Function at 0x140031b80
Capabilities:
Check for time delay via gettickcount
Encode data using xor
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x19f8]
mov eax, 0x1af8
call fcn.1400d9eb0
sub rsp, rax
mov qword [rbp + 0x330], 0xfffffffffffffffe
movaps xmmword [rsp + 0x1ae0], xmm6
mov rax, qword [0x1401cee90]
xor rax, rsp
mov qword [rbp + 0x19d0], rax
mov r12, r9
mov qword [rbp - 0x58], r8
mov r13, rdx
mov rdi, rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp + 0x260], rcx
xor r15d, r15d
mov dword [rsp + 0x44], r15d
mov rcx, r9
call fcn.14002fc50
lea rcx, str.D_r_
test al, al
mov rax, qword [str.D_r_]
je 0x140031c7a
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x60], rax
lea rdx, str.this_module_doesnt_support_file_request
test rdx, 0xffffffffffff0000
jne 0x140031c3b
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140031c45
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140002960
jmp 0x140031c45
lea rcx, [rbp + 0x60]
call fcn.140003940
nop
lea rdx, [rbp + 0x60]
mov rcx, rdi
call fcn.14002eda0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031c72
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov rax, rdi
jmp 0x1400352f8
call qword [rax + 0x18]
add rax, 0x18
test r13, r13
jne 0x140031cf8
mov qword [rbp + 0x68], rax
lea rdx, str.InternetOpen_Failed
test rdx, 0xffffffffffff0000
jne 0x140031cba
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140031cc4
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140002960
jmp 0x140031cc4
lea rcx, [rbp + 0x68]
call fcn.140003940
nop
lea rdx, [rbp + 0x68]
mov rcx, rdi
call fcn.14002eda0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031c72
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rdi
jmp 0x1400352f8
mov qword [rsp + 0x60], rax
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x38], r15d
lea rax, [rbp + 0x210]
mov qword [rbp + 0x58], rax
lea rbx, [0x1401d7bd0]
cmp byte [r12 + 8], 0
jne 0x140031d3a
mov rax, rbx
jmp 0x140031d49
lea rdx, [0x14015bc94]
mov rcx, r12
call fcn.14003cb90
mov rdx, qword [rax]
mov qword [rbp + 0x228], 0xf
mov qword [rbp + 0x220], r15
mov byte [rbp + 0x210], 0
or r14, 0xffffffffffffffff
cmp byte [rdx], 0
jne 0x140031d73
mov r8, r15
jmp 0x140031d80
mov r8, r14
inc r8
cmp byte [rdx + r8], 0
jne 0x140031d76
lea rcx, [rbp + 0x210]
call fcn.1400013f0
nop
lea rdx, [rbp + 0x210]
lea rcx, [rsp + 0x50]
call fcn.1400225e0
nop
lea r9, [rbp - 0x38]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.14002f820
movzx eax, al
test eax, eax
jne 0x140031e80
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x78], rax
lea rdx, str.InternetCrackUrl_Failed
test rdx, 0xffffffffffff0000
jne 0x140031e0b
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140031e15
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.140002960
jmp 0x140031e15
lea rcx, [rbp + 0x78]
call fcn.140003940
nop
lea rdx, [rbp + 0x78]
mov rcx, rdi
call fcn.14002eda0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031e42
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031e5c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031e76
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
jmp 0x140031cdc
mov byte [rsp + 0x41], 0
cmp byte [r12 + 8], 0
je 0x140031eeb
lea rdx, [0x14015c798]
mov rcx, r12
call fcn.14003cb90
cmp rax, rbx
je 0x140031eeb
cmp byte [r12 + 8], 0
jne 0x140031eae
mov rax, rbx
jmp 0x140031ebd
lea rdx, [0x14015c7a8]
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 5
jne 0x140031eeb
cmp byte [r12 + 8], 0
jne 0x140031ed0
mov rax, rbx
jmp 0x140031edf
lea rdx, str.redirectCheck
mov rcx, r12
call fcn.14003cb90
mov rcx, rax
call fcn.14003c540
mov byte [rsp + 0x41], al
xor sil, sil
mov edi, 0x50
lea rax, [rbp + 8]
mov qword [rbp + 0x58], rax
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.1400027c0
add rax, 0x18
mov qword [rbp + 8], rax
lea rax, [rbp + 8]
mov qword [rbp + 0x58], rax
lea rcx, [rbp + 8]
call fcn.1400296d0
mov ecx, dword [0x1401d6d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, 0x14
jne 0x140031f6b
lea edx, [rdi + 0x47]
lea r8d, [rdi + 0x48]
lea rcx, [0x14015b65c]
call fcn.1400d5714
mov rcx, qword [rbp + 8]
cmp dword [rcx - 0x10], 0
jl 0x140031f99
lea rdx, [0x14015c2c0]
call fcn.1400d5c54
test rax, rax
je 0x140031f99
sub rax, qword [rbp + 8]
sar rax, 1
test eax, eax
jne 0x140031f99
mov sil, 1
mov edi, 0x1bb
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031fb1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [r12 + 8], 0
jne 0x140031fbe
mov rax, rbx
jmp 0x140031fcd
lea rdx, str.port
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 1
jne 0x140031ffe
cmp byte [r12 + 8], 0
jne 0x140031fe0
mov rax, rbx
jmp 0x140031fef
lea rdx, [0x14015c4a4]
mov rcx, r12
call fcn.14003cb90
mov rcx, rax
call fcn.14003c1c0
mov ebx, eax
mov dword [rbp - 0x38], eax
jmp 0x140032009
mov ebx, dword [rbp - 0x38]
test ebx, ebx
cmove ebx, edi
mov dword [rbp - 0x38], ebx
mov byte [rsp + 0x40], 0
mov r8d, ebx
lea rdx, [rsp + 0x60]
mov rcx, qword [rbp - 0x58]
call fcn.14002fa80
mov qword [rbp - 0x50], rax
test rax, rax
jne 0x1400321cf
mov rax, qword [0x1401d8960]
test rax, rax
jne 0x1400320d8
lea rcx, [0x14015c7d0]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r10, rax
mov r9d, dword [0x1401d6d80]
mov r8d, r9d
imul r8d, r9d
imul r8d, r9d
mov eax, 0x6bca1af3
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x13
sub r8d, edx
cmp r8d, 0xf
jne 0x1400320ae
mov ecx, r15d
lea rdx, [rbp + 0x670]
nop word [rax + rax]
mov eax, dword [rdx]
imul eax, eax, 0x21
add r9d, eax
inc ecx
lea rdx, [rdx + 4]
movsxd rax, ecx
cmp rax, 0x60
jb 0x140032090
mov dword [0x1401d6d80], r9d
test r10, r10
je 0x1400320cc
lea rdx, str.InternetConnectW
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401d8960], rax
jmp 0x1400320d3
mov rax, qword [0x1401d8960]
test rax, rax
je 0x14003210d
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r15
xor r9d, r9d
movzx r8d, bx
mov rdx, qword [rsp + 0x60]
mov rcx, r13
call rax
mov qword [rbp - 0x50], rax
test rax, rax
jne 0x1400321ca
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x38], rax
lea rdx, str.InternetConnect_Failed
test rdx, 0xffffffffffff0000
jne 0x140032156
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140032160
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.140002960
jmp 0x140032160
lea rcx, [rbp + 0x38]
call fcn.140003940
nop
lea rdx, [rbp + 0x38]
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14002eda0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032191
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400321ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400321c5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
mov byte [rsp + 0x40], 1
mov edi, 0x80400200
mov eax, 0x80600200
cmp byte [rsp + 0x41], 0
cmovne edi, eax
or edi, 0xc000
test sil, sil
je 0x1400321f2
or edi, 0x803080
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
cmp byte [r12 + 8], 0
jne 0x140032220
lea r13, [0x1401d7bd0]
mov rax, r13
jmp 0x140032236
lea rdx, [0x14015bd0c]
mov rcx, r12
call fcn.14003cb90
lea r13, [0x1401d7bd0]
cmp byte [rax + 8], 4
jne 0x1400322fb
lea rax, [rbp + 0x440]
mov qword [rbp - 0x58], rax
cmp byte [r12 + 8], 0
jne 0x140032258
mov rax, r13
jmp 0x140032267
lea rdx, [0x14015bd34]
mov rcx, r12
call fcn.14003cb90
mov rdx, qword [rax]
lea rcx, [rbp + 0x440]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.1400225e0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400322e0
cmp dword [rbx + 0x10], 0
jl 0x1400322d1
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400322d1
call fcn.1400027c0
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x1400322c6
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x70], rax
jmp 0x1400322e0
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.140002670
nop
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400322fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
cmp byte [r12 + 8], 0
jne 0x140032321
mov rax, r13
jmp 0x140032330
lea rdx, [0x14015c840]
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 4
jne 0x1400323f2
lea rax, [rbp + 0x420]
mov qword [rbp - 0x58], rax
cmp byte [r12 + 8], 0
jne 0x140032352
mov rax, r13
jmp 0x140032361
lea rdx, [0x14015c848]
mov rcx, r12
call fcn.14003cb90
mov rdx, qword [rax]
lea rcx, [rbp + 0x420]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.1400225e0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400323d7
cmp dword [rbx + 0x10], 0
jl 0x1400323c9
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400323c9
call fcn.1400027c0
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x1400323bf
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x70], rax
jmp 0x1400323d7
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x70]
call fcn.140002670
nop
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400323f2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
cmp byte [r12 + 8], 0
jne 0x140032418
mov rax, r13
jmp 0x140032427
lea rdx, [0x14015c830]
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 4
jne 0x1400324e9
lea rax, [rbp + 0x3e0]
mov qword [rbp - 0x58], rax
cmp byte [r12 + 8], 0
jne 0x140032449
mov rax, r13
jmp 0x140032458
lea rdx, str.referer
mov rcx, r12
call fcn.14003cb90
mov rdx, qword [rax]
lea rcx, [rbp + 0x3e0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x158]
call fcn.1400225e0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400324ce
cmp dword [rbx + 0x10], 0
jl 0x1400324c0
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400324c0
call fcn.1400027c0
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x1400324b6
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x78], rax
jmp 0x1400324ce
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.140002670
nop
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400324e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
cmp byte [r12 + 8], 0
jne 0x14003250f
mov rax, r13
jmp 0x14003251e
lea rdx, [0x14015c878]
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 4
jne 0x1400325e0
lea rax, [rbp + 0x480]
mov qword [rbp - 0x58], rax
cmp byte [r12 + 8], 0
jne 0x140032540
mov rax, r13
jmp 0x14003254f
lea rdx, [0x14015c888]
mov rcx, r12
call fcn.14003cb90
mov rdx, qword [rax]
lea rcx, [rbp + 0x480]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.1400225e0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x68]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400325c5
cmp dword [rbx + 0x10], 0
jl 0x1400325b7
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400325b7
call fcn.1400027c0
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x1400325ad
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x68], rax
jmp 0x1400325c5
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x68]
call fcn.140002670
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400325e0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x68]
cmp dword [rax - 0x10], 0
cmove rax, r15
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], r15
mov rax, qword [rbp - 0x78]
cmp dword [rax - 0x10], 0
cmove rax, r15
mov r9, qword [rbp - 0x70]
cmp dword [r9 - 0x10], 0
cmove r9, r15
mov rdx, qword [rsp + 0x70]
cmp dword [rdx - 0x10], 0
cmove rdx, r15
mov esi, 1
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x200]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov rdi, rax
mov qword [rbp - 0x58], rax
lea rcx, str.D_r_
test rax, rax
mov rax, qword [str.D_r_]
jne 0x14003277c
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
lea rdx, str.HttpOpenRequest_Failed
test rdx, 0xffffffffffff0000
jne 0x1400326a7
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x1400326b1
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140002960
jmp 0x1400326b1
lea rcx, [rbp + 0x50]
call fcn.140003940
nop
lea rdx, [rbp + 0x50]
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14002eda0
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400326de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400326f7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032710
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032729
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032743
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003275d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032777
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
cmp byte [r12 + 8], 0
jne 0x140032795
mov rax, r13
jmp 0x1400327a4
lea rdx, [0x14015c868]
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 4
jne 0x140032a21
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x10], rbx
lea r8, [0x14015bd6c]
test r8, 0xffffffffffff0000
jne 0x1400327fc
movzx ebx, r8w
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14003286e
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140002960
jmp 0x14003286e
mov esi, dword [rbx - 0x10]
mov rdi, r8
sub rdi, rbx
sar rdi, 1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 2
or eax, ecx
jge 0x140032833
mov edx, 2
lea rcx, [rbp + 0x10]
call fcn.140002760
mov rbx, qword [rbp + 0x10]
lea r8, [0x14015bd6c]
movsxd rdx, dword [rbx - 0xc]
mov r9d, 4
mov rcx, rbx
add rdx, rdx
cmp rdi, rsi
ja 0x140032853
lea r8, [rbx + rdi*2]
call fcn.1400d562c
jmp 0x140032858
call fcn.1400d57ec
cmp dword [rbx - 0xc], 2
jl 0x140032a12
mov dword [rbx - 0x10], 2
mov word [rbx + 4], r15w
lea rax, [rbp + 0x360]
mov qword [rbp + 0x18], rax
cmp byte [r12 + 8], 0
jne 0x140032886
mov rax, r13
jmp 0x140032895
lea rdx, [0x14015c8c8]
mov rcx, r12
call fcn.14003cb90
mov rdx, qword [rax]
lea rcx, [rbp + 0x360]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.1400225e0
mov rdi, rax
lea rcx, str.D_r_
mov rdx, qword [str.D_r_]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp + 0x70], rax
lea rdx, str.Content_Type:
test rdx, 0xffffffffffff0000
jne 0x140032900
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14003290a
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140002960
jmp 0x14003290a
lea rcx, [rbp + 0x70]
call fcn.140003940
nop
mov r8, rdi
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x198]
call fcn.1400229d0
nop
lea r8, [rbp + 0x10]
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.1400229d0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x58]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14003298b
cmp dword [rbx + 0x10], 0
jl 0x14003297c
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14003297c
call fcn.1400027c0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140032971
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x58], rax
jmp 0x14003298b
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.140002670
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400329a7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400329c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400329dc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400329f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032a1d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140032a1d
mov ecx, 0x80070057
call fcn.140001920
nop
mov rdi, qword [rbp - 0x58]
cmp byte [r12 + 8], 0
jne 0x140032a2e
mov rax, r13
jmp 0x140032a3d
lea rdx, [0x14015c8a8]
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 4
jne 0x140032afc
lea rax, [rbp + 0x3a0]
mov qword [rbp + 0x18], rax
cmp byte [r12 + 8], 0
jne 0x140032a5f
mov rax, r13
jmp 0x140032a6e
lea rdx, [0x14015c8f8]
mov rcx, r12
call fcn.14003cb90
mov rdx, qword [rax]
lea rcx, [rbp + 0x3a0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1b8]
call fcn.1400225e0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.140010c10
nop
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032abb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.1400027c0
add rax, 0x18
mov qword [rbp + 0xa0], rax
lea rcx, [rbp + 0xa0]
call fcn.140035330
nop
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032afc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
mov ebx, r15d
cmp byte [r12 + 8], bl
jne 0x140032b25
mov rax, r13
jmp 0x140032b34
lea rdx, str.postData
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 4
jne 0x140032c42
lea rax, [rbp + 0x3c0]
mov qword [rbp + 0x18], rax
cmp byte [r12 + 8], bl
jne 0x140032b55
mov rax, r13
jmp 0x140032b64
lea rdx, [0x14015c8d8]
mov rcx, r12
call fcn.14003cb90
mov rdx, qword [rax]
lea rcx, [rbp + 0x3c0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.1400225e0
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1400025c0
nop
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032bad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [0x1401d6d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 7
sub ecx, edx
cmp ecx, 3
jne 0x140032bde
inc dword [0x1401d7a7c]
cmp byte [r12 + 8], 0
je 0x140032c42
lea rdx, [0x14015c8e8]
mov rcx, r12
call fcn.14003cb90
cmp rax, r13
je 0x140032c42
cmp byte [r12 + 8], 0
jne 0x140032c07
mov rax, r13
jmp 0x140032c16
lea rdx, [0x14015c948]
mov rcx, r12
call fcn.14003cb90
cmp byte [rax + 8], 1
jne 0x140032c42
cmp byte [r12 + 8], 0
jne 0x140032c29
mov rax, r13
jmp 0x140032c38
lea rdx, str.datatype
mov rcx, r12
call fcn.14003cb90
mov rcx, rax
call fcn.14003c1c0
mov ebx, eax
lea rcx, str.D_r_
mov rdx, qword [str.D_r_]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
test ebx, ebx
jne 0x140032cf0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x4c0]
call fcn.140022680
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x140032c82
mov rdx, qword [rax]
test rdx, rdx
jne 0x140032c8c
mov eax, r15d
jmp 0x140032c99
mov rax, r14
nop
inc rax
cmp byte [rdx + rax], 0
jne 0x140032c90
mov r8d, eax
lea rcx, [rsp + 0x68]
call fcn.14002b920
nop
cmp qword [rbp + 0x4d8], 0x10
jb 0x140032cbd
mov rcx, qword [rbp + 0x4c0]
call fcn.1400d4de0
mov qword [rbp + 0x4d8], 0xf
mov qword [rbp + 0x4d0], r15
mov byte [rbp + 0x4c0], 0
mov rax, qword [rsp + 0x68]
mov r13d, dword [rax - 0x10]
lea rcx, [rsp + 0x48]
call fcn.1400023a0
mov rax, qword [rsp + 0x48]
jmp 0x140032cfc
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax - 0x10]
lea r13d, [rcx + rcx]
cmp byte [rsp + 0x41], 0
je 0x140032d3d
mov dword [rbp - 0x28], 0x2710
mov r9d, 4
lea r8, [rbp - 0x28]
lea edx, [r9 + 2]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp - 0x28]
lea edx, [r9 + 1]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x48]
cmp dword [rax - 0x10], 0
jne 0x140032d62
mov rdi, qword [rsp + 0x68]
cmp dword [rdi - 8], 1
jle 0x140032d7d
mov edx, dword [rdi - 0x10]
lea rcx, [rsp + 0x68]
call fcn.14001bdb0
mov rdi, qword [rsp + 0x68]
jmp 0x140032d7d
cmp dword [rax - 8], 1
jle 0x140032d7a
mov edx, dword [rax - 0x10]
lea rcx, [rsp + 0x48]
call fcn.140002860
mov rax, qword [rsp + 0x48]
mov rdi, rax
mov rbx, qword [rsp + 0x58]
mov esi, dword [rbx - 0x10]
test esi, esi
cmove rbx, r15
call fcn.14002ca80
mov rcx, rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rdi
mov r9d, esi
mov r8, rbx
mov r13, qword [rbp - 0x58]
mov rdx, r13
call fcn.140043c70
test eax, eax
jne 0x140032f60
lea rcx, [rbp + 0xb8]
call fcn.14002a110
nop
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140032dde
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpSendRequest_Failed_with:
lea rcx, [rbp + 0x178]
call fcn.140003760
nop
lea r8, [rbp + 0xb8]
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.1400229d0
nop
mov rdx, rax
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14002eda0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x110]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032e3c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032e58
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032e74
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032e8e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032ea8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032ec2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032edb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032ef4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032f0d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032f27
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032f41
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032f5b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
mov rcx, r12
call fcn.14002fbe0
test al, al
jne 0x140033225
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401d6d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xa
jne 0x14003304a
mov edx, r15d
nop dword [rax]
mov ecx, edx
and ecx, 1
dec ecx
not ecx
and ecx, r8d
mov eax, edx
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
add r8d, eax
inc edx
cmp edx, 0x100
jl 0x140032fb0
mov dword [0x1401d6d80], r8d
cmp byte [rsp + 0x40], 0
je 0x14003305b
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rbp + 0xe8]
and eax, 0xffffff00
mov dword [rbp + 0xe8], eax
btr eax, 8
mov dword [rbp + 0xe8], eax
mov qword [rbp + 0xf0], r15
mov eax, dword [rbp + 0x1d0]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1d0], eax
mov qword [rbp + 0x1d8], r15
mov byte [rbp + 0x1c8], 1
lea rdx, [0x14015bd74]
lea rcx, [rbp + 0xe0]
call fcn.14003c990
mov rcx, rax
lea rdx, [rbp + 0x1c8]
call fcn.14003c000
nop
lea rcx, [rbp + 0x1c8]
call fcn.14003bf50
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x300]
call fcn.14003bca0
nop
lea rdx, [0x14015c998]
lea rcx, [rbp + 0xe0]
call fcn.14003c990
mov rcx, rax
lea rdx, [rbp + 0x300]
call fcn.14003c000
nop
lea rcx, [rbp + 0x300]
call fcn.14003bf50
lea rdx, [rbp + 0xe0]
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14003bdf0
mov dword [rsp + 0x44], 1
lea rcx, [rbp + 0xe0]
call fcn.14003bf50
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033153
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003316d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033187
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400331a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400331b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400331d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400331ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033206
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033220
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
mov byte [rbp + 0x15c0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x15c1]
call fcn.1400da240
mov dword [rbp + 0x88], 0x400
lea rcx, [0x14015c968]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x1400333ad
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14003327a
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [0x14015c980]
lea rcx, [rbp + 0x120]
call fcn.140003760
nop
mov rdx, rax
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14002eda0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x120]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400332c1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400332db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400332f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003330f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033328
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033341
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003335a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033374
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003338e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400333a8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
lea rdx, [0x14015c9e8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r13
test rax, rax
jne 0x140033549
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401d6d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 5
jne 0x140033405
inc r8d
mov dword [0x1401d6d80], r8d
cmp byte [rsp + 0x40], 0
je 0x140033416
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x1b0]
call fcn.140003760
nop
mov rdx, rax
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14002eda0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003345d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033477
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033491
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400334ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400334c4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400334dd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400334f6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033510
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003352a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033544
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x88]
lea r8, [rbp + 0x15c0]
mov edx, 0x13
call rax
test eax, eax
jne 0x1400336b8
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140033585
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [0x14015c9b8]
lea rcx, [rbp + 0x130]
call fcn.140003760
nop
mov rdx, rax
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14002eda0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400335cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400335e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033600
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003361a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033633
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003364c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033665
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003367f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033699
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400336b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [rbp + 0x15c0]
lea rcx, [rbp - 0x80]
call fcn.140003940
nop
cmp byte [r12 + 8], 0
jne 0x1400336f6
lea rdi, [0x1401d7bd0]
mov rsi, rdi
jmp 0x14003370f
lea rdx, [0x14015c9d0]
mov rcx, r12
call fcn.14003cb90
mov rsi, rax
lea rdi, [0x1401d7bd0]
movzx eax, byte [rsi + 8]
test al, al
je 0x1400339b7
cmp al, 6
je 0x1400339b7
cmp al, 7
jne 0x14003396d
mov r13d, r15d
mov rcx, rsi
call fcn.14003c5c0
test eax, eax
jle 0x140035161
nop
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
mov r8d, r13d
lea rdx, [0x14015bcbc]
lea rcx, [rbp + 0x40]
call fcn.140035740
mov rbx, qword [rbp + 0x40]
cmp byte [rsi + 8], 0
jne 0x14003377b
mov rax, rdi
jmp 0x140033786
mov rdx, rbx
mov rcx, rsi
call fcn.14003cb90
cmp byte [rax + 8], 4
jne 0x14003381d
lea rax, [rbp + 0x400]
mov qword [rbp + 0x18], rax
cmp byte [rsi + 8], 0
jne 0x1400337a6
mov rax, rdi
jmp 0x1400337b1
mov rdx, rbx
mov rcx, rsi
call fcn.14003cb90
mov rdx, qword [rax]
lea rcx, [rbp + 0x400]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.1400225e0
nop
mov rdx, qword [rax]
mov eax, r15d
test rdx, rdx
setne al
test eax, eax
je 0x14003393d
mov rax, qword [rbp - 0x80]
sub rdx, rax
nop dword [rax]
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x140033807
add rax, 2
test cx, cx
jne 0x1400337f0
mov eax, r15d
jmp 0x14003380c
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x190]
jmp 0x1400338ed
cmp byte [rsi + 8], 0
jne 0x140033828
mov rax, rdi
jmp 0x140033833
mov rdx, rbx
mov rcx, rsi
call fcn.14003cb90
cmp byte [rax + 8], 1
jne 0x140033909
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp + 0x140], rdi
cmp byte [rsi + 8], 0
jne 0x140033868
lea rax, [0x1401d7bd0]
jmp 0x140033873
mov rdx, rbx
mov rcx, rsi
call fcn.14003cb90
mov rcx, rax
call fcn.14003c1c0
mov r8d, eax
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0xd8]
call fcn.140022950
nop
lea rdx, [rdi - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400338a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, r15d
mov rax, qword [rbp + 0xd8]
test rax, rax
setne cl
test ecx, ecx
je 0x140033962
mov rcx, qword [rbp - 0x80]
sub rax, rcx
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x1400338dc
add rcx, 2
test dx, dx
jne 0x1400338c5
mov eax, r15d
jmp 0x1400338e1
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033901
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x140033948
mov rbx, qword [rbp + 0x40]
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003391d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r13d
mov rcx, rsi
call fcn.14003c5c0
cmp r13d, eax
jge 0x140035161
lea rdi, [0x1401d7bd0]
jmp 0x140033740
mov ecx, 0x80004005
call fcn.140001920
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400339a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400339a6
mov ecx, 0x80004005
call fcn.140001920
nop
mov rcx, r15
mov rdx, qword [rbp - 0x80]
lea r8, [0x14015ca38]
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14003399a
cmp rcx, 4
jne 0x140033980
mov eax, r15d
jmp 0x14003399f
sbb eax, eax
or eax, 1
test eax, eax
sete bl
jmp 0x1400339aa
mov r13, qword [rbp - 0x58]
test bl, bl
jne 0x140033b46
jmp 0x140035161
mov edi, r15d
mov rcx, rsi
call fcn.14003c5c0
test eax, eax
jle 0x140035161
nop word [rax + rax]
mov edx, edi
mov rcx, rsi
call fcn.14003c8a0
mov edx, edi
mov rcx, rsi
cmp byte [rax + 8], 4
jne 0x140033a5d
lea rax, [rbp + 0x460]
mov qword [rbp + 0x18], rax
call fcn.14003c8a0
mov rdx, qword [rax]
lea rcx, [rbp + 0x460]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.1400225e0
nop
mov rdx, qword [rax]
mov eax, r15d
test rdx, rdx
setne al
test eax, eax
je 0x140033b3b
mov rax, qword [rbp - 0x80]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x140033a47
add rax, 2
test cx, cx
jne 0x140033a30
mov eax, r15d
jmp 0x140033a4c
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x1e0]
jmp 0x140033b0c
call fcn.14003c8a0
cmp byte [rax + 8], 1
jne 0x140033b24
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x150], rbx
mov edx, edi
mov rcx, rsi
call fcn.14003c8a0
mov rcx, rax
call fcn.14003c1c0
mov r8d, eax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xb0]
call fcn.140022950
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033ac5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, r15d
mov rax, qword [rbp + 0xb0]
test rax, rax
setne cl
test ecx, ecx
je 0x140035156
mov rcx, qword [rbp - 0x80]
sub rax, rcx
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x140033afb
add rcx, 2
test dx, dx
jne 0x140033ae4
mov eax, r15d
jmp 0x140033b00
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033b20
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x140033b46
inc edi
mov rcx, rsi
call fcn.14003c5c0
cmp edi, eax
jge 0x140035161
jmp 0x1400339d0
mov ecx, 0x80004005
call fcn.140001920
nop
mov dword [rbp], r15d
lea r9, [rbp]
mov rcx, r13
call fcn.140031ae0
lea rcx, str.D_r_
mov rax, qword [str.D_r_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov eax, dword [rbp]
test eax, eax
je 0x140033c5b
mov ecx, eax
call fcn.1400d4448
mov rbx, rax
mov r9d, dword [0x1401d6d80]
lea r10d, [r9 + 1]
mov r8d, r10d
imul r8d, r9d
mov eax, 0x38e38e39
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [rdx + rdx*8]
sub r8d, eax
cmp r8d, 8
jne 0x140033bd9
test r9d, r9d
je 0x140033bcf
dec r9d
je 0x140033bc6
mov dword [0x1401d6d80], r10d
jmp 0x140033bd9
mov dword [0x1401d6d80], r15d
jmp 0x140033bd9
mov dword [0x1401d6d80], 2
test rbx, rbx
je 0x140033c5b
lea rcx, [0x14015ca10]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140033c1b
lea rdx, [0x14015ca28]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140033c1b
mov qword [rsp + 0x20], r15
lea r9, [rbp]
mov r8, rbx
mov edx, 0x16
mov rcx, r13
call rax
mov rdx, rbx
lea rcx, [rbp + 0xf8]
call fcn.14002df00
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.1400025c0
nop
mov rdx, qword [rbp + 0xf8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033c53
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400d5528
cmp byte [rsp + 0x41], 0
je 0x1400343d2
mov eax, dword [rbp + 0x28]
and eax, 0xffffff00
mov dword [rbp + 0x28], eax
btr eax, 8
mov dword [rbp + 0x28], eax
mov qword [rbp + 0x30], r15
mov rdx, r15
mov rax, qword [rbp - 0x80]
lea r8, [0x14015ca50]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x140033caa
cmp rdx, 4
jne 0x140033c90
mov ecx, r15d
jmp 0x140033caf
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140033ebc
mov rdx, r15
lea r8, [0x14015ca58]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x140033cea
cmp rdx, 4
jne 0x140033cd0
mov ecx, r15d
jmp 0x140033cef
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140033ebc
mov rdx, r15
lea r8, [0x14015ca40]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x140033d2a
cmp rdx, 4
jne 0x140033d10
mov ecx, r15d
jmp 0x140033d2f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140033ebc
mov rdx, r15
lea r8, [0x14015ca48]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x140033d6a
cmp rdx, 4
jne 0x140033d50
mov eax, r15d
jmp 0x140033d6f
sbb eax, eax
or eax, 1
test eax, eax
setne al
test al, al
je 0x140033ebc
lea rdx, [rbp + 0x20]
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14003bdf0
mov dword [rsp + 0x44], 1
lea rcx, [rbp + 0x20]
call fcn.14003bf50
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033db7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033dd0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033dea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033e04
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033e1e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033e37
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033e50
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033e69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033e83
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033e9d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033eb7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
lea rcx, [rbp - 0x40]
call fcn.140002460
nop
mov rcx, qword [rbp - 0x48]
add rcx, 0xffffffffffffffe8
call fcn.1400027c0
add rax, 0x18
mov qword [rbp - 8], rax
lea rcx, [rbp - 8]
call fcn.1400296d0
call fcn.14002e340
test al, al
jne 0x140033f02
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov rcx, qword [rbp - 8]
cmp dword [rcx - 0x10], 0
jl 0x140034260
lea rdx, str.location:
call fcn.1400d5c54
mov rbx, rax
test rax, rax
je 0x140034260
mov rcx, qword [rbp - 8]
sub rbx, rcx
sar rbx, 1
cmp ebx, 0xffffffff
je 0x140034260
test ebx, ebx
js 0x140033f65
cmp ebx, dword [rcx - 0x10]
jg 0x140033f65
movsxd rax, ebx
lea rcx, [rcx + rax*2]
lea rdx, [0x14015bdac]
call fcn.1400d5c54
test rax, rax
je 0x140033f65
sub rax, qword [rbp - 8]
sar rax, 1
jmp 0x140033f68
mov eax, r14d
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 8]
call fcn.140010060
nop
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1400025c0
nop
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033fa9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x40]
cmp dword [rcx - 0x10], 0
jl 0x1400341a6
lea rdx, str.http
call fcn.14000b070
mov rbx, rax
test rax, rax
je 0x1400341a6
lea rcx, [rbp - 0x40]
call fcn.140002660
sub rbx, rax
sar rbx, 1
cmp ebx, 0xffffffff
je 0x1400341a6
lea rcx, [rbp - 0x40]
call fcn.140002650
sub eax, ebx
mov r8d, eax
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp - 0x40]
call fcn.14001b420
nop
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.140002580
nop
lea rcx, [rbp + 0x1c0]
call fcn.140002540
mov dl, 1
lea rcx, [rbp + 0x2a0]
call fcn.14003bdd0
nop
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x20]
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x2a0]
call fcn.14003c000
nop
lea rcx, [rbp + 0x2a0]
call fcn.14003bf50
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x580]
call fcn.140022680
nop
mov rdx, rax
lea rcx, [rbp + 0x230]
call fcn.14003bd30
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x20]
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x230]
call fcn.14003c000
nop
lea rcx, [rbp + 0x230]
call fcn.14003bf50
nop
lea rcx, [rbp + 0x580]
call fcn.1400013b0
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x540]
call fcn.140022680
nop
mov rdx, rax
lea rcx, [rbp + 0x2d0]
call fcn.14003bd30
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x20]
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x2d0]
call fcn.14003c000
nop
lea rcx, [rbp + 0x2d0]
call fcn.14003bf50
nop
lea rcx, [rbp + 0x540]
call fcn.1400013b0
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.140002420
mov rcx, rax
call fcn.1400d5f64
mov edx, eax
lea rcx, [rbp + 0x248]
call fcn.14003bc80
nop
lea rdx, str.statusCode
lea rcx, [rbp + 0x20]
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x248]
call fcn.14003c000
nop
lea rcx, [rbp + 0x248]
call fcn.14003bf50
mov r8d, dword [0x1401d6d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
and ecx, 0x8000000f
jge 0x140034182
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 7
jne 0x1400341a6
mov ecx, 1
cmp r8d, ecx
jle 0x1400341a0
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, r8d
jl 0x140034191
mov dword [0x1401d6d80], ecx
lea rdx, [rbp + 0x20]
mov rcx, qword [rbp - 0x60]
call fcn.14003bdf0
mov dword [rsp + 0x44], 1
lea rcx, [rbp - 8]
call fcn.140002540
nop
lea rcx, [rbp - 0x40]
call fcn.140002540
nop
lea rcx, [rbp + 0x20]
call fcn.14003bf50
nop
lea rcx, [rbp - 0x48]
call fcn.140002540
nop
lea rcx, [rbp - 0x80]
call fcn.140002540
nop
lea rcx, [rsp + 0x68]
call fcn.140002540
nop
lea rcx, [rsp + 0x48]
call fcn.140002540
nop
lea rcx, [rsp + 0x58]
call fcn.140002540
nop
lea rcx, [rbp - 0x68]
call fcn.140002540
nop
lea rcx, [rbp - 0x78]
call fcn.140002540
nop
lea rcx, [rbp - 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x70]
call fcn.140002540
nop
lea rcx, [rsp + 0x50]
call fcn.140002540
nop
lea rcx, [rsp + 0x78]
call fcn.140002540
nop
lea rcx, [rsp + 0x60]
call fcn.140002540
mov rax, qword [rbp - 0x60]
jmp 0x1400352f8
lea rdx, [rbp + 0x20]
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14003bdf0
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140034291
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400342aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.14003bf50
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400342cd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400342e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140034300
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003431a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140034334
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003434d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140034366
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003437f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140034399
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400343b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400343cd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400352dc
lea rcx, [rbp - 0x20]
call fcn.14001b7c0
nop
mov dword [rbp - 0x24], r15d
mov ecx, dword [0x1401d6d80]
imul ecx, ecx
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 8
jne 0x14003442e
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0xcccccccd
mul r8d
shr edx, 6
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
lea eax, [r8 + 1]
mov dword [0x1401d6d80], eax
lea rcx, [rbp - 0x20]
call fcn.140035610
mov rdi, rax
lea rdx, [rax + 0x400]
lea rcx, [rbp - 0x20]
call fcn.140035510
call fcn.14002e1e0
test al, al
jne 0x140034459
inc dword [0x1401d6d80]
mov dword [rbp - 0x24], r15d
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.140035620
mov rbx, rax
call fcn.14002ca80
mov rcx, rax
lea rax, [rbp - 0x24]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r13
call fcn.140043690
test eax, eax
je 0x1400350ff
mov edx, dword [rbp - 0x24]
add rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.140035510
cmp dword [rbp - 0x24], 0
jne 0x1400343e0
mov byte [rbp + 0x11b0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x11b1]
call fcn.1400da240
mov dword [rbp + 0x8c], 0x400
mov rbx, r15
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
je 0x140034519
call fcn.14002e470
test al, al
jne 0x140034506
call fcn.1400d57c0
mov ecx, dword [0x1401d6d80]
cmp ecx, eax
jne 0x140034506
dec ecx
mov dword [0x1401d6d80], ecx
lea rdx, str.HttpQueryInfoA
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x8c]
lea r8, [rbp + 0x11b0]
mov edx, 0x1d
mov rcx, r13
call rbx
test eax, eax
je 0x140034869
call fcn.14002e400
test al, al
jne 0x14003454d
dec dword [0x1401d7b60]
lea rdx, [rbp + 0x11b0]
lea rcx, [rbp + 0x80]
call fcn.14002df00
nop
lea rdx, str.gzip
lea rcx, [rbp + 0x80]
call fcn.14001b780
test al, al
je 0x1400347ff
lea rcx, [rbp + 0x1e8]
call fcn.14001b7c0
nop
lea rcx, [rbp - 0x20]
call fcn.140035610
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.140035620
mov rcx, rax
lea r8, [rbp + 0x1e8]
mov rdx, rbx
call fcn.14002e570
test eax, eax
jne 0x1400346aa
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
call fcn.14002e3c0
test al, al
jne 0x14003463c
mov ecx, dword [0x1401d6d80]
test ecx, ecx
je 0x14003463c
mov eax, ecx
and eax, 0x80000001
jge 0x1400345e6
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1400345fb
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov dword [0x1401d6d80], eax
jmp 0x140034608
lea ecx, [rcx*2 + 1]
mov dword [0x1401d6d80], ecx
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov edx, ecx
sub edx, eax
je 0x14003462a
sub edx, 2
je 0x14003462d
dec edx
je 0x14003462f
jmp 0x140034638
add ecx, 2
inc ecx
add ecx, 2
mov dword [0x1401d6d80], ecx
test ecx, ecx
jne 0x1400345d6
cmp byte [rsp + 0x40], 0
je 0x14003464d
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x170]
call fcn.140003760
nop
mov rdx, rax
mov rcx, qword [rbp - 0x60]
call fcn.14002eda0
mov dword [rsp + 0x44], 1
lea rcx, [rbp + 0x170]
call fcn.140002540
nop
lea rcx, [rbp + 0x1e8]
call fcn.14002df50
nop
lea rcx, [rbp + 0x80]
call fcn.140002540
nop
lea rcx, [rbp - 0x20]
call fcn.14002df50
jmp 0x1400341d9
lea rdx, [rbp + 0x1e8]
lea rcx, [rbp - 0x20]
call fcn.1400353f0
call fcn.14002e440
test al, al
jne 0x1400347f3
mov rbx, r15
mov edi, 0xd9
nop
call fcn.1400d57c0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rbp + rbx*8 + 0xab0], xmm0
inc rbx
cmp rbx, rdi
jb 0x1400346d0
mov r8, r15
mov r9d, 0xd8
nop word [rax + rax]
mov ecx, 0xd8
cmp r8, rcx
jge 0x1400347e4
cmp r9, 4
jl 0x1400347ad
lea rax, [rbp + 0x1160]
mov edx, 0xd4
sub rdx, r8
shr rdx, 2
inc rdx
mov ecx, 0x36
sub rcx, rdx
shl rcx, 2
nop word [rax + rax]
movsd xmm0, qword [rax + 0x10]
movsd xmm1, qword [rax + 8]
comisd xmm0, xmm1
jbe 0x14003475a
movsd qword [rax + 0x10], xmm1
movsd qword [rax + 8], xmm0
movsd xmm0, qword [rax + 8]
movsd xmm1, qword [rax]
comisd xmm0, xmm1
jbe 0x140034772
movsd qword [rax + 8], xmm1
movsd qword [rax], xmm0
movsd xmm0, qword [rax]
movsd xmm1, qword [rax - 8]
comisd xmm0, xmm1
jbe 0x14003478a
movsd qword [rax], xmm1
movsd qword [rax - 8], xmm0
movsd xmm0, qword [rax - 8]
movsd xmm1, qword [rax - 0x10]
comisd xmm0, xmm1
jbe 0x1400347a4
movsd qword [rax - 8], xmm1
movsd qword [rax - 0x10], xmm0
sub rax, 0x20
dec rdx
jne 0x140034740
cmp rcx, r8
jle 0x1400347e4
movsd xmm0, qword [rbp + rcx*8 + 0xab0]
movsd xmm1, qword [rbp + rcx*8 + 0xaa8]
comisd xmm0, xmm1
jbe 0x1400347dc
movsd qword [rbp + rcx*8 + 0xab0], xmm1
movsd qword [rbp + rcx*8 + 0xaa8], xmm0
dec rcx
cmp rcx, r8
jg 0x1400347b2
inc r8
dec r9
dec rdi
jne 0x140034700
lea rcx, [rbp + 0x1e8]
call fcn.14002df50
call fcn.14002e300
test al, al
jne 0x14003485d
movsd xmm3, qword [0x140164068]
xorps xmm2, xmm2
movd xmm4, dword [0x1401d6d80]
cvtdq2pd xmm4, xmm4
movsd xmm5, qword [0x140164090]
movsd xmm6, qword [0x140164060]
nop
addsd xmm2, xmm3
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x140034849
subsd xmm2, xmm3
divsd xmm3, xmm5
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm6
ja 0x140034830
lea rcx, [rbp + 0x80]
call fcn.140002540
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140034883
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
xor sil, sil
cmp byte [r12 + 8], bl
jne 0x14003489b
lea r14, [0x1401d7bd0]
mov rax, r14
jmp 0x1400348b1
lea rdx, [0x14015cb58]
mov rcx, r12
call fcn.14003cb90
lea r14, [0x1401d7bd0]
mov rcx, rax
call fcn.14003d090
test al, al
je 0x140034958
lea rax, [rbp + 0x4a0]
mov qword [rbp + 0x18], rax
cmp byte [r12 + 8], 0
jne 0x1400348d9
mov rax, r14
jmp 0x1400348e8
lea rdx, [0x14015cb68]
mov rcx, r12
call fcn.14003cb90
mov rcx, rax
call fcn.140002660
mov rdx, rax
lea rcx, [rbp + 0x4a0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.1400225e0
nop
lea rdx, str.base64
lea rcx, [rbp + 0x98]
call fcn.14001b780
test al, al
je 0x14003492b
mov bl, 1
jmp 0x14003494c
lea rdx, str.binary
lea rcx, [rbp + 0x98]
call fcn.14001b780
movzx esi, sil
test al, al
mov eax, 1
cmovne esi, eax
lea rcx, [rbp + 0x98]
call fcn.140002540
lea rcx, [rbp - 0x30]
call fcn.140002460
nop
test bl, bl
je 0x140034a3f
lea rcx, [rbp - 0x20]
call fcn.140035610
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.140035620
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x100]
call fcn.1400223f0
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140002580
nop
lea rcx, [rbp + 0x100]
call fcn.140002540
lea rcx, [rbp + 0x108]
call fcn.14002bbb0
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.14001b740
movzx ebx, al
lea rcx, [rbp + 0x108]
call fcn.140002540
test bl, bl
je 0x140034b4d
call fcn.14002e4b0
test al, al
jne 0x1400349f2
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1401d6d80], eax
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x118]
call fcn.140003760
nop
mov rdx, rax
mov rcx, qword [rbp - 0x60]
call fcn.14002eda0
mov dword [rsp + 0x44], 1
lea rcx, [rbp + 0x118]
call fcn.140002540
nop
lea rcx, [rbp - 0x30]
call fcn.140002540
nop
lea rcx, [rbp - 0x20]
call fcn.14002df50
jmp 0x1400341d9
test sil, sil
jne 0x140034b4d
lea rcx, [rbp - 0x20]
call fcn.140035610
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x20]
call fcn.140035620
cmp byte [rax], sil
je 0x140034a82
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x20]
call fcn.140035510
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.140035620
mov byte [rax], sil
lea rcx, [rbp - 0x20]
call fcn.140035610
cmp rax, 3
jbe 0x140034b19
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.140035620
cmp byte [rax], 0xef
jne 0x140034b19
mov edx, 1
lea rcx, [rbp - 0x20]
call fcn.140035620
cmp byte [rax], 0xbb
jne 0x140034b19
mov edx, 2
lea rcx, [rbp - 0x20]
call fcn.140035620
cmp byte [rax], 0xbf
jne 0x140034b19
lea rdx, [rbp + 0x280]
lea rcx, [rbp - 0x20]
call fcn.140035500
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x350]
call fcn.1400356c0
mov rbx, qword [rax]
lea rdx, [rbp + 0x358]
lea rcx, [rbp - 0x20]
call fcn.140035500
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x20]
call fcn.140035630
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.140035620
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.140003760
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140002580
nop
lea rcx, [rbp + 0x128]
call fcn.140002540
xor r13b, r13b
mov dword [rbp - 0x28], r13d
cmp byte [r12 + 8], r13b
jne 0x140034b60
mov rax, r14
jmp 0x140034b6f
lea rdx, [0x14015cba0]
mov rcx, r12
call fcn.14003cb90
mov rcx, rax
call fcn.14003d090
test al, al
je 0x140034e3c
call fcn.14002e530
test al, al
jne 0x140034bcb
mov edi, r15d
mov r10d, dword [0x1401d6d80]
lea rbx, [rbp + 0x1180]
mov r13d, 1
nop
mov r8, r15
movzx r11d, r10b
sub r11b, dil
mov r9d, r13d
nop dword [rax]
inc r9d
inc r8
cmp r8, 8
jl 0x140034bb0
inc edi
add rbx, 8
cmp edi, 5
jl 0x140034ba0
mov r13d, dword [rbp - 0x28]
lea rax, [rbp + 0x380]
mov qword [rbp + 0xa8], rax
cmp byte [r12 + 8], 0
jne 0x140034be6
mov rax, r14
jmp 0x140034bf5
lea rdx, [0x14015cb78]
mov rcx, r12
call fcn.14003cb90
mov rcx, rax
call fcn.140002660
mov rdx, rax
lea rcx, [rbp + 0x380]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.1400225e0
nop
lea rcx, [rbp + 0x48]
call fcn.14000f630
test al, al
jne 0x140034cdf
test sil, sil
je 0x140034ca5
mov qword [rbp + 0x90], r15
lea rcx, [rbp + 0x48]
call fcn.140002660
mov rdx, rax
lea r8, [0x14015bdec]
lea rcx, [rbp + 0x90]
call fcn.1400d7c00
test eax, eax
jne 0x140034cdf
mov rdi, qword [rbp + 0x90]
test rdi, rdi
je 0x140034cdf
lea rcx, [rbp - 0x20]
call fcn.140035610
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.140035620
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov edx, 1
call fcn.1400d8034
mov rcx, qword [rbp + 0x90]
call fcn.1400d6e90
mov r13b, 1
jmp 0x140034cdf
lea rax, [rbp + 0x138]
mov qword [rbp + 0xa8], rax
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x138]
call fcn.140003720
nop
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.14002d4d0
movzx r13d, r13b
test al, al
mov eax, 1
cmovne r13d, eax
mov ecx, dword [0x1401d6d80]
lea r8d, [rcx + 1]
imul r8d, ecx
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub r8d, edx
cmp r8d, 0xd
jne 0x140034e33
mov rbx, r15
call fcn.1400d57c0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rbp + rbx*8 + 0x6d0], xmm0
inc rbx
cmp rbx, 0x7c
jb 0x140034d15
mov r9d, 0x7b
lea r10d, [r9 + 1]
nop
mov edx, 0x7b
cmp r15, rdx
jge 0x140034e24
cmp r9, 4
jl 0x140034ded
lea rcx, [rbp + 0xa98]
mov r8d, 0x77
sub r8, r15
shr r8, 2
inc r8
lea rax, [r8*4]
sub rdx, rax
nop word [rax + rax]
movsd xmm0, qword [rcx + 0x10]
movsd xmm1, qword [rcx + 8]
comisd xmm0, xmm1
jbe 0x140034d9a
movsd qword [rcx + 0x10], xmm1
movsd qword [rcx + 8], xmm0
movsd xmm0, qword [rcx + 8]
movsd xmm1, qword [rcx]
comisd xmm0, xmm1
jbe 0x140034db2
movsd qword [rcx + 8], xmm1
movsd qword [rcx], xmm0
movsd xmm0, qword [rcx]
movsd xmm1, qword [rcx - 8]
comisd xmm0, xmm1
jbe 0x140034dca
movsd qword [rcx], xmm1
movsd qword [rcx - 8], xmm0
movsd xmm0, qword [rcx - 8]
movsd xmm1, qword [rcx - 0x10]
comisd xmm0, xmm1
jbe 0x140034de4
movsd qword [rcx - 8], xmm1
movsd qword [rcx - 0x10], xmm0
sub rcx, 0x20
dec r8
jne 0x140034d80
cmp rdx, r15
jle 0x140034e24
movsd xmm0, qword [rbp + rdx*8 + 0x6d0]
movsd xmm1, qword [rbp + rdx*8 + 0x6c8]
comisd xmm0, xmm1
jbe 0x140034e1c
movsd qword [rbp + rdx*8 + 0x6d0], xmm1
movsd qword [rbp + rdx*8 + 0x6c8], xmm0
dec rdx
cmp rdx, r15
jg 0x140034df2
inc r15
dec r9
dec r10
jne 0x140034d40
lea rcx, [rbp + 0x48]
call fcn.140002540
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.14003bbc0
nop
mov dl, 1
lea rcx, [rbp + 0x268]
call fcn.14003bdd0
nop
lea rdx, str.result
lea rcx, [rbp + 0xc0]
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x268]
call fcn.14003c000
nop
lea rcx, [rbp + 0x268]
call fcn.14003bf50
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.14002ad20
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x4e0]
call fcn.140022680
nop
mov rdx, rax
lea rcx, [rbp + 0x288]
call fcn.14003bd30
nop
lea rdx, str.content
lea rcx, [rbp + 0xc0]
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x288]
call fcn.14003c000
nop
lea rcx, [rbp + 0x288]
call fcn.14003bf50
nop
lea rcx, [rbp + 0x4e0]
call fcn.1400013b0
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x560]
call fcn.140022680
nop
mov rdx, rax
lea rcx, [rbp + 0x2b8]
call fcn.14003bd30
nop
lea rdx, [0x14015cbb0]
lea rcx, [rbp + 0xc0]
call fcn.14003c980
mov rcx, rax
lea rdx, str.headers
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x2b8]
call fcn.14003c000
nop
lea rcx, [rbp + 0x2b8]
call fcn.14003bf50
nop
lea rcx, [rbp + 0x560]
call fcn.1400013b0
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x5c0]
call fcn.140022680
nop
mov rdx, rax
lea rcx, [rbp + 0x2e8]
call fcn.14003bd30
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xc0]
call fcn.14003c980
mov rcx, rax
lea rdx, str.httpCode
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x2e8]
call fcn.14003c000
nop
lea rcx, [rbp + 0x2e8]
call fcn.14003bf50
nop
lea rcx, [rbp + 0x5c0]
call fcn.1400013b0
lea rdx, str.empty
lea rcx, [rbp + 0x5a0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.14003bd30
nop
lea rdx, str.noData
lea rcx, [rbp + 0xc0]
call fcn.14003c980
mov rcx, rax
lea rdx, [rbp + 0x318]
call fcn.14003c000
nop
lea rcx, [rbp + 0x318]
call fcn.14003bf50
nop
lea rcx, [rbp + 0x5a0]
call fcn.1400013b0
cmp byte [r12 + 8], 0
je 0x140035045
lea rdx, str.outputFile
mov rcx, r12
call fcn.14003cb90
mov r14, rax
mov rcx, r14
call fcn.14003d090
test al, al
je 0x1400350d6
movzx edx, r13b
lea rcx, [rbp + 0x338]
call fcn.14003bdd0
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x500]
call fcn.140001370
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x520]
call fcn.140035770
nop
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.14003cc90
mov rcx, rax
lea rdx, [rbp + 0x338]
call fcn.14003c000
nop
lea rcx, [rbp + 0x520]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x500]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x338]
call fcn.14003bf50
lea rdx, [rbp + 0xc0]
mov rcx, qword [rbp - 0x60]
call fcn.14003bdf0
mov dword [rsp + 0x44], 1
lea rcx, [rbp + 0xc0]
call fcn.14003bf50
jmp 0x140034a27
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140035119
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0x58]
call fcn.140003760
nop
mov rdx, rax
mov rcx, qword [rbp - 0x60]
call fcn.14002eda0
mov dword [rsp + 0x44], 1
lea rcx, [rbp + 0x58]
call fcn.140002540
nop
lea rcx, [rbp - 0x20]
call fcn.14002df50
jmp 0x1400341d9
mov ecx, 0x80004005
call fcn.140001920
nop
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14003517c
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rax, [rbp + 0x5e8]
mov qword [rbp + 0x5e0], rax
mov r8d, 3
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x5e0]
call fcn.14001bae0
nop
mov rcx, qword [rbp + 0x5e0]
call fcn.1400d6018
mov edx, eax
mov rbx, qword [rbp - 0x60]
mov rcx, rbx
call fcn.14002f410
mov dword [rsp + 0x44], 1
lea rax, [rbp + 0x5e8]
mov rcx, qword [rbp + 0x5e0]
cmp rcx, rax
je 0x1400351dc
call fcn.1400d5948
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400351f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003520f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140035229
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140035243
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003525c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140035275
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003528e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400352a8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400352c2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400352dc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400352f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rbx
mov rcx, qword [rbp + 0x19d0]
xor rcx, rsp
call fcn.1400d4e00
movaps xmm6, xmmword [rsp + 0x1ae0]
add rsp, 0x1af8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret