rax, qword [r14]
call qword [rax + 0x80]
cmp dword [rsp + 0x114], 2
jne 0x1401eb012
mov r9d, dword [rsp + 0x110]
test r9, r9
je 0x1401eb012
mov rax, qword [rsp + 0x70]
mov rcx, qword [rax + 8]
mov r8, qword [rsp + 0x118]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
mov rdx, qword [rsp + 0x68]
call fcn.1401a6cf0
cmp dword [rsp + 0xb0], 0
mov r9d, dword [rsp + 0x110]
jne 0x1401eb3c2
cmp rax, r9
jne 0x1401eb3c2
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x1401eb028
mov rax, qword [r14]
call qword [rax + 0x80]
cmp dword [rsp + 0x164], 5
jne 0x1401eb096
mov r8d, dword [rsp + 0x160]
test r8d, r8d
je 0x1401eb096
mov rdx, qword [rbp + 0x38]
cmp rdx, r8
jbe 0x1401eb09e
mov rcx, qword [rbp + 0x48]
add rdx, rcx
sub rdx, r8
call sub.msvcrt.dll_memmove
mov ecx, dword [rsp + 0x160]
mov qword [rbp + 0x38], rcx
cmp r15d, 0x90312
je 0x1401ead4f
jmp 0x1401eb0dd
mov eax, dword [rbp + 0x5c]
test al, al
js 0x1401ec280
or eax, 0x80
mov dword [rbp + 0x5c], eax
mov eax, 3
jmp 0x1401eb0ac
mov byte [rbp + 0x58], 1
mov eax, 2
jmp 0x1401eb0ac
mov qword [rbp + 0x38], 0
mov eax, 2
cmp r15d, 0x90312
jne 0x1401eb0dd
mov dword [rbx + 4], eax
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0xe0]
mov ebp, esi
test bpl, bpl
je 0x1401eab5a
mov eax, dword [rdi + 4]
dec eax
xor r13d, r13d
cmp eax, 3
jae 0x1401eab5a
jmp 0x1401eaabd
test r15d, r15d
jne 0x1401eb0e9
mov dword [rbx + 4], 4
mov rcx, qword [rsp + 0x70]
call fcn.140197690
movzx eax, al
mov rbx, qword [rsp + 0x68]
mov r13, qword [rbx + rax*8 + 0x800]
test r13, r13
je 0x1401eb269
mov rax, qword [rsp + 0x70]
mov rax, qword [rax + 0x10]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x1a0], 0
mov r9, qword [r14]
mov rcx, qword [rax + 8]
mov edx, 0x53
lea r8, [rsp + 0x1a0]
call qword [r9 + 0x58]
test eax, eax
jne 0x1401eb203
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x1401eb203
mov r15d, 0x5a
test byte [rcx], 1
je 0x1401eb230
mov eax, dword [rcx + 0x10]
test rax, rax
je 0x1401eb230
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x148], rcx
mov qword [rsp + 0x88], rax
mov r8d, 0x1e0
lea rdi, [rsp + 0x210]
mov rcx, rdi
xor edx, edx
call sub.msvcrt.dll_memset
mov rdx, qword [rsp + 0x148]
mov r8, qword [rsp + 0x88]
add r8, rdx
mov rcx, rdi
call fcn.1402401d0
test eax, eax
jne 0x1401eb230
mov r8, qword [rsp + 0x330]
test r8, r8
je 0x1401eb2ac
mov r9, qword [rsp + 0x340]
sub r9, r8
jbe 0x1401eb2ac
mov rcx, rbx
mov rdx, r13
call fcn.140196760
test eax, eax
je 0x1401eb2c0
mov r15d, eax
mov rcx, rbx
lea rdx, str.SSL:_public_key_does_not_match_pinned_public_key
jmp 0x1401eb2b6
mov r8d, 0x100
mov ecx, eax
lea rdx, [rsp + 0x210]
call fcn.1401f90c0
mov rcx, rbx
lea rdx, str.schannel:_Failed_to_read_remote_certificate_context:__s
mov r8, rax
call fcn.140195520
mov r15d, 0x5a
mov rcx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x1401eb243
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov dword [rsp + 0xb0], r15d
test r15d, r15d
je 0x1401eb269
mov rcx, rbx
lea rdx, str.SSL:_public_key_does_not_match_pinned_public_key
call fcn.140195520
mov r13d, dword [rsp + 0xb0]
jmp 0x1401eb294
test byte [r12 + 0x6c], 1
je 0x1401eb0af
cmp byte [rbp + 0x6c], 0
je 0x1401eb0af
mov rcx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
mov rdx, rbx
call fcn.140241f10
mov r13d, eax
mov rdi, qword [rsp + 0xe0]
test r13d, r13d
mov ebp, esi
je 0x1401eb0be
jmp 0x1401eaabd
mov rcx, rbx
lea rdx, str.SSL:_failed_retrieving_public_key_from_server_certificate
call fcn.140195520
jmp 0x1401eb230
xor r15d, r15d
jmp 0x1401eb230
mov rcx, rbx
xor edx, edx
mov r8b, 1
call fcn.1401a7d30
test rax, rax
js 0x1401eb823
mov rsi, qword [r14 + 0x10]
mov r12, qword [rsi + 0x28]
mov rcx, r14
call fcn.140195e70
mov r15, rax
mov rcx, r14
mov rdx, rbx
call fcn.140195e90
mov rdi, rax
mov qword [rsp + 0x1c8], 0
mov rax, qword [rsi + 8]
mov qword [rsp + 0x148], rax
mov dword [rsp + 0x20], 1
mov ecx, 5
mov edx, 1
xor r8d, r8d
mov r9d, 2
call fcn.1401ed150
test al, al
je 0x1401eb34a
lea rdx, str.schannel:_Windows_version_is_old_and_may_not_be_able_to_connect_to_some_servers_due_to_lack_of_SNI__algorithms__etc.
mov rcx, rbx
call fcn.1401955d0
mov byte [r12 + 0x6b], 0
cmp qword [r15 + 8], 0
jne 0x1401eb362
cmp qword [r15 + 0x48], 0
je 0x1401eb502
mov dword [rsp + 0x20], 3
mov ecx, 6
mov edx, 1
xor r8d, r8d
mov r9d, 2
call fcn.1401ed150
mov cl, 1
test al, al
jne 0x1401eb504
lea rdx, [0x140276dd9]
mov rcx, rbx
call fcn.140195520
mov r13d, 0x4d
jmp 0x1401eaabd
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, qword [rsp + 0x68]
call fcn.140195520
mov r13d, 0x1b
jmp 0x1401eaabd
lea rdx, str.schannel:_failed_to_send_next_handshake_data:_sent__zd_of__lu_bytes
mov rcx, qword [rsp + 0x68]
mov r8, rax
call fcn.140195520
jmp 0x1401eaabd
cmp r15d, 0x80090300
je 0x1401eb849
cmp r15d, 0x80090325
mov rsi, qword [rsp + 0x68]
je 0x1401eb860
cmp r15d, 0x80090322
jne 0x1401ec285
mov r13d, 0x3c
lea rdi, str.schannel:_SNI_or_certificate_check_failed:__s
jmp 0x1401ec292
cmp eax, 4
jne 0x1401ec85b
mov rcx, qword [rsp + 0x70]
mov rsi, qword [rcx + 0x10]
mov rdi, qword [rsi + 0x28]
mov rdx, rbx
call fcn.140195e90
mov qword [rsp + 0x210], 0
mov r13d, 0x23
cmp qword [rdi], 0
je 0x1401eaabd
mov ecx, dword [rdi + 0x60]
cmp ecx, dword [rdi + 0x5c]
jne 0x1401ec11a
test byte [rax + 0x6c], 8
je 0x1401ec840
mov byte [rsp + 0x150], 0
mov qword [rsp + 0xf0], 0
mov rcx, rbx
call fcn.140195c30
lea r8, [rsp + 0xf0]
mov r15, qword [rsp + 0x70]
mov rcx, r15
mov rdx, rbx
xor r9d, r9d
call fcn.140195c80
test al, al
jne 0x1401eb4c2
mov rdx, qword [rsp + 0xf0]
cmp rdx, qword [rdi]
je 0x1401ec838
mov rcx, rbx
call fcn.140195fe0
mov r15, qword [rsp + 0x70]
mov r8, qword [rdi]
lea rax, [rsp + 0x150]
mov qword [rsp + 0x20], rax
mov r9d, 0x30
mov rcx, r15
mov rdx, rbx
call fcn.140196020
test eax, eax
je 0x1401ec828
mov r13d, eax
mov rcx, rbx
call fcn.140195c60
lea rdx, str.schannel:_failed_to_store_credential_handle
jmp 0x1401ec1a6
xor ecx, ecx
mov byte [r12 + 0x6c], cl
mov qword [r12], 0
test byte [rdi + 0x6c], 8
mov r15, qword [rsp + 0x148]
je 0x1401eb752
mov rcx, rbx
call fcn.140195c30
lea r8, [rsp + 0x1c8]
mov rcx, r14
mov rdx, rbx
xor r9d, r9d
call fcn.140195c80
test al, al
jne 0x1401eb554
mov rax, qword [rsp + 0x1c8]
mov qword [r12], rax
inc dword [rax + 0x28]
mov rcx, rbx
call fcn.140195c60
cmp qword [r12], 0
je 0x1401eb752
lea r8, [rsp + 0x1d8]
mov ecx, 2
mov rdx, r15
call qword [sym.imp.WS2_32.dll_inet_pton]
test eax, eax
jne 0x1401eb59b
lea r8, [rsp + 0x3f0]
mov ecx, 0x17
mov rdx, r15
call qword [sym.imp.WS2_32.dll_inet_pton]
test eax, eax
je 0x1401eb5aa
lea rdx, str.schannel:_using_IP_address__SNI_is_not_supported_by_OS.
mov rcx, rbx
call fcn.1401955d0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x200], xmm0
movabs rax, 0x100000000
mov qword [rsp + 0x1e0], rax
lea rcx, [rsp + 0x200]
mov qword [rsp + 0x1e8], rcx
movdqa xmmword [rsp + 0xb0], xmm0
mov qword [rsp + 0x1f0], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x1f8], rax
mov dword [r12 + 0x5c], 0x811c
mov eax, 0x80
and eax, dword [rdi + 0xb0]
xor eax, 0x819c
mov dword [r12 + 0x5c], eax
mov rax, qword [0x14026c258]
mov ecx, 1
mov edx, 0x18
call qword [rax]
mov qword [r12 + 8], rax
test rax, rax
je 0x1401eb872
mov qword [rsp + 0xc8], rsi
mov rsi, qword [0x140277f40]
mov r10, qword [rsi]
mov rcx, qword [r12]
xor edx, edx
cmp byte [r12 + 0x6b], 0
mov r8, qword [rcx + 0x18]
lea r11, [rsp + 0x1e0]
cmove r11, rdx
mov r9d, dword [r12 + 0x5c]
lea rdx, [r12 + 0x60]
mov rdi, rax
add rdi, 0x10
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rdx
lea rdx, [rsp + 0x1f0]
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], r11
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor edx, edx
call qword [r10 + 0x30]
cmp eax, 0x90312
jne 0x1401eb881
mov rcx, qword [r14 + 8]
mov r8, qword [rsp + 0xb8]
mov r9d, dword [rsp + 0xb0]
lea rax, [rsp + 0xec]
mov qword [rsp + 0x20], rax
mov rdx, rbx
call fcn.1401a6cf0
mov r15, rax
mov rax, qword [rsi]
mov rcx, qword [rsp + 0xb8]
call qword [rax + 0x80]
cmp dword [rsp + 0xec], 0
mov r9d, dword [rsp + 0xb0]
jne 0x1401ebcf1
cmp r15, r9
jne 0x1401ebcf1
mov byte [r12 + 0x58], 0
mov dword [r12 + 0x64], 0
mov dword [r12 + 0x67], 0
mov rax, qword [rsp + 0xc8]
mov dword [rax + 4], 1
mov rdi, qword [rsp + 0xe0]
jmp 0x1401eab47
mov r15, rdi
mov qword [rsp + 0xc8], rsi
mov rsi, qword [r14 + 0x10]
mov rcx, r14
call fcn.140195e70
mov rdi, rax
mov rcx, r14
mov rdx, rbx
call fcn.140195e90
mov qword [rsp + 0xa8], 0
mov r9, qword [rsi + 0x28]
mov qword [rsp + 0x88], rdi
mov ecx, dword [rdi + 0x6c]
test cl, 1
mov qword [rsp + 0xd0], r9
jne 0x1401eb7af
mov eax, dword [rax + 0xb0]
mov edx, 0x1808
jmp 0x1401eb8d4
cmp byte [r9 + 0x6c], 0
mov r8d, 0x20
mov edx, 8
cmove edx, r8d
mov eax, dword [rax + 0xb0]
test al, 8
jne 0x1401eb803
test al, 0x20
jne 0x1401eb8ce
or edx, 0x200
jmp 0x1401eb8d4
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
lea rdx, str.select_poll_on_SSL_TLS_socket__errno:__d
mov rcx, rbx
mov r8d, eax
call fcn.140195520
mov r13d, 0x23
jmp 0x1401eaabd
or edx, 0x1800
jmp 0x1401eb8d4
test bpl, bpl
je 0x1401eb823
mov rax, qword [rsp + 0xd8]
mov byte [rax], 0
jmp 0x1401eaaba
lea rdx, str.SSL_TLS_connection_timeout
mov rcx, rbx
call fcn.140195520
mov r13d, 0x1c
jmp 0x1401eaabd
lea rdx, str.schannel:_unable_to_re_allocate_memory
jmp 0x1401eb3ad
mov r13d, 0x1b
lea rdi, str.schannel:_next_InitializeSecurityContext_failed:__s
mov rsi, qword [rsp + 0x68]
jmp 0x1401ec292
mov r13d, 0x3c
lea rdi, str.schannel:__s
jmp 0x1401ec292
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, rbx
jmp 0x1401eb3b2
mov r15d, eax
mov rax, qword [0x1402654c0]
mov rcx, qword [r12 + 8]
call qword [rax]
mov qword [r12 + 8], 0
lea rdi, str.schannel:_initial_InitializeSecurityContext_failed:__s
cmp r15d, 0x80090300
je 0x1401ec257
cmp r15d, 0x80090322
jne 0x1401ec25f
mov r13d, 0x3c
lea rdi, str.schannel:_SNI_or_certificate_check_failed:__s
jmp 0x1401ec265
or edx, 0x1a00
not ecx
add ecx, ecx
and ecx, 4
or ecx, edx
mov esi, ecx
and esi, 0xffffffaf
or esi, 0x10
test al, al
lea rax, str.schannel:_disabled_automatic_use_of_client_certificate
lea rdx, str.schannel:_enabled_automatic_use_of_client_certificate
cmovns rdx, rax
cmovs esi, ecx
mov rcx, rbx
call fcn.1401955d0
mov rax, qword [rsp + 0x88]
movzx eax, byte [rax + 0x68]
cmp eax, 7
ja 0x1401ebc88
mov ecx, 0xf3
bt ecx, eax
jae 0x1401ebb9e
mov dword [rsp + 0x94], esi
mov qword [rsp + 0xa0], r15
mov rcx, r14
call fcn.140195e70
movzx esi, byte [rax + 0x68]
mov edi, dword [rax + 0x64]
test edi, 0xfffeffff
jne 0x1401eb976
mov dword [rsp + 0x20], 3
mov ecx, 0xa
xor edx, edx
mov r8d, 0x4f7c
mov r9d, 2
call fcn.1401ed150
movzx edi, al
or edi, 6
shl edi, 0x10
sar edi, 0x10
xor r14d, r14d
cmp edi, esi
jge 0x1401ebad1
mov qword [rsp + 0xc0], r12
mov rbx, qword [rsp + 0x68]
mov r12, qword [rbx + 0x540]
mov rax, qword [rbx + 0x568]
test r12, r12
je 0x1401ebb48
test rax, rax
jne 0x1401ebb59
mov rcx, r12
call sub.msvcrt.dll__strdup
test rax, rax
je 0x1401ecc93
mov r15, rax
mov byte [rsp + 0x67], bpl
mov qword [rsp + 0xd8], r13
mov rcx, rax
mov edx, 0x5c
call sub.msvcrt.dll_strchr
mov r13d, 0x3a
test rax, rax
je 0x1401ece14
mov rsi, rax
mov rdi, rax
sub rdi, r15
lea rdx, str.CurrentUser
mov rcx, r15
mov r8, rdi
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x1401ec672
lea rdx, str.LocalMachine
mov rcx, r15
mov r8, rdi
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x1401ec812
lea rdx, str.CurrentService
mov rcx, r15
mov r8, rdi
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x1401ec94b
lea rdx, str.Services
mov rcx, r15
mov r8, rdi
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x1401ec961
lea rdx, str.Users
mov rcx, r15
mov r8, rdi
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x1401ec9fb
lea rdx, str.CurrentUserGroupPolicy
mov rcx, r15
mov r8, rdi
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x1401eca21
lea rdx, str.LocalMachineGroupPolicy
mov rcx, r15
mov r8, rdi
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x1401eccaa
lea rdx, str.LocalMachineEnterprise
mov rcx, r15
mov r8, rdi
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x1401ece14
mov edi, 0x90000
jmp 0x1401eccaf
inc edi
xor r14d, r14d
lea rbx, [0x1401ecec4]
jmp 0x1401ebaf1
mov ecx, 0x800
or r14d, ecx
inc esi
cmp edi, esi
je 0x1401eb984
lea eax, [rsi - 4]
cmp eax, 3
ja case.default.0x1401ebb05
mov ecx, 0x80
movsxd rax, dword [rbx + rax*4]
add rax, rbx
jmp rax
mov ecx, 0x200
jmp case.0x1401ebb05.4
mov dword [rsp + 0x20], 3
mov ecx, 0xa
xor edx, edx
mov r8d, 0x4f7c
mov r9d, 2
call fcn.1401ed150
mov ecx, 0x2000
test al, al
jne case.0x1401ebb05.4
lea rdx, str.schannel:_TLS_1.3_not_supported_on_Windows_prior_to_11
mov rcx, qword [rsp + 0x68]
jmp 0x1401ebc92
test rax, rax
mov r15, qword [rsp + 0xd0]
je 0x1401ebccd
mov rcx, qword [rax]
mov qword [rsp + 0x80], rcx
mov rdi, qword [rax + 8]
xor esi, esi
xor r15d, r15d
xor r12d, r12d
mov rcx, qword [rbx + 0x5b0]
test rcx, rcx
je 0x1401ebb90
lea rdx, [0x140277054]
call fcn.1401aa720
test eax, eax
je 0x1401ebcb8
test sil, sil
je 0x1401ebbb8
mov rax, qword [rbx + 0x540]
jmp 0x1401ebbbf
lea rdx, str.SSL_versions_not_supported
mov rcx, rbx
call fcn.140195520
mov r13d, 4
jmp 0x1401eaabd
lea rax, [0x140277091]
mov qword [rsp + 0x98], rax
test r15, r15
je 0x1401ebbd4
mov rcx, r15
call fcn.140257dd0
test sil, sil
je 0x1401ebc54
mov byte [rsp + 0x67], bpl
mov rbp, r13
xor r13d, r13d
mov rcx, r12
xor edx, edx
mov r8d, 2
call sub.msvcrt.dll_fseek
mov bl, 1
test eax, eax
je 0x1401ec097
mov rdi, qword [rsp + 0x80]
test rdi, rdi
je 0x1401ec0e3
mov r8d, 1
mov rcx, rdi
mov rdx, r13
mov r9, r12
call sub.msvcrt.dll_fread
cmp eax, 1
jne 0x1401ec0e3
mov rcx, r12
call sub.msvcrt.dll_fclose
test bl, bl
jne 0x1401ec0eb
mov qword [rsp + 0x80], rdi
mov rdi, r13
mov rbx, qword [rsp + 0x68]
mov r13, rbp
movzx ebp, byte [rsp + 0x67]
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x158], rax
mov dword [rsp + 0x150], edi
mov rcx, qword [rbx + 0x5d0]
test rcx, rcx
je 0x1401ebd0e
call sub.msvcrt.dll_strlen
mov r12, rax
jmp 0x1401ebd11
lea rdx, str.Unrecognized_parameter_passed_via_CURLOPT_SSLVERSION
mov rcx, rbx
call fcn.140195520
mov r13d, 0x23
jmp 0x1401eaabd
lea rdx, str.schannel:_failed_to_receive_handshake__SSL_TLS_connection_failed
mov rcx, qword [rsp + 0x68]
call fcn.140195520
jmp 0x1401eaabd
test sil, sil
je 0x1401ec22d
mov r8, qword [rbx + 0x540]
jmp 0x1401ec234
xor eax, eax
mov qword [rsp + 0x78], rax
mov r12, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xa0]
jmp 0x1401ebe41
lea rdx, str.schannel:_failed_to_send_initial_handshake_data:_sent__zd_of__lu_bytes
mov rcx, rbx
mov r8, r15
call fcn.140195520
mov r13d, 0x23
jmp 0x1401eaabd
xor r12d, r12d
mov rdi, qword [rsp + 0xa0]
mov rax, qword [0x1402654c8]
lea rcx, [r12 + r12]
add rcx, 2
call qword [rax]
xor edx, edx
test rax, rax
je 0x1401ebdcd
mov r15, rax
mov eax, 0
test r12, r12
je 0x1401ebd6d
lea rax, [r12 + 1]
mov r8, qword [rbx + 0x5d0]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r15
mov ecx, 0xfde9
mov edx, 8
mov r9d, r12d
call qword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
mov edx, r12d
xor ecx, ecx
cmp eax, edx
mov edx, eax
cmovg rdx, rcx
test eax, eax
cmovs rdx, rcx
mov word [r15 + rdx*2], 0
mov dword [rsp + 0x20], 3
mov ecx, 6
xor edx, edx
xor r8d, r8d
mov r9d, 2
call fcn.1401ed150
movzx r8d, al
shl r8d, 0xf
lea rcx, [rsp + 0x150]
mov rdx, r15
call qword [sym.imp.CRYPT32.dll_PFXImportCertStore]
mov qword [rsp + 0x78], rax
mov rax, qword [0x1402654c0]
mov rcx, r15
call qword [rax]
jmp 0x1401ebdd4
xor eax, eax
mov qword [rsp + 0x78], rax
test sil, sil
mov r12, qword [rsp + 0xc0]
mov r15, qword [rsp + 0xd0]
je 0x1401ebdfa
mov rax, qword [0x1402654c0]
mov rcx, qword [rsp + 0x80]
call qword [rax]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
mov rsi, qword [rsp + 0xc8]
je 0x1401ec023
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x78], rcx
mov edx, 0x10001
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov qword [rsp + 0xa8], rax
test rax, rax
je 0x1401ec2bb
mov rax, qword [0x14026c258]
mov ecx, 1
mov edx, 0x30
call qword [rax]
mov qword [r15], rax
test rax, rax
je 0x1401ec054
mov dword [rax + 0x28], 1
mov rcx, qword [rsp + 0x78]
mov qword [rax + 0x20], rcx
mov dword [rsp + 0x20], 3
mov ecx, 0xa
xor edx, edx
mov r8d, 0x4563
mov r9d, 2
call fcn.1401ed150
test al, al
je 0x1401ec1b3
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x120], xmm0
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmmword [rsp + 0x100], xmm0
movdqa xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x130], 0
movdqa xmmword [rsp + 0x160], xmm0
movdqa xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x170], 0
movdqa xmmword [rsp + 0x2c0], xmm0
movdqa xmmword [rsp + 0x2b0], xmm0
movdqa xmmword [rsp + 0x2a0], xmm0
movdqa xmmword [rsp + 0x290], xmm0
movdqa xmmword [rsp + 0x280], xmm0
movdqa xmmword [rsp + 0x270], xmm0
movdqa xmmword [rsp + 0x260], xmm0
movdqa xmmword [rsp + 0x250], xmm0
movdqa xmmword [rsp + 0x240], xmm0
movdqa xmmword [rsp + 0x230], xmm0
movdqa xmmword [rsp + 0x220], xmm0
movdqa xmmword [rsp + 0x210], xmm0
movdqa xmmword [rsp + 0x1b0], xmm0
movdqa xmmword [rsp + 0x1a0], xmm0
mov rax, qword [rsp + 0x88]
mov r15, qword [rax + 0x28]
xor esi, esi
test r15, r15
je 0x1401ec67c
movabs rax, 0x5f4d43435f383231
movabs rcx, 0x5f5345415f534c54
movdqa xmmword [rsp + 0x190], xmm0
movdqa xmmword [rsp + 0x180], xmm0
mov dl, 1
mov dword [rsp + 0x88], edx
movq xmm6, rcx
movq xmm0, rax
punpcklqdq xmm6, xmm0
movdqa xmm7, xmmword [str._128_CCM_SHA256]
movdqa xmm8, xmmword [0x140276b60]
movdqa xmm9, xmmword [0x140276b40]
movdqa xmm10, xmmword [str.TLS_CHACHA20_POL28_CCM_8_SHA256]
movdqa xmm11, xmmword [0x140276b20]
movdqa xmm12, xmmword [str.TLS_AES_128_GCM_POLY1305_SHA256]
movdqa xmm13, xmmword [str._256_GCM_SHA384]
movdqa xmm14, xmmword [str.TLS_AES_256_GCM__128_GCM_SHA256]
mov al, 1
mov dword [rsp + 0x98], eax
mov al, 1
mov dword [rsp + 0x80], eax
mov al, 1
mov dword [rsp + 0x78], eax
mov r12b, 1
jmp 0x1401ec4ab
call qword [sym.imp.KERNEL32.DLL_GetLastError]
cmp eax, 0x56
jne 0x1401ec43e
lea rdx, str.schannel:_Failed_to_import_cert_file__s__password_is_bad
mov rcx, rbx
mov r8, qword [rsp + 0x98]
call fcn.140195520
mov r13d, 0x3a
jmp 0x1401eaabd
lea rdx, str.schannel:_unable_to_allocate_memory
mov rcx, rbx
call fcn.140195520
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x1401ec076
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
mov r13d, 0x1b
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1401eaabd
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
jmp 0x1401eaabd
mov rcx, r12
call sub.msvcrt.dll_ftell
mov r13d, eax
mov r15, r13
test eax, eax
cmovs r15, rdi
js 0x1401ec66a
mov rcx, r12
xor edx, edx
xor r8d, r8d
call sub.msvcrt.dll_fseek
test eax, eax
jne 0x1401ebbfe
mov rax, qword [0x1402654c8]
inc r15
mov rcx, r15
call qword [rax]
mov rdi, rax
xor ebx, ebx
test rdi, rdi
jne 0x1401ebc0f
mov rcx, r12
call sub.msvcrt.dll_fclose
mov rcx, qword [rsp + 0x68]
mov r8, qword [rcx + 0x540]
lea rdx, str.schannel:_Failed_to_read_cert_file__s
call fcn.140195520
mov rax, qword [0x1402654c0]
mov rcx, rdi
call qword [rax]
mov r13d, 0x3a
jmp 0x1401eaabd
test cl, 8
jne 0x1401ec160
lea rdx, str.schannel:_failed_to_setup_sequence_detection
mov rcx, rbx
call fcn.140195520
mov ecx, dword [rdi + 0x60]
test cl, 4
je 0x1401ec165
test cl, 0x10
jne 0x1401ec17c
lea rdx, str.schannel:_failed_to_setup_confidentiality
mov rcx, rbx
call fcn.140195520
mov ecx, dword [rdi + 0x60]
test ecx, 0x100
je 0x1401ec184
test cx, cx
js 0x1401eaabd
jmp 0x1401ec19f
test cl, 4
jne 0x1401ec136
lea rdx, str.schannel:_failed_to_setup_replay_detection
mov rcx, rbx
call fcn.140195520
mov ecx, dword [rdi + 0x60]
test cl, 0x10
je 0x1401ec13b
test ecx, 0x100
jne 0x1401ec155
lea rdx, str.schannel:_failed_to_setup_memory_allocation
mov rcx, rbx
call fcn.140195520
mov ecx, dword [rdi + 0x60]
test cx, cx
js 0x1401eaabd
lea rdx, str.schannel:_failed_to_setup_stream_orientation
mov rcx, rbx
call fcn.140195520
jmp 0x1401eaabd
mov rax, qword [rsp + 0x88]
mov r15, qword [rax + 0x20]
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xf0], xmm0
movdqa xmmword [rsp + 0x130], xmm0
movdqa xmmword [rsp + 0x120], xmm0
movdqa xmmword [rsp + 0x110], xmm0
movdqa xmmword [rsp + 0x100], xmm0
mov dword [rsp + 0xf0], 4
mov eax, dword [rsp + 0x94]
mov dword [rsp + 0x138], eax
mov dword [rsp + 0x128], r14d
test r15, r15
je 0x1401ec697
xor esi, esi
lea rbx, str.0w_
mov r14, qword [rsp + 0x70]
jmp 0x1401ec33b
lea r8, [0x140277091]
lea rdx, str.schannel:_certificate_format_compatibility_error__for__s
mov rcx, rbx
call fcn.140195520
mov r13d, 0x3a
test r15, r15
jne 0x1401ece6c
jmp 0x1401eaabd
mov r13d, 0x1b
jmp 0x1401ec265
mov r13d, 0x23
lea rdx, [rsp + 0x210]
mov r8d, 0x100
mov ecx, r15d
call fcn.1401f90c0
mov rcx, rbx
jmp 0x1401ec2ab
mov rsi, qword [rsp + 0x68]
mov r13d, 0x23
lea rdi, str.schannel:_next_InitializeSecurityContext_failed:__s
lea rdx, [rsp + 0x210]
mov r8d, 0x100
mov ecx, r15d
call fcn.1401f90c0
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.140195520
jmp 0x1401eaabd
call qword [sym.imp.KERNEL32.DLL_GetLastError]
lea rdx, str.schannel:_Failed_to_get_certificate_from_file__s__last_error_is_0x_x
mov rcx, rbx
mov r8, qword [rsp + 0x98]
mov r9d, eax
call fcn.140195520
mov rcx, qword [rsp + 0x78]
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertCloseStore]
mov r13d, 0x3a
jmp 0x1401eaabd
mov eax, dword [r14 + rbx + 0x2f8]
mov r13, rbp
mov r14, qword [rsp + 0x70]
mov ebp, edi
mov r12, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xa0]
movsxd rcx, esi
inc esi
mov dword [rsp + rcx*4 + 0x210], eax
mov rcx, r15
mov edx, 0x3a
call sub.msvcrt.dll_strchr
lea r15, [rax + 1]
test rax, rax
je 0x1401ec463
cmp byte [r15], 0
je 0x1401ec463
cmp esi, 0x2e
jg 0x1401ec463
mov rcx, r15
xor edx, edx
xor r8d, r8d
call sub.msvcrt.dll_strtol
test eax, eax
jne 0x1401ec315
mov edi, ebp
mov rbp, r13
mov rcx, r15
mov edx, 0x3a
call sub.msvcrt.dll_strchr
test rax, rax
je 0x1401ec37e
mov r13, rax
sub r13, r15
jmp 0x1401ec389
mov rcx, r15
call sub.msvcrt.dll_strlen
mov r13, rax
mov r14, 0xfffffffffffffd10
lea r12, str.CALG_MD2
jmp 0x1401ec3a7
mov r12, qword [r14 + rbx + 0x300]
add r14, 0x10
je 0x1401ec3cf
mov rcx, r12
call sub.msvcrt.dll_strlen
cmp r13, rax
jne 0x1401ec399
mov rcx, r12
mov rdx, r15
mov r8, r13
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x1401ec399
test r14, r14
jne 0x1401ec2f3
mov r8d, 0x11
mov rcx, r15
lea rdx, str.USE_STRONG_CRYPTO
call sub.msvcrt.dll_strncmp
test eax, eax
mov r14, qword [rsp + 0x70]
je 0x1401ec40a
mov r8d, 0x15
mov rcx, r15
lea rdx, str.SCH_USE_STRONG_CRYPTO
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x1401eca05
mov eax, dword [rsp + 0x94]
or eax, 0x400000
mov dword [rsp + 0x94], eax
mov dword [rsp + 0x138], eax
mov r13, rbp
mov ebp, edi
mov r12, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xa0]
jmp 0x1401ec321
lea rdx, str.schannel:_Failed_to_import_cert_file__s__last_error_is_0x_x
mov rcx, rbx
mov r8, qword [rsp + 0x98]
mov r9d, eax
call fcn.140195520
mov r13d, 0x3a
jmp 0x1401eaabd
lea rax, [rsp + 0x210]
mov qword [rsp + 0x120], rax
mov dword [rsp + 0x118], esi
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0xc8]
jmp 0x1401ec6a8
xor r12d, r12d
mov rdi, qword [rsp + 0xa0]
lea r15, [r13 + 1]
inc esi
test r13, r13
mov r13, rbp
mov ebp, ebx
je 0x1401ec725
cmp byte [r15], 0
je 0x1401ec725
cmp esi, 4
ja 0x1401ec725
mov ebx, ebp
mov rbp, r13
mov rcx, r15
mov edx, 0x3a
call sub.msvcrt.dll_strchr
mov r13, rax
test rax, rax
je 0x1401ec4e0
mov rdi, r13
sub rdi, r15
jmp 0x1401ec4eb
mov rcx, r15
call sub.msvcrt.dll_strlen
mov rdi, rax
cmp rdi, 0x1f
ja 0x1401ec955
lea rcx, [rsp + 0x180]
mov rdx, r15
mov r8, rdi
call sub.msvcrt.dll_strncpy
mov byte [rsp + rdi + 0x180], 0
test r12b, 1
je 0x1401ec545
movdqu xmm0, xmmword [rsp + 0x187]
pcmpeqb xmm0, xmm13
movdqa xmm1, xmmword [rsp + 0x180]
pcmpeqb xmm1, xmm14
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1401ec48c
test byte [rsp + 0x78], 1
mov rdi, qword [rsp + 0xa0]
mov ecx, dword [rsp + 0x98]
je 0x1401ec58a
movdqu xmm0, xmmword [rsp + 0x187]
pcmpeqb xmm0, xmm11
movdqa xmm1, xmmword [rsp + 0x180]
pcmpeqb xmm1, xmm12
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1401ec63d
test byte [rsp + 0x80], 1
je 0x1401ec5c3
movdqu xmm0, xmmword [rsp + 0x18d]
pcmpeqb xmm0, xmm9
movdqa xmm1, xmmword [rsp + 0x180]
pcmpeqb xmm1, xmm10
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1401ec64a
test cl, 1
je 0x1401ec5f2
movdqu xmm0, xmmword [rsp + 0x189]
pcmpeqb xmm0, xmm8
movdqa xmm1, xmmword [rsp + 0x180]
pcmpeqb xmm1, xmm6
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
je 0x1401ec65a
test byte [rsp + 0x88], 1
je 0x1401ec81c
movdqu xmm0, xmmword [rsp + 0x187]
pcmpeqb xmm0, xmm7
movdqa xmm1, xmmword [rsp + 0x180]
pcmpeqb xmm1, xmm6
pand xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
jne 0x1401ec81c
mov dword [rsp + 0x88], 0
jmp 0x1401ec497
mov dword [rsp + 0x78], 0
jmp 0x1401ec497
mov dword [rsp + 0x80], 0
jmp 0x1401ec497
mov dword [rsp + 0x98], 0
jmp 0x1401ec497
mov r13, rdi
jmp 0x1401ebbfe
mov edi, 0x10000
jmp 0x1401eccaf
xor r12d, r12d
xor r11d, r11d
mov dword [rsp + 0x80], 0
xor r8d, r8d
xor eax, eax
jmp 0x1401ec739
or eax, 0x400000
mov dword [rsp + 0x138], eax
mov r14, qword [rsp + 0x70]
cmp qword [rsp + 0xa8], 0
mov rcx, qword [rsp + 0xd0]
je 0x1401ec6d6
mov dword [rsp + 0xf4], 1
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xf8], rax
mov rax, qword [0x140277f40]
mov rax, qword [rax]
mov rcx, qword [rcx]
lea rdx, [rcx + 0x10]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0x20], rcx
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call qword [rax + 0x18]
mov r15d, eax
jmp 0x1401ecbe0
mov r11d, dword [rsp + 0x78]
mov eax, dword [rsp + 0x88]
mov r8d, dword [rsp + 0x98]
and r11b, 1
and r8b, 1
and al, 1
and r12b, 1
mov rsi, qword [rsp + 0xc8]
mov r10, qword [rsp + 0xd0]
je 0x1401ec782
test r11b, r11b
je 0x1401ec782
mov ecx, eax
mov eax, dword [rsp + 0x80]
and al, 1
mov eax, ecx
je 0x1401ec782
test r8b, r8b
je 0x1401ec782
test al, al
je 0x1401ec782
lea rdx, str.All_available_TLS_1.3_ciphers_were_disabled.
jmp 0x1401eca0c
mov edx, eax
xor eax, eax
mov ecx, r8d
or cl, dl
je 0x1401eca36
mov dword [rsp + 0x1b0], 0x200020
lea rax, str.ChainingModeCCM
mov qword [rsp + 0x1b8], rax
mov dword [rsp + 0x210], 2
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x230], rax
mov dword [rsp + 0x228], 1
mov dword [rsp + 0x218], 0x80008
lea rax, [0x140277252]
mov qword [rsp + 0x220], rax
mov eax, 1
cmp r8b, dl
je 0x1401eca36
test r8b, r8b
jne 0x1401eca2b
mov dword [rsp + 0x23c], 0x40
jmp 0x1401eca36
mov edi, 0x20000
jmp 0x1401eccaf
lea rdx, str.Passed_in_an_unknown_TLS_1.3_cipher.
jmp 0x1401eca0c
cmp byte [rsp + 0x150], 0
je 0x1401ec838
mov rax, qword [rdi]
inc dword [rax + 0x28]
mov rcx, rbx
call fcn.140195c60
test byte [rbx + 0x5d8], 1
jne 0x1401ec89e
mov dword [rsi + 4], 5
mov rdi, qword [rsp + 0xe0]
mov eax, dword [rdi + 4]
xor r13d, r13d
mov ecx, 0
cmp eax, 5
mov rdx, qword [rsp + 0x70]
jne 0x1401ec888
mov dword [rdi], 2
mov rax, qword [rdi + 0x28]
mov rax, qword [rax + 8]
mov rcx, qword [rdx + 0x18]
mov qword [rcx + 0x390], rax
mov cl, 1
mov rax, qword [rsp + 0xd8]
mov byte [rax], cl
mov dword [rdi + 4], 0
jmp 0x1401eaabd
mov rax, qword [r14]
mov rcx, qword [rdi + 8]
lea r8, [rsp + 0x210]
mov edx, 0x53
call qword [rax + 0x58]
test eax, eax
jne 0x1401ec90a
mov rdi, qword [rsp + 0x210]
test rdi, rdi
je 0x1401ec90a
mov rcx, qword [rdi + 0x20]
xor r14d, r14d
xor edx, edx
call qword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
test rax, rax
je 0x1401ec924
xor r14d, r14d
mov rbx, qword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
jmp 0x1401ec8f4
mov rcx, qword [rdi + 0x20]
mov rdx, rax
call rbx
test rax, rax
je 0x1401ec924
test byte [rax], 1
je 0x1401ec8e6
cmp qword [rax + 8], 0
je 0x1401ec8e6
cmp dword [rax + 0x10], 1
sbb r14d, 0xffffffff
jmp 0x1401ec8e6
lea rdx, str.schannel:_failed_to_retrieve_remote_cert_context
mov rcx, rbx
call fcn.140195520
mov r13d, 0x3c
jmp 0x1401eaabd
mov rcx, qword [rsp + 0x68]
mov edx, r14d
call fcn.140196530
mov r13d, eax
test eax, eax
je 0x1401ec96b
mov rcx, qword [rsp + 0x210]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
jmp 0x1401eaabd
mov edi, 0x40000
jmp 0x1401eccaf
lea rdx, str.Cipher_name_too_long__not_checked.
jmp 0x1401eca0c
mov edi, 0x50000
jmp 0x1401eccaf
xor edi, edi
mov rbx, qword [rsp + 0x210]
mov r12, qword [sym.imp.CRYPT32.dll_CertEnumCertificatesInStore]
xor r15d, r15d
mov rcx, qword [rbx + 0x20]
mov rdx, r15
call r12
test rax, rax
je 0x1401ec9e8
mov r15, rax
jmp 0x1401ec9a5
mov rcx, qword [rbx + 0x20]
mov rdx, r15
call r12
mov r15, rax
test rax, rax
je 0x1401ec9e8
test byte [r15], 1
je 0x1401ec993
mov r8, qword [r15 + 8]
test r8, r8
je 0x1401ec993
mov r9d, dword [r15 + 0x10]
test r9, r9
je 0x1401ec993
add r9, r8
mov edx, edi
not edx
add edx, r14d
mov rcx, qword [rsp + 0x68]
call fcn.140240660
inc edi
test eax, eax
je 0x1401ec97f
mov r13d, eax
mov rcx, r15
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
jmp 0x1401ec938
mov rcx, qword [rsp + 0x210]
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
jmp 0x1401ec849
mov edi, 0x60000
jmp 0x1401eccaf
lea rdx, str.Unable_to_set_ciphers_to_from_connection_ssl_config
mov rcx, qword [rsp + 0x68]
call fcn.140195520
mov r13d, 0x3b
jmp 0x1401eaabd
mov edi, 0x70000
jmp 0x1401eccaf
mov dword [rsp + 0x238], 0x80
mov ecx, r12d
or cl, r11b
je 0x1401ecac8
mov ecx, eax
lea rcx, [rcx + rcx*2]
shl rcx, 4
test r12b, r12b
mov dword [rsp + 0x1a0], 0x200020
lea rdx, str.ChainingModeGCM
mov qword [rsp + 0x1a8], rdx
lea rdx, str.SHA256
lea r8, str.SHA384
cmove r8, rdx
xor edx, edx
cmp r12b, r11b
sete dl
lea r9, [0x140277252]
cmovne r9, r8
xor edx, 3
mov dword [rsp + rcx + 0x210], edx
mov dword [rsp + rcx + 0x218], 0x80008
mov qword [rsp + rcx + 0x220], r9
lea rdx, [rsp + 0x1a0]
mov qword [rsp + rcx + 0x230], rdx
mov dword [rsp + rcx + 0x228], 1
inc eax
mov rbx, qword [rsp + 0x68]
mov r12, qword [rsp + 0xc0]
test byte [rsp + 0x80], 1
je 0x1401ecb10
mov ecx, eax
lea rcx, [rcx + rcx*2]
shl rcx, 4
mov dword [rsp + rcx + 0x210], 2
mov dword [rsp + rcx + 0x218], 0x240024
lea rdx, str.CHACHA20_POLY1305
mov qword [rsp + rcx + 0x220], rdx
inc eax
lea rcx, [rsp + 0x210]
mov qword [rsp + 0x168], rcx
mov dword [rsp + 0x164], eax
lea rax, [rsp + 0x150]
mov qword [rsp + 0x130], rax
mov dword [rsp + 0x128], 1
mov dword [rsp + 0xf0], 5
mov eax, dword [rsp + 0x94]
or eax, 0x400000
mov dword [rsp + 0x124], eax
not r14d
mov dword [rsp + 0x160], r14d
cmp qword [rsp + 0xa8], 0
je 0x1401ecb91
mov dword [rsp + 0xf8], 1
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x100], rax
mov rax, qword [0x140277f40]
mov rax, qword [rax]
mov rcx, qword [r10]
lea rdx, [rcx + 0x10]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
lea rcx, [rsp + 0xf0]
mov qword [rsp + 0x20], rcx
lea rdx, str.Microsoft_Unified_Security_Protocol_Provider
xor ecx, ecx
mov r8d, 2
xor r9d, r9d
call qword [rax + 0x18]
mov r15d, eax
mov r14, qword [rsp + 0x70]
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x1401ecbf3
call qword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
test r15d, r15d
je 0x1401ecc54
lea rdx, [rsp + 0x210]
mov r8d, 0x100
mov ecx, r15d
call fcn.1401f90c0
lea rdx, str.schannel:_AcquireCredentialsHandle_failed:__s
mov rcx, rbx
mov r8, rax
call fcn.140195520
mov rax, qword [0x1402654c0]
mov rsi, qword [rsp + 0xd0]
mov rcx, qword [rsi]
call qword [rax]
mov qword [rsi], 0
xor eax, eax
cmp r15d, 0x80090300
setne al
lea r13d, [rax*8 + 0x1b]
jmp 0x1401eaabd
mov dword [rsp + 0xec], 0
mov rcx, rbx
mov r15, qword [rsp + 0x148]
mov rdx, r15
xor r8d, r8d
call fcn.1401966e0
test rax, rax
je 0x1401ecc9e
mov rcx, rax
call sub.msvcrt.dll__strdup
mov rcx, qword [r12]
mov qword [rcx + 0x18], rax
test rax, rax
jne 0x1401eb567
mov r13d, 0x1b
jmp 0x1401eaabd
lea rdx, str.Failed_to_set_SNI
jmp 0x1401ebc8f
mov edi, 0x80000
inc rsi
mov rcx, rsi
mov edx, 0x5c
call sub.msvcrt.dll_strchr
test rax, rax
je 0x1401ece14
mov rbp, rax
lea rcx, [rax + 1]
mov qword [rsp + 0x80], rcx
call sub.msvcrt.dll_strlen
cmp rax, 0x28
jne 0x1401ece14
mov byte [rbp], 0
mov rax, qword [0x1402654d0]
mov rcx, rsi
call qword [rax]
mov byte [rbp], 0x5c
test rax, rax
je 0x1401ece07
mov r13, rax
mov r9d, edi
or r9d, 0x4000
mov qword [rsp + 0x20], rax
mov ecx, 9
xor edx, edx
xor r8d, r8d
call qword [sym.imp.CRYPT32.dll_CertOpenStore]
test rax, rax
je 0x1401ece79
mov qword [rsp + 0x78], rax
mov rax, qword [0x1402654c0]
mov rcx, r13
call qword [rax]
lea r9, [rsp + 0x210]
mov qword [rsp + 0xf8], r9
mov dword [rsp + 0xf0], 0x14
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
lea rsi, [rsp + 0xf0]
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x80]
mov edx, 0x28
mov r8d, 4
call qword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
je 0x1401eceb7
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], 0
mov rcx, qword [rsp + 0x78]
mov edx, 0x10001
xor r8d, r8d
mov r9d, 0x10000
call qword [sym.imp.CRYPT32.dll_CertFindCertificateInStore]
mov rdi, rax
mov qword [rsp + 0xa8], rax
mov rcx, r15
call fcn.140257dd0
test rdi, rdi
je 0x1401ec2db
mov r13, qword [rsp + 0xd8]
movzx ebp, byte [rsp + 0x67]
mov r12, qword [rsp + 0xc0]
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xa0]
mov r15, qword [rsp + 0xd0]
jmp 0x1401ebe41
mov r12, qword [rbx + 0x540]
mov r13d, 0x1b
cmp byte [r12], 0
je 0x1401ece5a
lea rdx, [0x140277015]
mov rcx, r12
call fcn.1401aa6d0
test rax, rax
je 0x1401ece53
mov r12, rax
mov sil, 1
xor edi, edi
xor eax, eax
mov qword [rsp + 0x80], rax
mov r13, qword [rsp + 0xd8]
movzx ebp, byte [rsp + 0x67]
jmp 0x1401ebb70
mov r12, qword [rbx + 0x540]
lea rdx, str.schannel:_Failed_to_get_certificate_location_or_file_for__s
mov rcx, rbx
mov r8, r12
call fcn.140195520
mov rcx, r15
call fcn.140257dd0
jmp 0x1401eaabd
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [rsp + 0x20], eax
lea rdx, str.schannel:_Failed_to_open_cert_store__x__s__last_error_is_0x_x
mov rcx, rbx
mov r8d, edi
mov r9, r13
call fcn.140195520
mov rax, qword [0x1402654c0]
mov rcx, r13
call qword [rax]
mov rcx, r15
call fcn.140257dd0
mov r13d, 0x3a
jmp 0x1401eaabd
mov rcx, r15
call fcn.140257dd0
jmp 0x1401ec2db