Function at 0x1400264a8
Capabilities:
Get disk size
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x12cd8]
mov eax, 0x12dd8
call fcn.1400c2070
sub rsp, rax
mov qword [rbp + 0x408], 0xfffffffffffffffe
mov rax, qword [0x1401a0e90]
xor rax, rsp
mov qword [rbp + 0x12cc0], rax
mov r12, r9
mov qword [rbp - 0x58], r8
mov r13, rdx
mov qword [rbp - 0x60], rdx
mov r15, rcx
mov qword [rbp - 0x28], rcx
mov qword [rbp + 0x450], rcx
xor r14d, r14d
mov dword [rsp + 0x44], r14d
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x70], rax
lea rdx, [0x14013a8fc]
mov rcx, r12
call fcn.14002f814
or rsi, 0xffffffffffffffff
cmp byte [rax + 8], 4
jne 0x1400265de
lea rax, [rbp + 0x348]
mov qword [rbp + 0xa0], rax
lea rdx, [0x14013a8fc]
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x360], 0xf
mov qword [rbp + 0x358], r14
mov byte [rbp + 0x348], r14b
cmp byte [rdx], r14b
jne 0x140026583
mov r8d, r14d
jmp 0x14002658f
mov r8, rsi
inc r8
cmp byte [rdx + r8], r14b
jne 0x140026586
lea rcx, [rbp + 0x348]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x348]
lea rcx, [rbp + 0x1d8]
call fcn.14001c49c
nop
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400265de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp + 0x70]
call fcn.1400207c0
mov rbx, qword [rbp + 0x70]
cmp dword [rbx - 0x10], r14d
jl 0x140026605
lea rdx, str.file:__
mov rcx, rbx
call fcn.1400bde0c
test rax, rax
jne 0x140026609
mov eax, esi
jmp 0x14002660f
sub rax, rbx
sar rax, 1
test eax, eax
sete dil
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002662f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test dil, dil
je 0x140026689
lea rdx, str.this_module_doesnt_support_file_request
lea rcx, [rbp + 0x1a0]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov r14d, 1
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
mov ecx, esi
lock xadd dword [rdx + 0x10], ecx
add ecx, esi
test ecx, ecx
jg 0x140029edf
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x140029edf
test r13, r13
jne 0x140026761
mov r9d, dword [0x1401a8d80]
mov ecx, r9d
imul ecx, r9d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
lea r14d, [r13 + 1]
cmp ecx, 0xf
jne 0x140026731
xor r15d, r15d
mov r10d, r15d
lea r8, [rbp + 0x1440]
mov dil, r9b
sub dil, r10b
mov ebx, r14d
mov r13d, 0xf
mov r11, r15
mov eax, r9d
cdq
idiv ebx
mov dword [rbp - 0x30], edx
mov r12d, r14d
mov esi, edx
mov eax, r9d
cdq
idiv r12d
mov ecx, eax
mov al, dil
imul cl
mov cl, al
mov al, sil
imul cl
mov byte [r11 + r8], al
add r12d, r14d
add r11, r14
cmp r11, 0x10
jl 0x1400266ef
add ebx, r14d
add r8, 0x10
sub r13, r14
jne 0x1400266de
add r10d, r14d
cmp r10d, 0xd
jl 0x1400266cf
or rsi, 0xffffffffffffffff
mov r15, qword [rbp - 0x28]
lea rdx, str.InternetOpen_Failed
lea rcx, [rbp + 0x1a8]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x1a8]
jmp 0x140029ec5
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov dword [rbp - 0x10], r14d
lea rax, [rbp + 0x298]
mov qword [rbp - 0x30], rax
lea rdx, [0x14013a8fc]
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x2b0], 0xf
mov qword [rbp + 0x2a8], r14
mov byte [rbp + 0x298], r14b
cmp byte [rdx], r14b
jne 0x1400267d9
mov r8, r14
jmp 0x1400267e5
mov r8, rsi
inc r8
cmp byte [rdx + r8], r14b
jne 0x1400267dc
lea rcx, [rbp + 0x298]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x298]
lea rcx, [rsp + 0x58]
call fcn.14001c49c
nop
lea r9, [rbp - 0x10]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.1400251f0
movzx eax, al
test eax, eax
jne 0x1400268c8
call fcn.140024994
mov r14d, 1
test al, al
jne 0x14002683d
add dword [0x1401a8d80], r14d
lea rdx, str.InternetCrackUrl_Failed
lea rcx, [rbp + 0x1c8]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x1c8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026883
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400268a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400268c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
mov byte [rsp + 0x42], r14b
lea rbx, str.redirectCheck
mov rdx, rbx
mov rcx, r12
call fcn.14002f814
lea rcx, [0x1401a9e10]
cmp rax, rcx
je 0x140026913
mov rdx, rbx
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 5
jne 0x140026913
mov rdx, rbx
mov rcx, r12
call fcn.14002f814
mov rcx, rax
call fcn.14002f3a0
mov byte [rsp + 0x42], al
mov byte [rsp + 0x41], r14b
mov edi, 0x50
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x1b8]
call fcn.140002bac
mov rbx, rax
mov qword [rbp - 0x30], rax
mov rcx, rax
call fcn.1400207c0
mov rcx, qword [rbx]
xor eax, eax
lea r14d, [rdi - 0x4f]
cmp dword [rcx - 0x10], eax
jl 0x140026970
lea rdx, str.https:__
call fcn.1400bde0c
test rax, rax
je 0x140026970
sub rax, qword [rbx]
sar rax, 1
test eax, eax
jne 0x140026970
mov byte [rsp + 0x41], r14b
mov edi, 0x1bb
mov rdx, qword [rbx]
sub rdx, 0x18
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002698d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.port
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], r14b
jne 0x1400269c2
lea rdx, str.port
mov rcx, r12
call fcn.14002f814
mov rcx, rax
call fcn.14002f094
mov ebx, eax
mov dword [rbp - 0x10], eax
xor eax, eax
jmp 0x1400269cf
mov ebx, dword [rbp - 0x10]
xor eax, eax
test ebx, ebx
cmove ebx, edi
mov dword [rbp - 0x10], ebx
mov byte [rsp + 0x40], al
mov r8d, ebx
lea rdx, [rsp + 0x50]
mov rcx, qword [rbp - 0x58]
call fcn.140025454
mov rdi, rax
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x140026baf
mov rax, qword [0x1401aae40]
test rax, rax
jne 0x140026ae3
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r10, rax
mov qword [rbp - 0x58], rax
mov r9d, dword [0x1401a8d80]
lea r8d, [r9 + 1]
imul r8d, r9d
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, 0x17
jne 0x140026aad
mov r10d, r14d
lea r11, [rbp + 0xbb0]
xor esi, esi
lea r13d, [rdi + 0xe]
mov r8, rsi
mov eax, r9d
cdq
idiv r10d
mov dword [rbp - 0x30], edx
mov edi, r14d
mov r15d, edx
mov eax, r9d
cdq
idiv edi
mov ecx, eax
mov al, r15b
imul cl
mov cl, al
mov al, r9b
imul cl
mov byte [r8 + r11], al
add edi, r14d
add r8, r14
cmp r8, 7
jl 0x140026a6b
add r10d, r14d
add r11, 7
sub r13, r14
jne 0x140026a58
or rsi, 0xffffffffffffffff
mov r15, qword [rbp - 0x28]
mov r10, qword [rbp - 0x58]
mov r13, qword [rbp - 0x60]
xor edi, edi
test r10, r10
je 0x140026acb
lea rdx, str.InternetConnectW
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401aae40], rax
jmp 0x140026ad2
mov rax, qword [0x1401aae40]
test rax, rax
jne 0x140026ae3
xor r13d, r13d
mov edi, r13d
mov qword [rbp - 0x58], r13
jmp 0x140026b14
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rdi
xor r9d, r9d
movzx r8d, bx
mov rdx, qword [rsp + 0x50]
mov rcx, r13
call rax
mov rdi, rax
mov qword [rbp - 0x58], rax
xor r13d, r13d
test rdi, rdi
jne 0x140026ba8
lea rdx, str.InternetConnect_Failed
lea rcx, [rbp + 0x1e8]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x1e8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026b63
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026b83
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026ba3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
mov byte [rsp + 0x40], r14b
jmp 0x140026bb2
xor r13d, r13d
mov ebx, 0x80400200
mov eax, 0x80600200
cmp byte [rsp + 0x42], r13b
cmovne ebx, eax
or ebx, 0xc000
cmp byte [rsp + 0x41], r13b
je 0x140026bd7
or ebx, 0x803080
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x14013a938]
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 4
jne 0x140026ca6
lea rax, [rbp + 0x2b8]
mov qword [rbp - 0x60], rax
lea rdx, [0x14013a938]
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x2d0], 0xf
mov qword [rbp + 0x2c8], r13
mov byte [rbp + 0x2b8], r13b
cmp byte [rdx], r13b
jne 0x140026c4a
mov r8, r13
jmp 0x140026c56
mov r8, rsi
inc r8
cmp byte [rdx + r8], r13b
jne 0x140026c4d
lea rcx, [rbp + 0x2b8]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x1f8]
call fcn.14001c49c
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x1f8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026ca6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, [0x14013aae0]
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 4
jne 0x140026d73
lea rax, [rbp + 0x2e8]
mov qword [rbp - 0x60], rax
lea rdx, [0x14013aae0]
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x300], 0xf
mov qword [rbp + 0x2f8], r13
mov byte [rbp + 0x2e8], r13b
cmp byte [rdx], r13b
jne 0x140026d18
mov r8, r13
jmp 0x140026d24
mov r8, rsi
inc r8
cmp byte [rdx + r8], r13b
jne 0x140026d1b
lea rcx, [rbp + 0x2e8]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2e8]
lea rcx, [rbp + 0x208]
call fcn.14001c49c
nop
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x208]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026d73
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.referer
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 4
jne 0x140026e42
lea rax, [rbp + 0x328]
mov qword [rbp - 0x60], rax
lea rdx, str.referer
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x340], 0xf
mov qword [rbp + 0x338], r13
mov byte [rbp + 0x328], r13b
cmp byte [rdx], r13b
jne 0x140026de6
mov r8, r13
jmp 0x140026df2
mov r8, rsi
inc r8
cmp byte [rdx + r8], r13b
jne 0x140026de9
lea rcx, [rbp + 0x328]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x328]
lea rcx, [rbp + 0x218]
call fcn.14001c49c
nop
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x218]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026e42
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, str.acceptTypes
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 4
jne 0x140026f0f
lea rax, [rbp + 0x368]
mov qword [rbp - 0x60], rax
lea rdx, str.acceptTypes
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x380], 0xf
mov qword [rbp + 0x378], r13
mov byte [rbp + 0x368], r13b
cmp byte [rdx], r13b
jne 0x140026eb4
mov r8, r13
jmp 0x140026ec0
mov r8, rsi
inc r8
cmp byte [rdx + r8], r13b
jne 0x140026eb7
lea rcx, [rbp + 0x368]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x368]
lea rcx, [rbp + 0x118]
call fcn.14001c49c
nop
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x118]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026f0f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x80]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rdx, rdx
and rdx, rax
mov qword [rbp + 0x2d8], rdx
mov qword [rbp + 0x2e0], r13
mov rax, qword [rsp + 0x78]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r8, r8
and r8, rax
mov rax, qword [rbp - 0x70]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r9, r9
and r9, rax
mov rax, qword [rsp + 0x70]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rdx, rdx
and rdx, rax
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x30], ebx
lea rax, [rbp + 0x2d8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
mov r8, qword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov r13, rax
xor ebx, ebx
test rax, rax
jne 0x14002709a
lea rdx, str.HttpOpenRequest_Failed
lea rcx, [rbp + 0x228]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x228]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026fd7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140026ff6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027016
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027035
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027055
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027075
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027095
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, [0x14013aae8]
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 4
jne 0x140027245
lea rdx, [0x14013ab20]
lea rcx, [rbp + 0xc0]
call fcn.140001f2c
nop
lea rax, [rbp + 0x258]
mov qword [rbp - 0x60], rax
lea rdx, [0x14013aae8]
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x270], 0xf
mov qword [rbp + 0x268], rbx
mov byte [rbp + 0x258], bl
cmp byte [rdx], bl
jne 0x14002711f
mov r8, rbx
jmp 0x14002712b
mov r8, rsi
inc r8
cmp byte [rdx + r8], bl
jne 0x140027122
lea rcx, [rbp + 0x258]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x150]
call fcn.14001c49c
mov rbx, rax
lea rdx, str.Content_Type:
lea rcx, [rbp + 0x1c0]
call fcn.140002c48
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x238]
call fcn.14001c840
nop
lea r8, [rbp + 0xc0]
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.14001c840
nop
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x138]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
xor ebx, ebx
test eax, eax
jg 0x1400271be
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x238]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400271e0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1c0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027202
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x150]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027224
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xc0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027245
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.additionalRequestHeaders
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 4
jne 0x1400273c6
lea rax, [rbp + 0x278]
mov qword [rbp - 0x60], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x290], 0xf
mov qword [rbp + 0x288], rbx
mov byte [rbp + 0x278], bl
cmp byte [rdx], bl
jne 0x14002729c
mov r8, rbx
jmp 0x1400272a8
mov r8, rsi
inc r8
cmp byte [rdx + r8], bl
jne 0x14002729f
lea rcx, [rbp + 0x278]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x200]
call fcn.14001c49c
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x60]
call fcn.14000e294
nop
mov rdx, qword [rbp + 0x200]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400272fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 8]
call fcn.140002bac
nop
mov rdi, qword [rbp + 8]
xor eax, eax
cmp word [rdi], ax
je 0x1400273a2
xor r15d, r15d
movzx ecx, word [rdi]
call fcn.1400c0310
test eax, eax
je 0x140027333
test rbx, rbx
jne 0x140027336
mov rbx, rdi
jmp 0x140027336
mov rbx, r15
add rdi, 2
cmp word [rdi], r15w
jne 0x14002731d
test rbx, rbx
mov r15, qword [rbp - 0x28]
je 0x1400273a2
mov rax, qword [rbp + 8]
sub rbx, rax
sar rbx, 1
test ebx, ebx
jns 0x140027362
mov ecx, 0x80070057
call fcn.140001874
int3
mov edx, r14d
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, ebx
or ecx, edx
jge 0x140027380
mov edx, ebx
lea rcx, [rbp + 8]
call fcn.1400021d0
mov rax, qword [rbp + 8]
cmp ebx, dword [rax - 0xc]
jg 0x140027397
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rbp + 8]
xor ebx, ebx
mov word [rax + rcx*2], bx
jmp 0x1400273a4
mov ecx, 0x80070057
call fcn.140001874
int3
xor ebx, ebx
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400273c2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdi, qword [rbp - 0x58]
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.postData
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 4
jne 0x140027491
lea rax, [rbp + 0x308]
mov qword [rbp - 0x60], rax
lea rdx, str.postData
mov rcx, r12
call fcn.14002f814
mov rdx, qword [rax]
mov qword [rbp + 0x320], 0xf
mov qword [rbp + 0x318], rbx
mov byte [rbp + 0x308], bl
cmp byte [rdx], bl
jne 0x140027436
mov r8, rbx
jmp 0x140027442
mov r8, rsi
inc r8
cmp byte [rdx + r8], bl
jne 0x140027439
lea rcx, [rbp + 0x308]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x308]
lea rcx, [rbp + 0x160]
call fcn.14001c49c
nop
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027491
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rbp - 0x78]
lea rcx, [rbp - 0x68]
call fcn.140002bac
nop
mov rax, qword [rbp - 0x78]
mov ecx, dword [rax - 0x10]
lea eax, [rcx + rcx]
mov dword [rbp - 0x30], eax
cmp byte [rsp + 0x42], bl
je 0x1400274e7
mov dword [rbp + 0x10], 0x2710
mov r9d, 4
lea r8, [rbp + 0x10]
lea edx, [r9 + 2]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp + 0x10]
lea edx, [r9 + 1]
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x60]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rcx, rcx
and rcx, rax
mov qword [rbp - 0x60], rcx
mov rcx, qword [rbp - 0x68]
mov edx, r14d
sub edx, dword [rcx - 8]
mov ecx, dword [rcx - 0xc]
or ecx, edx
jge 0x14002751c
xor edx, edx
lea rcx, [rbp - 0x68]
call fcn.1400021d0
mov rax, qword [rsp + 0x60]
mov ebx, dword [rax - 0x10]
call fcn.140023824
mov rcx, rax
mov eax, dword [rbp - 0x30]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x68]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8, qword [rbp - 0x60]
mov rdx, r13
call fcn.1400355c8
xor ebx, ebx
test eax, eax
jne 0x1400277f1
lea rcx, [rbp + 0x90]
call fcn.1400215ec
nop
mov ecx, dword [0x1401a8d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x30c30c31
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub r8d, edx
cmp r8d, 0x11
jne 0x1400275f9
mov r12d, reloc.OLEAUT32.dll_LoadRegTypeLib
call fcn.1400bd978
movd xmm0, eax
cvtdq2pd xmm0, xmm0
movsd qword [rbp + rbx*8 + 0x6a0], xmm0
add rbx, r14
cmp rbx, r12
jb 0x140027596
xor ebx, ebx
mov ecx, ebx
mov eax, RegisterTypeLib
jmp 0x1400275ec
movsd xmm1, qword [rbp + rax*8 + 0x6a0]
movsd xmm0, qword [rbp + rax*8 + 0x698]
comisd xmm1, xmm0
jbe 0x1400275e9
movsd qword [rbp + rax*8 + 0x6a0], xmm0
movsd qword [rbp + rax*8 + 0x698], xmm1
sub rax, r14
cmp rax, rcx
jg 0x1400275bf
add rcx, r14
sub r12, r14
jne 0x1400275b8
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
call fcn.140024a64
test al, al
jne 0x140027620
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
cmp byte [rsp + 0x40], bl
je 0x14002762f
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpSendRequest_Failed_with:
lea rcx, [rbp + 0x170]
call fcn.140002c48
nop
lea r8, [rbp + 0x90]
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.14001c840
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x1d0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002768c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400276ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400276d0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400276ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002770e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002772e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002774d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002776d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002778c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400277ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400277cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400277ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
lea rdx, str.noResponse
mov rcx, r12
call fcn.14002f814
cmp byte [rax + 8], 5
jne 0x140027ae0
lea rdx, str.noResponse
mov rcx, r12
call fcn.14002f814
mov rcx, rax
call fcn.14002f3a0
test al, al
je 0x140027ae0
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401a8d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 0xd
jne 0x1400278ad
mov eax, dword [str.hLmkqR]
mov dword [rbp + 0x28], eax
movzx eax, word [0x14013ab70]
mov word [rbp + 0x2c], ax
mov al, byte [0x14013ab72]
mov byte [rbp + 0x2e], al
lea rax, [rbp + 0x28]
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], bl
jne 0x140027882
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400bc638
mov rcx, rax
call fcn.1400be0fc
mov r8d, dword [0x1401a8d80]
lea eax, [r8 + 1]
imul eax, r8d
and eax, 0x8000000f
jge 0x1400278c5
sub eax, r14d
or eax, 0xfffffff0
add eax, r14d
cmp eax, 9
jne 0x1400278ec
lea ecx, [rax - 5]
call fcn.1400bd778
mov rbx, rax
call fcn.1400bd978
mov dword [rbx], eax
mov dword [0x1401a8d80], eax
mov rcx, rbx
call fcn.1400bcfa4
xor ebx, ebx
cmp byte [rsp + 0x40], bl
je 0x1400278fb
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
lea rcx, [rbp + 0x240]
call fcn.14002ebb8
nop
mov eax, dword [rbp + 0xf0]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0xf0], eax
mov qword [rbp + 0xf8], rbx
mov byte [rbp + 0xe8], r14b
lea rdx, str.result
lea rcx, [rbp + 0x240]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rbp + 0xe8]
call fcn.14002eebc
nop
lea rcx, [rbp + 0xe8]
call fcn.14002ee10
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x3a8]
call fcn.14002ec30
nop
lea rdx, str.content
lea rcx, [rbp + 0x240]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rbp + 0x3a8]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x3a8]
call fcn.14002ee10
lea rdx, [rbp + 0x240]
mov rcx, r15
call fcn.14002ecd8
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0x240]
call fcn.14002ee10
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400279de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400279fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027a1d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027a3c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027a5c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027a7b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027a9b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027abb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027adb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
mov byte [rbp + 0x1030], bl
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x1031]
call fcn.1400c2400
mov dword [rbp + 0x78], 0x400
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140027c96
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], bl
je 0x140027b2f
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x220]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x220]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027b75
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027b94
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027bb3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027bd3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027bf2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027c12
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027c31
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027c51
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027c71
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027c91
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r13
test rax, rax
jne 0x140027e2e
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], bl
je 0x140027cc7
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x180]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027d0d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027d2c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027d4b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027d6b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027d8a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027daa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027dc9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027de9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027e09
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027e29
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x78]
lea r8, [rbp + 0x1030]
mov edx, 0x13
call rax
test eax, eax
jne 0x140027ffe
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 9
jne 0x140027e88
call fcn.1400bd978
mov dword [0x1401a8d80], eax
cmp byte [rsp + 0x40], bl
je 0x140027e97
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x1e0]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0x1e0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027edd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027efc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027f1b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027f3b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027f5a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027f7a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027f99
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027fb9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027fd9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140027ff9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
lea rdx, [rbp + 0x1030]
lea rcx, [rsp + 0x48]
call fcn.140024744
nop
lea rdx, str.acceptedStatusCodes
mov rcx, r12
call fcn.14002f814
mov rbx, rax
mov qword [rbp - 0x28], rax
mov al, byte [rax + 8]
xor r9d, r9d
test al, al
je 0x140028245
cmp al, 6
je 0x140028245
cmp al, 7
jne 0x14002821e
mov edi, r9d
mov dword [rbp - 0x30], r9d
mov rcx, rbx
call fcn.14002f410
test eax, eax
jle 0x140029c85
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x18], rax
mov r8d, edi
lea rdx, [0x140136e98]
lea rcx, [rbp + 0x18]
call fcn.14002a0e8
mov rdi, qword [rbp + 0x18]
mov rdx, rdi
mov rcx, rbx
call fcn.14002f814
mov rdx, rdi
mov rcx, rbx
cmp byte [rax + 8], 4
jne 0x14002810f
lea rax, [rbp + 0x4a8]
mov qword [rbp - 0x60], rax
call fcn.14002f814
mov rdx, qword [rax]
lea rcx, [rbp + 0x4a8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.14001c49c
nop
mov rdx, qword [rax]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
test eax, eax
sete dil
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400281bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400281bb
call fcn.14002f814
cmp byte [rax + 8], r14b
jne 0x1400281c4
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x210], rbx
mov rdx, rdi
mov rcx, qword [rbp - 0x28]
call fcn.14002f814
mov rcx, rax
call fcn.14002f094
mov r8d, eax
lea rdx, [rbp + 0x210]
lea rcx, [rbp + 0x98]
call fcn.14001c7ac
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002817f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp + 0x98]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
test eax, eax
sete dil
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400281b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x28]
test dil, dil
jne 0x1400281fc
mov rdi, qword [rbp + 0x18]
lea rdx, [rdi - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400281de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, dword [rbp - 0x30]
add edi, r14d
mov dword [rbp - 0x30], edi
mov rcx, rbx
call fcn.14002f410
cmp edi, eax
jge 0x140029c85
jmp 0x14002805b
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
xor ebx, ebx
test eax, eax
jg 0x140028237
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140028237
lea rdx, [0x14013aba8]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
xor ebx, ebx
test eax, eax
sete dil
test dil, dil
jne 0x1400283a7
jmp 0x140029c87
mov edi, r9d
mov rcx, rbx
call fcn.14002f410
test eax, eax
jle 0x140029c85
mov edx, edi
mov rcx, rbx
call fcn.14002f634
mov edx, edi
mov rcx, rbx
cmp byte [rax + 8], 4
jne 0x1400282db
lea rax, [rbp + 0x4c8]
mov qword [rbp - 0x60], rax
call fcn.14002f634
mov rdx, qword [rax]
lea rcx, [rbp + 0x4c8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.14001c49c
nop
mov rdx, qword [rax]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
test eax, eax
sete byte [rsp + 0x41]
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028387
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140028387
call fcn.14002f634
cmp byte [rax + 8], r14b
jne 0x14002838f
lea rcx, [0x1401a09a8]
mov rax, qword [0x1401a09a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1f0], rbx
mov edx, edi
mov rcx, qword [rbp - 0x28]
call fcn.14002f634
mov rcx, rax
call fcn.14002f094
mov r8d, eax
lea rdx, [rbp + 0x1f0]
lea rcx, [rbp + 0x80]
call fcn.14001c7ac
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002834a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp + 0x80]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
test eax, eax
sete byte [rsp + 0x41]
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028383
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x28]
xor eax, eax
cmp byte [rsp + 0x41], al
jne 0x1400283a7
add edi, r14d
mov rcx, rbx
call fcn.14002f410
cmp edi, eax
jge 0x140029c85
jmp 0x140028258
xor edi, edi
mov dword [rbp], edi
lea r9, [rbp]
mov rcx, r13
call fcn.1400263e4
lea rcx, [rbp - 0x50]
call fcn.140001ef4
nop
mov eax, dword [rbp]
test eax, eax
je 0x1400284ad
mov ecx, eax
call fcn.1400bc638
mov rbx, rax
test rax, rax
je 0x140028461
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002841b
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002841b
mov qword [rsp + 0x20], rdi
lea r9, [rbp]
mov r8, rbx
lea edx, [rdi + 0x16]
mov rcx, r13
call rax
mov rdx, rbx
lea rcx, [rbp + 0x1b0]
call fcn.140024744
nop
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028459
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400be0fc
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 4
jne 0x1400284ad
mov ecx, r14d
cmp r8d, r14d
jle 0x1400284a7
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, r8d
jl 0x140028498
mov dword [0x1401a8d80], ecx
cmp byte [rsp + 0x42], dil
je 0x140028ef3
xor edx, edx
lea rcx, [rbp + 0x30]
call fcn.14002ebb8
nop
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0xc
jne 0x140028532
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x2f4
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400bc638
mov rcx, rax
call fcn.1400be0fc
lea rdx, [0x14013aba0]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
test eax, eax
je 0x140028711
lea rdx, [0x14013abb8]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
test eax, eax
je 0x140028711
lea rdx, [0x14013abb0]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
test eax, eax
je 0x140028711
lea rdx, [0x14013abd8]
lea rcx, [rsp + 0x48]
call fcn.140002ee4
test eax, eax
je 0x140028711
lea rdx, [rbp + 0x30]
mov rcx, r15
call fcn.14002ecd8
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0x30]
call fcn.14002ee10
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400285d0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400285f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002860f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002862e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002864e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002866d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002868d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400286ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400286cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400286ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002870c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
lea rcx, [rbp - 0x18]
call fcn.140001ef4
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 8]
call fcn.140002bac
nop
lea rcx, [rbp - 8]
call fcn.1400207c0
xor r8d, r8d
lea rdx, str.location:
lea rcx, [rbp - 8]
call fcn.14000d74c
mov ebx, eax
mov ecx, dword [0x1401a8d80]
lea r8d, [rcx + 1]
imul r8d, ecx
mov eax, 0x6bca1af3
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x13
sub r8d, edx
cmp r8d, 0xd
jne 0x14002877a
add dword [0x1401a9cbc], r14d
cmp ebx, esi
jne 0x14002893b
lea rdx, [rbp + 0x30]
mov rcx, r15
call fcn.14002ecd8
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400287b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400287d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x30]
call fcn.14002ee10
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400287fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x14002881a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028839
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028858
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028878
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028897
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400288b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400288d6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400288f6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028916
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028936
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
mov r8d, ebx
lea rdx, [0x14013ab20]
lea rcx, [rbp - 8]
call fcn.14000d74c
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rbp + 0x230]
lea rcx, [rbp - 8]
call fcn.14000d78c
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x230]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028995
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
lea rdx, str.http
lea rcx, [rbp - 0x18]
call fcn.14000d74c
mov ecx, eax
cmp eax, esi
jne 0x140028b6b
lea rdx, [rbp + 0x30]
mov rcx, r15
call fcn.14002ecd8
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x1400289e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028a01
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x30]
call fcn.14002ee10
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028a2a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028a4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028a69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028a88
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028aa8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028ac7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028ae7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028b06
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028b26
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028b46
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028b66
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
mov rax, qword [rbp - 0x18]
mov r8d, dword [rax - 0x10]
sub r8d, ecx
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x18]
call fcn.140017a6c
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140001ff8
nop
mov rdx, qword [rbp + 0x140]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028bb5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp + 0x108]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x108], eax
mov qword [rbp + 0x110], rdi
mov byte [rbp + 0x100], r14b
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x30]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rbp + 0x100]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x100]
call fcn.14002ee10
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x588]
call fcn.14001c530
nop
mov rdx, rax
lea rcx, [rbp + 0x3c0]
call fcn.14002ec74
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x30]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rbp + 0x3c0]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x3c0]
call fcn.14002ee10
nop
xor r8d, r8d
mov dl, r14b
lea rcx, [rbp + 0x588]
call fcn.14000136c
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x508]
call fcn.14001c530
nop
mov rdx, rax
lea rcx, [rbp + 0x390]
call fcn.14002ec74
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x30]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rbp + 0x390]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x390]
call fcn.14002ee10
nop
xor r8d, r8d
mov dl, r14b
lea rcx, [rbp + 0x508]
call fcn.14000136c
mov rcx, qword [rsp + 0x48]
mov edx, r14d
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x140028ce7
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.1400021d0
mov rcx, qword [rsp + 0x48]
call fcn.1400be124
mov ecx, dword [rbp + 0x128]
and ecx, 0xffffff01
or ecx, r14d
mov dword [rbp + 0x128], ecx
mov qword [rbp + 0x130], rdi
mov dword [rbp + 0x120], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x30]
call fcn.14002f6a0
mov rcx, rax
lea rdx, [rbp + 0x120]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x120]
call fcn.14002ee10
lea rdx, [rbp + 0x30]
mov rcx, r15
call fcn.14002ecd8
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp - 8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028d6a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028d89
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x30]
call fcn.14002ee10
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028db2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028dd2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028df1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028e10
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028e30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028e4f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028e6f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028e8e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028eae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028ece
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140028eee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
mov rax, rdi
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rdi
xor ebx, ebx
mov qword [rbp - 0x38], rbx
mov dword [rbp - 0xc], ebx
sub rdi, rax
lea rdx, [rdi + 0x400]
lea rcx, [rbp - 0x48]
call fcn.1400247c0
mov dword [rbp - 0xc], ebx
mov rbx, qword [rbp - 0x48]
add rbx, rdi
call fcn.140023824
mov rcx, rax
lea rax, [rbp - 0xc]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r13
call fcn.140034e78
xor ebx, ebx
test eax, eax
je 0x140029a43
mov edx, dword [rbp - 0xc]
add rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.1400247c0
cmp dword [rbp - 0xc], ebx
je 0x140028f68
mov rdi, qword [rbp - 0x40]
mov rax, qword [rbp - 0x48]
jmp 0x140028f07
mov byte [rbp + 0xc20], bl
mov edi, 0x400
mov r8d, edi
xor edx, edx
lea rcx, [rbp + 0xc21]
call fcn.1400c2400
mov dword [rbp + 0x68], edi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r9, rax
xor edi, edi
test rax, rax
je 0x14002905f
mov r8d, dword [0x1401a8d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 0xe
jne 0x140028ff7
mov ecx, r8d
test r8d, r8d
je 0x140028fed
dec ecx
je 0x140028fe5
add r8d, r14d
mov dword [0x1401a8d80], r8d
jmp 0x140028ff7
mov dword [0x1401a8d80], edi
jmp 0x140028ff7
mov dword [0x1401a8d80], 2
lea rdx, str.HttpQueryInfoA
mov rcx, r9
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov r9d, dword [0x1401a8d80]
mov r8d, r9d
imul r8d, r9d
imul r8d, r9d
mov eax, 0x6bca1af3
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x13
sub r8d, edx
cmp r8d, 5
jne 0x14002905f
mov r8d, edi
test r9d, r9d
je 0x140029058
mov ecx, r9d
and ecx, r14d
add r8d, ecx
mov eax, r9d
cdq
sub eax, edx
sar eax, 1
mov r9d, eax
jne 0x140029042
mov dword [0x1401a8d80], r8d
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x68]
lea r8, [rbp + 0xc20]
mov edx, 0x1d
mov rcx, r13
call rbx
test eax, eax
je 0x1400292d2
lea rdx, [rbp + 0xc20]
lea rcx, [rbp + 0x58]
call fcn.140024744
nop
lea rdx, str.gzip
lea rcx, [rbp + 0x58]
call fcn.140017dbc
test al, al
je 0x1400292c3
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, r14d
jne 0x14002914d
mov word [rbp + 0x2070], di
xor edx, edx
mov r8d, 0x2d1e
lea rcx, [rbp + 0x2072]
call fcn.1400c2400
mov r10, rdi
mov r9, rsi
mov r8, rdi
test r10, r10
je 0x140029127
test r8, r8
je 0x140029127
lea rcx, [r9 + r8]
lea rax, [r9 + r8]
movzx edx, word [rbp + rcx*2 + 0x1fda]
add dx, word [rbp + rax*2 + 0x2070]
add dx, r14w
lea rax, [r9 + r8]
mov word [rbp + rax*2 + 0x2072], dx
add r8, r14
cmp r8, 0x4c
jl 0x1400290f5
add r10, r14
add r9, 0x4c
cmp r9, 0x168f
jl 0x1400290f2
movsx eax, word [rbp + 0x4d8e]
mov dword [0x1401a8d80], eax
mov qword [rbp + 0xc8], rdi
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], rdi
mov rbx, qword [rbp - 0x40]
sub rbx, qword [rbp - 0x48]
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002a054
mov rcx, rax
lea r8, [rbp + 0xc8]
mov rdx, rbx
call fcn.140024ad8
test eax, eax
jne 0x1400292a6
call fcn.140024960
test al, al
jne 0x1400291b7
mov r8d, r14d
mov eax, r14d
mov edx, 8
lea ecx, [rax + r8]
lea r8d, [rax]
mov eax, ecx
sub edx, r14d
jns 0x1400291a3
mov dword [0x1401a8d80], ecx
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], dil
je 0x1400291d1
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x148]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0x148]
call fcn.140001fc8
nop
lea rcx, [rbp + 0xc8]
call fcn.140024794
nop
lea rcx, [rbp + 0x58]
call fcn.140001fc8
nop
lea rcx, [rbp - 0x48]
call fcn.140024794
nop
lea rcx, [rbp - 0x50]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x48]
call fcn.140001fc8
nop
lea rcx, [rbp - 0x68]
call fcn.140001fc8
nop
lea rcx, [rbp - 0x78]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x60]
call fcn.140001fc8
nop
lea rcx, [rbp - 0x80]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x78]
call fcn.140001fc8
nop
lea rcx, [rbp - 0x70]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x70]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x58]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x68]
call fcn.140001fc8
nop
lea rcx, [rsp + 0x50]
call fcn.140001fc8
jmp 0x140029edf
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x48]
call fcn.140029f08
nop
lea rcx, [rbp + 0xc8]
call fcn.140024794
call fcn.140024994
nop
lea rcx, [rbp + 0x58]
call fcn.140001fc8
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor r13d, r13d
cmp byte [rsp + 0x40], r13b
je 0x1400292ef
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov bl, r13b
mov dil, r13b
lea rdx, [0x14013a920]
mov rcx, r12
call fcn.14002f814
mov rcx, rax
call fcn.14002fb24
test al, al
je 0x14002938e
lea rax, [rbp + 0x4e8]
mov qword [rbp + 0x1b8], rax
lea rdx, [0x14013a920]
mov rcx, r12
call fcn.14002f814
mov rcx, rax
call fcn.140002ba8
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14001c49c
nop
lea rdx, str.base64
lea rcx, [rbp + 0x60]
call fcn.140017dbc
test al, al
je 0x14002936b
mov bl, r14b
jmp 0x140029385
lea rdx, str.binary
lea rcx, [rbp + 0x60]
call fcn.140017dbc
movzx edi, dil
test al, al
cmovne edi, r14d
lea rcx, [rbp + 0x60]
call fcn.140001fc8
lea rcx, [rbp - 0x20]
call fcn.140001ef4
nop
test bl, bl
je 0x14002944c
lea rcx, [rbp - 0x48]
call fcn.14002a04c
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002a054
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x158]
call fcn.14001c26c
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140001ff8
nop
lea rcx, [rbp + 0x158]
call fcn.140001fc8
lea rcx, [rbp + 0x168]
call fcn.140022c10
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140017d7c
mov bl, al
lea rcx, [rbp + 0x168]
call fcn.140001fc8
test bl, bl
je 0x140029623
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x178]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0x178]
call fcn.140001fc8
nop
lea rcx, [rbp - 0x20]
jmp 0x140029213
test dil, dil
jne 0x140029623
lea rcx, [rbp - 0x48]
call fcn.14002a04c
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x48]
call fcn.14002a054
cmp byte [rax], r13b
je 0x14002948f
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x48]
call fcn.1400247c0
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.14002a054
mov byte [rax], r13b
lea rcx, [rbp - 0x48]
call fcn.14002a04c
cmp rax, 3
jbe 0x140029524
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002a054
cmp byte [rax], 0xef
jne 0x140029524
mov rdx, r14
lea rcx, [rbp - 0x48]
call fcn.14002a054
cmp byte [rax], 0xbb
jne 0x140029524
mov edx, 2
lea rcx, [rbp - 0x48]
call fcn.14002a054
cmp byte [rax], 0xbf
jne 0x140029524
lea rdx, [rbp + 0x448]
lea rcx, [rbp - 0x48]
call fcn.14002a040
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x440]
call fcn.14002a0d8
mov rbx, qword [rax]
lea rdx, [rbp + 0x388]
lea rcx, [rbp - 0x48]
call fcn.14002a040
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0x88]
lea rcx, [rbp - 0x48]
call fcn.14002a05c
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002a054
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.140002c48
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140001ff8
nop
lea rcx, [rbp + 0x188]
call fcn.140001fc8
call fcn.140024a64
test al, al
jne 0x1400295e5
mov word [rbp + 0x4d90], r13w
xor edx, edx
mov r8d, 0xdf20
lea rcx, [rbp + 0x4d92]
call fcn.1400c2400
mov r9, r13
mov r10d, 0xa9
mov r8, r13
test r9, r9
je 0x1400295bf
test r8, r8
je 0x1400295bf
lea rcx, [rsi + r8]
lea rax, [rsi + r8]
movzx edx, word [rbp + rcx*2 + 0x4c40]
add dx, word [rbp + rax*2 + 0x4d90]
add dx, r14w
lea rax, [rsi + r8]
mov word [rbp + rax*2 + 0x4d92], dx
add r8, r14
cmp r8, r10
jl 0x14002958d
add r9, r14
add rsi, r10
cmp rsi, 0x6f90
jl 0x14002958a
movsx eax, word [rbp + 0x12cb0]
mov dword [0x1401a8d80], eax
jmp 0x1400295eb
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 0xa
jne 0x140029623
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov bl, r13b
lea rsi, str.outputFile
mov rdx, rsi
mov rcx, r12
call fcn.14002f814
mov rcx, rax
call fcn.14002fb24
test al, al
je 0x140029797
call fcn.140024a30
test al, al
jne 0x1400296a3
mov r8d, r13d
mov ecx, dword [0x1401a8d80]
mov r9d, 0x92f11385
mov r10d, 0xac
jmp 0x14002967c
mov eax, ecx
or eax, 0xffffffad
add ecx, eax
add r8d, r14d
mov eax, ecx
imul eax, ecx
cmp r8d, eax
jg 0x14002969c
mov eax, r9d
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xdf
mov eax, ecx
sub eax, edx
cmp eax, r10d
jne 0x140029668
mov dword [0x1401a8d80], r8d
lea rax, [rbp + 0x488]
mov qword [rbp + 0x88], rax
mov rdx, rsi
mov rcx, r12
call fcn.14002f814
mov rcx, rax
call fcn.140002ba8
mov rdx, rax
lea rcx, [rbp + 0x488]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.14001c49c
nop
lea rcx, [rbp + 0x20]
call fcn.14000cdd8
test al, al
jne 0x14002978e
test dil, dil
je 0x14002975a
mov qword [rbp + 0x48], r13
lea rcx, [rbp + 0x20]
call fcn.140002ba8
mov rdx, rax
lea r8, [0x14013ac6c]
lea rcx, [rbp + 0x48]
call fcn.1400bfdc0
test eax, eax
jne 0x14002978e
mov rdi, qword [rbp + 0x48]
test rdi, rdi
je 0x14002978e
lea rcx, [rbp - 0x48]
call fcn.14002a04c
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002a054
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, r14
call fcn.1400c01f4
mov rcx, qword [rbp + 0x48]
call fcn.1400bf050
mov bl, r14b
jmp 0x14002978e
lea rax, [rbp + 0x198]
mov qword [rbp + 0x88], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x198]
call fcn.140002bac
nop
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.140023db8
movzx ebx, bl
test al, al
cmovne ebx, r14d
lea rcx, [rbp + 0x20]
call fcn.140001fc8
xor edx, edx
lea rcx, [rbp + 0xa8]
call fcn.14002ebb8
nop
mov dl, r14b
lea rcx, [rbp + 0x410]
call fcn.14002ecc8
nop
lea rdx, str.result
lea rcx, [rbp + 0xa8]
call fcn.14002f698
mov rcx, rax
lea rdx, [rbp + 0x410]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x410]
call fcn.14002ee10
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140021f0c
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x548]
call fcn.14001c530
nop
mov rdx, rax
lea rcx, [rbp + 0x470]
call fcn.14002ec74
nop
lea rdx, str.content
lea rcx, [rbp + 0xa8]
call fcn.14002f698
mov rcx, rax
lea rdx, [rbp + 0x470]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x470]
call fcn.14002ee10
nop
lea rcx, [rbp + 0x548]
call fcn.14000133c
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x568]
call fcn.14001c530
nop
mov rdx, rax
lea rcx, [rbp + 0x428]
call fcn.14002ec74
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xa8]
call fcn.14002f698
mov rcx, rax
lea rdx, str.headers
call fcn.14002f698
mov rcx, rax
lea rdx, [rbp + 0x428]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x428]
call fcn.14002ee10
nop
lea rcx, [rbp + 0x568]
call fcn.14000133c
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x5c8]
call fcn.14001c530
nop
mov rdx, rax
lea rcx, [rbp + 0x3f0]
call fcn.14002ec74
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xa8]
call fcn.14002f698
mov rcx, rax
lea rdx, str.httpCode
call fcn.14002f698
mov rcx, rax
lea rdx, [rbp + 0x3f0]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x3f0]
call fcn.14002ee10
nop
lea rcx, [rbp + 0x5c8]
call fcn.14000133c
lea rdx, str.empty
lea rcx, [rbp + 0x528]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x3d8]
call fcn.14002ec74
nop
lea rdx, str.noData
lea rcx, [rbp + 0xa8]
call fcn.14002f698
mov rcx, rax
lea rdx, [rbp + 0x3d8]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x3d8]
call fcn.14002ee10
nop
lea rcx, [rbp + 0x528]
call fcn.14000133c
mov rdx, rsi
mov rcx, r12
call fcn.14002f814
mov rcx, rax
call fcn.14002fb24
test al, al
je 0x140029a1e
mov dl, bl
lea rcx, [rbp + 0x458]
call fcn.14002ecc8
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x5e8]
call fcn.1400012fc
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x5a8]
call fcn.14002a190
nop
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.14002f878
mov rcx, rax
lea rdx, [rbp + 0x458]
call fcn.14002eebc
nop
lea rcx, [rbp + 0x5a8]
call fcn.14000133c
nop
lea rcx, [rbp + 0x5e8]
call fcn.14000133c
nop
lea rcx, [rbp + 0x458]
call fcn.14002ee10
lea rdx, [rbp + 0xa8]
mov rcx, r15
call fcn.14002ecd8
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0xa8]
call fcn.14002ee10
jmp 0x140029443
mov eax, dword [0x1401a8d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0x17
jne 0x140029aac
mov eax, dword [str.fQDke]
mov dword [rbp + 0x50], eax
movzx eax, word [0x14013ac00]
mov word [rbp + 0x54], ax
lea rax, [rbp + 0x50]
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], bl
jne 0x140029a88
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400bc638
mov rcx, rax
call fcn.1400be0fc
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], bl
je 0x140029ac5
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0xa0]
call fcn.140002c48
nop
mov rdx, rax
mov rcx, r15
call fcn.140024f40
mov dword [rsp + 0x44], r14d
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029b0b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140029b25
call fcn.1400bcfa4
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029b44
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029b64
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029b83
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029ba2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029bc2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029be1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029c01
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029c20
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029c40
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029c60
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029c80
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140029ec0
xor ebx, ebx
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401a8d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, r14d
jne 0x140029d32
jmp 0x140029d2d
mov eax, r8d
and eax, 0x80000001
jge 0x140029cd1
sub eax, r14d
or eax, 0xfffffffe
add eax, r14d
test eax, eax
jne 0x140029ce8
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401a8d80], eax
jmp 0x140029cf7
lea r8d, [r8*2 + 1]
mov dword [0x1401a8d80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x140029d1b
sub ecx, 2
je 0x140029d1f
dec ecx
je 0x140029d22
jmp 0x140029d2d
add r8d, 2
add r8d, r14d
add r8d, 2
mov dword [0x1401a8d80], r8d
test r8d, r8d
jne 0x140029cbe
cmp byte [rsp + 0x40], bl
je 0x140029d42
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0x610]
call fcn.140017ecc
nop
mov rcx, qword [rax]
call fcn.1400be1d8
mov edx, eax
mov rcx, r15
call fcn.140025044
mov dword [rsp + 0x44], r14d
lea rax, [rbp + 0x618]
mov rcx, qword [rbp + 0x610]
cmp rcx, rax
je 0x140029d84
call fcn.1400bdb00
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029da4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029dc3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029de2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029e02
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029e21
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029e41
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029e60
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029e80
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029ea0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029ec0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, esi
test eax, eax
jg 0x140029edf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, r15
mov rcx, qword [rbp + 0x12cc0]
xor rcx, rsp
call fcn.1400bcfc0
add rsp, 0x12dd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret