Function at 0x140026a00
Capabilities:
Get disk size
Link many functions at runtime
Send data
Send http request
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x16e8]
mov eax, 0x17e8
call fcn.1400c0180
sub rsp, rax
mov qword [rbp + 0x488], 0xfffffffffffffffe
mov rax, qword [0x14019be90]
xor rax, rsp
mov qword [rbp + 0x16d0], rax
mov r14, r9
mov r12, r8
mov r15, rdx
mov rsi, rcx
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x400], rcx
xor edi, edi
mov dword [rsp + 0x44], edi
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
mov r8d, dword [0x1401a3d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
lea eax, [rdi + 1]
cmp ecx, 7
jne 0x140026aae
sub r8d, eax
mov dword [0x1401a3d80], r8d
lea rdx, [0x140134ffc]
mov rcx, r14
call fcn.14002f92c
or r13, 0xffffffffffffffff
cmp byte [rax + 8], 4
jne 0x140026b6b
lea rax, [rbp + 0x328]
mov qword [rbp + 0xc8], rax
lea rdx, [0x140134ffc]
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x340], 0xf
mov qword [rbp + 0x338], rdi
mov byte [rbp + 0x328], dil
cmp byte [rdx], dil
jne 0x140026b0e
mov r8, rdi
jmp 0x140026b1a
mov r8, r13
inc r8
cmp byte [rdx + r8], dil
jne 0x140026b11
lea rcx, [rbp + 0x328]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x328]
lea rcx, [rbp + 0x210]
call fcn.14001d6bc
nop
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0x210]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140026b6b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp + 0x68]
call fcn.14002186c
call fcn.140024f38
test al, al
jne 0x140026b85
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rbx, qword [rbp + 0x68]
cmp dword [rbx - 0x10], edi
jl 0x140026ba2
lea rdx, str.file:__
mov rcx, rbx
call fcn.1400bbf1c
test rax, rax
jne 0x140026ba7
mov eax, r13d
jmp 0x140026bad
sub rax, rbx
sar rax, 1
test eax, eax
sete dil
lea rdx, [rbx - 0x18]
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
xor ebx, ebx
test eax, eax
jg 0x140026bd1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test dil, dil
je 0x140026c2a
lea rdx, str.this_module_doesnt_support_file_request
lea rcx, [rbp + 0x1a8]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
mov ecx, r13d
lock xadd dword [rdx + 0x10], ecx
add ecx, r13d
test ecx, ecx
jg 0x14002a2e2
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x14002a2e2
test r15, r15
jne 0x140026c71
lea rdx, str.InternetOpen_Failed
lea rcx, [rbp + 0x1b8]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
jmp 0x14002a2d5
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x28], ebx
lea rax, [rbp + 0x2e8]
mov qword [rbp - 0x50], rax
lea rdx, [0x140134ffc]
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x300], 0xf
mov qword [rbp + 0x2f8], rbx
mov byte [rbp + 0x2e8], bl
cmp byte [rdx], bl
jne 0x140026ce6
mov r8, rbx
jmp 0x140026cf2
mov r8, r13
inc r8
cmp byte [rdx + r8], bl
jne 0x140026ce9
lea rcx, [rbp + 0x2e8]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2e8]
lea rcx, [rsp + 0x68]
call fcn.14001d6bc
nop
lea r9, [rbp - 0x28]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.140025728
movzx eax, al
test eax, eax
jne 0x140026dcd
lea rdx, str.InternetCrackUrl_Failed
lea rcx, [rbp + 0x1c8]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x1c8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140026d7f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140026da1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140026dc3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
jmp 0x140026c5d
mov dil, bl
mov byte [rsp + 0x48], bl
lea r13, str.redirectCheck
mov rdx, r13
mov rcx, r14
call fcn.14002f92c
lea rcx, [0x1401a4c28]
cmp rax, rcx
je 0x140026e1d
mov rdx, r13
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 5
jne 0x140026e1d
mov rdx, r13
mov rcx, r14
call fcn.14002f92c
mov rcx, rax
call fcn.14002f4b8
mov dil, al
mov byte [rsp + 0x48], al
mov byte [rsp + 0x58], bl
mov dword [rbp + 0x14], 0x50
lea rax, [rbp + 0x1d8]
mov qword [rbp - 0x50], rax
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x1d8]
call fcn.140002cf8
nop
lea r8, [rbp + 0x14]
lea rdx, [rsp + 0x58]
mov rcx, rax
call fcn.1400259c8
lea rdx, str.port
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 1
jne 0x140026e8b
lea rdx, str.port
mov rcx, r14
call fcn.14002f92c
mov rcx, rax
call fcn.14002f1ac
mov ebx, eax
mov dword [rbp - 0x28], eax
xor eax, eax
jmp 0x140026e99
mov ebx, dword [rbp - 0x28]
xor eax, eax
test ebx, ebx
cmove ebx, dword [rbp + 0x14]
mov dword [rbp - 0x28], ebx
mov r13b, al
mov byte [rsp + 0x40], al
mov r8d, ebx
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.140025a94
mov r12, rax
test rax, rax
jne 0x140026fd2
mov rax, qword [0x1401a5848]
test rax, rax
jne 0x140026eff
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140026ef3
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401a5848], rax
jmp 0x140026efa
mov rax, qword [0x1401a5848]
test rax, rax
je 0x140026f2a
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r12
xor r9d, r9d
movzx r8d, bx
mov rdx, qword [rsp + 0x60]
mov rcx, r15
call rax
mov r12, rax
xor r15d, r15d
test r12, r12
jne 0x140026fc8
lea rdx, str.InternetConnect_Failed
lea rcx, [rbp + 0x1e8]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x1e8]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140026f83
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140026fa3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140026fc3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002a2c3
mov r13b, 1
mov byte [rsp + 0x40], r13b
jmp 0x140026fd5
xor r15d, r15d
mov ebx, 0x80400200
mov eax, 0x80600200
test dil, dil
cmovne ebx, eax
or ebx, 0xc000
cmp byte [rsp + 0x58], r15b
je 0x140026ff8
or ebx, 0x803080
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdx, [0x140135038]
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 4
jne 0x1400270cb
lea rax, [rbp + 0x278]
mov qword [rbp - 0x50], rax
lea rdx, [0x140135038]
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x290], 0xf
mov qword [rbp + 0x288], r15
mov byte [rbp + 0x278], r15b
or rdi, 0xffffffffffffffff
cmp byte [rdx], r15b
jne 0x14002706e
mov r8, r15
jmp 0x14002707a
mov r8, rdi
inc r8
cmp byte [rdx + r8], r15b
jne 0x140027071
lea rcx, [rbp + 0x278]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0xe0]
call fcn.14001d6bc
nop
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400270cf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400270cf
or rdi, 0xffffffffffffffff
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [0x1401351b8]
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 4
jne 0x14002719c
lea rax, [rbp + 0x298]
mov qword [rbp - 0x50], rax
lea rdx, [0x1401351b8]
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x2b0], 0xf
mov qword [rbp + 0x2a8], r15
mov byte [rbp + 0x298], r15b
cmp byte [rdx], r15b
jne 0x140027141
mov r8, r15
jmp 0x14002714d
mov r8, rdi
inc r8
cmp byte [rdx + r8], r15b
jne 0x140027144
lea rcx, [rbp + 0x298]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0xe8]
call fcn.14001d6bc
nop
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0xe8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002719c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.referer
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 4
jne 0x140027269
lea rax, [rbp + 0x2c8]
mov qword [rbp - 0x50], rax
lea rdx, str.referer
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x2e0], 0xf
mov qword [rbp + 0x2d8], r15
mov byte [rbp + 0x2c8], r15b
cmp byte [rdx], r15b
jne 0x14002720e
mov r8, r15
jmp 0x14002721a
mov r8, rdi
inc r8
cmp byte [rdx + r8], r15b
jne 0x140027211
lea rcx, [rbp + 0x2c8]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp + 0x1f8]
call fcn.14001d6bc
nop
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0x1f8]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027269
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.acceptTypes
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 4
jne 0x140027336
lea rax, [rbp + 0x258]
mov qword [rbp - 0x50], rax
lea rdx, str.acceptTypes
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x270], 0xf
mov qword [rbp + 0x268], r15
mov byte [rbp + 0x258], r15b
cmp byte [rdx], r15b
jne 0x1400272db
mov r8, r15
jmp 0x1400272e7
mov r8, rdi
inc r8
cmp byte [rdx + r8], r15b
jne 0x1400272de
lea rcx, [rbp + 0x258]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0xf0]
call fcn.14001d6bc
nop
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0xf0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027336
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x78]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rdx, rdx
and rdx, rax
mov qword [rbp + 0x2b8], rdx
mov qword [rbp + 0x2c0], r15
mov rax, qword [rbp - 0x70]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r8, r8
and r8, rax
mov rax, qword [rbp - 0x80]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r9, r9
and r9, rax
mov rax, qword [rbp - 0x60]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rdx, rdx
and rdx, rax
mov qword [rsp + 0x38], 1
mov dword [rsp + 0x30], ebx
lea rax, [rbp + 0x2b8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
mov r8, qword [rsp + 0x78]
mov rcx, r12
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov r15, rax
xor ebx, ebx
test rax, rax
jne 0x1400274d6
lea rdx, str.HttpOpenRequest_Failed
lea rcx, [rbp + 0x208]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x208]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027403
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027422
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027441
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027460
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002747f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002749f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400274bf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
jmp 0x14002a2d5
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x140135200]
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 4
jne 0x140027681
lea rdx, [0x1401351f8]
lea rcx, [rbp + 0xd0]
call fcn.1400020f8
nop
lea rax, [rbp + 0x308]
mov qword [rbp - 0x50], rax
lea rdx, [0x140135200]
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x320], 0xf
mov qword [rbp + 0x318], rbx
mov byte [rbp + 0x308], bl
cmp byte [rdx], bl
jne 0x14002755b
mov r8, rbx
jmp 0x140027567
mov r8, rdi
inc r8
cmp byte [rdx + r8], bl
jne 0x14002755e
lea rcx, [rbp + 0x308]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x228]
call fcn.14001d6bc
mov rbx, rax
lea rdx, str.Content_Type:
lea rcx, [rbp + 0x130]
call fcn.140002d94
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x218]
call fcn.14001da0c
nop
lea r8, [rbp + 0xd0]
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.14001da0c
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0x110]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
xor ebx, ebx
test eax, eax
jg 0x1400275fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x218]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002761c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002763e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x228]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027660
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027681
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.additionalRequestHeaders
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 4
jne 0x140027805
lea rax, [rbp + 0x348]
mov qword [rbp - 0x50], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x360], 0xf
mov qword [rbp + 0x358], rbx
mov byte [rbp + 0x348], bl
cmp byte [rdx], bl
jne 0x1400276d8
mov r8, rbx
jmp 0x1400276e4
mov r8, rdi
inc r8
cmp byte [rdx + r8], bl
jne 0x1400276db
lea rcx, [rbp + 0x348]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x348]
lea rcx, [rbp + 0x150]
call fcn.14001d6bc
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.14000e4ec
nop
mov rdx, qword [rbp + 0x150]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027738
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 8]
call fcn.140002cf8
nop
mov rdi, qword [rbp + 8]
xor eax, eax
cmp word [rdi], ax
je 0x1400277e1
xor r13d, r13d
movzx ecx, word [rdi]
call fcn.1400be420
test eax, eax
je 0x14002776f
test rbx, rbx
jne 0x140027772
mov rbx, rdi
jmp 0x140027772
mov rbx, r13
add rdi, 2
cmp word [rdi], r13w
jne 0x140027759
test rbx, rbx
mov r13b, byte [rsp + 0x40]
je 0x1400277e1
mov rax, qword [rbp + 8]
sub rbx, rax
sar rbx, 1
test ebx, ebx
jns 0x14002779f
mov ecx, 0x80070057
call fcn.14000187c
int3
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, ebx
or ecx, edx
jge 0x1400277bf
mov edx, ebx
lea rcx, [rbp + 8]
call fcn.14000239c
mov rax, qword [rbp + 8]
cmp ebx, dword [rax - 0xc]
jg 0x1400277d6
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rbp + 8]
xor ebx, ebx
mov word [rax + rcx*2], bx
jmp 0x1400277e3
mov ecx, 0x80070057
call fcn.14000187c
int3
xor ebx, ebx
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
or rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140027805
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.postData
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 4
jne 0x1400278d0
lea rax, [rbp + 0x388]
mov qword [rbp - 0x50], rax
lea rdx, str.postData
mov rcx, r14
call fcn.14002f92c
mov rdx, qword [rax]
mov qword [rbp + 0x3a0], 0xf
mov qword [rbp + 0x398], rbx
mov byte [rbp + 0x388], bl
cmp byte [rdx], bl
jne 0x140027875
mov r8, rbx
jmp 0x140027881
mov r8, rdi
inc r8
cmp byte [rdx + r8], bl
jne 0x140027878
lea rcx, [rbp + 0x388]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x388]
lea rcx, [rbp + 0x238]
call fcn.14001d6bc
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0x238]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400278d0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x58]
call fcn.140002cf8
nop
mov rax, qword [rbp - 0x68]
mov ecx, dword [rax - 0x10]
lea edi, [rcx + rcx]
cmp byte [rsp + 0x48], bl
je 0x140027923
mov dword [rbp + 0x10], 0x2710
mov r9d, 4
lea r8, [rbp + 0x10]
lea edx, [r9 + 2]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp + 0x10]
lea edx, [r9 + 1]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rbx, rbx
and rbx, rax
mov r9, qword [rbp - 0x58]
mov r8d, 1
sub r8d, dword [r9 - 8]
mov ecx, dword [r9 - 0xc]
or ecx, r8d
jge 0x14002795e
xor edx, edx
lea rcx, [rbp - 0x58]
call fcn.14000239c
mov rax, qword [rsp + 0x70]
mov r9, qword [rbp - 0x58]
mov dword [rsp + 0x20], edi
mov r8d, dword [rax - 0x10]
mov rdx, rbx
mov rcx, r15
call qword [sym.imp.WININET.dll_HttpSendRequestW]
xor edi, edi
test eax, eax
jne 0x140027bd5
lea rcx, [rbp + 0x98]
call fcn.140021f50
nop
mov r8d, dword [0x1401a3d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 0xb
jne 0x1400279f7
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
lea eax, [rdi + 4]
mul rcx
lea rbx, [rdi - 1]
cmovo rax, rbx
mov rcx, rax
call fcn.1400ba748
mov rcx, rax
call fcn.1400bc20c
jmp 0x1400279fb
or rbx, 0xffffffffffffffff
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r13b, r13b
je 0x140027a12
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpSendRequest_Failed_with:
lea rcx, [rbp + 0x1d0]
call fcn.140002d94
nop
lea r8, [rbp + 0x98]
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.14001da0c
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027a72
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1d0]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027a94
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027ab6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027ad5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027af4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027b14
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027b33
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027b52
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027b71
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027b90
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027bb0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027bd0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002a2c3
lea rdx, str.noResponse
mov rcx, r14
call fcn.14002f92c
cmp byte [rax + 8], 5
jne 0x140027e0e
lea rdx, str.noResponse
mov rcx, r14
call fcn.14002f92c
mov rcx, rax
call fcn.14002f4b8
test al, al
je 0x140027e0e
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r13b, r13b
je 0x140027c24
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
lea rcx, [rbp + 0x240]
call fcn.14002ecd0
nop
mov eax, dword [rbp + 0x100]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x100], eax
mov qword [rbp + 0x108], rdi
mov ebx, 1
mov byte [rbp + 0xf8], bl
lea rdx, str.result
lea rcx, [rbp + 0x240]
call fcn.14002f7b8
mov rcx, rax
lea rdx, [rbp + 0xf8]
call fcn.14002efd4
nop
lea rcx, [rbp + 0xf8]
call fcn.14002ef28
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x440]
call fcn.14002ed48
nop
lea rdx, str.content
lea rcx, [rbp + 0x240]
call fcn.14002f7b8
mov rcx, rax
lea rdx, [rbp + 0x440]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x440]
call fcn.14002ef28
lea rdx, [rbp + 0x240]
mov rcx, rsi
call fcn.14002edf0
mov dword [rsp + 0x44], ebx
lea rcx, [rbp + 0x240]
call fcn.14002ef28
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027d0e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027d2d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027d4d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027d6c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027d8b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027daa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027dc9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027de9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027e09
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002a2c3
mov byte [rbp + 0xeb0], dil
mov ebx, 0x400
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0xeb1]
call fcn.1400c0510
mov dword [rbp + 0x48], ebx
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140027fc7
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
test r13b, r13b
je 0x140027e5b
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x170]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027ea8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027ec7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027ee6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027f06
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027f25
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027f44
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027f63
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027f82
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027fa2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140027fc2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002a2c3
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r15
test rax, rax
jne 0x14002819c
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [0x1401a3d80]
imul ecx, ecx
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 6
jne 0x140028022
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
test r13b, r13b
je 0x140028030
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x220]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x220]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002807d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002809c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400280bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400280db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400280fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028119
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028138
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028157
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028177
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028197
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002a2c3
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x48]
lea r8, [rbp + 0xeb0]
mov edx, 0x13
call rax
test eax, eax
jne 0x140028343
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
call fcn.140024c5c
test r13b, r13b
je 0x1400281d7
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x180]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], 1
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028224
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028243
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028262
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028282
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400282a1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400282c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400282df
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400282fe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002831e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002833e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002a2c3
lea rdx, [rbp + 0xeb0]
lea rcx, [rsp + 0x50]
call fcn.1400248a0
nop
lea rdx, str.acceptedStatusCodes
mov rcx, r14
call fcn.14002f92c
mov r13, rax
mov al, byte [rax + 8]
test al, al
je 0x14002856b
cmp al, 6
je 0x14002856b
cmp al, 7
jne 0x140028548
call fcn.140024bc8
test al, al
jne 0x1400283a0
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov ebx, edi
mov dword [rbp - 0x50], ebx
mov rcx, r13
call fcn.14002f528
test eax, eax
jle 0x14002a066
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x20], rax
mov r8d, ebx
lea rdx, [0x140131288]
lea rcx, [rbp + 0x20]
call fcn.14002a4f0
mov rdi, qword [rbp + 0x20]
mov rdx, rdi
mov rcx, r13
call fcn.14002f92c
mov rdx, rdi
mov rcx, r13
cmp byte [rax + 8], 4
jne 0x14002844f
lea rax, [rbp + 0x4c8]
mov qword [rbp + 0xb8], rax
call fcn.14002f92c
mov rdx, qword [rax]
lea rcx, [rbp + 0x4c8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.14001d6bc
nop
mov rdx, qword [rax]
lea rcx, [rsp + 0x50]
call fcn.140003030
xor edi, edi
test eax, eax
sete bl
mov rdx, qword [rbp + 0x1e0]
jmp 0x1400284dc
call fcn.14002f92c
cmp byte [rax + 8], 1
jne 0x1400284fb
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x190], rbx
mov rdx, rdi
mov rcx, r13
call fcn.14002f92c
mov rcx, rax
call fcn.14002f1ac
mov r8d, eax
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0xc0]
call fcn.14001d998
nop
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
xor edi, edi
dec eax
jg 0x1400284bf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp + 0xc0]
lea rcx, [rsp + 0x50]
call fcn.140003030
test eax, eax
sete bl
mov rdx, qword [rbp + 0xc0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400284f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002852e
mov rdi, qword [rbp + 0x20]
mov ebx, dword [rbp - 0x50]
lea rdx, [rdi - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140028514
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc ebx
mov dword [rbp - 0x50], ebx
mov rcx, r13
call fcn.14002f528
cmp ebx, eax
jge 0x14002a066
jmp 0x1400283b5
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002855e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002855e
lea rdx, [0x140135290]
lea rcx, [rsp + 0x50]
call fcn.140003030
test eax, eax
sete bl
test bl, bl
jne 0x14002873c
jmp 0x14002a066
mov ecx, dword [0x1401a3d80]
mov eax, ecx
imul eax, ecx
mov edx, 1
and eax, 0x80000007
jge 0x140028589
sub eax, edx
or eax, 0xfffffff8
add eax, edx
cmp eax, 5
jne 0x140028596
sub ecx, edx
mov dword [0x1401a3d80], ecx
mov rcx, r13
call fcn.14002f528
xor ebx, ebx
test eax, eax
jle 0x14002a066
mov edx, edi
mov rcx, r13
call fcn.14002f74c
mov edx, edi
mov rcx, r13
cmp byte [rax + 8], 4
jne 0x14002866d
lea rax, [rbp + 0x368]
mov qword [rbp + 0xb8], rax
call fcn.14002f74c
mov rdx, qword [rax]
mov qword [rbp + 0x380], 0xf
mov qword [rbp + 0x378], rbx
mov byte [rbp + 0x368], bl
cmp byte [rdx], bl
jne 0x1400285f8
mov r8, rbx
jmp 0x140028605
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], bl
jne 0x1400285fc
lea rcx, [rbp + 0x368]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x368]
lea rcx, [rbp + 0xd8]
call fcn.14001d6bc
nop
mov rcx, qword [rax]
mov eax, ebx
test rcx, rcx
setne al
test eax, eax
je 0x14002872f
mov rax, qword [rsp + 0x50]
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x140028657
add rax, 2
test dx, dx
jne 0x140028641
mov eax, ebx
jmp 0x14002865c
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xd8]
jmp 0x1400286f9
call fcn.14002f74c
cmp byte [rax + 8], 1
jne 0x140028718
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1a0], rbx
mov edx, edi
mov rcx, r13
call fcn.14002f74c
mov rcx, rax
call fcn.14002f1ac
mov r8d, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x88]
call fcn.14001d998
nop
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
xor ebx, ebx
dec eax
jg 0x1400286dc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp + 0x88]
lea rcx, [rsp + 0x50]
call fcn.140003030
test eax, eax
sete bl
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140028712
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002873a
xor ebx, ebx
inc edi
mov rcx, r13
call fcn.14002f528
cmp edi, eax
jge 0x14002a066
jmp 0x1400285a8
mov ecx, 0x80004005
call fcn.14000187c
nop
xor edi, edi
mov dword [rbp], edi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r13d, 0x16
test rax, rax
je 0x140028780
lea rdx, str.HttpQueryInfoW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140028780
mov qword [rsp + 0x20], rdi
lea r9, [rbp]
xor r8d, r8d
mov edx, r13d
mov rcx, r15
call rax
lea rcx, [0x14019b9a8]
mov rax, qword [0x14019b9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov r9d, dword [rbp]
test r9d, r9d
je 0x1400288b5
mov r8d, dword [0x1401a3d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 7
jne 0x140028818
mov ecx, edi
mov r10d, 0xd20d20d3
jmp 0x1400287ef
mov eax, r8d
or eax, 0xffffffc6
add r8d, eax
inc ecx
mov eax, r8d
imul eax, r8d
cmp ecx, eax
jg 0x140028812
mov eax, r10d
imul r8d
add edx, r8d
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x9c
mov eax, r8d
sub eax, edx
cmp eax, 3
jne 0x1400287d9
mov dword [0x1401a3d80], ecx
mov rcx, r9
call fcn.1400ba748
mov rbx, rax
test rax, rax
je 0x1400288b5
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140028867
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140028867
mov qword [rsp + 0x20], rdi
lea r9, [rbp]
mov r8, rbx
mov edx, r13d
mov rcx, r15
call rax
mov rdx, rbx
lea rcx, [rbp + 0x1f0]
call fcn.1400248a0
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0x1f0]
add rdx, 0xffffffffffffffe8
or r13, 0xffffffffffffffff
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400288ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400bc20c
jmp 0x1400288b9
or r13, 0xffffffffffffffff
cmp byte [rsp + 0x48], dil
je 0x1400293b6
xor edx, edx
lea rcx, [rbp + 0x28]
call fcn.14002ecd0
nop
lea rdx, [0x1401352a0]
lea rcx, [rsp + 0x50]
call fcn.140003030
test eax, eax
je 0x140028ac6
lea rdx, [0x140135298]
lea rcx, [rsp + 0x50]
call fcn.140003030
test eax, eax
je 0x140028ac6
lea rdx, [0x1401352b0]
lea rcx, [rsp + 0x50]
call fcn.140003030
test eax, eax
je 0x140028ac6
lea rdx, [0x1401352a8]
lea rcx, [rsp + 0x50]
call fcn.140003030
test eax, eax
je 0x140028ac6
lea rdx, [rbp + 0x28]
mov rcx, rsi
call fcn.14002edf0
mov dword [rsp + 0x44], 1
lea rcx, [rbp + 0x28]
call fcn.14002ef28
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028973
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028995
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400289b6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400289d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400289f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028a1a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028a3b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028a5c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028a7d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028a9f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028ac1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140026dc3
lea rcx, [rbp - 0x18]
call fcn.1400020c0
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 8]
call fcn.140002cf8
nop
lea rcx, [rbp - 8]
call fcn.14002186c
xor r8d, r8d
lea rdx, str.location:
lea rcx, [rbp - 8]
call fcn.140018a58
mov ebx, eax
mov r9d, dword [0x1401a3d80]
lea r8d, [r9 + 1]
imul r8d, r9d
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
mov r15d, 1
cmp r8d, r15d
jne 0x140028b56
mov r8d, edi
test r9d, r9d
je 0x140028b4f
mov ecx, r9d
and ecx, r15d
add r8d, ecx
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
jne 0x140028b39
mov dword [0x1401a3d80], r8d
cmp ebx, r13d
jne 0x140028d30
lea rdx, [rbp + 0x28]
mov rcx, rsi
call fcn.14002edf0
mov dword [rsp + 0x44], r15d
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028b91
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028bb2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x28]
call fcn.14002ef28
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028bdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028bff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028c20
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028c41
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028c63
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028c84
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028ca5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028cc6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028ce7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028d09
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028d2b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140026dc3
mov r8d, ebx
lea rdx, [0x1401351f8]
lea rcx, [rbp - 8]
call fcn.140018a58
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp - 8]
call fcn.14000d9e4
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028d8c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
lea rdx, str.http
lea rcx, [rbp - 0x18]
call fcn.140018a58
mov ecx, eax
cmp eax, r13d
jne 0x140028f7b
lea rdx, [rbp + 0x28]
mov rcx, rsi
call fcn.14002edf0
mov dword [rsp + 0x44], r15d
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028ddc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028dfd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x28]
call fcn.14002ef28
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028e28
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028e4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028e6b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028e8c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028eae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028ecf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028ef0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028f11
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028f32
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028f54
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028f76
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140026dc3
mov rax, qword [rbp - 0x18]
mov r8d, dword [rax - 0x10]
sub r8d, ecx
lea rdx, [rbp + 0x230]
lea rcx, [rbp - 0x18]
call fcn.140018a98
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400021c4
nop
mov rdx, qword [rbp + 0x230]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140028fc7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r9d, dword [0x1401a3d80]
mov eax, r9d
imul eax, r9d
imul eax, r9d
and eax, 0x8000000f
jge 0x140028fe9
sub eax, r15d
or eax, 0xfffffff0
add eax, r15d
cmp eax, 0xc
jne 0x140029060
lea r14, [rbp + 0xc20]
xor esi, esi
mov r10d, esi
lea ebx, [r10 + 1]
lea ecx, [rdi + 1]
mov eax, r9d
cdq
idiv ecx
mov r8d, edx
mov ecx, r9d
sub ecx, edi
imul r8d, ecx
mov eax, r9d
cdq
idiv ebx
add r8d, eax
sub r8d, r10d
mov dword [r14], r8d
mov edx, r8d
lea rcx, [0x140131288]
call fcn.1400bb9dc
mov r10d, ebx
add r14, 4
cmp ebx, 0x1b
jge 0x140029046
mov r9d, dword [0x1401a3d80]
jmp 0x140028ffa
add edi, r15d
cmp edi, 6
jge 0x140029057
mov r9d, dword [0x1401a3d80]
jmp 0x140028ff7
mov rsi, qword [rbp + 0x1c0]
xor edi, edi
mov eax, dword [rbp + 0x120]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x120], eax
mov qword [rbp + 0x128], rdi
mov byte [rbp + 0x118], r15b
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x28]
call fcn.14002f7b8
mov rcx, rax
lea rdx, [rbp + 0x118]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x118]
call fcn.14002ef28
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x508]
call fcn.14001d750
nop
mov rdx, rax
lea rcx, [rbp + 0x3b0]
call fcn.14002ed8c
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x28]
call fcn.14002f7b8
mov rcx, rax
lea rdx, [rbp + 0x3b0]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x3b0]
call fcn.14002ef28
nop
xor r8d, r8d
mov dl, r15b
lea rcx, [rbp + 0x508]
call fcn.14000136c
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x5a8]
call fcn.14001d750
nop
mov rdx, rax
lea rcx, [rbp + 0x3e8]
call fcn.14002ed8c
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x28]
call fcn.14002f7b8
mov rcx, rax
lea rdx, [rbp + 0x3e8]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x3e8]
call fcn.14002ef28
nop
xor r8d, r8d
mov dl, r15b
lea rcx, [rbp + 0x5a8]
call fcn.14000136c
mov rcx, qword [rsp + 0x50]
mov edx, r15d
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x140029192
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000239c
mov rcx, qword [rsp + 0x50]
call fcn.1400bc234
mov ecx, dword [rbp + 0x140]
and ecx, 0xffffff01
or ecx, r15d
mov dword [rbp + 0x140], ecx
mov qword [rbp + 0x148], rdi
mov dword [rbp + 0x138], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x28]
call fcn.14002f7b8
mov rcx, rax
lea rdx, [rbp + 0x138]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x138]
call fcn.14002ef28
lea rdx, [rbp + 0x28]
mov rcx, rsi
call fcn.14002edf0
mov dword [rsp + 0x44], r15d
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029217
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029238
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x28]
call fcn.14002ef28
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029263
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029285
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400292a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400292c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400292e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002930a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002932b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002934c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002936d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002938f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400293b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140026dc3
mov rax, rdi
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdi
xor ebx, ebx
mov qword [rbp - 0x30], rbx
mov dword [rbp - 0x10], ebx
sub rdi, rax
lea rdx, [rdi + 0x400]
lea rcx, [rbp - 0x40]
call fcn.14002491c
mov ecx, dword [0x1401a3d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x6bca1af3
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub r8d, edx
cmp r8d, 0xf
jne 0x140029425
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov dword [rbp - 0x10], ebx
mov rbx, qword [rbp - 0x40]
add rbx, rdi
call fcn.140023b04
mov rcx, rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r15
call fcn.140034f74
xor ebx, ebx
test eax, eax
je 0x140029ddc
mov edx, dword [rbp - 0x10]
add rdx, rdi
lea rcx, [rbp - 0x40]
call fcn.14002491c
cmp dword [rbp - 0x10], ebx
je 0x140029476
mov rdi, qword [rbp - 0x38]
mov rax, qword [rbp - 0x40]
jmp 0x1400293ca
mov byte [rbp + 0x12c0], bl
mov edi, 0x400
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0x12c1]
call fcn.1400c0510
mov dword [rbp + 0x60], edi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor edi, edi
test rax, rax
je 0x1400294bc
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x60]
lea r8, [rbp + 0x12c0]
mov edx, 0x1d
mov rcx, r15
call rbx
test eax, eax
je 0x1400296b3
lea rdx, [rbp + 0x12c0]
lea rcx, [rbp + 0x50]
call fcn.1400248a0
nop
lea rdx, str.gzip
lea rcx, [rbp + 0x50]
call fcn.140018ea0
test al, al
je 0x1400296aa
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x80], rdi
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
sub rdx, rcx
lea r8, [rbp + 0x70]
call fcn.140024fb8
test eax, eax
jne 0x140029692
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [0x1401a3d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov ebx, 1
and ecx, 0x8000000f
jge 0x14002955d
sub ecx, ebx
or ecx, 0xfffffff0
add ecx, ebx
cmp ecx, 4
jne 0x14002956a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
cmp byte [rsp + 0x40], dil
je 0x14002957a
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x200]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov dword [rsp + 0x44], ebx
mov rdx, qword [rbp + 0x200]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400295c1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdi, qword [rbp + 0x70]
xor r14d, r14d
test rdi, rdi
je 0x1400295fd
mov rbx, qword [rbp + 0x80]
sub rbx, rdi
lea rdx, [rbp + 4]
call fcn.14002a4ec
mov rcx, rax
mov r8, rbx
mov rdx, rdi
call fcn.1400014c8
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], r14
mov qword [rbp + 0x80], r14
lea rcx, [rbp + 0x50]
call fcn.140002194
nop
lea rcx, [rbp - 0x40]
call fcn.1400248f0
nop
lea rcx, [rbp - 0x48]
call fcn.140002194
nop
lea rcx, [rsp + 0x50]
call fcn.140002194
nop
lea rcx, [rbp - 0x58]
call fcn.140002194
nop
lea rcx, [rbp - 0x68]
call fcn.140002194
nop
lea rcx, [rsp + 0x70]
call fcn.140002194
nop
lea rcx, [rbp - 0x78]
call fcn.140002194
nop
lea rcx, [rbp - 0x70]
call fcn.140002194
nop
lea rcx, [rbp - 0x80]
call fcn.140002194
nop
lea rcx, [rbp - 0x60]
call fcn.140002194
nop
lea rcx, [rsp + 0x68]
call fcn.140002194
nop
lea rcx, [rsp + 0x78]
call fcn.140002194
nop
lea rcx, [rsp + 0x60]
call fcn.140002194
jmp 0x14002a2e2
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x40]
call fcn.14002a30c
nop
lea rcx, [rbp + 0x70]
call fcn.1400248f0
nop
lea rcx, [rbp + 0x50]
call fcn.140002194
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor r13d, r13d
cmp byte [rsp + 0x40], r13b
je 0x1400296cf
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov bl, r13b
mov dil, r13b
lea rdx, [0x140135020]
mov rcx, r14
call fcn.14002f92c
mov rcx, rax
call fcn.14002fc3c
test al, al
je 0x140029775
lea rax, [rbp + 0x4e8]
mov qword [rbp + 0xb8], rax
lea rdx, [0x140135020]
mov rcx, r14
call fcn.14002f92c
mov rcx, rax
call fcn.140002cf4
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.14001d6bc
nop
lea rdx, str.base64
lea rcx, [rbp + 0x58]
call fcn.140018ea0
test al, al
je 0x14002974e
mov bl, 1
jmp 0x14002976c
lea rdx, str.binary
lea rcx, [rbp + 0x58]
call fcn.140018ea0
movzx edi, dil
test al, al
mov eax, 1
cmovne edi, eax
lea rcx, [rbp + 0x58]
call fcn.140002194
lea rcx, [rbp - 0x20]
call fcn.1400020c0
nop
test bl, bl
je 0x1400298b6
lea rcx, [rbp - 0x40]
call fcn.14002a450
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002a458
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x158]
call fcn.14001d4c8
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400021c4
nop
lea rcx, [rbp + 0x158]
call fcn.140002194
lea rcx, [rbp + 0x168]
call fcn.14002319c
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140018e60
mov bl, al
lea rcx, [rbp + 0x168]
call fcn.140002194
test bl, bl
je 0x140029833
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x178]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov eax, 1
mov dword [rsp + 0x44], eax
lea rcx, [rbp + 0x178]
call fcn.140002194
nop
lea rcx, [rbp - 0x20]
jmp 0x140029601
call fcn.140024cdc
mov r12d, 1
test al, al
jne 0x1400299f9
mov rbx, r13
mov r15d, 0xb0
call fcn.1400bba88
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rbp + rbx*8 + 0x6a0], xmm0
add rbx, r12
cmp rbx, r15
jb 0x14002984f
mov rcx, r13
mov eax, 0xaf
jmp 0x1400298a4
movsd xmm1, qword [rbp + rax*8 + 0x6a0]
movsd xmm0, qword [rbp + rax*8 + 0x698]
comisd xmm1, xmm0
jbe 0x1400298a1
movsd qword [rbp + rax*8 + 0x6a0], xmm0
movsd qword [rbp + rax*8 + 0x698], xmm1
sub rax, r12
cmp rax, rcx
jg 0x140029877
add rcx, r12
sub r15, r12
jne 0x140029870
jmp 0x1400299f9
test dil, dil
jne 0x1400299f3
lea rcx, [rbp - 0x40]
call fcn.14002a450
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x40]
call fcn.14002a458
cmp byte [rax], r13b
je 0x1400298f9
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x40]
call fcn.14002491c
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14002a458
mov byte [rax], r13b
lea rcx, [rbp - 0x40]
call fcn.14002a450
cmp rax, 3
jbe 0x1400299bf
call fcn.140024f38
mov ebx, 1
test al, al
jne 0x14002993d
mov ecx, ebx
mov r8d, dword [0x1401a3d80]
cmp r8d, ebx
jle 0x140029937
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, r8d
jl 0x140029928
mov dword [0x1401a3d80], ecx
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002a458
cmp byte [rax], 0xef
jne 0x1400299bf
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14002a458
cmp byte [rax], 0xbb
jne 0x1400299bf
mov edx, 2
lea rcx, [rbp - 0x40]
call fcn.14002a458
cmp byte [rax], 0xbf
jne 0x1400299bf
lea rdx, [rbp + 0x420]
lea rcx, [rbp - 0x40]
call fcn.14002a444
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x3a8]
call fcn.14002a4dc
mov rbx, qword [rax]
lea rdx, [rbp + 0x3c8]
lea rcx, [rbp - 0x40]
call fcn.14002a444
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.14002a460
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002a458
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.140002d94
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400021c4
nop
lea rcx, [rbp + 0x188]
call fcn.140002194
mov r12d, 1
mov bl, r13b
lea r15, str.outputFile
mov rdx, r15
mov rcx, r14
call fcn.14002f92c
mov rcx, rax
call fcn.14002fc3c
test al, al
je 0x140029b30
call fcn.140024e94
test al, al
jne 0x140029a3c
mov edx, 0xa
lea r8d, [rdx + 1]
lea rcx, str._d__d_n
call fcn.1400bb9dc
lea rax, [rbp + 0x4a8]
mov qword [rbp + 0x90], rax
mov rdx, r15
mov rcx, r14
call fcn.14002f92c
mov rcx, rax
call fcn.140002cf4
mov rdx, rax
lea rcx, [rbp + 0x4a8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.14001d6bc
nop
lea rcx, [rbp + 0x18]
call fcn.14000d060
test al, al
jne 0x140029b27
test dil, dil
je 0x140029af3
mov qword [rbp + 0x40], r13
lea rcx, [rbp + 0x18]
call fcn.140002cf4
mov rdx, rax
lea r8, [0x140135390]
lea rcx, [rbp + 0x40]
call fcn.1400bded0
test eax, eax
jne 0x140029b27
mov rdi, qword [rbp + 0x40]
test rdi, rdi
je 0x140029b27
lea rcx, [rbp - 0x40]
call fcn.14002a450
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002a458
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, r12
call fcn.1400be304
mov rcx, qword [rbp + 0x40]
call fcn.1400bd1ec
mov bl, r12b
jmp 0x140029b27
lea rax, [rbp + 0x198]
mov qword [rbp + 0x90], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x198]
call fcn.140002cf8
nop
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.14002407c
movzx ebx, bl
test al, al
cmovne ebx, r12d
lea rcx, [rbp + 0x18]
call fcn.140002194
xor edx, edx
lea rcx, [rbp + 0xa0]
call fcn.14002ecd0
nop
mov dl, r12b
lea rcx, [rbp + 0x408]
call fcn.14002ede0
nop
lea rdx, str.result
lea rcx, [rbp + 0xa0]
call fcn.14002f7b0
mov rcx, rax
lea rdx, [rbp + 0x408]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x408]
call fcn.14002ef28
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140022724
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x568]
call fcn.14001d750
nop
mov rdx, rax
lea rcx, [rbp + 0x428]
call fcn.14002ed8c
nop
lea rdx, str.content
lea rcx, [rbp + 0xa0]
call fcn.14002f7b0
mov rcx, rax
lea rdx, [rbp + 0x428]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x428]
call fcn.14002ef28
nop
lea rcx, [rbp + 0x568]
call fcn.14000133c
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x5e8]
call fcn.14001d750
nop
mov rdx, rax
lea rcx, [rbp + 0x490]
call fcn.14002ed8c
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xa0]
call fcn.14002f7b0
mov rcx, rax
lea rdx, str.headers
call fcn.14002f7b0
mov rcx, rax
lea rdx, [rbp + 0x490]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x490]
call fcn.14002ef28
nop
lea rcx, [rbp + 0x5e8]
call fcn.14000133c
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x5c8]
call fcn.14001d750
nop
mov rdx, rax
lea rcx, [rbp + 0x458]
call fcn.14002ed8c
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xa0]
call fcn.14002f7b0
mov rcx, rax
lea rdx, str.httpCode
call fcn.14002f7b0
mov rcx, rax
lea rdx, [rbp + 0x458]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x458]
call fcn.14002ef28
nop
lea rcx, [rbp + 0x5c8]
call fcn.14000133c
lea rdx, str.empty
lea rcx, [rbp + 0x588]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x3d0]
call fcn.14002ed8c
nop
lea rdx, str.noData
lea rcx, [rbp + 0xa0]
call fcn.14002f7b0
mov rcx, rax
lea rdx, [rbp + 0x3d0]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x3d0]
call fcn.14002ef28
nop
lea rcx, [rbp + 0x588]
call fcn.14000133c
mov rdx, r15
mov rcx, r14
call fcn.14002f92c
mov rcx, rax
call fcn.14002fc3c
test al, al
je 0x140029db7
mov dl, bl
lea rcx, [rbp + 0x470]
call fcn.14002ede0
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x548]
call fcn.1400012fc
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x528]
call fcn.14002a598
nop
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.14002f990
mov rcx, rax
lea rdx, [rbp + 0x470]
call fcn.14002efd4
nop
lea rcx, [rbp + 0x528]
call fcn.14000133c
nop
lea rcx, [rbp + 0x548]
call fcn.14000133c
nop
lea rcx, [rbp + 0x470]
call fcn.14002ef28
lea rdx, [rbp + 0xa0]
mov rcx, rsi
call fcn.14002edf0
mov dword [rsp + 0x44], r12d
lea rcx, [rbp + 0xa0]
call fcn.14002ef28
jmp 0x14002982a
mov ecx, dword [0x1401a3d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x88888889
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub r8d, edx
cmp r8d, 5
jne 0x140029e27
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [0x1401a3d80]
imul ecx, ecx
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0xe
jne 0x140029e78
mov ecx, 4
call fcn.1400bb888
mov rbx, rax
call fcn.1400bba88
mov dword [rbx], eax
mov dword [0x1401a3d80], eax
mov rcx, rbx
call fcn.1400bb0b4
xor ebx, ebx
call fcn.140024abc
cmp byte [rsp + 0x40], bl
je 0x140029e8c
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0xc8]
call fcn.140002d94
nop
mov rdx, rax
mov rcx, rsi
call fcn.140025478
mov eax, 1
mov dword [rsp + 0x44], eax
mov rdx, qword [rbp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029ed8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140029ef2
call fcn.1400bb0b4
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rbx
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029f13
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029f35
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029f56
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029f77
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029f99
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029fba
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029fdb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140029ffc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002a01d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002a03f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002a061
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140026dc3
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401a3d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 6
jne 0x14002a0e2
mov ecx, 0x28
call fcn.1400ba748
mov rdi, rax
xor r14d, r14d
mov ebx, r14d
lea r15d, [r14 + 1]
call fcn.1400bba88
add eax, dword [0x1401a3d80]
mov dword [rdi + rbx*4], eax
add rbx, r15
cmp rbx, 0xa
jl 0x14002a0b1
mov eax, dword [rdi + 0x24]
mov dword [0x1401a3d80], eax
mov rcx, rdi
call fcn.1400bc20c
mov r8d, dword [0x1401a3d80]
jmp 0x14002a0e9
xor r14d, r14d
lea r15d, [r14 + 1]
imul r8d, r8d
mov eax, 0x78787879
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub r8d, edx
cmp r8d, 0xb
jne 0x14002a133
lea eax, [r8 + 5]
mov r8d, 0xc9
test r8d, r8d
je 0x14002a12a
mov ecx, r8d
cdq
idiv r8d
mov r8d, edx
mov eax, ecx
test ecx, ecx
jne 0x14002a115
add eax, r8d
mov dword [0x1401a3d80], eax
cmp byte [rsp + 0x40], r14b
je 0x14002a143
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x610]
call fcn.140018fb0
nop
mov rcx, qword [rax]
call fcn.1400bc240
mov edx, eax
mov rcx, rsi
call fcn.14002557c
mov dword [rsp + 0x44], r15d
lea rax, [rbp + 0x618]
mov rcx, qword [rbp + 0x610]
cmp rcx, rax
je 0x14002a185
call fcn.1400bbc10
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a1a9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a1c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a1e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a207
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a226
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a245
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a264
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a283
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a2a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a2c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a2e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rsi
mov rcx, qword [rbp + 0x16d0]
xor rcx, rsp
call fcn.1400bb0d0
add rsp, 0x17e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret