Function at 0x140010670
Capabilities:
Check if file exists
Connect to http server
Create http request
Get disk information
Read data from internet
Receive data
Resolve dns
Send data
Send http request
Send http request with host header

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0xfe0
mov qword [rsp + 0xee8], 0xfffffffffffffffe
mov rax, qword [0x1402a15c0]
xor rax, rsp
mov qword [rsp + 0xfd0], rax
mov rdx, qword [rsp + 0xff8]
mov rcx, qword [rsp + 0xff0]
call fcn.140011f20
test eax, eax
je 0x140011efd
mov r8d, 0x400
lea rdx, [rsp + 0x60]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dx, 0x2e
lea rcx, [rsp + 0x60]
call fcn.140001460
mov rdx, rax
xor eax, eax
mov word [rdx], ax
mov dx, VarDateFromDisp
lea rcx, [rsp + 0x60]
call fcn.140001460
mov rdx, rax
add rdx, 2
lea rcx, [rsp + 0x898]
call fcn.1400020d0
nop
lea rcx, [rsp + 0x898]
call fcn.140006970
lea rcx, [rsp + 0x878]
call fcn.140002db0
nop
lea rdx, str.reg.com
lea rcx, [rsp + 0x878]
call fcn.1400020a0
lea rdx, [0x14024fc3c]
lea rcx, [rsp + 0x878]
call fcn.140006000
lea rdx, [0x14024fc40]
lea rcx, [rsp + 0x878]
call fcn.140006000
lea rdx, [0x14024fc44]
lea rcx, [rsp + 0x878]
call fcn.140006000
lea rdx, [rsp + 0x898]
lea rcx, [rsp + 0x878]
call fcn.140005fd0
lea rdx, [0x14024fc44]
lea rcx, [rsp + 0x878]
call fcn.140006000
lea rdx, [0x14024fc48]
lea rcx, [rsp + 0x878]
call fcn.140006000
lea rdx, [0x14024fc4c]
lea rcx, [rsp + 0x878]
call fcn.140006000
lea rdx, [0x14024fc50]
lea rcx, [rsp + 0x878]
call fcn.140006000
lea rax, [rsp + 0xe30]
mov qword [rsp + 0xe38], rax
lea rax, [rsp + 0xe40]
mov qword [rsp + 0xe48], rax
lea rdx, str.8.8.8.8_8.8.4.4
mov rcx, qword [rsp + 0xe38]
call fcn.1400020d0
mov qword [rsp + 0xef0], rax
mov rax, qword [rsp + 0xef0]
mov qword [rsp + 0xef8], rax
lea rdx, [rsp + 0x878]
mov rcx, qword [rsp + 0xe48]
call fcn.140001430
mov qword [rsp + 0xf00], rax
mov rdx, qword [rsp + 0xef8]
mov rcx, qword [rsp + 0xf00]
call fcn.1400dafd0
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x868], eax
cmp dword [rsp + 0x40], 0
jne 0x140010bc1
lea rcx, [rsp + 0x878]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xe50]
call fcn.140002de0
mov qword [rsp + 0xf08], rax
mov rax, qword [rsp + 0xf08]
mov qword [rsp + 0xf10], rax
mov rcx, qword [rsp + 0xf10]
call fcn.140002e90
mov rcx, rax
call qword [sym.imp.WS2_32.dll_gethostbyname]
mov qword [rsp + 0xca0], rax
lea rcx, [rsp + 0xe50]
call fcn.140002e70
cmp qword [rsp + 0xca0], 0
jne 0x140010ba9
mov rcx, qword [rsp + 0xff0]
add rcx, 0x2f8
lea rdx, [0x14024fc78]
call fcn.1400020a0
mov edx, 0x4c
mov word [rsp + 0xcb0], dx
mov eax, 0x69
mov word [rsp + 0xcb2], ax
mov eax, 0x63
mov word [rsp + 0xcb4], ax
mov eax, 0x65
mov word [rsp + 0xcb6], ax
mov eax, WSASetLastError
mov word [rsp + 0xcb8], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xcba], ax
mov eax, 0x65
mov word [rsp + 0xcbc], ax
mov eax, 0x20
mov word [rsp + 0xcbe], ax
mov eax, 0x76
mov word [rsp + 0xcc0], ax
mov eax, 0x65
mov word [rsp + 0xcc2], ax
mov eax, WSACleanup
mov word [rsp + 0xcc4], ax
mov eax, 0x69
mov word [rsp + 0xcc6], ax
mov eax, 0x66
mov word [rsp + 0xcc8], ax
mov eax, 0x79
mov word [rsp + 0xcca], ax
mov eax, 0x20
mov word [rsp + 0xccc], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0xcce], ax
mov eax, WSACleanup
mov word [rsp + 0xcd0], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0xcd2], ax
mov eax, 0x62
mov word [rsp + 0xcd4], ax
mov eax, WSASetLastError
mov word [rsp + 0xcd6], ax
mov eax, 0x65
mov word [rsp + 0xcd8], ax
mov eax, WSASetLastError
mov word [rsp + 0xcda], ax
mov eax, 0x3a
mov word [rsp + 0xcdc], ax
mov eax, 0x20
mov word [rsp + 0xcde], ax
mov eax, WSACleanup
mov word [rsp + 0xce0], ax
mov eax, 0x65
mov word [rsp + 0xce2], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xce4], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0xce6], ax
mov eax, WSASetLastError
mov word [rsp + 0xce8], ax
mov eax, 0x76
mov word [rsp + 0xcea], ax
mov eax, 0x65
mov word [rsp + 0xcec], ax
mov eax, 0x20
mov word [rsp + 0xcee], ax
mov eax, 0x68
mov word [rsp + 0xcf0], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0xcf2], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xcf4], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0xcf6], ax
mov eax, WSASetLastError
mov word [rsp + 0xcf8], ax
mov eax, 0x61
mov word [rsp + 0xcfa], ax
mov eax, WSASetLastError
mov word [rsp + 0xcfc], ax
mov eax, 0x65
mov word [rsp + 0xcfe], ax
mov eax, 0x20
mov word [rsp + 0xd00], ax
mov eax, 0x66
mov word [rsp + 0xd02], ax
mov eax, 0x61
mov word [rsp + 0xd04], ax
mov eax, WSASetLastError
mov word [rsp + 0xd06], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xd08], ax
mov eax, 0x65
mov word [rsp + 0xd0a], ax
xor eax, eax
mov word [rsp + 0xd0c], ax
lea rdx, [rsp + 0xcb0]
mov ecx, 1
call fcn.1400dc610
mov dword [rsp + 0xe58], 0
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x898]
call fcn.140001490
mov eax, dword [rsp + 0xe58]
jmp 0x140011f02
mov rax, qword [rsp + 0xca0]
mov rax, qword [rax + 0x18]
mov rax, qword [rax]
mov eax, dword [rax]
mov dword [rsp + 0x868], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.WININET.dll_InternetOpenW]
mov qword [rsp + 0x890], rax
mov ecx, dword [rsp + 0x868]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov rdx, rax
lea rcx, [rsp + 0xe60]
call fcn.140010530
mov qword [rsp + 0xf18], rax
mov rcx, qword [rsp + 0xf18]
call fcn.1400105c0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8w, 0x50
mov rdx, rax
mov rcx, qword [rsp + 0x890]
call qword [sym.imp.WININET.dll_InternetConnectW]
mov qword [rsp + 0x860], rax
lea rcx, [rsp + 0xe60]
call fcn.140002e70
lea rcx, [rsp + 0x48]
call fcn.140002db0
nop
mov edx, 3
lea rcx, [rsp + 0xe68]
call fcn.1400de990
mov qword [rsp + 0xf20], rax
mov rax, qword [rsp + 0xf20]
mov qword [rsp + 0xf28], rax
mov rdx, qword [rsp + 0xf28]
lea rcx, [rsp + 0x48]
call fcn.140002d80
nop
lea rcx, [rsp + 0xe68]
call fcn.140001490
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0x44], eax
mov byte [rsp + 0xd10], 0x43
jmp 0x140010ce0
movzx eax, byte [rsp + 0xd10]
add al, 1
mov byte [rsp + 0xd10], al
movsx eax, byte [rsp + 0xd10]
cmp eax, 0x5a
jg 0x140010e1a
movsx ecx, byte [rsp + 0xd10]
sub ecx, 0x41
mov eax, 1
shl eax, cl
mov ecx, eax
mov eax, dword [rsp + 0x44]
and eax, ecx
test eax, eax
jne 0x140010d11
jmp 0x140010ccf
lea rcx, [rsp + 0xd18]
call fcn.140002db0
nop
movsx r8d, byte [rsp + 0xd10]
lea rdx, [0x14024fc88]
lea rcx, [rsp + 0xd18]
call fcn.140002c40
lea rcx, [rsp + 0xd18]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 2
jne 0x140010e08
lea r8, str.ccboot.cer
lea rdx, [rsp + 0xd18]
lea rcx, [rsp + 0xe78]
call fcn.1400010b0
mov qword [rsp + 0xf30], rax
mov rcx, qword [rsp + 0xf30]
call fcn.140023510
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov dword [rsp + 0xe70], eax
lea rcx, [rsp + 0xe78]
call fcn.140001490
cmp dword [rsp + 0xe70], 0
je 0x140010e08
lea rcx, [rsp + 0xe80]
call fcn.1401bb1d0
mov qword [rsp + 0xf38], rax
mov rax, qword [rsp + 0xf38]
mov qword [rsp + 0xf40], rax
mov rdx, qword [rsp + 0xf40]
lea rcx, [rsp + 0x48]
call fcn.140002d80
nop
lea rcx, [rsp + 0xe80]
call fcn.140001490
nop
lea rcx, [rsp + 0xd18]
call fcn.140001490
jmp 0x140010e1a
lea rcx, [rsp + 0xd18]
call fcn.140001490
jmp 0x140010ccf
lea rcx, [rsp + 0x888]
call fcn.140002db0
nop
lea rdx, str._indxph_uta
lea rcx, [rsp + 0x888]
call fcn.1400020a0
lea rdx, str.reg.com
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc3c]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc40]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, str._indxph_uta
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcac]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcb0]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcb4]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc3c]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcb8]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc44]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcbc]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcc0]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcbc]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcc4]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcac]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcb4]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcc8]
lea rcx, [rsp + 0x888]
call fcn.140006000
mov rdx, qword [rsp + 0xff8]
lea rcx, [rsp + 0xe88]
call fcn.1400d8c50
mov qword [rsp + 0xf48], rax
mov rax, qword [rsp + 0xf48]
mov qword [rsp + 0xf50], rax
mov rdx, qword [rsp + 0xf50]
lea rcx, [rsp + 0x888]
call fcn.140005fd0
nop
lea rcx, [rsp + 0xe88]
call fcn.140001490
lea rdx, [0x14024fccc]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcbc]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, str.reg.com
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc4c]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcb4]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcd0]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc48]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcd4]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcc8]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rcx, [rsp + 0x898]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xe90]
call fcn.1400d8c50
mov qword [rsp + 0xf58], rax
mov rax, qword [rsp + 0xf58]
mov qword [rsp + 0xf60], rax
mov rdx, qword [rsp + 0xf60]
lea rcx, [rsp + 0x888]
call fcn.140005fd0
nop
lea rcx, [rsp + 0xe90]
call fcn.140001490
lea rdx, [0x14024fccc]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcb4]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcd8]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcd4]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc3c]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcc8]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rcx, [rsp + 0xe98]
call fcn.140004fc0
mov qword [rsp + 0xf68], rax
mov rax, qword [rsp + 0xf68]
mov qword [rsp + 0xf70], rax
mov rcx, qword [rsp + 0xf70]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xea0]
call fcn.1400d8c50
mov qword [rsp + 0xf78], rax
mov rax, qword [rsp + 0xf78]
mov qword [rsp + 0xf80], rax
mov rdx, qword [rsp + 0xf80]
lea rcx, [rsp + 0x888]
call fcn.140005fd0
nop
lea rcx, [rsp + 0xea0]
call fcn.140001490
nop
lea rcx, [rsp + 0xe98]
call fcn.140001490
lea rdx, [0x14024fccc]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc50]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcac]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcb4]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcc8]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rcx, [rsp + 0x48]
call fcn.140023510
mov rdx, rax
lea rcx, [rsp + 0xea8]
call fcn.1400d8c50
mov qword [rsp + 0xf88], rax
mov rax, qword [rsp + 0xf88]
mov qword [rsp + 0xf90], rax
mov rdx, qword [rsp + 0xf90]
lea rcx, [rsp + 0x888]
call fcn.140005fd0
nop
lea rcx, [rsp + 0xea8]
call fcn.140001490
lea rdx, [0x14024fccc]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc4c]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc3c]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fc50]
lea rcx, [rsp + 0x888]
call fcn.140006000
lea rdx, [0x14024fcc8]
lea rcx, [rsp + 0x888]
call fcn.140006000
mov rdx, qword [rsp + 0x1000]
lea rcx, [rsp + 0xeb0]
call fcn.1400d8c50
mov qword [rsp + 0xf98], rax
mov rax, qword [rsp + 0xf98]
mov qword [rsp + 0xfa0], rax
mov rdx, qword [rsp + 0xfa0]
lea rcx, [rsp + 0x888]
call fcn.140005fd0
nop
lea rcx, [rsp + 0xeb0]
call fcn.140001490
lea rcx, [rsp + 0x888]
call fcn.140023510
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x28f500
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, [0x14024fce0]
mov rcx, qword [rsp + 0x860]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x870]
call fcn.140002db0
nop
mov r8, qword [rsp + 0x878]
lea rdx, str.Host:__s_r_n
lea rcx, [rsp + 0x870]
call fcn.140002c40
lea rcx, [rsp + 0x870]
call fcn.140023510
mov r9d, 0xa0000000
mov r8d, 0xffffffff
mov rdx, rax
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x140011706
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x860]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x890]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0xff0]
add rcx, 0x2f8
lea rdx, [0x14024fc78]
call fcn.1400020a0
mov edx, 0x4c
mov word [rsp + 0xd20], dx
mov eax, 0x69
mov word [rsp + 0xd22], ax
mov eax, 0x63
mov word [rsp + 0xd24], ax
mov eax, 0x65
mov word [rsp + 0xd26], ax
mov eax, WSASetLastError
mov word [rsp + 0xd28], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xd2a], ax
mov eax, 0x65
mov word [rsp + 0xd2c], ax
mov eax, 0x20
mov word [rsp + 0xd2e], ax
mov eax, 0x76
mov word [rsp + 0xd30], ax
mov eax, 0x65
mov word [rsp + 0xd32], ax
mov eax, WSACleanup
mov word [rsp + 0xd34], ax
mov eax, 0x69
mov word [rsp + 0xd36], ax
mov eax, 0x66
mov word [rsp + 0xd38], ax
mov eax, 0x79
mov word [rsp + 0xd3a], ax
mov eax, 0x20
mov word [rsp + 0xd3c], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0xd3e], ax
mov eax, WSACleanup
mov word [rsp + 0xd40], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0xd42], ax
mov eax, 0x62
mov word [rsp + 0xd44], ax
mov eax, WSASetLastError
mov word [rsp + 0xd46], ax
mov eax, 0x65
mov word [rsp + 0xd48], ax
mov eax, WSASetLastError
mov word [rsp + 0xd4a], ax
mov eax, 0x3a
mov word [rsp + 0xd4c], ax
mov eax, 0x20
mov word [rsp + 0xd4e], ax
mov eax, 0x49
mov word [rsp + 0xd50], ax
mov eax, WSASetLastError
mov word [rsp + 0xd52], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0xd54], ax
mov eax, 0x65
mov word [rsp + 0xd56], ax
mov eax, WSACleanup
mov word [rsp + 0xd58], ax
mov eax, WSASetLastError
mov word [rsp + 0xd5a], ax
mov eax, 0x65
mov word [rsp + 0xd5c], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0xd5e], ax
mov eax, 0x20
mov word [rsp + 0xd60], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xd62], ax
mov eax, 0x65
mov word [rsp + 0xd64], ax
mov eax, WSASetLastError
mov word [rsp + 0xd66], ax
mov eax, 0x64
mov word [rsp + 0xd68], ax
mov eax, 0x20
mov word [rsp + 0xd6a], ax
mov eax, 0x66
mov word [rsp + 0xd6c], ax
mov eax, 0x61
mov word [rsp + 0xd6e], ax
mov eax, WSASetLastError
mov word [rsp + 0xd70], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xd72], ax
mov eax, 0x65
mov word [rsp + 0xd74], ax
xor eax, eax
mov word [rsp + 0xd76], ax
lea rdx, [rsp + 0xd20]
mov ecx, 1
call fcn.1400dc610
mov dword [rsp + 0xeb8], 0
lea rcx, [rsp + 0x870]
call fcn.140001490
nop
lea rcx, [rsp + 0x888]
call fcn.140001490
nop
lea rcx, [rsp + 0x48]
call fcn.140001490
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x898]
call fcn.140001490
mov eax, dword [rsp + 0xeb8]
jmp 0x140011f02
movzx eax, byte [0x14024fd26]
mov byte [rsp + 0x8a0], al
lea rdi, [rsp + 0x8a1]
xor eax, eax
mov ecx, 0x3ff
rep stosb byte [rdi], al
mov dword [rsp + 0x880], 0
lea r9, [rsp + 0x880]
mov r8d, 0x3ff
lea rdx, [rsp + 0x8a0]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140011a3f
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x860]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x890]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0xff0]
add rcx, 0x2f8
lea rdx, [0x14024fc78]
call fcn.1400020a0
mov edx, 0x4c
mov word [rsp + 0xd80], dx
mov eax, 0x69
mov word [rsp + 0xd82], ax
mov eax, 0x63
mov word [rsp + 0xd84], ax
mov eax, 0x65
mov word [rsp + 0xd86], ax
mov eax, WSASetLastError
mov word [rsp + 0xd88], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xd8a], ax
mov eax, 0x65
mov word [rsp + 0xd8c], ax
mov eax, 0x20
mov word [rsp + 0xd8e], ax
mov eax, 0x76
mov word [rsp + 0xd90], ax
mov eax, 0x65
mov word [rsp + 0xd92], ax
mov eax, WSACleanup
mov word [rsp + 0xd94], ax
mov eax, 0x69
mov word [rsp + 0xd96], ax
mov eax, 0x66
mov word [rsp + 0xd98], ax
mov eax, 0x79
mov word [rsp + 0xd9a], ax
mov eax, 0x20
mov word [rsp + 0xd9c], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0xd9e], ax
mov eax, WSACleanup
mov word [rsp + 0xda0], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0xda2], ax
mov eax, 0x62
mov word [rsp + 0xda4], ax
mov eax, WSASetLastError
mov word [rsp + 0xda6], ax
mov eax, 0x65
mov word [rsp + 0xda8], ax
mov eax, WSASetLastError
mov word [rsp + 0xdaa], ax
mov eax, 0x3a
mov word [rsp + 0xdac], ax
mov eax, 0x20
mov word [rsp + 0xdae], ax
mov eax, 0x49
mov word [rsp + 0xdb0], ax
mov eax, WSASetLastError
mov word [rsp + 0xdb2], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0xdb4], ax
mov eax, 0x65
mov word [rsp + 0xdb6], ax
mov eax, WSACleanup
mov word [rsp + 0xdb8], ax
mov eax, WSASetLastError
mov word [rsp + 0xdba], ax
mov eax, 0x65
mov word [rsp + 0xdbc], ax
mov eax, reloc.WS2_32.dll_WSACleanup
mov word [rsp + 0xdbe], ax
mov eax, 0x20
mov word [rsp + 0xdc0], ax
mov eax, WSACleanup
mov word [rsp + 0xdc2], ax
mov eax, 0x65
mov word [rsp + 0xdc4], ax
mov eax, 0x61
mov word [rsp + 0xdc6], ax
mov eax, 0x64
mov word [rsp + 0xdc8], ax
mov eax, 0x20
mov word [rsp + 0xdca], ax
mov eax, 0x66
mov word [rsp + 0xdcc], ax
mov eax, 0x61
mov word [rsp + 0xdce], ax
mov eax, WSASetLastError
mov word [rsp + 0xdd0], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xdd2], ax
mov eax, 0x65
mov word [rsp + 0xdd4], ax
xor eax, eax
mov word [rsp + 0xdd6], ax
lea rdx, [rsp + 0xd80]
mov ecx, 1
call fcn.1400dc610
mov dword [rsp + 0xebc], 0
lea rcx, [rsp + 0x870]
call fcn.140001490
nop
lea rcx, [rsp + 0x888]
call fcn.140001490
nop
lea rcx, [rsp + 0x48]
call fcn.140001490
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x898]
call fcn.140001490
mov eax, dword [rsp + 0xebc]
jmp 0x140011f02
mov eax, dword [rsp + 0x880]
mov byte [rsp + rax + 0x8a0], 0
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x860]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x890]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, 4
lea rdx, str._ERR
lea rcx, [rsp + 0x8a0]
call fcn.1400ccd88
test eax, eax
jne 0x140011d66
mov eax, 0x2a
mov word [rsp + 0xde0], ax
mov eax, 0x2a
mov word [rsp + 0xde2], ax
mov eax, 0x2a
mov word [rsp + 0xde4], ax
mov eax, 0x20
mov word [rsp + 0xde6], ax
mov eax, 0x45
mov word [rsp + 0xde8], ax
mov eax, 0x52
mov word [rsp + 0xdea], ax
mov eax, 0x52
mov word [rsp + 0xdec], ax
mov eax, 0x4f
mov word [rsp + 0xdee], ax
mov eax, 0x52
mov word [rsp + 0xdf0], ax
mov eax, 0x20
mov word [rsp + 0xdf2], ax
mov eax, 0x2a
mov word [rsp + 0xdf4], ax
mov eax, 0x2a
mov word [rsp + 0xdf6], ax
mov eax, 0x2a
mov word [rsp + 0xdf8], ax
mov eax, 0x20
mov word [rsp + 0xdfa], ax
mov eax, 0x4c
mov word [rsp + 0xdfc], ax
mov eax, 0x69
mov word [rsp + 0xdfe], ax
mov eax, 0x63
mov word [rsp + 0xe00], ax
mov eax, 0x65
mov word [rsp + 0xe02], ax
mov eax, WSASetLastError
mov word [rsp + 0xe04], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xe06], ax
mov eax, 0x65
mov word [rsp + 0xe08], ax
mov eax, 0x20
mov word [rsp + 0xe0a], ax
mov eax, reloc.WS2_32.dll_WSASetLastError
mov word [rsp + 0xe0c], ax
mov eax, WSACleanup
mov word [rsp + 0xe0e], ax
mov eax, reloc.WS2_32.dll_WSAGetLastError
mov word [rsp + 0xe10], ax
mov eax, 0x62
mov word [rsp + 0xe12], ax
mov eax, WSASetLastError
mov word [rsp + 0xe14], ax
mov eax, 0x65
mov word [rsp + 0xe16], ax
mov eax, WSASetLastError
mov word [rsp + 0xe18], ax
mov eax, 0x3a
mov word [rsp + 0xe1a], ax
mov eax, 0x20
mov word [rsp + 0xe1c], ax
mov eax, 0x25
mov word [rsp + 0xe1e], ax
mov eax, reloc.WS2_32.dll_WSAStartup
mov word [rsp + 0xe20], ax
xor eax, eax
mov word [rsp + 0xe22], ax
lea rdx, [rsp + 0x8a4]
lea rcx, [rsp + 0xec0]
call fcn.1400dd060
mov qword [rsp + 0xfa8], rax
mov rax, qword [rsp + 0xfa8]
mov qword [rsp + 0xfb0], rax
mov r8, qword [rsp + 0xfb0]
mov r8, qword [r8]
lea rdx, [rsp + 0xde0]
mov ecx, 1
call fcn.1400dc610
nop
lea rcx, [rsp + 0xec0]
call fcn.140001490
cmp qword [rsp + 0x1008], 0
je 0x140011d0d
cmp dword [rsp + 0x1010], 0
je 0x140011d0d
lea rdx, [rsp + 0x8a4]
lea rcx, [rsp + 0xec8]
call fcn.1400dd060
mov qword [rsp + 0xfb8], rax
movsxd rdi, dword [rsp + 0x1010]
mov rcx, qword [rsp + 0xfb8]
call fcn.140023510
mov r8, rdi
mov rdx, rax
mov rcx, qword [rsp + 0x1008]
call fcn.1400a9228
lea rcx, [rsp + 0xec8]
call fcn.140001490
mov dword [rsp + 0xed0], 0xffffffff
lea rcx, [rsp + 0x870]
call fcn.140001490
nop
lea rcx, [rsp + 0x888]
call fcn.140001490
nop
lea rcx, [rsp + 0x48]
call fcn.140001490
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x898]
call fcn.140001490
mov eax, dword [rsp + 0xed0]
jmp 0x140011f02
mov rcx, qword [rsp + 0xff0]
add rcx, 0x300
call fcn.140010210
lea rcx, [rsp + 0x8a0]
call fcn.1400a9180
cmp rax, 6
jne 0x140011dee
lea rdx, [rsp + 0x8a0]
lea rcx, [rsp + 0xed8]
call fcn.140010530
mov qword [rsp + 0xfc0], rax
mov rax, qword [rsp + 0xfc0]
mov qword [rsp + 0xfc8], rax
mov rcx, qword [rsp + 0xfc8]
call fcn.1400105c0
mov rcx, qword [rsp + 0xff0]
add rcx, 0x2f8
mov rdx, rax
call fcn.1400020a0
nop
lea rcx, [rsp + 0xed8]
call fcn.140002e70
jmp 0x140011e09
mov rcx, qword [rsp + 0xff0]
add rcx, 0x2f8
lea rdx, [0x14024fc78]
call fcn.1400020a0
mov rcx, qword [rsp + 0xff0]
add rcx, 0x300
mov rax, qword [rsp + 0xff0]
mov rax, qword [rax + 0x300]
call qword [rax + 0x28]
lea rcx, str.123202
call fcn.1400a9180
mov r8, rax
lea rdx, str.123202
lea rcx, [rsp + 0x8a0]
call fcn.1400ccd88
test eax, eax
je 0x140011ea7
mov dword [rsp + 0xee0], 0
lea rcx, [rsp + 0x870]
call fcn.140001490
nop
lea rcx, [rsp + 0x888]
call fcn.140001490
nop
lea rcx, [rsp + 0x48]
call fcn.140001490
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x898]
call fcn.140001490
mov eax, dword [rsp + 0xee0]
jmp 0x140011f02
mov dword [rsp + 0xee4], 1
lea rcx, [rsp + 0x870]
call fcn.140001490
nop
lea rcx, [rsp + 0x888]
call fcn.140001490
nop
lea rcx, [rsp + 0x48]
call fcn.140001490
nop
lea rcx, [rsp + 0x878]
call fcn.140001490
nop
lea rcx, [rsp + 0x898]
call fcn.140001490
mov eax, dword [rsp + 0xee4]
jmp 0x140011f02
mov eax, 1
mov rcx, qword [rsp + 0xfd0]
xor rcx, rsp
call fcn.1400a8050
add rsp, 0xfe0
pop rdi
ret