Function at 0x1400032d0
Capabilities:
Parse url

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x11a0
call fcn.14000a840
sub rsp, rax
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x11d8], rbx
mov qword [rsp + 0x11e0], rsi
mov rax, qword [0x140040010]
xor rax, rsp
mov qword [rsp + 0x1190], rax
mov rsi, rcx
mov qword [rsp + 0x50], rcx
mov r15, qword [rsp + 0x11f8]
mov rax, qword [rsp + 0x1200]
mov r14b, 1
mov byte [rsp + 0x48], r14b
xor edi, edi
mov r12d, edi
test r15, r15
je 0x1400033bb
cmp edx, 0x6a
jge 0x140003398
cmp edx, 0x66
je 0x1400033a2
cmp edx, 0x69
je 0x1400033a2
cmp edx, 0x10d
je 0x140003476
cmp edx, 0x67
jle 0x140003442
add edx, 0xffffff98
cmp edx, 0xba
ja case.0x140003387.105
movsxd rax, edx
lea rdx, [0x140000000]
movzx eax, byte [rdx + rax + 0x38ac]
mov ecx, dword [rdx + rax*4 + 0x3888]
add rcx, rdx
jmp rcx
cmp byte [rsi + 0x13a], 0
jne 0x14000f28a
jmp 0x1400033b1
cmp edx, 0xfa
jge 0x140003341
jmp case.0x140003387.105
cmp dword [rcx + 0x158], edi
je 0x14000f2a1
xor r14b, r14b
cmp qword [rsi + 0xe0], 0
jne 0x1400033f5
mov eax, 0x80020003
test r14b, r14b
cmove edi, eax
mov eax, edi
mov rcx, qword [rsp + 0x1190]
xor rcx, rsp
call fcn.140009850
lea r11, [rsp + 0x11a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
cmp byte [rsi + 0x13a], 0
jne 0x1400033bb
cmp byte [rsi + 0xf0], 0
jne 0x1400033bb
cmp byte [rsi + 0xf1], 0
jne 0x1400033bb
mov dword [rsp + 0x38], edi
mov rcx, qword [rsi + 0x60]
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
mov rax, qword [rax + 0x1c0]
call qword [case.0x140008ad6.0]
cmp dword [rsp + 0x38], 4
jne 0x1400033bb
lea rcx, [rsi - 0x28]
call fcn.140003970
jmp 0x1400033bb
je 0x14000e71d
cmp edx, 0xffffea78
je 0x140003685
cmp edx, 0xfffffd3b
jne case.0x140003387.105
mov ecx, SafeArrayDestroy
mov word [rax], cx
mov edx, 0xffffffff
mov word [rax + 8], dx
jmp 0x1400033b1
mov rax, qword [r15]
cmp word [rax + 8], 2
jb 0x14000f295
mov byte [rcx + 0xc8], 1
jmp 0x1400033b1
mov rcx, qword [rsi + 0x128]
test rcx, rcx
je 0x1400034c5
cmp byte [rsi + 0x13d], dil
jne 0x1400034c5
mov rax, qword [rcx]
xor r9d, r9d
xor r8d, r8d
mov edx, dword [0x140041690]
mov rax, qword [rax + 0x50]
call qword [case.0x140008ad6.0]
mov byte [rsi + 0x13d], 1
mov rdx, qword [r15]
mov rdx, qword [rdx + 8]
lea rcx, [rsi + 0xe8]
call fcn.140003dc0
cmp qword [rsi + 0xe8], rdi
je 0x1400033b1
mov rcx, qword [rsi + 0x1c0]
test rcx, rcx
je 0x1400033b1
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1400033b1
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov rcx, qword [rsi + 0xe8]
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
lea rdx, str.D_3
mov rax, qword [rax]
call qword [case.0x140008ad6.0]
mov rcx, qword [rsp + 0x30]
test eax, eax
js 0x140003662
test rcx, rcx
je 0x140003662
mov qword [rsp + 0x40], rdi
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
mov rax, qword [rax + 0x1a0]
call qword [case.0x140008ad6.0]
test eax, eax
js 0x14000357f
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000357f
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
mov rax, qword [rax + 0x140]
call qword [case.0x140008ad6.0]
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x70], 0x68
mov dword [rsp + 0x90], 0x824
mov dword [rsp + 0xc0], 0x824
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.OLEAUT32.dll_VariantInit]
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, eax
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x140003645
mov r9d, dword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov edx, dword [rsp + 0x84]
lea rcx, [rsi - 0x28]
call fcn.14000737c
test al, al
jne 0x140003619
mov r9d, dword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov edx, dword [rsp + 0x84]
lea rcx, [rsi - 0x28]
call fcn.140004634
test al, al
je 0x140003645
mov rcx, qword [rsp + 0x30]
mov qword [rsp + 0x50], rcx
test rcx, rcx
je 0x140003636
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140008ad6.0]
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsi - 0x28]
call fcn.140007ba0
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000365d
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140003675
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1400033b1
cmp byte [rcx + 0xf1], dil
jne 0x1400033b1
mov ecx, 3
mov word [rax], cx
mov dword [rax + 8], 0x2070
cmp dword [rsi + 0x178], 5
je 0x14000e70c
mov dword [rax + 8], 0x80002070
mov ecx, 0x80002670
test dword [rsi + 0x158], 0xffff7fff
je 0x1400033b1
cmp qword [rsi + 0x30], rdi
je 0x1400033b1
mov dword [rax + 8], ecx
jmp 0x1400033b1
cmp byte [rsi + 0xf0], dil
jne 0x1400033bb
cmp byte [rsi + 0xf1], dil
jne 0x1400033bb
cmp qword [rsi + 0xe0], rdi
jne 0x140003712
mov rdx, qword [r15]
mov rdx, qword [rdx + 0x20]
lea rcx, [rsi + 0xe0]
call fcn.140003dc0
mov rax, qword [rsi + 0xe0]
test rax, rax
je 0x1400033b1
mov rdx, qword [r15]
cmp rax, qword [rdx + 0x20]
jne 0x1400033b1
mov rdx, qword [rdx + 8]
test rdx, rdx
je 0x140003749
lea rcx, [rsi + 0xb8]
mov rdx, qword [rdx + 8]
call fcn.140004910
nop
cmp byte [rsi + 0x13a], 0
jne 0x14000e742
cmp qword [rsi + 0x180], 0
jne 0x1400037ce
lea r8, [rsi - 0x28]
lea rdx, [0x1400093d0]
mov rcx, qword [rsi + 0x78]
call qword [sym.imp.USER32.dll_EnumChildWindows]
mov rcx, qword [rsi + 0x70]
test rcx, rcx
je 0x1400037ce
mov word [rsp + 0x70], di
mov r8d, 0x64
lea rdx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_GetClassNameW]
lea rdx, str.Internet_Explorer_Server
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000e776
mov rax, qword [rsi + 0x70]
lea r8, [0x1400075c0]
mov edx, 0xfffffffc
mov rcx, rax
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov qword [rsi + 0x180], rax
mov rcx, qword [rsi + 0x78]
call fcn.140004498
cmp eax, 2
jne 0x1400033b1
mov rax, qword [rsi]
mov edx, dword [rsi + 0x11c]
dec edx
mov rcx, rsi
mov rax, qword [rax + 0x90]
call qword [case.0x140008ad6.0]
mov edx, dword [rsi + 0x11c]
inc edx
mov rax, qword [rsi]
mov rcx, rsi
mov rax, qword [rax + 0x90]
call qword [case.0x140008ad6.0]
jmp 0x1400033b1
mov rcx, qword [rsi + 0xe0]
test rcx, rcx
je 0x140003839
mov rax, qword [r15]
cmp rcx, qword [rax + 0x20]
jne 0x140003839
lea rcx, [rsi - 0x28]
call fcn.140003970
cmp qword [rsi + 0x128], rdi
je 0x1400033b1
cmp byte [rsi + 0x140], dil
je 0x1400033b1
jmp 0x14000e791
mov rax, qword [r15]
mov rcx, qword [rax + 8]
mov edx, 0xffffffff
mov word [rcx], dx
jmp 0x1400033b1
cmp byte [rsi + 0x13b], dil
jne 0x14000e7c0
mov byte [rsi + 0x13b], 1
jmp 0x1400033b1
mov dword [rax + 8], 0x6070
mov ecx, 0x6670
jmp 0x1400036ba
add rcx, 0xffffffffffffffd8
mov edx, 1
call fcn.140020840
jmp 0x1400033b1
mov dword [rsp + 0x38], edi
mov rcx, qword [rsi + 0x60]
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
mov rax, qword [rax + 0x1c0]
call qword [case.0x140008ad6.0]
cmp dword [rsp + 0x38], 4
je 0x140003756
mov byte [rsi + 0x13a], 0
jmp 0x140003756
xor r9d, r9d
lea r8, str.Internet_Explorer_Server
xor edx, edx
mov rcx, qword [rsi + 0x70]
call qword [sym.imp.USER32.dll_FindWindowExW]
jmp 0x1400037b2
mov rcx, qword [rsi + 0x60]
mov rax, qword [rcx]
mov rax, qword [rax + 0x70]
call qword [case.0x140008ad6.0]
mov rcx, qword [rsi + 0x128]
mov rax, qword [rcx]
xor edx, edx
mov rax, qword [rax + 0x88]
call qword [case.0x140008ad6.0]
jmp 0x1400033b1
cmp byte [rsi + 0x13e], dil
je 0x14000e969
mov rax, qword [r15]
mov r13, qword [rax + 0x98]
mov qword [rsp + 0x30], r13
test r13, r13
je 0x14000e7f3
mov rax, qword [r13]
mov rcx, r13
mov rax, qword [rax + 8]
call qword [case.0x140008ad6.0]
nop
test r13, r13
je 0x14000e94d
mov rax, qword [r15]
mov rdx, qword [rax + 0x80]
mov rdx, qword [rdx + 8]
lea rcx, [rsp + 0x50]
call fcn.14001e3f0
nop
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x14000e943
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000e943
xor edx, edx
mov r8d, 0x104a
lea rcx, [rsp + 0x140]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x70], 0x68
mov dword [rsp + 0x90], 0x824
mov dword [rsp + 0xc0], 0x824
lea rax, [rsp + 0x140]
mov qword [rsp + 0xc8], rax
mov dword [rsp + 0xd0], 0x824
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, eax
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x14000e943
mov eax, dword [rsp + 0x84]
dec eax
test eax, 0xfffffffd
jne 0x14000e943
mov qword [rsp + 0x40], rdi
mov rax, qword [r13]
lea r8, [rsp + 0x40]
lea rdx, [0x14002f9e8]
mov rcx, r13
mov rax, qword [rax]
call qword [case.0x140008ad6.0]
nop
test eax, eax
js 0x14000e91c
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000e91c
cmp rcx, qword [rsi + 0x60]
jne 0x14000e91c
mov rax, qword [rcx]
mov rax, qword [rax + 0x70]
call qword [case.0x140008ad6.0]
mov rax, qword [r15]
mov rcx, qword [rax + 8]
mov edx, 0xffffffff
mov word [rcx], dx
lea r12d, [rdx + 2]
lea rcx, [rsi - 0x28]
mov edx, 0x8004307f
call fcn.1400208a0
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000e943
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
test r13, r13
je 0x14000e964
mov rax, qword [r13]
mov rcx, r13
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp 0x14000ec56
cmp byte [rsi + 0x13a], dil
je 0x14000ec56
mov rax, qword [r15]
mov rcx, qword [rax + 8]
mov word [rcx], di
mov rax, qword [r15]
mov ecx, 0x400c
cmp word [rax + 0x78], cx
jne 0x14000ec4a
mov rcx, qword [rax + 0x80]
test rcx, rcx
je 0x14000e9d0
mov rcx, qword [rcx + 8]
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000e9d0
mov rax, qword [r15]
mov rcx, qword [rax + 0x80]
mov rdx, qword [rcx + 8]
mov rcx, qword [rsi + 0xa8]
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x14000ec56
mov rax, qword [r15]
mov rbx, qword [rax + 0x80]
test rbx, rbx
je 0x14000ec4a
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x70], 0x68
mov dword [rsp + 0x90], 0x824
mov dword [rsp + 0xc0], 0x824
mov rcx, qword [rbx + 8]
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov edx, eax
mov rax, qword [r15]
mov rcx, qword [rax + 0x80]
lea r9, [rsp + 0x70]
xor r8d, r8d
mov rcx, qword [rcx + 8]
call qword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x14000ec56
mov edx, dword [rsp + 0x84]
lea eax, [rdx - 3]
cmp eax, 1
ja 0x14000ec56
mov eax, dword [rsi + 0xcc]
test eax, eax
jne 0x14000ea66
cmp dword [rsi + 0x158], edi
jne 0x14000eae0
mov r9d, dword [rsp + 0x90]
cmp r9d, eax
jne 0x14000eaa2
mov r8, rax
mov rdx, qword [rsi + 0xc0]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
je 0x14000ec56
mov r9d, dword [rsp + 0x90]
mov edx, dword [rsp + 0x84]
lea rcx, [rsi - 0x28]
mov r8, qword [rsp + 0x88]
call fcn.14000737c
test al, al
je 0x14000eae0
lea rdx, [rsi + 0x1a8]
mov rax, qword [r15]
mov rcx, qword [rax + 0x80]
mov r8d, dword [rsi + 0x158]
mov rcx, qword [rcx + 8]
call fcn.1400230c8
test al, al
jne 0x14000ec56
mov rax, qword [r15]
mov rbx, qword [rax + 0x98]
mov qword [rsp + 0x50], rbx
test rbx, rbx
je 0x14000eb05
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x140008ad6.0]
nop
test rbx, rbx
je 0x14000ec32
mov qword [rsp + 0x30], rdi
mov rax, qword [rbx]
lea r8, [rsp + 0x30]
lea rdx, [0x14002f9e8]
mov rcx, rbx
mov rax, qword [rax]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x30]
test eax, eax
js 0x14000ec1f
test rcx, rcx
je 0x14000ec1f
cmp rcx, qword [rsi + 0x60]
jne 0x14000ec1f
mov rax, qword [rcx]
mov rax, qword [rax + 0x70]
call qword [case.0x140008ad6.0]
cmp qword [rsi + 0x128], 0
je 0x14000ebe5
mov ecx, 2
call qword [sym.imp.USER32.dll_LockSetForegroundWindow]
mov ecx, 0xffffffff
call qword [sym.imp.USER32.dll_AllowSetForegroundWindow]
mov rcx, qword [rsi + 0x128]
mov rax, qword [rcx]
mov r8, qword [rax + 0x80]
mov rax, qword [r15]
mov rdx, qword [rax + 0x80]
mov rdx, qword [rdx + 8]
mov rax, r8
call qword [case.0x140008ad6.0]
test eax, eax
jns 0x14000ec07
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000ebc0
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
nop dword [rax]
nop word [rax + rax]
jmp 0x1400033bb
lea rcx, [rsi + 8]
mov rax, qword [rcx]
mov r8, qword [rax + 0x20]
mov rax, qword [r15]
mov rdx, qword [rax + 0x80]
mov rdx, qword [rdx + 8]
mov rax, r8
call qword [case.0x140008ad6.0]
mov rax, qword [r15]
mov rcx, qword [rax + 8]
mov edx, 0xffffffff
mov word [rcx], dx
lea r12d, [rdx + 2]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000ec32
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
test rbx, rbx
je 0x14000ec48
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp 0x14000ec56
mov rax, qword [rax + 8]
mov edx, 0xffffffff
mov word [rax], dx
mov rcx, qword [rsi + 0x128]
test rcx, rcx
je 0x1400033b1
mov qword [rsp + 0x30], rdi
mov rax, qword [rcx]
lea r8, [rsp + 0x30]
lea rdx, [0x14002fad0]
mov rax, qword [rax]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x30]
test eax, eax
js 0x14000ecb8
test rcx, rcx
je 0x14000ecb8
mov rax, qword [rcx]
mov r9, qword [rax + 0x40]
mov rax, qword [r15]
mov rdx, qword [rax + 0x80]
mov r8d, r12d
mov rdx, qword [rdx + 8]
mov rax, r9
call qword [case.0x140008ad6.0]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000eccb
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp 0x1400033b1
cmp byte [rsi + 0xf0], dil
jne 0x1400033bb
cmp byte [rsi + 0xf1], dil
jne 0x1400033bb
mov rax, qword [r15]
mov r13, qword [rax + 0x68]
mov qword [rsp + 0x50], r13
test r13, r13
je 0x14000ed0d
mov rax, qword [r13]
mov rcx, r13
mov rax, qword [rax + 8]
call qword [case.0x140008ad6.0]
nop
test r13, r13
je 0x14000ee2f
xor bl, bl
cmp dword [rsi + 0x158], 0
jne 0x14000ed28
cmp qword [rsi + 0x30], 0
je 0x14000ed84
mov qword [rsp + 0x40], rdi
mov rax, qword [r13]
lea r8, [rsp + 0x40]
lea rdx, [0x14002f9e8]
mov rcx, r13
mov rax, qword [rax]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x40]
test eax, eax
js 0x14000ed69
test rcx, rcx
je 0x14000ed69
movzx ebx, bl
mov r12d, 1
cmp rcx, qword [rsi + 0x60]
cmove ebx, r12d
test rcx, rcx
je 0x14000ed7c
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
test bl, bl
je 0x14000ee2f
mov rax, qword [r15]
mov rcx, qword [rax + 0x20]
test rcx, rcx
je 0x14000ee2f
mov ebx, dword [rcx + 8]
cmp ebx, 0x1f9
ja 0x14000edd1
cmp ebx, 0x1f4
jae 0x14000ede9
cmp ebx, 0x190
jb 0x14000ee07
cmp ebx, 0x191
jbe 0x14000ede9
cmp ebx, 0x192
jbe 0x14000ee07
cmp ebx, 0x19f
jbe 0x14000ede9
cmp ebx, 0x1c1
jne 0x14000ee07
jmp 0x14000ede9
cmp ebx, 0x800c0004
jb 0x14000ee07
cmp ebx, 0x800c0005
jbe 0x14000ede9
cmp ebx, 0x800c0008
jne 0x14000ee07
lea rcx, [rsi - 0x28]
mov edx, ebx
call fcn.1400208a0
test eax, eax
js 0x14000ee07
mov rax, qword [r15]
mov rcx, qword [rax + 8]
mov edx, 0xffffffff
mov word [rcx], dx
mov rcx, qword [rsi + 0x128]
test rcx, rcx
je 0x14000ee2f
cmp byte [rsi + 0x140], 0
je 0x14000ee2f
mov rax, qword [rcx]
mov edx, ebx
mov rax, qword [rax + 0x88]
call qword [case.0x140008ad6.0]
nop
test r13, r13
je 0x14000ee46
mov rax, qword [r13]
mov rcx, r13
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp 0x1400033b1
mov qword [rsp + 0x38], rdi
mov rax, qword [r15]
mov rbx, qword [rax + 8]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r13d, eax
test eax, eax
je 0x14000f0ff
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x70], 0x68
mov dword [rsp + 0x90], 0x824
mov dword [rsp + 0xc0], 0x824
lea r9, [rsp + 0x70]
xor r8d, r8d
mov edx, r13d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x14000efa1
lea rcx, [rsi - 0x28]
mov r9d, dword [rsp + 0x90]
mov r8, qword [rsp + 0x88]
mov edx, dword [rsp + 0x84]
call fcn.14000737c
test al, al
je 0x14000eef7
lea rdx, [rsi + 0x1a8]
mov r8d, dword [rsi + 0x158]
mov rcx, rbx
call fcn.1400230c8
test al, al
jne 0x14000efa1
cmp qword [rsi + 0x128], 0
je 0x14000ef52
mov ecx, 2
call qword [sym.imp.USER32.dll_LockSetForegroundWindow]
mov ecx, 0xffffffff
call qword [sym.imp.USER32.dll_AllowSetForegroundWindow]
mov rcx, qword [rsi + 0x128]
mov rax, qword [rcx]
mov rdx, rbx
mov rax, qword [rax + 0x80]
call qword [case.0x140008ad6.0]
test eax, eax
jns 0x14000ef52
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000ef4d
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp 0x1400033bb
mov rax, qword [r15]
mov rcx, qword [rax + 0x50]
mov edx, 0xffffffff
mov word [rcx], dx
cmp byte [rsi + 0x13a], 0
je 0x14000ef84
mov rax, qword [rsi]
mov edx, dword [rsi + 0x11c]
mov rcx, rsi
mov rax, qword [rax + 0x90]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000ef9c
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp 0x1400033b1
mov qword [rsp + 0x40], rdi
mov rcx, rdi
mov qword [rsp + 0x30], rcx
mov r9, qword [rsi + 0x120]
test r9, r9
je 0x14000f050
mov rax, qword [r9]
lea r8, [rsp + 0x30]
lea rdx, [0x14002daa0]
mov rcx, r9
mov rax, qword [rax]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x30]
test eax, eax
js 0x14000f050
test rcx, rcx
je 0x14000f050
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
mov rax, qword [rax + 0x20]
call qword [case.0x140008ad6.0]
test eax, eax
jns 0x14000f04b
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000f016
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000f02e
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000f046
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp 0x1400033bb
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000f063
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000f0e7
mov rax, qword [rcx]
lea rdx, [rsp + 0x38]
mov qword [rsp + 0x20], rdx
lea r9, [0x14002f9e8]
xor r8d, r8d
lea edx, [r8 + 1]
mov rax, qword [rax + 0x18]
call qword [case.0x140008ad6.0]
mov r12d, eax
test eax, eax
js 0x14000f0e7
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000f0e7
mov rax, qword [rcx]
xor edx, edx
mov rax, qword [rax + 0x178]
call qword [case.0x140008ad6.0]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
mov edx, 0xffffffff
mov rax, qword [rax + 0x220]
call qword [case.0x140008ad6.0]
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
xor edx, edx
mov rax, qword [rax + 0x188]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000f0ff
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
cmp qword [rsp + 0x38], 0
jne 0x14000f12d
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [0x14002f9e8]
mov r8d, 4
lea rcx, [0x14002f608]
call fcn.140008368
mov r12d, eax
test r12d, r12d
js 0x14000f26d
cmp qword [rsp + 0x38], 0
je 0x14000f26d
mov qword [rsp + 0x40], rdi
lea rcx, [rsp + 0x40]
call fcn.14001f910
mov rbx, qword [rsp + 0x40]
test eax, eax
js 0x14000f257
test rbx, rbx
je 0x14000f26d
mov qword [rsp + 0x30], rdi
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 8]
call qword [case.0x140008ad6.0]
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x14000f1a1
lea rcx, [rbx + 0x10]
mov rdx, rax
call fcn.140015714
xor edx, edx
mov rcx, rbx
call fcn.1400207ec
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax]
mov r9, qword [rcx]
lea r8, [rsp + 0x30]
lea rdx, [0x14002a9f0]
mov rcx, rax
mov rax, r9
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x30]
test eax, eax
js 0x14000f244
test rcx, rcx
je 0x14000f244
mov rdx, qword [r15]
mov rdx, qword [rdx + 0x68]
lea rcx, [rsp + 0x30]
call fcn.14001f308
test eax, eax
jns 0x14000f218
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000f1fb
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000f213
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp 0x1400033bb
lea rcx, [rsi + 0x1e0]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x50]
call fcn.14001e198
mov rcx, qword [rsp + 0x50]
add rcx, 0x28
mov rdx, rbx
call fcn.1400022a8
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000f257
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
test rbx, rbx
je 0x14000f26d
mov rax, qword [rbx]
mov rcx, rbx
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000f285
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140008ad6.0]
nop
jmp case.0x140003387.104
mov edx, dword [rsi + 0x11c]
jmp 0x140003803
mov byte [rcx + 0xc8], dil
jmp 0x1400033b1
cmp qword [rcx + 0x30], rdi
jne case.0x140003387.105
cmp byte [rcx + 0x13a], dil
je case.0x140003387.105
add rcx, 0xffffffffffffffd8
call fcn.140021394
jmp case.0x140003387.105