Function at 0x14003c9a0
Capabilities:
Check for software breakpoints
Encode data using base64

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x9b8]
sub rsp, 0xa90
mov qword [rbp + 0x328], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x1401d1010]
xor rax, rsp
mov qword [rbp + 0x980], rax
mov r15, rcx
xor r14d, r14d
mov dword [rbp + 0x140], r14d
mov qword [rbp + 0x148], r14
mov dword [rbp + 0x150], r14d
xor r8d, r8d
lea rdx, [rbp + 0x140]
call fcn.14003c580
test al, al
je 0x14003ceed
lea rdi, [r15 + 0x90]
lea r9, str.ProcessRequest:_request_processing_END
lea r8, str.ProcessRequest:_request_processing_START
mov rdx, rdi
lea rcx, [rbp + 0x330]
call fcn.14003c7d0
mov eax, dword [0x1401d41dc]
test eax, eax
je 0x14003ca55
imul ecx, eax, 0x3e8
mov qword [rbp + 0x60], rcx
lea rcx, [rbp + 0x60]
call fcn.1400375e8
mov ecx, dword [r15 + 0x38]
mov eax, ecx
shr eax, 0x19
mov r12d, 1
and al, r12b
je 0x14003ca83
shr ecx, 0x1e
not cl
and cl, r12b
je 0x14003ca83
mov rcx, r15
call fcn.140041bb4
test al, al
je 0x14003cee1
test dword [r15 + 0x38], 0x400
je 0x14003cadb
lea rcx, [0x1401dce28]
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x38], r14
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
mov eax, r12d
lock xadd dword [rbp - 0x38], eax
test eax, eax
jne 0x14003cacb
cmp dword [rbp - 0x34], r14d
je 0x14003cac2
xor edx, edx
mov ecx, 0x131f4c4
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
call qword [sym.imp.MSVCP140.dll__Thrd_id]
mov dword [rbp - 0x34], eax
mov qword [0x1401dce20], r14
lea rcx, [rbp - 0x40]
call fcn.140032744
mov r13, r14
mov esi, r14d
mov dword [rsp + 0x5c], r14d
or dword [rsp + 0x60], 0xffffffff
mov byte [rsp + 0x40], r14b
mov byte [rsp + 0x41], r14b
lea rcx, [rbp - 0x18]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov rbx, qword [rbp - 0x18]
shr rbx, 0x20
shl rbx, 0x20
mov eax, dword [rbp - 0x18]
or rbx, rax
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14003cb2e
xor edx, edx
mov ecx, 0x61c8d8
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
mov rax, qword [rdi]
test rax, rax
jne 0x14003cb44
xor edx, edx
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
mov r8d, dword [rax + 0xc]
lea r9, [rbp + 0x76a]
test r8d, r8d
jns 0x14003cb94
neg r8d
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x14003cb57
add r9, 0xfffffffffffffffe
lea eax, [rdx + 0x2d]
mov word [r9], ax
jmp 0x14003cbc4
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x14003cb94
lea r8, [rbp + 0x76a]
mov rdx, r9
lea rcx, [rbp + 0x428]
call fcn.14001c828
mov dword [rbp + 0x448], 7
lea rdx, [rbp + 0x428]
lea rcx, [rbp + 0x450]
call fcn.14000cc2c
mov rax, qword [rbp + 0x440]
cmp rax, 8
jb 0x14003cc3c
lea rax, [rax*2 + 2]
mov rcx, qword [rbp + 0x428]
mov rdx, rcx
cmp rax, 0x1000
jb 0x14003cc36
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
jbe 0x14003cc36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rcx, rax
mov qword [rbp + 0x88], rcx
lea rax, [rbp + 0x88]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x448]
lea rcx, [rbp + 0x470]
call fcn.140052480
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
mov qword [rbp + 0x1d8], r14
mov qword [rbp + 0x1e0], rax
mov qword [rbp + 0x1e8], rax
mov byte [rbp + 0x1f0], r12b
lea r9, [rbp + 0x1d8]
mov r8b, r12b
mov edx, dword [0x140139bdc]
lea rcx, [rbp + 0x18]
call fcn.140052600
mov rcx, r15
call fcn.14003e590
test al, al
jne 0x14003cf1d
cmp byte [r15 + 0xd8], r14b
je 0x14003ce23
lea rax, vtable.Mso::Telemetry::DataField_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___.0
mov qword [rbp + 0x4a0], rax
lea rdx, [r15 + 0xb8]
lea rcx, [rbp + 0x4f0]
call fcn.14000cc2c
mov eax, 4
mov word [rbp + 0x510], ax
or r9, 0xffffffffffffffff
lea r8, [0x1401207a8]
lea edx, [rax + 0x3d]
lea rcx, [rbp + 0x4a8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
mov byte [rsp + 0x7c], r14b
mov edx, 6
mov word [rbp - 0x4e], dx
mov byte [rbp - 0x50], r12b
mov byte [rbp - 0x80], r14b
mov byte [rbp - 0x7c], r14b
mov byte [rbp - 0x78], r14b
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x7c]
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0x90]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2306]
lea rcx, vtable.Mso::Telemetry::EventName.0
mov qword [rbp + 0x158], rcx
lea rcx, [0x1401dd030]
mov qword [rbp + 0x160], rcx
lea rax, str.OfficeWebServiceApiServiceRequestHelperProcessUrlFailure
mov qword [rbp + 0x168], rax
lea r8, [rbp + 0x4a0]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x158]
call fcn.140033e58
mov rax, qword [rbp + 0x508]
cmp rax, 8
jb 0x14003ce23
lea rax, [rax*2 + 2]
mov rcx, qword [rbp + 0x4f0]
mov rdx, rcx
cmp rax, 0x1000
jb 0x14003ce1d
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
jbe 0x14003ce1d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp byte [rbp + 0x18], r14b
je 0x14003cec2
mov ebx, dword [rbp + 0x38]
mov word [rbp - 0x70], bx
mov edx, 8
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov rdi, qword [rdx + rcx]
test rdi, rdi
je 0x14003cec2
lea r8, [rbp - 0x70]
lea rdx, [rbp + 0x40]
mov rcx, rdi
call fcn.140052774
mov rax, qword [rbp + 0x40]
cmp rax, qword [rdi + 8]
je 0x14003cec2
lea rsi, [rax + 0x18]
test rsi, rsi
je 0x14003cec2
cmp byte [rbp + 0x28], r14b
je 0x14003ceac
mov word [rbp - 0x68], bx
test rdi, rdi
je 0x14003ceac
lea r8, [rbp - 0x68]
lea rdx, [rbp + 0x48]
mov rcx, rdi
call fcn.140052774
mov rax, qword [rbp + 0x48]
cmp rax, qword [rdi + 8]
je 0x14003ceac
lea rdx, [rax + 0x18]
test rdx, rdx
je 0x14003ceac
mov rcx, qword [rbp + 0x30]
call fcn.140052358
xor edx, edx
mov ecx, ebx
call fcn.140057978
mov rdx, rsi
mov rcx, qword [rbp + 0x20]
call fcn.140052358
nop
lea rcx, [rbp + 0x470]
call fcn.140052578
lea rcx, [rbp + 0x448]
call fcn.140017bf0
nop word [rax + rax]
nop
lea rcx, [rbp + 0x330]
call fcn.14003c8c4
mov rcx, qword [rbp + 0x980]
xor rcx, rsp
call fcn.140107ad0
lea r11, [rsp + 0xa90]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp byte [rbp + 0x18], r14b
je 0x14003cfc4
mov edi, dword [rbp + 0x38]
mov word [rbp - 0x60], di
mov edx, 8
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov rsi, qword [rdx + rcx]
test rsi, rsi
je 0x14003cfbc
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x50]
mov rcx, rsi
call fcn.140052774
mov rax, qword [rbp + 0x50]
cmp rax, qword [rsi + 8]
je 0x14003cfbc
lea r14, [rax + 0x18]
xor eax, eax
test r14, r14
je 0x14003cfc2
cmp byte [rbp + 0x28], al
je 0x14003cfa7
mov word [rbp - 0x58], di
test rsi, rsi
je 0x14003cfa7
lea r8, [rbp - 0x58]
lea rdx, [rbp + 0x58]
mov rcx, rsi
call fcn.140052774
mov rax, qword [rbp + 0x58]
cmp rax, qword [rsi + 8]
je 0x14003cfa7
lea rdx, [rax + 0x18]
test rdx, rdx
je 0x14003cfa7
mov rcx, qword [rbp + 0x30]
call fcn.140052358
xor edx, edx
mov ecx, edi
call fcn.140057978
mov rdx, r14
mov rcx, qword [rbp + 0x20]
call fcn.140052358
mov esi, dword [rsp + 0x5c]
jmp 0x14003cfc4
mov esi, eax
lea rcx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov rcx, qword [rbp - 0x10]
shr rcx, 0x20
shl rcx, 0x20
mov eax, dword [rbp - 0x10]
or rcx, rax
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
jbe 0x14003cffd
xor edx, edx
mov ecx, 0x61c8d8
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
sub rcx, rbx
movabs rax, 0x6666666666666667
imul rcx
mov rdi, rdx
sar rdi, 2
mov rax, rdi
shr rax, 0x3f
add rdi, rax
mov rcx, r15
call fcn.14004129c
test al, al
jne 0x14003cec2
mov ecx, dword [r15 + 0x38]
mov eax, ecx
shr eax, 0x19
and al, r12b
je 0x14003d054
shr ecx, 0x1e
and cl, r12b
je 0x14003d054
mov rcx, r15
call fcn.140041bb4
test al, al
je 0x14003cec2
mov byte [rsp + 0x42], r12b
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
xor ebx, ebx
mov qword [rbp + 0x1f8], rbx
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], rax
mov byte [rbp + 0x210], r12b
lea r9, [rbp + 0x1f8]
mov r8b, r12b
mov edx, dword [str._b_r_b_fUrlId]
lea rcx, [rbp + 0x358]
call fcn.140052600
lea rcx, [rbp - 8]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov rcx, qword [rbp - 8]
shr rcx, 0x20
shl rcx, 0x20
mov eax, dword [rbp - 8]
or rcx, rax
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
jbe 0x14003d0f6
xor edx, edx
mov ecx, 0x61c8d8
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
mov qword [rbp + 0x68], rcx
lea r14, [r15 + 0xa0]
inc esi
mov dword [rsp + 0x5c], esi
mov rcx, qword [r14]
test rcx, rcx
je 0x14003d120
mov qword [r14], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rdx, r14
lea rcx, [rbp + 0x380]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_776]
mov esi, dword [rax]
mov rcx, qword [rax + 8]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x74], eax
mov eax, dword [r15 + 0x2c]
test eax, eax
jne 0x14003e1a3
cmp byte [0x1401d4238], bl
jne 0x14003e1a3
test esi, esi
jne 0x14003e1a3
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x48], rbx
mov rcx, qword [r15 + 0x10]
test rcx, rcx
je 0x14003e195
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x140089b1f.8]
lea r8, [rsp + 0x50]
mov rdx, rax
lea rcx, [rbp + 0x3e0]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_1510]
mov esi, dword [rax]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x74], eax
mov eax, dword [r15 + 0x2c]
test eax, eax
jne 0x14003e14a
cmp byte [0x1401d4238], bl
jne 0x14003e14a
test esi, esi
jne 0x14003e14a
xor edx, edx
mov r8d, 0x202
lea rcx, [rbp + 0x770]
call sub.VCRUNTIME140.dll_memset
lea rax, str.Microsoft_Office_16.0
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x20]
mov qword [rbp + 0x120], rax
lea rax, [rbp + 0x770]
mov qword [rbp + 0x128], rax
lea rcx, [rbp + 0x120]
call fcn.140044880
mov eax, dword [r15 + 0x38]
bt eax, 0x10
jae 0x14003d221
mov r9d, 0x1b7740
jmp 0x14003d239
and eax, 0x1000
neg eax
sbb r9d, r9d
and r9d, 0xea60
add r9d, 0x7530
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003e13c
mov rax, qword [rcx]
mov r8, qword [rbp - 0x20]
lea rdx, [rbp + 0x3c8]
mov rax, qword [rax + 0x10]
call qword [case.0x140089b1f.8]
mov esi, dword [rax]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x74], eax
mov eax, dword [r15 + 0x2c]
test eax, eax
jne 0x14003e0f1
cmp byte [0x1401d4238], bl
jne 0x14003e0f1
test esi, esi
jne 0x14003e0f1
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x3b0]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_1115]
mov esi, dword [rax]
mov dword [rsp + 0x78], esi
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x74], eax
mov eax, dword [r15 + 0x2c]
test eax, eax
jne 0x14003e0a6
cmp byte [0x1401d4238], bl
jne 0x14003e0a6
test esi, esi
jne 0x14003e0a6
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003e098
mov rax, qword [rcx]
mov r8, qword [rsp + 0x50]
xor edx, edx
mov rax, qword [rax + 0x48]
call qword [case.0x140089b1f.8]
mov rbx, qword [r15 + 0xa8]
mov rax, qword [rbx]
mov rax, qword [rax + 8]
mov qword [rbp - 0x48], rax
mov rsi, qword [rsp + 0x48]
mov r14, qword [r14]
mov rdx, qword [r15 + 0x10]
test rdx, rdx
je 0x14003e08c
mov rcx, qword [rdx]
mov rax, qword [rcx + 0x88]
mov rcx, rdx
call qword [case.0x140089b1f.8]
mov r9, rsi
mov r8, r14
mov rdx, rax
mov rcx, rbx
mov rax, qword [rbp - 0x48]
call qword [case.0x140089b1f.8]
mov eax, dword [r15 + 0x38]
xor ebx, ebx
bt eax, 0xb
jb 0x14003d37c
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dbb5
mov rax, qword [rcx]
mov r8b, r12b
mov edx, r12d
mov rax, qword [rax + 0x38]
call qword [case.0x140089b1f.8]
mov eax, dword [r15 + 0x38]
bt eax, 0x11
jae 0x14003d3a9
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dbc3
mov rax, qword [rcx]
mov r8b, r12b
mov edx, 0x24
mov rax, qword [rax + 0x38]
call qword [case.0x140089b1f.8]
mov eax, dword [r15 + 0x38]
bt eax, 0xf
jae 0x14003d3d2
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dbd1
mov rax, qword [rcx]
mov r8b, r12b
mov edx, 0x22
mov rax, qword [rax + 0x38]
call qword [case.0x140089b1f.8]
mov eax, dword [r15 + 0x2c]
mov esi, dword [rsp + 0x78]
test eax, eax
jne 0x14003e041
cmp byte [0x1401d4238], bl
jne 0x14003e041
test esi, esi
jne 0x14003e041
mov eax, dword [r15 + 0x38]
shr eax, 8
and al, r12b
je 0x14003d443
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dc2a
mov rax, qword [rcx]
xor r8d, r8d
lea edx, [rsi + 2]
mov rax, qword [rax + 0x38]
call qword [case.0x140089b1f.8]
mov eax, dword [r15 + 0x2c]
test eax, eax
jne 0x14003dbdf
cmp byte [0x1401d4238], bl
jne 0x14003dbdf
test esi, esi
jne 0x14003dbdf
lea rcx, [rbp + 0xe0]
call fcn.1400325c8
nop
lea rdx, [rbp + 0xe0]
mov rcx, r15
call fcn.14003ed9c
test al, al
je 0x14003dedf
mov rbx, qword [r15 + 0xa0]
xor edx, edx
test rbx, rbx
je 0x14003ded3
mov rax, qword [rbx]
mov r14, qword [rax + 0x10]
mov rsi, qword [rsp + 0x48]
mov rcx, qword [r15 + 0x10]
test rcx, rcx
je 0x14003dec7
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x140089b1f.8]
mov ecx, dword [r15 + 0x3c]
lea r8, str.DELETE
xor edx, edx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rsi
mov byte [rsp + 0x20], dl
mov r9, rax
mov r8, qword [r8 + rcx*8]
lea rdx, [rbp + 0x398]
mov rcx, rbx
mov rax, r14
call qword [case.0x140089b1f.8]
mov esi, dword [rax]
mov r14, qword [rax + 8]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x74], eax
mov eax, dword [r15 + 0x2c]
xor ebx, ebx
test eax, eax
jne 0x14003de70
cmp byte [0x1401d4238], bl
jne 0x14003de70
test esi, esi
jne 0x14003de70
mov rcx, r15
call fcn.14003e7d0
test al, al
je 0x14003dfe1
mov rsi, qword [rbp + 0xe8]
mov rbx, qword [rsi]
cmp rbx, rsi
je 0x14003d563
lea rdx, [rbx + 0x10]
lea r8, [rdx + 0x20]
cmp qword [r8 + 0x18], 8
jb 0x14003d537
mov r8, qword [r8]
cmp qword [rdx + 0x18], 8
jb 0x14003d541
mov rdx, qword [rdx]
lea r9, str.Error_adding_auth_ticket_header
mov rcx, r15
call fcn.14003ec50
test al, al
je 0x14003dfdf
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
jne 0x14003d525
lea r14, [r15 + 0xa0]
mov rcx, qword [r14]
xor ebx, ebx
test rcx, rcx
je 0x14003de62
mov rax, qword [rcx]
mov r9d, dword [r15 + 0x68]
lea r8, [r15 + 0x48]
cmp qword [r8 + 0x18], 0x10
jb 0x14003d58d
mov r8, qword [r8]
lea rdx, [rbp + 0x410]
mov rax, qword [rax + 0x38]
call qword [case.0x140089b1f.8]
mov esi, dword [rax]
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x74], eax
mov eax, dword [r15 + 0x2c]
test eax, eax
jne 0x14003de0b
cmp byte [0x1401d4238], bl
jne 0x14003de0b
test esi, esi
jne 0x14003de0b
mov rcx, qword [r14]
test rcx, rcx
je 0x14003ddfd
mov rax, qword [rcx]
lea r8, [rsp + 0x60]
lea rdx, [rbp + 0x3f8]
mov rax, qword [rax + 0x50]
call qword [case.0x140089b1f.8]
mov esi, dword [rax]
mov dword [rsp + 0x78], esi
mov rcx, qword [rax + 8]
mov qword [rsp + 0x68], rcx
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x74], eax
mov eax, dword [r15 + 0x2c]
test eax, eax
jne 0x14003dda6
cmp byte [0x1401d4238], bl
jne 0x14003dda6
test esi, esi
jne 0x14003dda6
lea rax, str.HttpStatusCode
mov qword [rbp + 0xd0], rax
mov eax, dword [rsp + 0x60]
mov dword [rbp + 0xd8], eax
mov word [rbp + 0xdc], bx
lea rax, [0x14011b800]
mov qword [rbp + 0xc8], rax
mov rax, qword [r15 + 0x90]
test rax, rax
je 0x14003dd98
movsxd rax, dword [rax + 0xc]
lea rcx, str.RequestId
mov qword [rbp + 0x220], rcx
mov qword [rbp + 0x228], rax
mov word [rbp + 0x230], bx
lea rax, [0x14011b348]
mov qword [rbp + 0x218], rax
lea rax, str.Message
mov qword [rbp + 0x240], rax
lea rax, str.Request_completed_with_status_code.
mov qword [rbp + 0x248], rax
mov word [rbp + 0x250], bx
lea rax, method.Mso::Logging::StructuredObject_wchar_t_const____ptr64__1_.virtual_0
mov qword [rbp + 0x238], rax
lea rax, [rbp + 0xc8]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x218]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x238]
mov qword [rsp + 0x28], rax
mov ecx, 0x8d6518
lea r8d, [rsi + 0x64]
call fcn.14004515c
cmp dword [rsp + 0x5c], 3
jae 0x14003d83f
mov rbx, qword [r15 + 0xa8]
mov rax, qword [rbx]
mov rax, qword [rax + 0x10]
mov qword [rbp - 0x48], rax
mov esi, dword [rsp + 0x60]
mov r14, qword [r14]
mov rdx, qword [r15 + 0x10]
test rdx, rdx
je 0x14003dc46
mov rcx, qword [rdx]
mov rax, qword [rcx + 0x88]
mov rcx, rdx
call qword [case.0x140089b1f.8]
mov r9d, esi
mov r8, r14
mov rdx, rax
mov rcx, rbx
mov rax, qword [rbp - 0x48]
call qword [case.0x140089b1f.8]
xor ebx, ebx
test al, al
je 0x14003d83b
lea rax, str.HttpStatusCode
mov qword [rbp + 0xb8], rax
mov eax, dword [rsp + 0x60]
mov dword [rbp + 0xc0], eax
mov word [rbp + 0xc4], bx
lea rax, [0x14011b800]
mov qword [rbp + 0xb0], rax
mov rcx, qword [r15 + 0x10]
test rcx, rcx
je 0x14003dc38
mov rax, qword [rcx]
mov rax, qword [rax + 0x88]
call qword [case.0x140089b1f.8]
lea rcx, [0x140134f38]
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x1c8], rax
mov word [rbp + 0x1d0], bx
lea rax, method.Mso::Logging::StructuredObject_wchar_t_const____ptr64__1_.virtual_0
mov qword [rbp + 0x1b8], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x1b8]
mov qword [rsp + 0x28], rax
call fcn.1400451f8
nop
nop
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003d819
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003d836
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db10
mov esi, dword [rsp + 0x78]
mov rcx, r15
call fcn.140040010
test al, al
je 0x14003dfe1
mov ecx, dword [rsp + 0x60]
cmp ecx, 0x191
jne 0x14003d8e2
cmp byte [rsp + 0x42], bl
je 0x14003d8e2
mov byte [rsp + 0x42], bl
cmp qword [r15 + 0x80], rbx
je 0x14003d8e2
lea rcx, [r15 + 0x70]
cmp qword [rcx + 0x18], 8
jb 0x14003d880
mov rcx, qword [rcx]
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_750]
mov rcx, rax
call qword [sym.imp.Mso30Win32Client.dll_Ordinal_1976]
test al, al
je 0x14003d8de
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003d8bc
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003d8d9
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db10
mov ecx, dword [rsp + 0x60]
cmp ecx, 0x197
jne 0x14003dcdb
mov rax, qword [r15 + 0x90]
test rax, rax
je 0x14003dccd
movsxd rax, dword [rax + 0xc]
lea rcx, str.RequestId
mov qword [rbp + 0x300], rcx
mov qword [rbp + 0x308], rax
mov word [rbp + 0x310], bx
lea rax, [0x14011b348]
mov qword [rbp + 0x2f8], rax
lea rax, str.Message
mov qword [rbp + 0x2e0], rax
lea rax, str.HTTP_status_indicates_proxy_authentication_required
mov qword [rbp + 0x2e8], rax
mov word [rbp + 0x2f0], bx
lea rax, method.Mso::Logging::StructuredObject_wchar_t_const____ptr64__1_.virtual_0
mov qword [rbp + 0x2d8], rax
lea rax, [rbp + 0x2f8]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x2d8]
mov qword [rsp + 0x28], rax
lea rax, str._ServiceRequestHelper__ProcessRequest
mov qword [rsp + 0x20], rax
mov r14d, 0x64
mov r8d, r14d
mov ecx, 0x8d6519
call fcn.140038ed0
mov byte [rsp + 0x58], r12b
mov qword [rbp + 0x130], r15
lea rax, [rsp + 0x58]
mov qword [rbp + 0x138], rax
mov byte [rsp + 0x43], bl
lea rax, [0x1401d41a8]
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x28], ebx
mov rcx, qword [0x1401d41a8]
call qword [sym.imp.KERNEL32.dll_AcquireSRWLockShared]
mov eax, r12d
lock xadd dword [rbp - 0x28], eax
mov rdx, qword [0x1401dcf70]
test rdx, rdx
je 0x14003d9f0
lea rcx, [rbp + 0x130]
call fcn.14003e468
mov byte [rsp + 0x43], r12b
mov eax, dword [rbp - 0x28]
test eax, eax
je 0x14003da0e
or eax, 0xffffffff
lock xadd dword [rbp - 0x28], eax
mov rcx, qword [rbp - 0x30]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockShared]
jmp 0x14003d9f0
mov cl, byte [rsp + 0x58]
mov al, byte [rsp + 0x43]
test al, al
je 0x14003dc60
test cl, cl
je 0x14003dc60
mov rax, qword [r15 + 0x90]
test rax, rax
je 0x14003dc52
movsxd rax, dword [rax + 0xc]
lea rcx, str.RequestId
mov qword [rbp + 0x2c0], rcx
mov qword [rbp + 0x2c8], rax
mov word [rbp + 0x2d0], bx
lea rax, [0x14011b348]
mov qword [rbp + 0x2b8], rax
lea rax, str.Message
mov qword [rbp + 0x2a0], rax
lea rax, str.Proxy_authentication_succeeded___retrying_request
mov qword [rbp + 0x2a8], rax
mov word [rbp + 0x2b0], bx
lea rax, method.Mso::Logging::StructuredObject_wchar_t_const____ptr64__1_.virtual_0
mov qword [rbp + 0x298], rax
lea rax, [rbp + 0x2b8]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x298]
mov qword [rsp + 0x28], rax
lea rax, str._ServiceRequestHelper__ProcessRequest
mov qword [rsp + 0x20], rax
mov r8d, r14d
mov ecx, 0x8d651b
call fcn.140038ed0
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003daf3
nop dword [rax]
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003db10
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov esi, dword [rsp + 0x5c]
cmp esi, 3
jb 0x14003d0fa
mov esi, dword [rsp + 0x78]
mov r14, qword [rsp + 0x68]
lea rcx, [rbp + 0x358]
call fcn.1400526a0
lea rcx, [rbp + 0x470]
call fcn.140052578
lea rcx, [rbp + 0x448]
call fcn.140017bf0
lea rcx, [rbp + 0x318]
call fcn.140039b94
mov rcx, qword [rax]
sub rcx, qword [rbp + 0x68]
movabs rax, 0x6666666666666667
imul rcx
mov rbx, rdx
sar rbx, 2
mov rax, rbx
shr rax, 0x3f
add rbx, rax
xor eax, eax
cmp byte [rsp + 0x40], al
je 0x14003e1b7
mov dword [rbp + 0x188], esi
mov qword [rbp + 0x190], r14
mov eax, dword [rsp + 0x74]
mov dword [rbp + 0x198], eax
mov r8, r13
lea rdx, [rbp + 0x188]
mov rcx, r15
call fcn.14003c580
jmp 0x14003cee1
xor edx, edx
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
xor edx, edx
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
xor edx, edx
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
lea r13, str.Error_setting_disable_redirects_setting
mov byte [rsp + 0x40], r12b
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dc08
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003dc25
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
xor edx, edx
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
nop
xor edx, edx
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
xor edx, edx
mov ecx, 0x152139e
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
lea r13, str.Proxy_authentication_failed_because_MsoHostHolder::RunUsingHost_failed.
test al, al
cmovne r13, rbx
sete byte [rsp + 0x41]
test cl, cl
jne 0x14003dc82
mov byte [rsp + 0x41], r12b
lea r13, str.Proxy_authentication_failed.
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dcab
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003dcc8
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
xor edx, edx
mov ecx, 0x152139e
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
lea eax, [rcx - 0xc8]
cmp eax, 2
jbe 0x14003dd4d
cmp ecx, 0xcc
je 0x14003dd4d
mov rcx, r15
call fcn.140040320
mov byte [rsp + 0x41], r12b
lea r13, str.Request_returned_unsuccessful_http_status_code
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dd2b
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003dd48
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dd76
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003dd93
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
xor edx, edx
mov ecx, 0x152139e
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
lea r13, str.Error_getting_HTTP_status_code
mov byte [rsp + 0x40], r12b
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dddb
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003ddf8
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
xor edx, edx
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
lea r13, str.Error_sending_request
mov byte [rsp + 0x40], r12b
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003de40
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003de5d
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
xor edx, edx
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
lea r13, str.Error_opening_request
mov byte [rsp + 0x40], r12b
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003dea5
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003dec2
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db26
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
cmp byte [r15 + 0xd8], bl
je 0x14003df60
lea r8, [r15 + 0xb8]
lea rdx, [0x1401207a8]
lea rcx, [rbp + 0x520]
call fcn.140043e24
mov rbx, rax
mov edx, 6
lea rcx, [rbp + 0x320]
call fcn.140012fb8
lea rcx, vtable.Mso::Telemetry::EventName.0
mov qword [rbp + 0x170], rcx
lea rcx, [0x1401dd030]
mov qword [rbp + 0x178], rcx
lea rcx, str.OfficeWebServiceApiServiceRequestHelperAddAuthInfoFailure
mov qword [rbp + 0x180], rcx
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140033e58
lea rcx, [rbp + 0x520]
call fcn.14000ebc4
xor ebx, ebx
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2905]
test al, al
je 0x14003dfe1
lea rbx, [r15 + 0x90]
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14003df87
xor edx, edx
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
mov rax, qword [rcx]
mov rax, qword [rax + 0xb0]
call qword [case.0x140089b1f.8]
test al, al
je 0x14003dfdf
mov rcx, qword [rbx]
xor ebx, ebx
test rcx, rcx
jne 0x14003dfb3
xor edx, edx
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
mov edx, 0x2000000
cmp dword [rcx + 0x10], edx
jne 0x14003dfe1
mov al, byte [r15 + 0x38]
and al, r12b
jne 0x14003dfe1
mov rax, qword [rcx]
lea r9, str.Conditional_Access:_User_interaction_needed
xor r8d, r8d
mov rax, qword [rax + 0x20]
call qword [case.0x140089b1f.8]
jmp 0x14003dfe1
xor ebx, ebx
lea rcx, [rbp + 0xe0]
call fcn.14002af40
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003e013
nop word [rax + rax]
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003e030
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
lea rcx, [rbp + 0x358]
call fcn.1400526a0
jmp 0x14003cec2
lea r13, str.Error_setting_disable_cookies_setting
mov byte [rsp + 0x40], r12b
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003e06a
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003e087
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
xor edx, edx
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
lea r13, str.Error_creating_request_settings
mov byte [rsp + 0x40], r12b
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003e0cf
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003e0ec
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
lea r13, str.Error_initializing_request_context
mov byte [rsp + 0x40], r12b
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003e11a
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003e137
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
xor edx, edx
mov ecx, 0x152139a
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
lea r13, str.Error_creating_request_context
mov byte [rsp + 0x40], r12b
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14003e173
mov qword [rsp + 0x48], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14003e190
mov qword [rsp + 0x50], rbx
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x140089b1f.8]
nop
jmp 0x14003db21
xor edx, edx
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
nop
lea r13, str.Error_creating_HttpRequest_object
mov byte [rsp + 0x40], r12b
mov r14, rcx
jmp 0x14003db26
xor esi, esi
cmp byte [rsp + 0x41], sil
je 0x14003e1d4
mov r8, r13
mov edx, dword [rsp + 0x60]
mov rcx, r15
call fcn.140041e18
jmp 0x14003cee1
cmp byte [r15 + 0xd8], sil
je 0x14003e2ca
mov eax, dword [rsp + 0x5c]
mov qword [rbp + 0x70], rax
lea r8, [rbp + 0x70]
lea rdx, str.SendAttempts
lea rcx, [rbp + 0x620]
call fcn.140043f20
mov r14, rax
mov qword [rbp + 0x78], rbx
lea r8, [rbp + 0x78]
lea rdx, str.SendDurationMicroseconds
lea rcx, [rbp + 0x680]
call fcn.140043ecc
mov rsi, rax
mov qword [rbp + 0x80], rdi
lea r8, [rbp + 0x80]
lea rdx, str.ProcessUrlDurationMicroseconds
lea rcx, [rbp + 0x6e0]
call fcn.140043ecc
mov rdi, rax
lea r8, [r15 + 0xb8]
lea rdx, [0x1401207a8]
lea rcx, [rbp + 0x5a0]
call fcn.140043e24
mov rbx, rax
mov edx, 6
lea rcx, [rbp + 0x340]
call fcn.140012fb8
lea rcx, vtable.Mso::Telemetry::EventName.0
mov qword [rbp + 0x1a0], rcx
lea rcx, [0x1401dd030]
mov qword [rbp + 0x1a8], rcx
lea rcx, str.OfficeWebServiceApiServiceRequestHelperProcessRequest
mov qword [rbp + 0x1b0], rcx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.14004491c
lea rcx, [rbp + 0x5a0]
call fcn.14000ebc4
xor esi, esi
mov rcx, r15
call fcn.14003fd78
test al, al
je 0x14003cee1
mov rcx, r15
call fcn.140040320
mov qword [rbp], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp + 8], xmm0
lea rdx, [rbp]
mov rcx, r15
call fcn.140040830
test al, al
je 0x14003e456
mov rcx, r15
call fcn.140041afc
lea rdx, [rbp]
mov rcx, r15
call fcn.14004177c
lea rax, str.HttpStatusCode
mov qword [rbp + 0xa0], rax
mov eax, dword [rsp + 0x60]
mov dword [rbp + 0xa8], eax
mov word [rbp + 0xac], si
lea rax, [0x14011b800]
mov qword [rbp + 0x98], rax
lea rbx, [r15 + 0x90]
mov rax, qword [rbx]
test rax, rax
jne 0x14003e360
xor edx, edx
mov ecx, 0x152139e
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
movsxd rax, dword [rax + 0xc]
lea rcx, str.RequestId
mov qword [rbp + 0x280], rcx
mov qword [rbp + 0x288], rax
mov word [rbp + 0x290], si
lea rax, [0x14011b348]
mov qword [rbp + 0x278], rax
lea rax, str.Message
mov qword [rbp + 0x260], rax
lea rax, str.Request_was_Successfully_processed
mov qword [rbp + 0x268], rax
mov word [rbp + 0x270], si
lea rax, method.Mso::Logging::StructuredObject_wchar_t_const____ptr64__1_.virtual_0
mov qword [rbp + 0x258], rax
lea rax, [rbp + 0x98]
mov qword [rsp + 0x38], rax
lea rax, [rbp + 0x278]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x258]
mov qword [rsp + 0x28], rax
mov ecx, 0x615500
mov r8d, 0x32
call fcn.14004515c
mov eax, dword [r15 + 0x2c]
test eax, eax
jne 0x14003e456
lea rdx, [r15 + 0xe0]
lea rcx, [rbp + 0x348]
call fcn.140017180
nop
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14003e425
xor edx, edx
mov ecx, 0x15213a0
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
mov rax, qword [rcx]
mov r8, qword [rbp + 8]
mov rdx, qword [rbp]
sub r8, rdx
cmp rdx, qword [rbp + 8]
cmove rdx, rsi
mov rax, qword [rax + 0x18]
call qword [case.0x140089b1f.8]
xchg dword [r15 + 0x30], r12d
lea rcx, [rbp + 0x348]
call fcn.140017110
nop
lea rcx, [rbp]
call fcn.14001d304
jmp 0x14003cee1