Function at 0x14002de60
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Get disk size
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x148f8]
mov eax, 0x149f8
call fcn.1400d0b90
sub rsp, rax
mov qword [rbp + 0x370], 0xfffffffffffffffe
mov rax, qword [0x1401b5e90]
xor rax, rsp
mov qword [rbp + 0x148e0], rax
mov rbx, r9
mov qword [rbp + 0xa8], rbx
mov r13, r8
mov r12, rdx
mov rdi, rcx
mov qword [rbp - 0x58], rcx
mov qword [rbp + 0x2e8], rcx
xor r15d, r15d
mov dword [rsp + 0x44], r15d
mov rcx, r9
call fcn.14002bef0
lea rcx, [0x1401b59a8]
test al, al
mov rax, qword [0x1401b59a8]
je 0x14002df5c
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x48], rax
lea rdx, str.this_module_doesnt_support_file_request
test rdx, 0xffffffffffff0000
jne 0x14002df19
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002df23
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140002690
jmp 0x14002df23
lea rcx, [rbp + 0x48]
call fcn.140003600
nop
lea rdx, [rbp + 0x48]
mov rcx, rdi
call fcn.14002b210
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003166f
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x14003166f
call qword [rax + 0x18]
add rax, 0x18
test r12, r12
jne 0x14002dfc6
mov qword [rbp + 0x70], rax
lea rdx, str.InternetOpen_Failed
test rdx, 0xffffffffffff0000
jne 0x14002df9c
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002dfa6
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.140002690
jmp 0x14002dfa6
lea rcx, [rbp + 0x70]
call fcn.140003600
nop
lea rdx, [rbp + 0x70]
mov rcx, rdi
call fcn.14002b210
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x70]
jmp 0x14003165b
mov qword [rsp + 0x60], rax
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
mov dword [rbp - 0x30], r15d
lea rax, [rbp + 0x248]
mov qword [rbp + 0x80], rax
lea rdx, [0x14014a63c]
mov rcx, rbx
call fcn.140038e30
mov rdx, qword [rax]
mov qword [rbp + 0x260], 0xf
mov qword [rbp + 0x258], r15
mov byte [rbp + 0x248], 0
or r14, 0xffffffffffffffff
cmp byte [rdx], 0
jne 0x14002e02f
mov r8, r15
jmp 0x14002e03c
mov r8, r14
inc r8
cmp byte [rdx + r8], 0
jne 0x14002e032
lea rcx, [rbp + 0x248]
call fcn.1400013f0
nop
lea rdx, [rbp + 0x248]
lea rcx, [rsp + 0x68]
call fcn.140020a50
nop
lea r9, [rbp - 0x30]
lea r8, [rbp - 0x68]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.14002bbc0
movzx eax, al
test eax, eax
jne 0x14002e138
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
lea rdx, str.InternetCrackUrl_Failed
test rdx, 0xffffffffffff0000
jne 0x14002e0c6
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002e0d0
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140002690
jmp 0x14002e0d0
lea rcx, [rbp + 0x68]
call fcn.140003600
nop
lea rdx, [rbp + 0x68]
mov rcx, rdi
call fcn.14002b210
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e100
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e11a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e133
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
mov byte [rsp + 0x48], 0
lea rdx, str.redirectCheck
mov rcx, rbx
call fcn.140038e30
lea rcx, [0x1401bea18]
cmp rax, rcx
je 0x14002e188
lea rdx, str.redirectCheck
mov rcx, rbx
call fcn.140038e30
cmp byte [rax + 8], 5
jne 0x14002e188
lea rdx, str.redirectCheck
mov rcx, rbx
call fcn.140038e30
mov rcx, rax
call fcn.1400387e0
mov byte [rsp + 0x48], al
xor sil, sil
mov edi, 0x50
lea rax, [rbp + 0x10]
mov qword [rbp + 0x80], rax
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.1400024f0
add rax, 0x18
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x10]
mov qword [rbp + 0x80], rax
lea rcx, [rbp + 0x10]
call fcn.140025bf0
mov rcx, qword [rbp + 0x10]
cmp dword [rcx - 0x10], 0
jl 0x14002e1f3
lea rdx, str.https:__
call fcn.1400cc8a4
test rax, rax
je 0x14002e1f3
sub rax, qword [rbp + 0x10]
sar rax, 1
test eax, eax
jne 0x14002e1f3
mov sil, 1
mov edi, 0x1bb
mov r8d, dword [0x1401bdd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub ecx, edx
cmp ecx, 8
jne 0x14002e227
dec r8d
mov dword [0x1401bdd80], r8d
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e23f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.port
mov rcx, rbx
call fcn.140038e30
cmp byte [rax + 8], 1
jne 0x14002e272
lea rdx, str.port
mov rcx, rbx
call fcn.140038e30
mov rcx, rax
call fcn.140038460
mov ebx, eax
mov dword [rbp - 0x30], eax
jmp 0x14002e27d
mov ebx, dword [rbp - 0x30]
test ebx, ebx
cmove ebx, edi
mov dword [rbp - 0x30], ebx
mov byte [rsp + 0x40], 0
mov r8d, ebx
lea rdx, [rsp + 0x60]
mov rcx, r13
call fcn.14002bdb0
mov qword [rbp - 0x40], rax
test rax, rax
jne 0x14002e3db
mov rax, qword [0x1401bf500]
test rax, rax
jne 0x14002e2e2
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002e2d6
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401bf500], rax
jmp 0x14002e2dd
mov rax, qword [0x1401bf500]
test rax, rax
je 0x14002e317
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r15
xor r9d, r9d
movzx r8d, bx
mov rdx, qword [rsp + 0x60]
mov rcx, r12
call rax
mov qword [rbp - 0x40], rax
test rax, rax
jne 0x14002e3d6
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
lea rdx, str.InternetConnect_Failed
test rdx, 0xffffffffffff0000
jne 0x14002e360
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002e36a
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.140002690
jmp 0x14002e36a
lea rcx, [rbp + 0x58]
call fcn.140003600
nop
lea rdx, [rbp + 0x58]
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.14002b210
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e39e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e3b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e3d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
mov byte [rsp + 0x40], 1
mov edi, 0x80400200
mov eax, 0x80600200
cmp byte [rsp + 0x48], 0
cmovne edi, eax
or edi, 0xc000
test sil, sil
je 0x14002e3fe
or edi, 0x803080
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, [0x14014a678]
mov r12, qword [rbp + 0xa8]
mov rcx, r12
call fcn.140038e30
cmp byte [rax + 8], 4
jne 0x14002e4e2
lea rax, [rbp + 0x3d8]
mov qword [rbp - 0x50], rax
lea rdx, [0x14014a678]
mov rcx, r12
call fcn.140038e30
mov rdx, qword [rax]
lea rcx, [rbp + 0x3d8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.140020a50
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e4c7
cmp dword [rbx + 0x10], 0
jl 0x14002e4b9
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e4b9
call fcn.1400024f0
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002e4af
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x78], rax
jmp 0x14002e4c7
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.1400023a0
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e4e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [0x14014a848]
mov rcx, r12
call fcn.140038e30
cmp byte [rax + 8], 4
jne 0x14002e5bf
lea rax, [rbp + 0x458]
mov qword [rbp - 0x50], rax
lea rdx, [0x14014a848]
mov rcx, r12
call fcn.140038e30
mov rdx, qword [rax]
lea rcx, [rbp + 0x458]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140020a50
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x80]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e5a4
cmp dword [rbx + 0x10], 0
jl 0x14002e596
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e596
call fcn.1400024f0
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002e58c
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x80], rax
jmp 0x14002e5a4
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x80]
call fcn.1400023a0
nop
mov rdx, qword [rbp + 0x160]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e5bf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.referer
mov rcx, r12
call fcn.140038e30
cmp byte [rax + 8], 4
jne 0x14002e6a0
lea rax, [rbp + 0x418]
mov qword [rbp - 0x50], rax
lea rdx, str.referer
mov rcx, r12
call fcn.140038e30
mov rdx, qword [rax]
lea rcx, [rbp + 0x418]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140020a50
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e685
cmp dword [rbx + 0x10], 0
jl 0x14002e676
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e676
call fcn.1400024f0
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002e66b
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x78], rax
jmp 0x14002e685
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x78]
call fcn.1400023a0
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e6a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdx, str.acceptTypes
mov rcx, r12
call fcn.140038e30
cmp byte [rax + 8], 4
jne 0x14002e77d
lea rax, [rbp + 0x398]
mov qword [rbp - 0x50], rax
lea rdx, str.acceptTypes
mov rcx, r12
call fcn.140038e30
mov rdx, qword [rax]
lea rcx, [rbp + 0x398]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.140020a50
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x60]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002e762
cmp dword [rbx + 0x10], 0
jl 0x14002e754
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002e754
call fcn.1400024f0
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002e74a
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x60], rax
jmp 0x14002e762
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x60]
call fcn.1400023a0
nop
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e77d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x60]
cmp dword [rax - 0x10], 0
cmove rax, r15
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], r15
mov rax, qword [rsp + 0x78]
cmp dword [rax - 0x10], 0
cmove rax, r15
mov r9, qword [rbp - 0x80]
cmp dword [r9 - 0x10], 0
cmove r9, r15
mov rdx, qword [rbp - 0x78]
cmp dword [rdx - 0x10], 0
cmove rdx, r15
mov r13d, 1
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x268]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov rsi, rax
mov qword [rbp - 0x50], rax
lea rcx, [0x1401b59a8]
test rax, rax
mov rax, qword [0x1401b59a8]
jne 0x14002e919
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x78], rax
lea rdx, str.HttpOpenRequest_Failed
test rdx, 0xffffffffffff0000
jne 0x14002e844
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002e84e
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.140002690
jmp 0x14002e84e
lea rcx, [rbp + 0x78]
call fcn.140003600
nop
lea rdx, [rbp + 0x78]
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.14002b210
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e87c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e895
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e8af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e8c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e8e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e8fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e914
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x14014a728]
mov rcx, r12
call fcn.140038e30
cmp byte [rax + 8], 4
jne 0x14002eaed
lea rdx, [0x14014a850]
lea rcx, [rbp + 0xf8]
call fcn.1400021f0
nop
lea rax, [rbp + 0x378]
mov qword [rbp - 0x38], rax
lea rdx, [0x14014a728]
mov rcx, r12
call fcn.140038e30
mov rdx, qword [rax]
lea rcx, [rbp + 0x378]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.140020a50
mov rdi, rax
lea rcx, [0x1401b59a8]
mov rdx, qword [0x1401b59a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp + 0x38], rax
lea rdx, str.Content_Type:
test rdx, 0xffffffffffff0000
jne 0x14002e9d7
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002e9e1
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.140002690
jmp 0x14002e9e1
lea rcx, [rbp + 0x38]
call fcn.140003600
nop
mov r8, rdi
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x1a0]
call fcn.140020cd0
nop
lea r8, [rbp + 0xf8]
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.140020cd0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002ea65
cmp dword [rbx + 0x10], 0
jl 0x14002ea56
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002ea56
call fcn.1400024f0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002ea4b
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x70], rax
jmp 0x14002ea65
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.1400023a0
nop
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ea81
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ea9d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002eab6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ead2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xf8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002eaed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.additionalRequestHeaders
mov rcx, r12
call fcn.140038e30
cmp byte [rax + 8], 4
jne 0x14002ebae
lea rax, [rbp + 0x3b8]
mov qword [rbp - 0x38], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r12
call fcn.140038e30
mov rdx, qword [rax]
lea rcx, [rbp + 0x3b8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1c0]
call fcn.140020a50
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.140010970
nop
mov rdx, qword [rbp + 0x1c0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002eb6d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.1400024f0
add rax, 0x18
mov qword [rbp + 0xc8], rax
lea rcx, [rbp + 0xc8]
call fcn.1400316a0
nop
mov rdx, qword [rbp + 0xc8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ebae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov dword [rbp - 0x38], r15d
lea rdx, str.postData
mov rcx, r12
call fcn.140038e30
cmp byte [rax + 8], 4
jne 0x14002ed8a
lea rax, [rbp + 0x3f8]
mov qword [rbp + 0xb0], rax
lea rdx, str.postData
mov rcx, r12
call fcn.140038e30
mov rdx, qword [rax]
lea rcx, [rbp + 0x3f8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.140020a50
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x50]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002ec7b
cmp dword [rbx + 0x10], 0
jl 0x14002ec6c
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002ec6c
call fcn.1400024f0
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002ec61
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x14002ec7b
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.1400023a0
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ec96
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov esi, dword [0x1401bdd80]
lea edi, [rsi + 1]
imul edi, esi
mov eax, 0x2e8ba2e9
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
mov eax, edi
sub eax, edx
cmp eax, 0xd
jne 0x14002ed0a
mov r8d, 0x9b
mov r11d, r15d
mov eax, esi
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
test ebx, ebx
jle 0x14002ed02
mov eax, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
mov r9d, r15d
mov r10, rbx
test eax, eax
jle 0x14002ecfa
mov ecx, r9d
mov edx, eax
nop
add r8d, ecx
dec ecx
dec rdx
jne 0x14002ecf0
add r9d, r11d
dec r10
jne 0x14002ece6
inc r11d
cmp r11d, r8d
jl 0x14002ecd1
mov eax, 0x4ec4ec4f
imul edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub edi, edx
cmp edi, 8
jne 0x14002ed3c
call fcn.1400cc4a0
mov ecx, dword [0x1401bdd80]
cmp ecx, eax
jne 0x14002ed3c
dec ecx
mov dword [0x1401bdd80], ecx
lea rdx, str.datatype
mov rcx, r12
call fcn.140038e30
lea rcx, [0x1401bea18]
cmp rax, rcx
je 0x14002ed86
lea rdx, str.datatype
mov rcx, r12
call fcn.140038e30
cmp byte [rax + 8], 1
jne 0x14002ed86
lea rdx, str.datatype
mov rcx, r12
call fcn.140038e30
mov rcx, rax
call fcn.140038460
mov dword [rbp - 0x38], eax
mov rsi, qword [rbp - 0x50]
lea rcx, [0x1401b59a8]
mov rdx, qword [0x1401b59a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
cmp dword [rbp - 0x38], 0
jne 0x14002ee3e
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x4d8]
call fcn.140020af0
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002edcb
mov rdx, qword [rax]
test rdx, rdx
jne 0x14002edd5
mov eax, r15d
jmp 0x14002ede9
mov rax, r14
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x14002ede0
mov r8d, eax
lea rcx, [rbp - 0x70]
call fcn.140028030
nop
cmp qword [rbp + 0x4f0], 0x10
jb 0x14002ee0c
mov rcx, qword [rbp + 0x4d8]
call fcn.1400cbac0
mov qword [rbp + 0x4f0], 0xf
mov qword [rbp + 0x4e8], r15
mov byte [rbp + 0x4d8], 0
mov rax, qword [rbp - 0x70]
mov r12d, dword [rax - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140002130
mov rax, qword [rsp + 0x50]
jmp 0x14002ee4a
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax - 0x10]
lea r12d, [rcx + rcx]
cmp byte [rsp + 0x48], 0
je 0x14002ee8b
mov dword [rbp - 0x2c], 0x2710
mov r9d, 4
lea r8, [rbp - 0x2c]
lea edx, [r9 + 2]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp - 0x2c]
lea edx, [r9 + 1]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x50]
cmp dword [rax - 0x10], 0
jne 0x14002eead
mov rdi, qword [rbp - 0x70]
cmp dword [rdi - 8], 1
jle 0x14002eec8
mov edx, dword [rdi - 0x10]
lea rcx, [rbp - 0x70]
call fcn.14001b700
mov rdi, qword [rbp - 0x70]
jmp 0x14002eec8
cmp dword [rax - 8], 1
jle 0x14002eec5
mov edx, dword [rax - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140002590
mov rax, qword [rsp + 0x50]
mov rdi, rax
mov rbx, qword [rsp + 0x70]
mov esi, dword [rbx - 0x10]
test esi, esi
cmove rbx, r15
call fcn.140029030
mov rcx, rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rdi
mov r9d, esi
mov r8, rbx
mov r12, qword [rbp - 0x50]
mov rdx, r12
call fcn.14003fe90
test eax, eax
jne 0x14002f26b
mov eax, dword [0x1401bdd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0x10
jne 0x14002ef34
call fcn.1400cc4a0
mov dword [0x1401bdd80], eax
lea rcx, [rbp + 0xd0]
call fcn.1400269b0
nop
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r11d, dword [0x1401bdd80]
lea ecx, [r11 + 1]
imul ecx, r11d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0xe
jne 0x14002f052
mov eax, r11d
cdq
sub eax, edx
sar eax, 1
mov r12d, eax
mov eax, 0x55555556
imul r11d
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, r11d
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbp - 0x38], eax
mov eax, 0x66666667
imul r11d
mov edi, edx
sar edi, 1
mov ecx, edi
shr ecx, 0x1f
add edi, ecx
lea r8, [rbp + 0x691]
mov r14d, dword [rbp - 0x38]
movzx r9d, r11b
sub r9b, r15b
mov r10d, r13d
mov ebx, 3
mov eax, r11d
cdq
idiv r10d
movzx eax, r11b
imul r9b
movzx ecx, al
movzx eax, dl
imul cl
mov byte [r8 - 1], al
movzx eax, r9b
imul r12b
movzx ecx, al
movzx eax, dl
imul cl
mov byte [r8], al
movzx eax, r9b
imul sil
movzx ecx, al
movzx eax, dl
imul cl
mov byte [r8 + 1], al
movzx eax, r14b
imul r9b
movzx ecx, al
movzx eax, dl
imul cl
mov byte [r8 + 2], al
movzx eax, r9b
imul dil
movzx ecx, al
movzx eax, dl
imul cl
mov byte [r8 + 3], al
inc r10d
add r8, 5
dec rbx
jne 0x14002efd0
inc r15d
cmp r15d, 7
jl 0x14002efc1
or r14, 0xffffffffffffffff
cmp byte [rsp + 0x40], 0
je 0x14002f063
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
lea rdx, str.HttpSendRequest_Failed_with:
test rdx, 0xffffffffffff0000
jne 0x14002f0ac
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002f0b6
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140002690
jmp 0x14002f0b6
lea rcx, [rbp + 0x40]
call fcn.140003600
nop
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x130]
call fcn.140020cd0
nop
mov rdx, rax
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.14002b210
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f103
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f121
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f142
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f160
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f17f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f19e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f1bc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f1db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f1f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f217
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f236
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x14002f254
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
dec r14d
jmp 0x140031664
lea rdx, str.noResponse
mov rdi, qword [rbp + 0xa8]
mov rcx, rdi
call fcn.140038e30
cmp byte [rax + 8], 5
jne 0x14002f4ce
lea rdx, str.noResponse
mov rcx, rdi
call fcn.140038e30
mov rcx, rax
call fcn.1400387e0
test al, al
je 0x14002f4ce
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [0x1401bdd80]
lea r8d, [rdx + 2]
lea ecx, [rdx + 1]
imul r8d, ecx
imul r8d, edx
mov eax, 0x4ec4ec4f
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub r8d, edx
mov eax, dword [0x1401be8fc]
mov ecx, 0x1682bb30
cmp r8d, 4
cmove eax, ecx
mov dword [0x1401be8fc], eax
cmp byte [rsp + 0x40], 0
je 0x14002f309
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rbp + 0x108]
and eax, 0xffffff00
mov dword [rbp + 0x108], eax
btr eax, 8
mov dword [rbp + 0x108], eax
mov qword [rbp + 0x110], r15
mov eax, dword [rbp + 0x1d8]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1d8], eax
mov qword [rbp + 0x1e0], r15
mov byte [rbp + 0x1d0], 1
lea rdx, str.result
lea rcx, [rbp + 0x100]
call fcn.140038c30
mov rcx, rax
lea rdx, [rbp + 0x1d0]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400381f0
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x358]
call fcn.140037f40
nop
lea rdx, str.content
lea rcx, [rbp + 0x100]
call fcn.140038c30
mov rcx, rax
lea rdx, [rbp + 0x358]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x358]
call fcn.1400381f0
lea rdx, [rbp + 0x100]
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.140038090
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x100]
call fcn.1400381f0
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f3fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f417
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f431
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f44a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f464
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f47d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f496
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f4b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f4c9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
mov byte [rbp + 0xba0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xba1]
call fcn.1400d0f20
mov dword [rbp + 0x98], 0x400
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x14002f651
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002f523
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x138]
call fcn.140003420
nop
mov rdx, rax
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.14002b210
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x138]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f567
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f580
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f59a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f5b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f5cd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f5e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f600
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f619
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f633
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f64c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r12
test rax, rax
jne 0x14002f7b2
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002f684
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x208]
call fcn.140003420
nop
mov rdx, rax
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.14002b210
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x208]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f6c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f6e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f6fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f715
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f72e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f748
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f761
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f77a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f794
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f7ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x98]
lea r8, [rbp + 0xba0]
mov edx, 0x13
call rax
test eax, eax
jne 0x14002f981
mov eax, dword [0x1401bdd80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 5
jne 0x14002f839
mov ecx, 0x28
call fcn.1400cb128
mov rbx, rax
nop dword [rax]
call fcn.1400cc4a0
add eax, dword [0x1401bdd80]
mov dword [rbx + r15*4], eax
inc r15
cmp r15, 0xa
jl 0x14002f810
mov ecx, dword [rbx + 0x24]
mov dword [0x1401bdd80], ecx
mov rcx, rbx
call fcn.1400cc208
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002f853
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x148]
call fcn.140003420
nop
mov rdx, rax
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.14002b210
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f897
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f8b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f8ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f8e4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f8fd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f917
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f930
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f949
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f963
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002f97c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0xba0]
lea rcx, [rsp + 0x58]
call fcn.140003600
nop
xor bl, bl
lea rdx, str.acceptedStatusCodes
mov rcx, rdi
call fcn.140038e30
mov rsi, rax
movzx eax, byte [rax + 8]
test al, al
je 0x14002fd37
cmp al, 6
je 0x14002fd37
cmp al, 7
jne 0x14002fcec
mov r8d, dword [0x1401bdd80]
mov eax, r8d
imul eax, r8d
and eax, 0x8000000f
jge 0x14002f9f9
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 0xe
jne 0x14002fa0c
test r8d, r8d
cmove r8d, r13d
mov dword [0x1401bdd80], r8d
mov r12d, r15d
mov rcx, rsi
call fcn.140038860
test eax, eax
jle 0x14002fc14
nop
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
mov r8d, r12d
lea rdx, [0x140146c08]
lea rcx, [rbp + 0x50]
call fcn.140031ab0
mov rdi, qword [rbp + 0x50]
mov rdx, rdi
mov rcx, rsi
call fcn.140038e30
mov rdx, rdi
mov rcx, rsi
cmp byte [rax + 8], 4
jne 0x14002fae3
lea rax, [rbp + 0x438]
mov qword [rbp + 0xb0], rax
call fcn.140038e30
mov rdx, qword [rax]
lea rcx, [rbp + 0x438]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.140020a50
nop
mov rdx, qword [rax]
mov eax, r15d
test rdx, rdx
setne al
test eax, eax
je 0x14002fbdd
mov rax, qword [rsp + 0x58]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002facd
add rax, 2
test cx, cx
jne 0x14002fab6
mov eax, r15d
jmp 0x14002fad2
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x1a8]
jmp 0x14002fb98
call fcn.140038e30
cmp byte [rax + 8], 1
jne 0x14002fbb4
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x158], rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140038e30
mov rcx, rax
call fcn.140038460
mov r8d, eax
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0xd8]
call fcn.140020c30
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fb4c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, r15d
mov rax, qword [rbp + 0xd8]
test rax, rax
setne cl
test ecx, ecx
je 0x14002fc02
mov rcx, qword [rsp + 0x58]
sub rax, rcx
nop dword [rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002fb87
add rcx, 2
test dx, dx
jne 0x14002fb70
mov eax, r15d
jmp 0x14002fb8c
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fbac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002fbe8
mov rdi, qword [rbp + 0x50]
lea rdx, [rdi - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fbc8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r12d
mov rcx, rsi
call fcn.140038860
cmp r12d, eax
jge 0x14002fc0d
jmp 0x14002fa20
mov ecx, 0x80004005
call fcn.140001920
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fc0d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002fc0d
mov ecx, 0x80004005
call fcn.140001920
nop
mov r8d, dword [0x1401bdd80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 9
jne 0x14002fd26
mov edx, r15d
nop word [rax + rax]
mov ecx, edx
and ecx, 1
dec ecx
not ecx
and ecx, r8d
mov eax, edx
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
add r8d, eax
inc edx
cmp edx, 0x100
jl 0x14002fc50
mov dword [0x1401bdd80], r8d
jmp 0x14002fd26
mov rcx, r15
mov rdx, qword [rsp + 0x58]
lea r8, [0x14014a8d0]
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14002fd1a
cmp rcx, 4
jne 0x14002fd00
mov eax, r15d
jmp 0x14002fd1f
sbb eax, eax
or eax, 1
test eax, eax
sete bl
jmp 0x14002fd2a
mov r12, qword [rbp - 0x50]
test bl, bl
jne 0x14002fed2
jmp 0x1400314df
mov edi, r15d
mov rcx, rsi
call fcn.140038860
test eax, eax
jle 0x1400314df
nop word [rax + rax]
mov edx, edi
mov rcx, rsi
call fcn.140038b40
mov edx, edi
mov rcx, rsi
cmp byte [rax + 8], 4
jne 0x14002fde1
lea rax, [rbp + 0x478]
mov qword [rbp + 0xb0], rax
call fcn.140038b40
mov rdx, qword [rax]
lea rcx, [rbp + 0x478]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1e8]
call fcn.140020a50
nop
mov rdx, qword [rax]
mov eax, r15d
test rdx, rdx
setne al
test eax, eax
je 0x14002fec7
mov rax, qword [rsp + 0x58]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002fdcb
add rax, 2
test cx, cx
jne 0x14002fdb4
mov eax, r15d
jmp 0x14002fdd0
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x1e8]
jmp 0x14002fe98
call fcn.140038b40
cmp byte [rax + 8], 1
jne 0x14002feb0
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x118], rbx
mov edx, edi
mov rcx, rsi
call fcn.140038b40
mov rcx, rax
call fcn.140038460
mov r8d, eax
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0xb8]
call fcn.140020c30
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002fe49
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, r15d
mov rax, qword [rbp + 0xb8]
test rax, rax
setne cl
test ecx, ecx
je 0x1400314d4
mov rcx, qword [rsp + 0x58]
sub rax, rcx
nop dword [rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002fe87
add rcx, 2
test dx, dx
jne 0x14002fe70
mov eax, r15d
jmp 0x14002fe8c
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002feac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002fed2
inc edi
mov rcx, rsi
call fcn.140038860
cmp edi, eax
jge 0x1400314df
jmp 0x14002fd50
mov ecx, 0x80004005
call fcn.140001920
nop
mov dword [rbp + 8], r15d
lea r9, [rbp + 8]
mov rcx, r12
call fcn.14002dd60
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov eax, dword [rbp + 8]
test eax, eax
je 0x14002ff92
mov ecx, eax
call fcn.1400cb128
mov rbx, rax
test rax, rax
je 0x14002ff92
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002ff52
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002ff52
mov qword [rsp + 0x20], r15
lea r9, [rbp + 8]
mov r8, rbx
mov edx, 0x16
mov rcx, r12
call rax
mov rdx, rbx
lea rcx, [rbp + 0x1b8]
call fcn.14002a6a0
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.140002310
nop
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ff8a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400cc208
cmp byte [rsp + 0x48], 0
je 0x1400309b6
mov eax, dword [rbp + 0x28]
and eax, 0xffffff00
mov dword [rbp + 0x28], eax
btr eax, 8
mov dword [rbp + 0x28], eax
mov qword [rbp + 0x30], r15
mov eax, dword [0x1401bdd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
mov eax, dword [0x1401be8e8]
mov edx, 0x7b14303b
cmp ecx, 4
cmove eax, edx
mov dword [0x1401be8e8], eax
mov rdx, r15
mov rax, qword [rsp + 0x58]
lea r8, [0x14014a8f0]
nop dword [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14003001a
cmp rdx, 4
jne 0x140030000
mov ecx, r15d
jmp 0x14003001f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140030228
mov rdx, r15
lea r8, [0x14014a8e8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14003005a
cmp rdx, 4
jne 0x140030040
mov ecx, r15d
jmp 0x14003005f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140030228
mov rdx, r15
lea r8, [0x14014a900]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14003009a
cmp rdx, 4
jne 0x140030080
mov ecx, r15d
jmp 0x14003009f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x140030228
mov rdx, r15
lea r8, [0x14014a8f8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x1400300da
cmp rdx, 4
jne 0x1400300c0
mov eax, r15d
jmp 0x1400300df
sbb eax, eax
or eax, 1
test eax, eax
setne al
test al, al
je 0x140030228
lea rdx, [rbp + 0x20]
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.140038090
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x20]
call fcn.1400381f0
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030124
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003013e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030157
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030171
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003018b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400301a4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400301be
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400301d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400301f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003020a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030223
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp], rax
mov rcx, qword [rbp - 0x48]
add rcx, 0xffffffffffffffe8
call fcn.1400024f0
add rax, 0x18
mov qword [rbp + 0x18], rax
lea rcx, [rbp + 0x18]
call fcn.140025bf0
mov rbx, qword [rbp + 0x18]
cmp dword [rbx - 0x10], 0
jl 0x14003084c
lea rdx, str.location:
mov rcx, rbx
call fcn.1400cc8a4
mov rdi, rax
test rax, rax
je 0x14003084c
sub rdi, rbx
sar rdi, 1
cmp edi, 0xffffffff
je 0x14003084c
test edi, edi
js 0x1400302c0
cmp edi, dword [rbx - 0x10]
jg 0x1400302c0
movsxd rax, edi
lea rcx, [rbx + rax*2]
lea rdx, [0x14014a850]
call fcn.1400cc8a4
test rax, rax
je 0x1400302c0
sub rax, rbx
sar rax, 1
jmp 0x1400302c3
mov eax, r14d
sub eax, edi
mov r9d, eax
mov r8d, edi
lea rdx, [rbp + 0x178]
lea rcx, [rbp + 0x18]
call fcn.14000fdc0
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.140002310
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030304
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp]
cmp dword [rbx - 0x10], 0
jl 0x1400306de
lea rdx, str.http
mov rcx, rbx
call fcn.1400cc8a4
test rax, rax
je 0x1400306de
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x1400306de
mov r8d, dword [rbx - 0x10]
sub r8d, eax
lea rdx, [rbp + 0x228]
lea rcx, [rbp]
call fcn.14001ad70
nop
mov rdx, rax
lea rcx, [rbp]
call fcn.140002310
nop
mov rdx, qword [rbp + 0x228]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030379
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp + 0x1f8]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1f8], eax
mov qword [rbp + 0x200], r15
mov byte [rbp + 0x1f0], 1
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x20]
call fcn.140038c30
mov rcx, rax
lea rdx, [rbp + 0x1f0]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x1f0]
call fcn.1400381f0
call fcn.14002ab20
test al, al
jne 0x14003044f
mov eax, r15d
mov dword [rbp - 0x38], eax
lea r10, [rbp + 0xfb0]
mov r11d, dword [0x1401bdd80]
nop word [rax + rax]
movzx edi, r11b
sub dil, al
mov esi, r13d
mov r12d, 0xb
mov r8, r15
mov eax, r11d
cdq
idiv esi
mov ebx, edx
mov r9d, r13d
nop
mov eax, r11d
cdq
idiv r9d
mov ecx, eax
movzx eax, dil
imul cl
movzx ecx, al
movzx eax, bl
imul cl
mov byte [r10 + r8], al
inc r9d
inc r8
cmp r8, 0xb
jl 0x140030410
inc esi
add r10, 0xb
dec r12
jne 0x140030400
mov eax, dword [rbp - 0x38]
inc eax
mov dword [rbp - 0x38], eax
cmp eax, 4
jl 0x1400303f0
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x518]
call fcn.140020af0
nop
mov rdx, rax
lea rcx, [rbp + 0x278]
call fcn.140037fd0
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x20]
call fcn.140038c30
mov rcx, rax
lea rdx, [rbp + 0x278]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x278]
call fcn.1400381f0
nop
cmp qword [rbp + 0x530], 0x10
jb 0x1400304b4
mov rcx, qword [rbp + 0x518]
call fcn.1400cbac0
mov qword [rbp + 0x530], 0xf
mov qword [rbp + 0x528], r15
mov byte [rbp + 0x518], 0
lea rdx, [rbp]
lea rcx, [rbp + 0x4f8]
call fcn.140020af0
nop
mov rdx, rax
lea rcx, [rbp + 0x328]
call fcn.140037fd0
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x20]
call fcn.140038c30
mov rcx, rax
lea rdx, [rbp + 0x328]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x328]
call fcn.1400381f0
nop
cmp qword [rbp + 0x510], 0x10
jb 0x140030531
mov rcx, qword [rbp + 0x4f8]
call fcn.1400cbac0
mov qword [rbp + 0x510], 0xf
mov qword [rbp + 0x508], r15
mov byte [rbp + 0x4f8], 0
mov rcx, qword [rsp + 0x58]
mov edx, r13d
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x14003056d
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.140002490
mov rcx, qword [rsp + 0x58]
call fcn.1400ccbb4
mov ecx, dword [rbp + 0x218]
and ecx, 0xffffff01
or ecx, 1
mov dword [rbp + 0x218], ecx
mov qword [rbp + 0x220], r15
mov dword [rbp + 0x210], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x20]
call fcn.140038c30
mov rcx, rax
lea rdx, [rbp + 0x210]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x210]
call fcn.1400381f0
lea rdx, [rbp + 0x20]
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.140038090
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400305ee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030607
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.1400381f0
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003062a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030644
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003065d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030677
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030691
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp - 0x60]
call fcn.140002290
nop
lea rcx, [rsp + 0x78]
call fcn.140002290
nop
lea rcx, [rbp - 0x80]
call fcn.140002290
nop
lea rcx, [rbp - 0x78]
call fcn.140002290
nop
lea rcx, [rsp + 0x68]
call fcn.140002290
nop
lea rcx, [rbp - 0x68]
call fcn.140002290
nop
lea rcx, [rsp + 0x60]
call fcn.140002290
jmp 0x14003166f
lea rdx, [rbp + 0x20]
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.140038090
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003070c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030725
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.1400381f0
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030748
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030762
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003077b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030795
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400307af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400307c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400307e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400307fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030814
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003082e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030847
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
lea rdx, [rbp + 0x20]
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.140038090
mov dword [rsp + 0x44], r13d
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030876
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003088f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.1400381f0
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400308b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400308cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400308e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400308ff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030919
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030932
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003094c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030965
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003097e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030998
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400309b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140031656
lea rcx, [rbp - 0x18]
call fcn.14001b110
nop
mov dword [rbp - 0x20], r15d
lea rcx, [rbp - 0x18]
call fcn.140031980
mov rdi, rax
lea rdx, [rax + 0x400]
lea rcx, [rbp - 0x18]
call fcn.140031880
mov dword [rbp - 0x20], r15d
mov rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.140031990
mov rbx, rax
call fcn.140029030
mov rcx, rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r12
call fcn.14003f910
test eax, eax
je 0x14003137e
mov edx, dword [rbp - 0x20]
add rdx, rdi
lea rcx, [rbp - 0x18]
call fcn.140031880
cmp dword [rbp - 0x20], 0
jne 0x1400309c4
mov byte [rbp + 0x790], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x791]
call fcn.1400d0f20
mov dword [rbp + 0x9c], 0x400
mov rbx, r15
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140030a79
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x9c]
lea r8, [rbp + 0x790]
mov edx, 0x1d
mov rcx, r12
call rbx
test eax, eax
je 0x140030c0a
call fcn.14002aa40
test al, al
jne 0x140030aaf
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rdx, [rbp + 0x790]
lea rcx, [rbp + 0xa0]
call fcn.14002a6a0
nop
lea rdx, str.gzip
lea rcx, [rbp + 0xa0]
call fcn.14001b0d0
test al, al
je 0x140030b9a
lea rcx, [rbp + 0x230]
call fcn.14001b110
nop
lea rcx, [rbp - 0x18]
call fcn.140031980
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.140031990
mov rcx, rax
lea r8, [rbp + 0x230]
mov rdx, rbx
call fcn.14002aba0
test eax, eax
jne 0x140030b7d
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140030b32
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x188]
call fcn.140003420
nop
mov rdx, rax
mov rcx, qword [rbp - 0x58]
call fcn.14002b210
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x188]
call fcn.140002290
nop
lea rcx, [rbp + 0x230]
call fcn.14002a6f0
nop
lea rcx, [rbp + 0xa0]
jmp 0x14003143e
lea rdx, [rbp + 0x230]
lea rcx, [rbp - 0x18]
call fcn.140031760
nop
lea rcx, [rbp + 0x230]
call fcn.14002a6f0
call fcn.14002a950
test al, al
jne 0x140030bfe
mov edi, r15d
mov r11d, dword [0x1401bdd80]
mov eax, r11d
cdq
sub eax, edx
sar eax, 1
mov dword [rbp - 0x2c], eax
mov eax, r11d
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rbp - 0x38], eax
lea r8, [rbp + 0x11a1]
nop
movzx r9d, r11b
sub r9b, dil
mov r10d, r13d
mov ebx, 7
nop
inc r10d
add r8, 6
dec rbx
jne 0x140030be0
inc edi
cmp edi, 0xb
lea r13d, [rbx + 1]
jl 0x140030bd0
xor r15d, r15d
mov r12, qword [rbp - 0x50]
lea rcx, [rbp + 0xa0]
call fcn.140002290
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140030c24
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
xor dil, dil
lea rdx, [0x14014a660]
mov rsi, qword [rbp + 0xa8]
mov rcx, rsi
call fcn.140038e30
mov rcx, rax
call fcn.140039300
test al, al
je 0x140030cd8
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0xb0], rax
lea rdx, [0x14014a660]
mov rcx, rsi
call fcn.140038e30
mov rcx, rax
call fcn.1400033d0
mov rdx, rax
lea rcx, [rbp + 0x4b8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.140020a50
nop
lea rdx, str.base64
lea rcx, [rbp + 0x90]
call fcn.14001b0d0
test al, al
je 0x140030caf
mov bl, 1
jmp 0x140030ccc
lea rdx, str.binary
lea rcx, [rbp + 0x90]
call fcn.14001b0d0
movzx edi, dil
test al, al
cmovne edi, r13d
lea rcx, [rbp + 0x90]
call fcn.140002290
lea rcx, [rbp - 0x28]
call fcn.1400021b0
nop
test bl, bl
je 0x140030e59
lea rcx, [rbp - 0x18]
call fcn.140031980
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.140031990
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x1c8]
call fcn.1400206b0
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.1400022d0
nop
lea rcx, [rbp + 0x1c8]
call fcn.140002290
call fcn.14002a910
test al, al
jne 0x140030dbc
mov word [rbp + 0x1370], r15w
xor edx, edx
mov r8d, 0x13560
lea rcx, [rbp + 0x1372]
call fcn.1400d0f20
mov r10, r15
mov r9, r15
nop dword [rax]
mov r8, r15
test r10, r10
je 0x140030d90
test r8, r8
je 0x140030d90
lea rdx, [r8 + r9]
lea rax, [r8 + r9]
movzx ecx, word [rbp + rax*2 + 0x11e2]
inc cx
add cx, word [rbp + rdx*2 + 0x136e]
mov word [rbp + rdx*2 + 0x1370], cx
inc r8
cmp r8, 0xc7
jl 0x140030d63
inc r10
add r9, 0xc7
cmp r9, 0x9ab1
jl 0x140030d60
movsx eax, word [rbp + 0x148d0]
mov dword [0x1401bdd80], eax
lea rcx, [rbp + 0x128]
call fcn.140028330
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.14001b090
movzx ebx, al
lea rcx, [rbp + 0x128]
call fcn.140002290
test bl, bl
je 0x140030f65
call fcn.14002aae0
test al, al
jne 0x140030e1e
mov eax, 0xca
mov r8d, 0x48
test r8d, r8d
je 0x140030e15
mov ecx, r8d
cdq
idiv r8d
mov r8d, edx
mov eax, ecx
test ecx, ecx
jne 0x140030e00
add eax, r8d
mov dword [0x1401bdd80], eax
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x120]
call fcn.140003420
nop
mov rdx, rax
mov rcx, qword [rbp - 0x58]
call fcn.14002b210
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x120]
call fcn.140002290
nop
lea rcx, [rbp - 0x28]
jmp 0x14003143e
test dil, dil
jne 0x140030f65
lea rcx, [rbp - 0x18]
call fcn.140031980
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x18]
call fcn.140031990
cmp byte [rax], dil
je 0x140030e9c
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x18]
call fcn.140031880
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.140031990
mov byte [rax], dil
lea rcx, [rbp - 0x18]
call fcn.140031980
cmp rax, 3
jbe 0x140030f31
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.140031990
cmp byte [rax], 0xef
jne 0x140030f31
mov rdx, r13
lea rcx, [rbp - 0x18]
call fcn.140031990
cmp byte [rax], 0xbb
jne 0x140030f31
mov edx, 2
lea rcx, [rbp - 0x18]
call fcn.140031990
cmp byte [rax], 0xbf
jne 0x140030f31
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp - 0x18]
call fcn.140031870
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x308]
call fcn.140031a30
mov rbx, qword [rax]
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp - 0x18]
call fcn.140031870
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x18]
call fcn.1400319a0
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.140031990
mov rdx, rax
lea rcx, [rbp + 0x140]
call fcn.140003420
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.1400022d0
nop
lea rcx, [rbp + 0x140]
call fcn.140002290
xor bl, bl
lea rdx, str.outputFile
mov rcx, rsi
call fcn.140038e30
mov rcx, rax
call fcn.140039300
test al, al
je 0x1400310c4
lea rax, [rbp + 0x498]
mov qword [rbp + 0xc0], rax
lea rdx, str.outputFile
mov rcx, rsi
call fcn.140038e30
mov rcx, rax
call fcn.1400033d0
mov rdx, rax
lea rcx, [rbp + 0x498]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140020a50
nop
mov ecx, dword [0x1401bdd80]
imul ecx, ecx
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 0xe
jne 0x140031003
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
lea rcx, [rbp + 0x60]
call fcn.14000f3a0
test al, al
jne 0x1400310bb
test dil, dil
je 0x140031087
mov qword [rbp + 0x88], r15
lea rcx, [rbp + 0x60]
call fcn.1400033d0
mov rdx, rax
lea r8, [0x14014a9a4]
lea rcx, [rbp + 0x88]
call fcn.1400ce850
test eax, eax
jne 0x1400310bb
mov rdi, qword [rbp + 0x88]
test rdi, rdi
je 0x1400310bb
lea rcx, [rbp - 0x18]
call fcn.140031980
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x18]
call fcn.140031990
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, r13
call fcn.1400cec84
mov rcx, qword [rbp + 0x88]
call fcn.1400cdae0
mov bl, 1
jmp 0x1400310bb
lea rax, [rbp + 0x150]
mov qword [rbp + 0xc0], rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x150]
call fcn.1400033e0
nop
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140029b80
movzx ebx, bl
test al, al
cmovne ebx, r13d
lea rcx, [rbp + 0x60]
call fcn.140002290
xor edx, edx
lea rcx, [rbp + 0xe0]
call fcn.140037e80
nop
mov dl, 1
lea rcx, [rbp + 0x290]
call fcn.140038070
nop
lea rdx, str.result
lea rcx, [rbp + 0xe0]
call fcn.140038c20
mov rcx, rax
lea rdx, [rbp + 0x290]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x290]
call fcn.1400381f0
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x28]
call fcn.1400276c0
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x538]
call fcn.140020af0
nop
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.140037fd0
nop
lea rdx, str.content
lea rcx, [rbp + 0xe0]
call fcn.140038c20
mov rcx, rax
lea rdx, [rbp + 0x2b0]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x2b0]
call fcn.1400381f0
nop
lea rcx, [rbp + 0x538]
call fcn.1400013b0
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x578]
call fcn.140020af0
nop
mov rdx, rax
lea rcx, [rbp + 0x2d0]
call fcn.140037fd0
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xe0]
call fcn.140038c20
mov rcx, rax
lea rdx, str.headers
call fcn.140038c20
mov rcx, rax
lea rdx, [rbp + 0x2d0]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x2d0]
call fcn.1400381f0
nop
lea rcx, [rbp + 0x578]
call fcn.1400013b0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x5b8]
call fcn.140020af0
nop
mov rdx, rax
lea rcx, [rbp + 0x2f0]
call fcn.140037fd0
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xe0]
call fcn.140038c20
mov rcx, rax
lea rdx, str.httpCode
call fcn.140038c20
mov rcx, rax
lea rdx, [rbp + 0x2f0]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x2f0]
call fcn.1400381f0
nop
lea rcx, [rbp + 0x5b8]
call fcn.1400013b0
lea rdx, str.empty
lea rcx, [rbp + 0x558]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x310]
call fcn.140037fd0
nop
lea rdx, str.noData
lea rcx, [rbp + 0xe0]
call fcn.140038c20
mov rcx, rax
lea rdx, [rbp + 0x310]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x310]
call fcn.1400381f0
nop
lea rcx, [rbp + 0x558]
call fcn.1400013b0
lea rdx, str.outputFile
mov rcx, rsi
call fcn.140038e30
mov rcx, rax
call fcn.140039300
test al, al
je 0x140031353
movzx edx, bl
lea rcx, [rbp + 0x340]
call fcn.140038070
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x5d8]
call fcn.140001370
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x598]
call fcn.140031ae0
nop
mov rdx, rax
lea rcx, [rbp + 0xe0]
call fcn.140038f40
mov rcx, rax
lea rdx, [rbp + 0x340]
call fcn.1400382a0
nop
lea rcx, [rbp + 0x598]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x5d8]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x340]
call fcn.1400381f0
lea rdx, [rbp + 0xe0]
mov rcx, qword [rbp - 0x58]
call fcn.140038090
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0xe0]
call fcn.1400381f0
nop
lea rcx, [rbp - 0x28]
jmp 0x14003143e
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r11d, dword [0x1401bdd80]
mov ecx, r11d
imul ecx, r11d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 2
jne 0x1400313e3
mov edi, r15d
lea r8, [rbp + 0x701]
nop dword [rax]
movzx r9d, r11b
sub r9b, dil
mov r10d, r13d
mov ebx, 4
nop
inc r10d
add r8, 4
dec rbx
jne 0x1400313d0
inc edi
cmp edi, 9
jl 0x1400313c0
call fcn.14002a8d0
test al, al
jne 0x140031401
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
cmp byte [rsp + 0x40], 0
je 0x140031412
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0x80]
call fcn.140003420
nop
mov rdx, rax
mov rcx, qword [rbp - 0x58]
call fcn.14002b210
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x80]
call fcn.140002290
nop
lea rcx, [rbp - 0x18]
call fcn.14002a6f0
nop
lea rcx, [rbp - 0x48]
call fcn.140002290
nop
lea rcx, [rsp + 0x58]
call fcn.140002290
nop
lea rcx, [rbp - 0x70]
call fcn.140002290
nop
lea rcx, [rsp + 0x50]
call fcn.140002290
nop
lea rcx, [rsp + 0x70]
call fcn.140002290
nop
lea rcx, [rbp - 0x60]
call fcn.140002290
nop
lea rcx, [rsp + 0x78]
call fcn.140002290
nop
lea rcx, [rbp - 0x80]
call fcn.140002290
nop
lea rcx, [rbp - 0x78]
call fcn.140002290
nop
lea rcx, [rsp + 0x68]
call fcn.140002290
nop
lea rcx, [rbp - 0x68]
call fcn.140002290
nop
lea rcx, [rsp + 0x60]
call fcn.140002290
mov rax, qword [rbp - 0x58]
jmp 0x140031672
mov ecx, 0x80004005
call fcn.140001920
nop
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x1400314f9
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rax, [rbp + 0x608]
mov qword [rbp + 0x600], rax
mov r8d, 3
mov rdx, qword [rsp + 0x58]
lea rcx, [rbp + 0x600]
call fcn.14001b430
nop
mov rcx, qword [rbp + 0x600]
call fcn.1400ccc68
mov edx, eax
mov rdi, qword [rbp - 0x58]
mov rcx, rdi
call fcn.14002b770
mov dword [rsp + 0x44], r13d
lea rax, [rbp + 0x608]
mov rcx, qword [rbp + 0x600]
cmp rcx, rax
je 0x140031557
call fcn.1400cc598
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031571
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003158a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400315a4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400315be
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400315d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400315f1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003160a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031623
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003163d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031656
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003166f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rdi
mov rcx, qword [rbp + 0x148e0]
xor rcx, rsp
call fcn.1400cbae0
add rsp, 0x149f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret