Function at 0x14002e1c0
Capabilities:
Get disk size
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7228]
mov eax, 0x7328
call fcn.1400d3380
sub rsp, rax
mov qword [rbp + 0x368], 0xfffffffffffffffe
mov rax, qword [0x1401bce90]
xor rax, rsp
mov qword [rbp + 0x7210], rax
mov r15, r9
mov qword [rbp + 0x58], r9
mov rdi, r8
mov r14, rdx
mov r12, rcx
mov qword [rbp + 0x360], rcx
xor ebx, ebx
mov dword [rsp + 0x44], ebx
mov rcx, r9
call fcn.14002bc10
lea rcx, [0x1401bc9a8]
test al, al
mov rax, qword [0x1401bc9a8]
je 0x14002e2b3
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x48], rax
lea rdx, str.this_module_doesnt_support_file_request
test rdx, 0xffffffffffff0000
jne 0x14002e270
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002e27a
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.1400025a0
jmp 0x14002e27a
lea rcx, [rbp + 0x48]
call fcn.140003350
nop
lea rdx, [rbp + 0x48]
mov rcx, r12
call fcn.14002b000
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031a6d
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x140031a6d
call qword [rax + 0x18]
add rax, 0x18
test r14, r14
jne 0x14002e335
mov qword [rbp + 0x40], rax
lea rdx, str.InternetOpen_Failed
test rdx, 0xffffffffffff0000
jne 0x14002e2f3
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002e2fd
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1400025a0
jmp 0x14002e2fd
lea rcx, [rbp + 0x40]
call fcn.140003350
nop
lea rdx, [rbp + 0x40]
mov rcx, r12
call fcn.14002b000
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031a6d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140031a6d
mov qword [rsp + 0x68], rax
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x30], ebx
lea rax, [rbp + 0x240]
mov qword [rbp + 0x60], rax
lea rdx, [0x140150f60]
mov rcx, r15
call fcn.1400392c0
mov rdx, qword [rax]
mov qword [rbp + 0x258], 0xf
mov qword [rbp + 0x250], rbx
mov byte [rbp + 0x240], 0
or rsi, 0xffffffffffffffff
cmp byte [rdx], 0
jne 0x14002e39b
mov r8, rbx
jmp 0x14002e3aa
mov r8, rsi
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14002e3a0
lea rcx, [rbp + 0x240]
call fcn.1400013f0
nop
lea rdx, [rbp + 0x240]
lea rcx, [rsp + 0x60]
call fcn.1400204f0
nop
lea r9, [rbp - 0x30]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.14002b640
movzx eax, al
test eax, eax
jne 0x14002e4e0
mov ecx, dword [0x1401c4d60]
imul ecx, ecx
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 2
jne 0x14002e41f
lea rcx, [rbp + 0x660]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
lea rdx, str.InternetCrackUrl_Failed
test rdx, 0xffffffffffff0000
jne 0x14002e468
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002e472
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400025a0
jmp 0x14002e472
lea rcx, [rbp + 0x50]
call fcn.140003350
nop
lea rdx, [rbp + 0x50]
mov rcx, r12
call fcn.14002b000
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e4a2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e4bc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e4d6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
xor r13b, r13b
mov byte [rsp + 0x48], r13b
lea rdx, str.redirectCheck
mov rcx, r15
call fcn.1400392c0
lea rcx, [0x1401c5be8]
cmp rax, rcx
je 0x14002e537
lea rdx, str.redirectCheck
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 5
jne 0x14002e537
lea rdx, str.redirectCheck
mov rcx, r15
call fcn.1400392c0
mov rcx, rax
call fcn.140038c70
movzx r13d, al
mov byte [rsp + 0x48], al
mov byte [rsp + 0x49], 0
mov dword [rbp - 4], 0x50
lea rax, [rbp + 0xa8]
mov qword [rbp + 0x60], rax
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
call fcn.140002400
add rax, 0x18
mov qword [rbp + 0xa8], rax
lea r8, [rbp - 4]
lea rdx, [rsp + 0x49]
lea rcx, [rbp + 0xa8]
call fcn.14002b880
lea rdx, str.port
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 1
jne 0x14002e5af
lea rdx, str.port
mov rcx, r15
call fcn.1400392c0
mov rcx, rax
call fcn.1400388f0
mov ebx, eax
mov dword [rbp - 0x30], eax
jmp 0x14002e5bb
mov ebx, dword [rbp - 0x30]
test ebx, ebx
cmove ebx, dword [rbp - 4]
mov dword [rbp - 0x30], ebx
mov byte [rsp + 0x40], 0
mov r8d, ebx
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.14002bb20
mov qword [rbp - 0x50], rax
test rax, rax
jne 0x14002e7b0
mov rax, qword [0x1401c6940]
test rax, rax
jne 0x14002e6ad
mov eax, dword [0x1401c4d60]
mov ecx, eax
imul ecx, eax
imul ecx, eax
and ecx, 0x80000007
jge 0x14002e60a
dec ecx
or ecx, 0xfffffff8
inc ecx
cmp ecx, 6
jne 0x14002e621
mov ecx, 4
call fcn.1400cea88
mov ecx, dword [0x1401c4d60]
mov dword [rax], ecx
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
mov r8d, dword [0x1401c4d60]
imul r8d, r8d
mov eax, 0x30c30c31
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x15
sub r8d, edx
cmp r8d, 2
jne 0x14002e683
xor eax, eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test rdi, rdi
je 0x14002e6a1
lea rdx, str.InternetConnectW
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401c6940], rax
jmp 0x14002e6a8
mov rax, qword [0x1401c6940]
test rax, rax
je 0x14002e6e3
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rcx
xor r9d, r9d
movzx r8d, bx
mov rdx, qword [rsp + 0x68]
mov rcx, r14
call rax
mov qword [rbp - 0x50], rax
test rax, rax
jne 0x14002e7a4
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x70], rax
lea rdx, str.InternetConnect_Failed
test rdx, 0xffffffffffff0000
jne 0x14002e72c
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002e736
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400025a0
jmp 0x14002e736
lea rcx, [rbp + 0x70]
call fcn.140003350
nop
lea rdx, [rbp + 0x70]
mov rcx, r12
call fcn.14002b000
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e766
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e780
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e79a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
mov byte [rsp + 0x40], 1
nop dword [rax]
mov edi, 0x80400200
mov eax, 0x80600200
test r13b, r13b
cmovne edi, eax
or edi, 0xc000
cmp byte [rsp + 0x49], 0
je 0x14002e7d3
or edi, 0x803080
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, [0x140150f94]
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 4
jne 0x14002e8b0
lea rax, [rbp + 0x3d0]
mov qword [rbp + 0x60], rax
lea rdx, [0x140150f94]
mov rcx, r15
call fcn.1400392c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x3d0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.1400204f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e895
cmp dword [rbx + 0x10], 0
jl 0x14002e887
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e887
call fcn.140002400
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002e87d
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x78], rax
jmp 0x14002e895
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.1400022b0
nop
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e8b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [0x140151128]
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 4
jne 0x14002e98d
lea rax, [rbp + 0x450]
mov qword [rbp - 0x58], rax
lea rdx, [0x140151128]
mov rcx, r15
call fcn.1400392c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x450]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x158]
call fcn.1400204f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x80]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e972
cmp dword [rbx + 0x10], 0
jl 0x14002e964
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e964
call fcn.140002400
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002e95a
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x80], rax
jmp 0x14002e972
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x80]
call fcn.1400022b0
nop
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e98d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.referer
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 4
jne 0x14002ea6a
lea rax, [rbp + 0x410]
mov qword [rbp - 0x58], rax
lea rdx, str.referer
mov rcx, r15
call fcn.1400392c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x410]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.1400204f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x68]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002ea4f
cmp dword [rbx + 0x10], 0
jl 0x14002ea41
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002ea41
call fcn.140002400
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002ea37
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x68], rax
jmp 0x14002ea4f
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x68]
call fcn.1400022b0
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ea6a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.acceptTypes
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 4
jne 0x14002eb47
lea rax, [rbp + 0x390]
mov qword [rbp - 0x58], rax
lea rdx, str.acceptTypes
mov rcx, r15
call fcn.1400392c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x390]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.1400204f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002eb2c
cmp dword [rbx + 0x10], 0
jl 0x14002eb1e
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002eb1e
call fcn.140002400
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002eb14
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x70], rax
jmp 0x14002eb2c
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x70]
call fcn.1400022b0
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002eb47
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x70]
cmp dword [rax - 0x10], 0
mov ecx, 0
cmove rax, rcx
mov qword [rbp + 0x260], rax
mov qword [rbp + 0x268], rcx
mov rax, qword [rbp - 0x68]
cmp dword [rax - 0x10], ecx
cmove rax, rcx
mov r9, qword [rbp - 0x80]
cmp dword [r9 - 0x10], ecx
cmove r9, rcx
mov rdx, qword [rbp - 0x78]
cmp dword [rdx - 0x10], ecx
cmove rdx, rcx
mov r13d, 1
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x260]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov qword [rbp - 0x58], rax
lea rcx, [0x1401bc9a8]
test rax, rax
mov rax, qword [0x1401bc9a8]
jne 0x14002ecf2
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x80], rax
lea rdx, str.HttpOpenRequest_Failed
test rdx, 0xffffffffffff0000
jne 0x14002ec13
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002ec20
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.1400025a0
jmp 0x14002ec20
lea rcx, [rbp + 0x80]
call fcn.140003350
nop
lea rdx, [rbp + 0x80]
mov rcx, r12
call fcn.14002b000
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ec50
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ec69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ec82
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ec9b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ecb4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ecce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ece8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [0x140151130]
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 4
jne 0x14002eec6
lea rdx, [0x140151168]
lea rcx, [rbp + 0xe8]
call fcn.140002100
nop
lea rax, [rbp + 0x370]
mov qword [rbp + 8], rax
lea rdx, [0x140151130]
mov rcx, r15
call fcn.1400392c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x370]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.1400204f0
mov rdi, rax
lea rcx, [0x1401bc9a8]
mov rdx, qword [0x1401bc9a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp + 0x78], rax
lea rdx, str.Content_Type:
test rdx, 0xffffffffffff0000
jne 0x14002edb0
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002edba
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.1400025a0
jmp 0x14002edba
lea rcx, [rbp + 0x78]
call fcn.140003350
nop
mov r8, rdi
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x198]
call fcn.1400207c0
nop
lea r8, [rbp + 0xe8]
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.1400207c0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x58]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002ee3e
cmp dword [rbx + 0x10], 0
jl 0x14002ee2f
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002ee2f
call fcn.140002400
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002ee24
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x58], rax
jmp 0x14002ee3e
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.1400022b0
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ee5a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ee76
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ee8f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002eeab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xe8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002eec6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.additionalRequestHeaders
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 4
jne 0x14002ef87
lea rax, [rbp + 0x3b0]
mov qword [rbp + 8], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r15
call fcn.1400392c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x3b0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1b8]
call fcn.1400204f0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.140010150
nop
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ef46
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.140002400
add rax, 0x18
mov qword [rbp + 0xd8], rax
lea rcx, [rbp + 0xd8]
call fcn.140031aa0
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ef87
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, str.postData
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 4
jne 0x14002f068
lea rax, [rbp + 0x3f0]
mov qword [rbp + 8], rax
lea rdx, str.postData
mov rcx, r15
call fcn.1400392c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x3f0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.1400204f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002f04d
cmp dword [rbx + 0x10], 0
jl 0x14002f03e
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002f03e
call fcn.140002400
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002f033
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x70], rax
jmp 0x14002f04d
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.1400022b0
nop
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f068
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140002400
add rax, 0x18
mov qword [rbp - 0x60], rax
mov rax, qword [rsp + 0x70]
mov ecx, dword [rax - 0x10]
lea r14d, [rcx + rcx]
cmp byte [rsp + 0x48], 0
je 0x14002f0c8
mov dword [rbp], 0x2710
mov r9d, 4
lea r8, [rbp]
lea edx, [r9 + 2]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp]
lea edx, [r9 + 1]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x58]
mov rdi, rax
cmp dword [rax - 0x10], 0
mov ecx, 0
cmove rdi, rcx
mov rcx, qword [rbp - 0x60]
mov edx, r13d
sub edx, dword [rcx - 8]
mov ecx, dword [rcx - 0xc]
or ecx, edx
jge 0x14002f0fe
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.1400023a0
mov rax, qword [rsp + 0x58]
mov ebx, dword [rax - 0x10]
call fcn.140028e90
mov rcx, rax
mov dword [rsp + 0x28], r14d
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8, rdi
mov rdi, qword [rbp - 0x58]
mov rdx, rdi
call fcn.1400402e0
test eax, eax
jne 0x14002f39b
mov eax, dword [0x1401c4d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
xor ebx, ebx
cmp ecx, 9
jne 0x14002f176
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rcx, [rbp + 0xe0]
call fcn.1400265c0
nop
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [0x1401c4d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 8
jne 0x14002f1cf
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
cmp byte [rsp + 0x40], 0
je 0x14002f1e0
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x30], rax
lea rdx, str.HttpSendRequest_Failed_with:
test rdx, 0xffffffffffff0000
jne 0x14002f229
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002f233
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.1400025a0
jmp 0x14002f233
lea rcx, [rbp + 0x30]
call fcn.140003350
nop
lea r8, [rbp + 0xe0]
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x128]
call fcn.1400207c0
nop
mov rdx, rax
mov rcx, r12
call fcn.14002b000
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x128]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f277
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f290
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f2ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f2c5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f2df
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f2f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f312
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f32b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f344
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f35d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f377
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f391
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
lea rdx, str.noResponse
mov rcx, r15
call fcn.1400392c0
cmp byte [rax + 8], 5
jne 0x14002f65b
lea rdx, str.noResponse
mov rcx, r15
call fcn.1400392c0
mov rcx, rax
call fcn.140038c70
test al, al
je 0x14002f65b
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401c4d60]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 8
jne 0x14002f482
test r8d, r8d
je 0x14002f482
nop dword [rax]
mov eax, r8d
and eax, 0x80000001
jge 0x14002f421
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14002f438
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401c4d60], eax
jmp 0x14002f447
lea r8d, [r8*2 + 1]
mov dword [0x1401c4d60], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x14002f46b
sub ecx, 2
je 0x14002f46f
dec ecx
je 0x14002f472
jmp 0x14002f47d
add r8d, 2
inc r8d
add r8d, 2
mov dword [0x1401c4d60], r8d
test r8d, r8d
jne 0x14002f410
cmp byte [rsp + 0x40], 0
je 0x14002f493
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rbp + 0x100]
and eax, 0xffffff00
mov dword [rbp + 0x100], eax
btr eax, 8
mov dword [rbp + 0x100], eax
xor ecx, ecx
mov qword [rbp + 0x108], rcx
mov eax, dword [rbp + 0x1d0]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1d0], eax
mov qword [rbp + 0x1d8], rcx
mov byte [rbp + 0x1c8], 1
lea rdx, str.result
lea rcx, [rbp + 0xf8]
call fcn.1400390c0
mov rcx, rax
lea rdx, [rbp + 0x1c8]
call fcn.140038730
nop
lea rcx, [rbp + 0x1c8]
call fcn.140038680
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x270]
call fcn.1400383d0
nop
lea rdx, str.content
lea rcx, [rbp + 0xf8]
call fcn.1400390c0
mov rcx, rax
lea rdx, [rbp + 0x270]
call fcn.140038730
nop
lea rcx, [rbp + 0x270]
call fcn.140038680
lea rdx, [rbp + 0xf8]
mov rcx, r12
call fcn.140038520
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0xf8]
call fcn.140038680
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f585
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f59f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f5b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f5d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f5eb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f604
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f61d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f637
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f651
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
mov byte [rbp + 0x12e0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x12e1]
call fcn.1400d3710
mov dword [rbp + 0x90], 0x400
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x14002f855
mov ecx, dword [0x1401c4d60]
imul ecx, ecx
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub ecx, edx
cmp ecx, 2
jne 0x14002f6c1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [0x1401c4d60]
imul ecx, ecx
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0x13
jne 0x14002f715
lea eax, [rcx + 0x38]
mov r8d, 0x21
test r8d, r8d
je 0x14002f70c
mov ecx, r8d
cdq
idiv r8d
mov r8d, edx
mov eax, ecx
test ecx, ecx
jne 0x14002f6f7
add eax, r8d
mov dword [0x1401c4d60], eax
cmp byte [rsp + 0x40], 0
je 0x14002f726
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x130]
call fcn.140003170
nop
mov rdx, rax
mov rcx, r12
call fcn.14002b000
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f766
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f77f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f799
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f7b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f7cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f7e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f7fe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f817
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f831
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f84b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14002f9b7
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002f888
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x200]
call fcn.140003170
nop
mov rdx, rax
mov rcx, r12
call fcn.14002b000
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x200]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f8c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f8e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f8fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f915
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f92e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f947
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f960
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f979
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f993
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f9ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
xor ecx, ecx
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x90]
lea r8, [rbp + 0x12e0]
lea edx, [rcx + 0x13]
mov rcx, rdi
call rax
test eax, eax
jne 0x14002fb25
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002f9f6
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x140]
call fcn.140003170
nop
mov rdx, rax
mov rcx, r12
call fcn.14002b000
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x140]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fa36
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fa4f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fa69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fa83
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fa9c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fab5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002face
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fae7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fb01
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fb1b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x12e0]
lea rcx, [rsp + 0x50]
call fcn.140003350
nop
xor bl, bl
lea rdx, str.acceptedStatusCodes
mov rcx, r15
call fcn.1400392c0
mov r14, rax
movzx eax, byte [rax + 8]
test al, al
je 0x14002fdd9
cmp al, 6
je 0x14002fdd9
cmp al, 7
jne 0x14002fd98
xor eax, eax
mov r15d, eax
mov rcx, r14
call fcn.140038cf0
test eax, eax
jle 0x140030002
nop word [rax + rax]
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
mov r8d, r15d
lea rdx, [0x14014d9a0]
lea rcx, [rbp + 0x68]
call fcn.140031eb0
mov rdi, qword [rbp + 0x68]
mov rdx, rdi
mov rcx, r14
call fcn.1400392c0
mov rdx, rdi
mov rcx, r14
cmp byte [rax + 8], 4
jne 0x14002fc63
lea rax, [rbp + 0x430]
mov qword [rbp + 8], rax
call fcn.1400392c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x430]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.1400204f0
nop
mov rdx, qword [rax]
xor r8d, r8d
mov eax, r8d
test rdx, rdx
setne al
test eax, eax
je 0x14002fd61
mov rax, qword [rsp + 0x50]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002fc4d
add rax, 2
test cx, cx
jne 0x14002fc36
mov eax, r8d
jmp 0x14002fc52
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x1a0]
jmp 0x14002fd18
call fcn.1400392c0
cmp byte [rax + 8], 1
jne 0x14002fd34
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x150], rbx
mov rdx, rdi
mov rcx, r14
call fcn.1400392c0
mov rcx, rax
call fcn.1400388f0
mov r8d, eax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xf0]
call fcn.140020700
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fccc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
mov ecx, r8d
mov rax, qword [rbp + 0xf0]
test rax, rax
setne cl
test ecx, ecx
je 0x14002fd8d
mov rcx, qword [rsp + 0x50]
sub rax, rcx
nop
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002fd07
add rcx, 2
test dx, dx
jne 0x14002fcf0
mov eax, r8d
jmp 0x14002fd0c
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xf0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fd2c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002fd6c
mov rdi, qword [rbp + 0x68]
lea rdx, [rdi - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fd48
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r15d
mov rcx, r14
call fcn.140038cf0
cmp r15d, eax
jge 0x140030002
jmp 0x14002fba0
mov ecx, 0x80004005
call fcn.140001920
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ffef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002ffef
mov ecx, 0x80004005
call fcn.140001920
nop
xor r14d, r14d
mov ecx, r14d
mov rdx, qword [rsp + 0x50]
lea r8, [0x1401511d0]
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14002fdca
cmp rcx, 4
jne 0x14002fdb0
mov eax, r14d
jmp 0x14002fdcf
sbb eax, eax
or eax, 1
test eax, eax
sete bl
jmp 0x14002fffa
xor r9d, r9d
mov edi, r9d
mov rcx, r14
call fcn.140038cf0
test eax, eax
jle 0x14002ff7f
nop
mov edx, edi
mov rcx, r14
call fcn.140038fd0
mov edx, edi
mov rcx, r14
cmp byte [rax + 8], 4
jne 0x14002fe81
lea rax, [rbp + 0x470]
mov qword [rbp + 8], rax
call fcn.140038fd0
mov rdx, qword [rax]
lea rcx, [rbp + 0x470]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.1400204f0
nop
mov rdx, qword [rax]
xor r9d, r9d
mov eax, r9d
test rdx, rdx
setne al
test eax, eax
je 0x14002ff66
mov rax, qword [rsp + 0x50]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002fe6b
add rax, 2
test cx, cx
jne 0x14002fe54
mov eax, r9d
jmp 0x14002fe70
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x1e0]
jmp 0x14002ff38
call fcn.140038fd0
cmp byte [rax + 8], 1
jne 0x14002ff53
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x110], rbx
mov edx, edi
mov rcx, r14
call fcn.140038fd0
mov rcx, rax
call fcn.1400388f0
mov r8d, eax
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0xb0]
call fcn.140020700
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fee9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r9d, r9d
mov ecx, r9d
mov rax, qword [rbp + 0xb0]
test rax, rax
setne cl
test ecx, ecx
je 0x14002ff71
mov rcx, qword [rsp + 0x50]
sub rax, rcx
nop dword [rax + rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002ff27
add rcx, 2
test dx, dx
jne 0x14002ff10
mov eax, r9d
jmp 0x14002ff2c
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ff4f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r9d, r9d
test bl, bl
jne 0x14002ff7f
inc edi
mov rcx, r14
call fcn.140038cf0
cmp edi, eax
jge 0x14002ff7c
jmp 0x14002fdf0
mov ecx, 0x80004005
call fcn.140001920
nop
mov ecx, 0x80004005
call fcn.140001920
nop
xor r9d, r9d
mov r14d, dword [0x1401c4d60]
mov eax, r14d
imul eax, r14d
and eax, 0x8000000f
jge 0x14002ff9b
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 0xa
jne 0x14002fff3
mov r8d, 0x8a
mov r11d, r9d
mov eax, r14d
cdq
sub eax, edx
sar eax, 1
mov edi, eax
test edi, edi
jle 0x14002ffe5
mov eax, r14d
cdq
and edx, 3
add eax, edx
sar eax, 2
mov r10, rdi
test eax, eax
jle 0x14002ffda
mov ecx, r9d
mov edx, eax
nop
add r8d, ecx
dec ecx
dec rdx
jne 0x14002ffd0
add r9d, r11d
dec r10
jne 0x14002ffc6
xor r9d, r9d
inc r11d
cmp r11d, r8d
jl 0x14002ffb3
jmp 0x14002fff3
mov r15, qword [rbp + 0x58]
xor r14d, r14d
mov rdi, qword [rbp - 0x58]
test bl, bl
jne 0x1400301af
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [0x1401c4d60]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 9
jne 0x14003003b
dec dword [0x1401c5b8c]
cmp byte [rsp + 0x40], 0
je 0x14003004c
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rax, [rbp + 0x5d8]
mov qword [rbp + 0x5d0], rax
mov r8d, 3
mov rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x5d0]
call fcn.14001ac80
nop
mov rcx, qword [rbp + 0x5d0]
call fcn.1400cf458
mov edx, eax
mov rcx, r12
call fcn.14002b250
mov dword [rsp + 0x44], r13d
lea rax, [rbp + 0x5d8]
mov rcx, qword [rbp + 0x5d0]
cmp rcx, rax
je 0x1400300a6
call fcn.1400cecbc
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400300c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400300d9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400300f3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003010d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030126
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003013f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030158
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030171
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003018b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400301a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
mov dword [rbp - 8], r14d
lea r9, [rbp - 8]
mov rcx, rdi
call fcn.14002e050
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov eax, dword [rbp - 8]
test eax, eax
je 0x1400302d2
mov ecx, eax
call fcn.1400cd918
mov rbx, rax
test rax, rax
je 0x14003026f
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14003022f
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14003022f
mov qword [rsp + 0x20], r14
lea r9, [rbp - 8]
mov r8, rbx
mov edx, 0x16
mov rcx, rdi
call rax
mov rdx, rbx
lea rcx, [rbp + 0x1b0]
call fcn.14002a4e0
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.140002220
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030267
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400cf37c
mov r11d, dword [0x1401c4d60]
lea ecx, [r11 + 1]
imul ecx, r11d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0x11
jne 0x1400302d2
mov r8d, r14d
lea r9, [rbp + 0x7a0]
mov r10d, r11d
nop dword [rax + rax]
lea ecx, [r8 + r11]
mov eax, r10d
cdq
idiv ecx
mov dword [r9], edx
inc r8d
dec r10d
lea r9, [r9 + 4]
movsxd rax, r8d
cmp rax, 0xba
jb 0x1400302b0
cmp byte [rsp + 0x48], 0
je 0x140030d34
mov eax, dword [rbp + 0x20]
and eax, 0xffffff00
mov dword [rbp + 0x20], eax
btr eax, 8
mov dword [rbp + 0x20], eax
mov qword [rbp + 0x28], r14
mov rdx, r14
mov rax, qword [rsp + 0x50]
lea r8, [0x1401511e8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14003032a
cmp rdx, 4
jne 0x140030310
mov ecx, r14d
jmp 0x14003032f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140030539
mov rdx, r14
lea r8, [0x1401511f8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14003036a
cmp rdx, 4
jne 0x140030350
mov ecx, r14d
jmp 0x14003036f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140030539
mov rdx, r14
lea r8, [0x1401511f0]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x1400303aa
cmp rdx, 4
jne 0x140030390
mov ecx, r14d
jmp 0x1400303af
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140030539
mov rdx, r14
lea r8, [0x140151218]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x1400303ea
cmp rdx, 4
jne 0x1400303d0
mov eax, r14d
jmp 0x1400303ef
sbb eax, eax
or eax, 1
test eax, eax
setne al
test al, al
je 0x140030539
lea rdx, [rbp + 0x18]
mov rcx, r12
call fcn.140038520
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x18]
call fcn.140038680
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030430
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003044a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030463
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003047d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030497
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400304b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400304c9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400304e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400304fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030515
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003052f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
lea rcx, [0x1401bc9a8]
mov rax, qword [0x1401bc9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x10], rax
mov rcx, qword [rbp - 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002400
add rax, 0x18
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x10]
call fcn.1400255f0
mov rbx, qword [rbp + 0x10]
cmp dword [rbx - 0x10], 0
jl 0x140030bc9
lea rdx, str.location:
mov rcx, rbx
call fcn.1400cefc8
mov rdi, rax
test rax, rax
je 0x140030bc9
sub rdi, rbx
sar rdi, 1
cmp edi, 0xffffffff
je 0x140030bc9
test edi, edi
js 0x1400305d1
cmp edi, dword [rbx - 0x10]
jg 0x1400305d1
movsxd rax, edi
lea rcx, [rbx + rax*2]
lea rdx, [0x140151168]
call fcn.1400cefc8
test rax, rax
je 0x1400305d1
sub rax, rbx
sar rax, 1
jmp 0x1400305d3
mov eax, esi
sub eax, edi
mov r9d, eax
mov r8d, edi
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 0x10]
call fcn.14000f5a0
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140002220
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030614
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x10]
cmp dword [rbx - 0x10], 0
jl 0x140030a5a
lea rdx, str.http
mov rcx, rbx
call fcn.1400cefc8
test rax, rax
je 0x140030a5a
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x140030a5a
mov r8d, dword [rbx - 0x10]
sub r8d, eax
lea rdx, [rbp + 0x220]
lea rcx, [rbp - 0x10]
call fcn.14001a5c0
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140002220
nop
mov rdx, qword [rbp + 0x220]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030689
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp + 0x1f0]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1f0], eax
mov qword [rbp + 0x1f8], r14
mov byte [rbp + 0x1e8], 1
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x18]
call fcn.1400390c0
mov rcx, rax
lea rdx, [rbp + 0x1e8]
call fcn.140038730
nop
lea rcx, [rbp + 0x1e8]
call fcn.140038680
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x4d0]
call fcn.140020590
nop
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.140038460
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x18]
call fcn.1400390c0
mov rcx, rax
lea rdx, [rbp + 0x2e0]
call fcn.140038730
nop
lea rcx, [rbp + 0x2e0]
call fcn.140038680
nop
cmp qword [rbp + 0x4e8], 0x10
jb 0x14003073c
mov rcx, qword [rbp + 0x4d0]
call fcn.1400ce2b0
mov qword [rbp + 0x4e8], 0xf
mov qword [rbp + 0x4e0], r14
mov byte [rbp + 0x4d0], 0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x4f0]
call fcn.140020590
nop
mov rdx, rax
lea rcx, [rbp + 0x330]
call fcn.140038460
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x18]
call fcn.1400390c0
mov rcx, rax
lea rdx, [rbp + 0x330]
call fcn.140038730
nop
lea rcx, [rbp + 0x330]
call fcn.140038680
nop
cmp qword [rbp + 0x508], 0x10
jb 0x1400307b9
mov rcx, qword [rbp + 0x4f0]
call fcn.1400ce2b0
mov qword [rbp + 0x508], 0xf
mov qword [rbp + 0x500], r14
mov byte [rbp + 0x4f0], 0
mov ecx, dword [0x1401c4d60]
imul ecx, ecx
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 0xb
jne 0x14003080b
mov ecx, 4
call fcn.1400cea88
mov ecx, dword [0x1401c4d60]
mov dword [rax], ecx
mov rcx, qword [rsp + 0x50]
mov edx, r13d
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x14003082e
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400023a0
mov rcx, qword [rsp + 0x50]
call fcn.1400cf3a4
mov ecx, dword [rbp + 0x210]
and ecx, 0xffffff01
or ecx, 1
mov dword [rbp + 0x210], ecx
mov qword [rbp + 0x218], r14
mov dword [rbp + 0x208], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x18]
call fcn.1400390c0
mov rcx, rax
lea rdx, [rbp + 0x208]
call fcn.140038730
nop
lea rcx, [rbp + 0x208]
call fcn.140038680
mov r8d, dword [0x1401c4d60]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 8
jne 0x1400308eb
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x141
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400cd918
mov rcx, rax
call fcn.1400cf37c
lea rdx, [rbp + 0x18]
mov rcx, r12
call fcn.140038520
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030915
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003092e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x18]
call fcn.140038680
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030951
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003096b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030984
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003099e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400309b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400309d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400309ea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030a03
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030a1c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030a36
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030a50
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
lea rdx, [rbp + 0x18]
mov rcx, r12
call fcn.140038520
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030a84
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030a9d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x18]
call fcn.140038680
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030ac0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030ada
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030af3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030b0d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030b27
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030b40
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030b59
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030b72
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030b8b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030ba5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030bbf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
lea rdx, [rbp + 0x18]
mov rcx, r12
call fcn.140038520
mov dword [rsp + 0x44], r13d
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030bef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030c08
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x18]
call fcn.140038680
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030c2b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030c45
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030c5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030c78
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030c92
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030cab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030cc4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030cdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030cf6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030d10
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030d2a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x14002e318
lea rcx, [rbp - 0x28]
call fcn.14001a960
nop
mov dword [rbp - 0x40], r14d
mov r14, qword [rbp - 0x58]
lea rcx, [rbp - 0x28]
call fcn.140031d80
mov rdi, rax
lea rdx, [rax + 0x400]
lea rcx, [rbp - 0x28]
call fcn.140031c80
xor eax, eax
mov dword [rbp - 0x40], eax
mov rdx, rdi
lea rcx, [rbp - 0x28]
call fcn.140031d90
mov rbx, rax
call fcn.140028e90
mov rcx, rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r14
call fcn.14003fde0
mov ebx, eax
call fcn.14002a7c0
test al, al
jne 0x140030dc6
xor eax, eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test ebx, ebx
je 0x14003193d
mov edx, dword [rbp - 0x40]
add rdx, rdi
lea rcx, [rbp - 0x28]
call fcn.140031c80
mov r9d, dword [0x1401c4d60]
mov eax, r9d
imul eax, r9d
imul eax, r9d
and eax, 0x8000000f
jge 0x140030dfd
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 0xe
jne 0x140030e30
mov eax, 0x73
mov r8d, 0xa9
nop dword [rax]
test r8d, r8d
je 0x140030e25
mov ecx, r8d
cdq
idiv r8d
mov r8d, edx
mov eax, ecx
test ecx, ecx
jne 0x140030e10
lea r9d, [r8 + rax]
mov dword [0x1401c4d60], r9d
call fcn.14002a710
test al, al
jne 0x140030eb2
test r9d, r9d
je 0x140030eb2
nop
mov eax, r9d
and eax, 0x80000001
jge 0x140030e51
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x140030e68
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
mov dword [0x1401c4d60], eax
jmp 0x140030e77
lea r9d, [r9*2 + 1]
mov dword [0x1401c4d60], r9d
mov eax, 0x55555556
imul r9d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r9d
sub ecx, eax
je 0x140030e9b
sub ecx, 2
je 0x140030e9f
dec ecx
je 0x140030ea2
jmp 0x140030ead
add r9d, 2
inc r9d
add r9d, 2
mov dword [0x1401c4d60], r9d
test r9d, r9d
jne 0x140030e40
cmp dword [rbp - 0x40], 0
jne 0x140030d46
mov byte [rbp + 0xed0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xed1]
call fcn.1400d3710
mov dword [rbp + 0x94], 0x400
xor edi, edi
mov ebx, edi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140030f0a
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x94]
lea r8, [rbp + 0xed0]
mov edx, 0x1d
mov rcx, r14
call rbx
test eax, eax
je 0x1400311e1
lea rdx, [rbp + 0xed0]
lea rcx, [rbp + 0x88]
call fcn.14002a4e0
nop
lea rdx, str.gzip
lea rcx, [rbp + 0x88]
call fcn.14001a920
test al, al
je 0x140031124
lea rcx, [rbp + 0x228]
call fcn.14001a960
nop
lea rcx, [rbp - 0x28]
call fcn.140031d80
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x28]
call fcn.140031d90
mov rcx, rax
lea r8, [rbp + 0x228]
mov rdx, rbx
call fcn.14002a940
test eax, eax
jne 0x140031087
call fcn.14002a750
test al, al
jne 0x140031023
mov word [rbp + 0x16f0], di
xor edx, edx
mov r8d, 0x5b1e
lea rcx, [rbp + 0x16f2]
call fcn.1400d3710
mov r10, rdi
mov r9, rdi
mov r8, rdi
nop dword [rax]
test r10, r10
je 0x140030ffd
test r8, r8
je 0x140030ffd
lea rdx, [r8 + r9]
lea rax, [r8 + r9]
movzx ecx, word [rbp + rax*2 + 0x1618]
inc cx
add cx, word [rbp + rdx*2 + 0x16ee]
mov word [rbp + rdx*2 + 0x16f0], cx
inc r8
cmp r8, 0x6c
jl 0x140030fd0
inc r10
add r9, 0x6c
cmp r9, 0x2d90
jl 0x140030fc6
movsx eax, word [rbp + 0x720e]
mov dword [0x1401c4d60], eax
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14003103d
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x180]
call fcn.140003170
nop
mov rdx, rax
mov rcx, r12
call fcn.14002b000
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x180]
call fcn.1400021a0
nop
lea rcx, [rbp + 0x228]
call fcn.14002a530
nop
lea rcx, [rbp + 0x88]
jmp 0x1400319e0
lea rdx, [rbp + 0x228]
lea rcx, [rbp - 0x28]
call fcn.140031b60
call fcn.14002a710
test al, al
jne 0x140031118
mov r14d, edi
lea rdi, [rbp + 0xa90]
xor r15d, r15d
nop dword [rax]
mov r10d, r15d
nop word [rax + rax]
lea ebx, [r10 + 1]
lea ecx, [r14 + 1]
mov r8d, dword [0x1401c4d60]
mov eax, r8d
cdq
idiv ecx
mov r9d, edx
mov ecx, r8d
sub ecx, r14d
imul r9d, ecx
mov eax, r8d
cdq
idiv ebx
add r9d, eax
sub r9d, r10d
mov edx, r9d
lea rcx, [0x14014d9a0]
call fcn.1400cf1dc
mov r10d, ebx
add rdi, 4
cmp ebx, 0x1e
jl 0x1400310c0
inc r14d
cmp r14d, 9
jl 0x1400310b0
mov r15, qword [rbp + 0x58]
xor edi, edi
lea rcx, [rbp + 0x228]
call fcn.14002a530
mov r9d, dword [0x1401c4d60]
lea ecx, [r9 + 1]
imul ecx, r9d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0x11
jne 0x1400311d1
mov r14d, edi
lea rdi, [rbp + 0x710]
xor r15d, r15d
mov r10d, r15d
nop word [rax + rax]
lea ebx, [r10 + 1]
lea ecx, [r14 + 1]
mov eax, r9d
cdq
idiv ecx
mov r8d, edx
mov ecx, r9d
sub ecx, r14d
imul r8d, ecx
mov eax, r9d
cdq
idiv ebx
add r8d, eax
sub r8d, r10d
mov edx, r8d
lea rcx, [0x14014d9a0]
call fcn.1400cf1dc
mov r10d, ebx
add rdi, 4
cmp ebx, 9
jge 0x1400311bb
mov r9d, dword [0x1401c4d60]
jmp 0x140031170
inc r14d
cmp r14d, 4
jge 0x1400311cd
mov r9d, dword [0x1401c4d60]
jmp 0x140031161
mov r15, qword [rbp + 0x58]
lea rcx, [rbp + 0x88]
call fcn.1400021a0
mov r14, qword [rbp - 0x58]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x1400311fb
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
xor dil, dil
lea rdx, [0x140150f50]
mov rcx, r15
call fcn.1400392c0
mov rcx, rax
call fcn.140039790
test al, al
je 0x1400312a5
lea rax, [rbp + 0x4b0]
mov qword [rbp + 8], rax
lea rdx, [0x140150f50]
mov rcx, r15
call fcn.1400392c0
mov rcx, rax
call fcn.140003120
mov rdx, rax
lea rcx, [rbp + 0x4b0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.1400204f0
nop
lea rdx, str.base64
lea rcx, [rbp + 0xa0]
call fcn.14001a920
test al, al
je 0x14003127c
mov bl, 1
jmp 0x140031299
lea rdx, str.binary
lea rcx, [rbp + 0xa0]
call fcn.14001a920
movzx edi, dil
test al, al
cmovne edi, r13d
lea rcx, [rbp + 0xa0]
call fcn.1400021a0
lea rcx, [rbp - 0x38]
call fcn.1400020c0
nop
test bl, bl
je 0x1400313a8
lea rcx, [rbp - 0x28]
call fcn.140031d80
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x28]
call fcn.140031d90
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x1c0]
call fcn.140020390
nop
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.1400021e0
nop
lea rcx, [rbp + 0x1c0]
call fcn.1400021a0
lea rcx, [rbp + 0x120]
call fcn.140028210
nop
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.14001a8e0
movzx ebx, al
lea rcx, [rbp + 0x120]
call fcn.1400021a0
test bl, bl
je 0x140031360
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x118]
call fcn.140003170
nop
mov rdx, rax
mov rcx, r12
call fcn.14002b000
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x118]
call fcn.1400021a0
nop
lea rcx, [rbp - 0x38]
jmp 0x1400319e0
call fcn.14002a780
test al, al
jne 0x1400314f4
mov ecx, dword [0x1401c4d60]
mov edx, ecx
test ecx, ecx
je 0x140031399
dec edx
je 0x14003138a
inc ecx
mov dword [0x1401c4d60], ecx
jmp 0x1400314f4
xor r14d, r14d
mov dword [0x1401c4d60], r14d
jmp 0x1400314f7
mov dword [0x1401c4d60], 2
jmp 0x1400314f4
test dil, dil
jne 0x1400314f4
lea rcx, [rbp - 0x28]
call fcn.140031d80
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x28]
call fcn.140031d90
cmp byte [rax], dil
je 0x1400313eb
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x28]
call fcn.140031c80
mov rdx, rbx
lea rcx, [rbp - 0x28]
call fcn.140031d90
mov byte [rax], dil
lea rcx, [rbp - 0x28]
call fcn.140031d80
cmp rax, 3
jbe 0x140031480
xor edx, edx
lea rcx, [rbp - 0x28]
call fcn.140031d90
cmp byte [rax], 0xef
jne 0x140031480
mov rdx, r13
lea rcx, [rbp - 0x28]
call fcn.140031d90
cmp byte [rax], 0xbb
jne 0x140031480
mov edx, 2
lea rcx, [rbp - 0x28]
call fcn.140031d90
cmp byte [rax], 0xbf
jne 0x140031480
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp - 0x28]
call fcn.140031c70
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x310]
call fcn.140031e30
mov rbx, qword [rax]
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp - 0x28]
call fcn.140031c70
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp - 0x28]
call fcn.140031da0
xor edx, edx
lea rcx, [rbp - 0x28]
call fcn.140031d90
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.140003170
nop
mov rdx, rax
lea rcx, [rbp - 0x38]
call fcn.1400021e0
nop
lea rcx, [rbp + 0x138]
call fcn.1400021a0
mov ecx, dword [0x1401c4d60]
lea edx, [rcx + 2]
lea eax, [rcx + 1]
imul edx, eax
imul edx, ecx
and edx, 0x80000003
jge 0x1400314d5
dec edx
or edx, 0xfffffffc
inc edx
cmp edx, 1
jne 0x1400314f4
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
jmp 0x1400314f7
xor r14d, r14d
xor bl, bl
lea rdx, str.outputFile
mov rcx, r15
call fcn.1400392c0
mov rcx, rax
call fcn.140039790
test al, al
je 0x140031684
mov r8d, dword [0x1401c4d60]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
cmp ecx, 3
jne 0x140031581
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x2f4
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400cd918
mov rcx, rax
call fcn.1400cf37c
lea rax, [rbp + 0x490]
mov qword [rbp + 0xd0], rax
lea rdx, str.outputFile
mov rcx, r15
call fcn.1400392c0
mov rcx, rax
call fcn.140003120
mov rdx, rax
lea rcx, [rbp + 0x490]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.1400204f0
nop
lea rcx, [rbp + 0x38]
call fcn.14000eb70
test al, al
jne 0x14003167b
test dil, dil
je 0x140031647
mov qword [rbp + 0x98], r14
lea rcx, [rbp + 0x38]
call fcn.140003120
mov rdx, rax
lea r8, [0x1401512d0]
lea rcx, [rbp + 0x98]
call fcn.1400d1040
test eax, eax
jne 0x14003167b
mov rdi, qword [rbp + 0x98]
test rdi, rdi
je 0x14003167b
lea rcx, [rbp - 0x28]
call fcn.140031d80
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x28]
call fcn.140031d90
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, r13
call fcn.1400d1474
mov rcx, qword [rbp + 0x98]
call fcn.1400d02d0
mov bl, 1
jmp 0x14003167b
lea rax, [rbp + 0x148]
mov qword [rbp + 0xd0], rax
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x148]
call fcn.140003130
nop
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.1400296c0
movzx ebx, bl
test al, al
cmovne ebx, r13d
lea rcx, [rbp + 0x38]
call fcn.1400021a0
xor edx, edx
lea rcx, [rbp + 0xb8]
call fcn.140038310
nop
mov dl, 1
lea rcx, [rbp + 0x288]
call fcn.140038500
nop
lea rdx, str.result
lea rcx, [rbp + 0xb8]
call fcn.1400390b0
mov rcx, rax
lea rdx, [rbp + 0x288]
call fcn.140038730
nop
lea rcx, [rbp + 0x288]
call fcn.140038680
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x38]
call fcn.140027080
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x510]
call fcn.140020590
nop
mov rdx, rax
lea rcx, [rbp + 0x2a8]
call fcn.140038460
nop
lea rdx, str.content
lea rcx, [rbp + 0xb8]
call fcn.1400390b0
mov rcx, rax
lea rdx, [rbp + 0x2a8]
call fcn.140038730
nop
lea rcx, [rbp + 0x2a8]
call fcn.140038680
nop
lea rcx, [rbp + 0x510]
call fcn.1400013b0
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x570]
call fcn.140020590
nop
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140038460
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xb8]
call fcn.1400390b0
mov rcx, rax
lea rdx, str.headers
call fcn.1400390b0
mov rcx, rax
lea rdx, [rbp + 0x2c8]
call fcn.140038730
nop
lea rcx, [rbp + 0x2c8]
call fcn.140038680
nop
lea rcx, [rbp + 0x570]
call fcn.1400013b0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x550]
call fcn.140020590
nop
mov rdx, rax
lea rcx, [rbp + 0x2f8]
call fcn.140038460
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xb8]
call fcn.1400390b0
mov rcx, rax
lea rdx, str.httpCode
call fcn.1400390b0
mov rcx, rax
lea rdx, [rbp + 0x2f8]
call fcn.140038730
nop
lea rcx, [rbp + 0x2f8]
call fcn.140038680
nop
lea rcx, [rbp + 0x550]
call fcn.1400013b0
lea rdx, str.empty
lea rcx, [rbp + 0x5b0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.140038460
nop
lea rdx, str.noData
lea rcx, [rbp + 0xb8]
call fcn.1400390b0
mov rcx, rax
lea rdx, [rbp + 0x318]
call fcn.140038730
nop
lea rcx, [rbp + 0x318]
call fcn.140038680
nop
lea rcx, [rbp + 0x5b0]
call fcn.1400013b0
lea rdx, str.outputFile
mov rcx, r15
call fcn.1400392c0
mov rcx, rax
call fcn.140039790
test al, al
je 0x140031913
movzx edx, bl
lea rcx, [rbp + 0x348]
call fcn.140038500
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x590]
call fcn.140001370
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x530]
call fcn.140031ee0
nop
mov rdx, rax
lea rcx, [rbp + 0xb8]
call fcn.1400393d0
mov rcx, rax
lea rdx, [rbp + 0x348]
call fcn.140038730
nop
lea rcx, [rbp + 0x530]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x590]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x348]
call fcn.140038680
lea rdx, [rbp + 0xb8]
mov rcx, r12
call fcn.140038520
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0xb8]
call fcn.140038680
nop
lea rcx, [rbp - 0x38]
jmp 0x1400319e0
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401c4d60]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0x12
jne 0x1400319aa
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x63
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400cd918
mov rcx, rax
call fcn.1400cf37c
cmp byte [rsp + 0x40], 0
je 0x1400319bb
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0x60]
call fcn.140003170
nop
mov rdx, rax
mov rcx, r12
call fcn.14002b000
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x60]
call fcn.1400021a0
nop
lea rcx, [rbp - 0x28]
call fcn.14002a530
nop
lea rcx, [rbp - 0x48]
call fcn.1400021a0
nop
lea rcx, [rsp + 0x50]
call fcn.1400021a0
nop
lea rcx, [rbp - 0x60]
call fcn.1400021a0
nop
lea rcx, [rsp + 0x70]
call fcn.1400021a0
nop
lea rcx, [rsp + 0x58]
call fcn.1400021a0
nop
lea rcx, [rbp - 0x70]
call fcn.1400021a0
nop
lea rcx, [rbp - 0x68]
call fcn.1400021a0
nop
lea rcx, [rbp - 0x80]
call fcn.1400021a0
nop
lea rcx, [rbp - 0x78]
call fcn.1400021a0
nop
lea rcx, [rsp + 0x60]
call fcn.1400021a0
nop
lea rcx, [rsp + 0x78]
call fcn.1400021a0
nop
lea rcx, [rsp + 0x68]
call fcn.1400021a0
mov rax, r12
mov rcx, qword [rbp + 0x7210]
xor rcx, rsp
call fcn.1400ce2d0
add rsp, 0x7328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret