Function at 0x1400300d0
Capabilities:
Encode data using xor
Send data
Send http request
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x129d8]
mov eax, 0x12ad8
call fcn.1400d1960
sub rsp, rax
mov qword [rbp + 0x278], 0xfffffffffffffffe
mov rax, qword [0x1401bee90]
xor rax, rsp
mov qword [rbp + 0x129c0], rax
mov r12, r9
mov qword [rbp - 0x50], r8
mov rbx, rdx
mov qword [rbp - 0x30], rdx
mov rdi, rcx
mov qword [rbp - 0x58], rcx
mov qword [rbp + 0x338], rcx
xor r14d, r14d
mov dword [rsp + 0x44], r14d
mov rcx, r9
call fcn.14002dd60
test al, al
je 0x1400301cb
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x60], rax
lea rdx, str.this_module_doesnt_support_file_request
test rdx, 0xffffffffffff0000
jne 0x14003018b
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140030195
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.1400026e0
jmp 0x140030195
lea rcx, [rbp + 0x60]
call fcn.140003550
nop
lea rdx, [rbp + 0x60]
mov rcx, rdi
call fcn.14002d0f0
mov eax, 1
mov dword [rsp + 0x44], eax
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400301c3
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov rax, rdi
jmp 0x140033814
test rbx, rbx
jne 0x140030298
mov eax, dword [0x1401c6d80]
imul eax, eax
and eax, 0x8000000f
jge 0x1400301eb
dec eax
or eax, 0xfffffff0
inc eax
cmp eax, 3
jne 0x1400301fd
lea rcx, [rbp + 0x670]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x88], rax
lea rdx, str.InternetOpen_Failed
test rdx, 0xffffffffffff0000
jne 0x14003024c
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140030259
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x88]
call fcn.1400026e0
jmp 0x140030259
lea rcx, [rbp + 0x88]
call fcn.140003550
nop
lea rdx, [rbp + 0x88]
mov rcx, rdi
call fcn.14002d0f0
mov eax, 1
mov dword [rsp + 0x44], eax
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400301c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rdi
jmp 0x140033814
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
mov dword [rbp - 0x20], r14d
lea rax, [rbp + 0x228]
mov qword [rbp + 0x30], rax
lea r13, [0x1401c7728]
cmp byte [r12 + 8], 0
jne 0x1400302ef
mov rax, r13
jmp 0x1400302fe
lea rdx, [0x14014bf3c]
mov rcx, r12
call fcn.14003aff0
mov rdx, qword [rax]
mov qword [rbp + 0x240], 0xf
mov qword [rbp + 0x238], r14
mov byte [rbp + 0x228], 0
or rsi, 0xffffffffffffffff
cmp byte [rdx], 0
jne 0x140030328
mov r8, r14
jmp 0x14003033a
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140030330
lea rcx, [rbp + 0x228]
call fcn.1400013f0
nop
lea rdx, [rbp + 0x228]
lea rcx, [rsp + 0x58]
call fcn.1400225b0
nop
lea r9, [rbp - 0x20]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x58]
call fcn.14002d940
movzx eax, al
test eax, eax
jne 0x140030493
mov eax, dword [0x1401c6d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 9
jne 0x1400303c5
mov ecx, 4
call fcn.1400cd068
mov rbx, rax
call fcn.1400cd268
mov dword [rbx], eax
mov dword [0x1401c6d80], eax
mov rcx, rbx
call fcn.1400cc890
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x80], rax
lea rdx, str.InternetCrackUrl_Failed
test rdx, 0xffffffffffff0000
jne 0x140030414
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140030421
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.1400026e0
jmp 0x140030421
lea rcx, [rbp + 0x80]
call fcn.140003550
nop
lea rdx, [rbp + 0x80]
mov rcx, rdi
call fcn.14002d0f0
mov eax, 1
mov dword [rsp + 0x44], eax
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030455
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003046f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030489
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
jmp 0x140030278
mov byte [rsp + 0x48], 0
cmp byte [r12 + 8], 0
je 0x1400304fe
lea rdx, str.redirectCheck
mov rcx, r12
call fcn.14003aff0
cmp rax, r13
je 0x1400304fe
cmp byte [r12 + 8], 0
jne 0x1400304c1
mov rax, r13
jmp 0x1400304d0
lea rdx, [0x14014cb60]
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 5
jne 0x1400304fe
cmp byte [r12 + 8], 0
jne 0x1400304e3
mov rax, r13
jmp 0x1400304f2
lea rdx, [0x14014cb70]
mov rcx, r12
call fcn.14003aff0
mov rcx, rax
call fcn.14003a9a0
mov byte [rsp + 0x48], al
xor r15b, r15b
mov edi, 0x50
lea rax, [rbp + 0x20]
mov qword [rbp + 0x30], rax
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.140002540
add rax, 0x18
mov qword [rbp + 0x20], rax
lea rax, [rbp + 0x20]
mov qword [rbp + 0x30], rax
lea rcx, [rbp + 0x20]
call fcn.140028af0
mov rcx, qword [rbp + 0x20]
cmp dword [rcx - 0x10], 0
jl 0x140030563
lea rdx, str.https:__
call fcn.1400cd6fc
test rax, rax
je 0x140030563
sub rax, qword [rbp + 0x20]
sar rax, 1
test eax, eax
jne 0x140030563
mov r15b, 1
mov edi, 0x1bb
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003057b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp byte [r12 + 8], 0
jne 0x140030588
mov rax, r13
jmp 0x140030597
lea rdx, [0x14014cbd4]
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 1
jne 0x1400305c8
cmp byte [r12 + 8], 0
jne 0x1400305aa
mov rax, r13
jmp 0x1400305b9
lea rdx, str.port
mov rcx, r12
call fcn.14003aff0
mov rcx, rax
call fcn.14003a620
mov ebx, eax
mov dword [rbp - 0x20], eax
jmp 0x1400305d3
mov ebx, dword [rbp - 0x20]
test ebx, ebx
cmove ebx, edi
mov dword [rbp - 0x20], ebx
mov byte [rsp + 0x40], 0
mov r8d, ebx
lea rdx, [rsp + 0x60]
mov rcx, qword [rbp - 0x50]
call fcn.14002db70
mov qword [rbp - 0x38], rax
test rax, rax
jne 0x140030732
mov rax, qword [0x1401c7f38]
test rax, rax
jne 0x140030639
lea rcx, [0x14014cba8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14003062d
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401c7f38], rax
jmp 0x140030634
mov rax, qword [0x1401c7f38]
test rax, rax
je 0x14003066f
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r14
xor r9d, r9d
movzx r8d, bx
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rbp - 0x30]
call rax
mov qword [rbp - 0x38], rax
test rax, rax
jne 0x14003072d
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x70], rax
lea rdx, str.InternetConnect_Failed
test rdx, 0xffffffffffff0000
jne 0x1400306b8
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x1400306c2
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400026e0
jmp 0x1400306c2
lea rcx, [rbp + 0x70]
call fcn.140003550
nop
lea rdx, [rbp + 0x70]
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14002d0f0
mov eax, 1
mov dword [rsp + 0x44], eax
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400306f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003070e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030728
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
mov byte [rsp + 0x40], 1
mov edi, 0x80400200
mov eax, 0x80600200
cmp byte [rsp + 0x48], 0
cmovne edi, eax
or edi, 0xc000
test r15b, r15b
je 0x140030755
or edi, 0x803080
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
cmp byte [r12 + 8], 0
jne 0x14003077b
mov rax, r13
jmp 0x14003078a
lea rdx, [0x14014bfe4]
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 4
jne 0x14003084c
lea rax, [rbp + 0x398]
mov qword [rbp - 0x50], rax
cmp byte [r12 + 8], 0
jne 0x1400307ac
mov rax, r13
jmp 0x1400307bb
lea rdx, [0x14014bf74]
mov rcx, r12
call fcn.14003aff0
mov rdx, qword [rax]
lea rcx, [rbp + 0x398]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.1400225b0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140030831
cmp dword [rbx + 0x10], 0
jl 0x140030823
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140030823
call fcn.140002540
mov r15, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140030819
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r15 + 0x18]
mov qword [rbp - 0x78], rax
jmp 0x140030831
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.1400023f0
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003084c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
cmp byte [r12 + 8], 0
jne 0x140030872
mov rax, r13
jmp 0x140030881
lea rdx, [0x14014cbe8]
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 4
jne 0x140030943
lea rax, [rbp + 0x498]
mov qword [rbp - 0x50], rax
cmp byte [r12 + 8], 0
jne 0x1400308a3
mov rax, r13
jmp 0x1400308b2
lea rdx, [0x14014cc20]
mov rcx, r12
call fcn.14003aff0
mov rdx, qword [rax]
lea rcx, [rbp + 0x498]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.1400225b0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x80]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140030928
cmp dword [rbx + 0x10], 0
jl 0x14003091a
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14003091a
call fcn.140002540
mov r15, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140030910
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r15 + 0x18]
mov qword [rbp - 0x80], rax
jmp 0x140030928
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x80]
call fcn.1400023f0
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030943
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
cmp byte [r12 + 8], 0
jne 0x140030969
mov rax, r13
jmp 0x140030978
lea rdx, str.referer
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 4
jne 0x140030a3a
lea rax, [rbp + 0x3d8]
mov qword [rbp - 0x50], rax
cmp byte [r12 + 8], 0
jne 0x14003099a
mov rax, r13
jmp 0x1400309a9
lea rdx, [0x14014cc08]
mov rcx, r12
call fcn.14003aff0
mov rdx, qword [rax]
lea rcx, [rbp + 0x3d8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.1400225b0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140030a1f
cmp dword [rbx + 0x10], 0
jl 0x140030a11
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140030a11
call fcn.140002540
mov r15, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140030a07
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r15 + 0x18]
mov qword [rbp - 0x70], rax
jmp 0x140030a1f
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x70]
call fcn.1400023f0
nop
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030a3a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
cmp byte [r12 + 8], 0
jne 0x140030a61
mov rax, r13
jmp 0x140030a70
lea rdx, [0x14014cc10]
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 4
jne 0x140030b35
lea rax, [rbp + 0x458]
mov qword [rbp - 0x50], rax
cmp byte [r12 + 8], 0
jne 0x140030a92
mov rax, r13
jmp 0x140030aa1
lea rdx, [0x14014cc40]
mov rcx, r12
call fcn.14003aff0
mov rdx, qword [rax]
lea rcx, [rbp + 0x458]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.1400225b0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x68]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140030b1a
cmp dword [rbx + 0x10], 0
jl 0x140030b0b
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140030b0b
call fcn.140002540
mov r15, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140030b00
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r15 + 0x18]
mov qword [rsp + 0x68], rax
jmp 0x140030b1a
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x68]
call fcn.1400023f0
nop
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030b35
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x68]
cmp dword [rax - 0x10], 0
cmove rax, r14
mov qword [rbp + 0x218], rax
mov qword [rbp + 0x220], r14
mov rax, qword [rbp - 0x70]
cmp dword [rax - 0x10], 0
cmove rax, r14
mov r9, qword [rbp - 0x80]
cmp dword [r9 - 0x10], 0
cmove r9, r14
mov rdx, qword [rbp - 0x78]
cmp dword [rdx - 0x10], 0
cmove rdx, r14
mov r15d, 1
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x218]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x70]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov rbx, rax
mov qword [rbp - 0x50], rax
test rax, rax
jne 0x140030d10
mov r8d, dword [0x1401c6d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 2
jne 0x140030bf1
test r8d, r8d
cmove r8d, r15d
mov dword [0x1401c6d80], r8d
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
lea rdx, str.HttpOpenRequest_Failed
test rdx, 0xffffffffffff0000
jne 0x140030c3a
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140030c44
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.1400026e0
jmp 0x140030c44
lea rcx, [rbp + 0x58]
call fcn.140003550
nop
lea rdx, [rbp + 0x58]
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14002d0f0
mov dword [rsp + 0x44], r15d
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030c72
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030c8c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030ca5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030cbe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030cd7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030cf1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030d0b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
cmp byte [r12 + 8], 0
jne 0x140030d37
mov rax, r13
jmp 0x140030d46
lea rdx, [0x14014cc30]
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 4
jne 0x140030fca
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x28], rbx
lea r8, [0x14014c21c]
test r8, 0xffffffffffff0000
jne 0x140030d9e
movzx ebx, r8w
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140030e17
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.1400026e0
jmp 0x140030e17
mov r15d, dword [rbx - 0x10]
mov rdi, r8
sub rdi, rbx
sar rdi, 1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 2
or eax, ecx
jge 0x140030dd6
mov edx, 2
lea rcx, [rbp + 0x28]
call fcn.1400024e0
mov rbx, qword [rbp + 0x28]
lea r8, [0x14014c21c]
movsxd rdx, dword [rbx - 0xc]
mov r9d, 4
mov rcx, rbx
add rdx, rdx
cmp rdi, r15
ja 0x140030df6
lea r8, [rbx + rdi*2]
call fcn.1400cd0d4
jmp 0x140030dfb
call fcn.1400cd294
cmp dword [rbx - 0xc], 2
jl 0x140030fbb
mov dword [rbx - 0x10], 2
mov word [rbx + 4], r14w
mov r15d, 1
lea rax, [rbp + 0x418]
mov qword [rbp - 0x30], rax
cmp byte [r12 + 8], 0
jne 0x140030e2f
mov rax, r13
jmp 0x140030e3e
lea rdx, [0x14014cca8]
mov rcx, r12
call fcn.14003aff0
mov rdx, qword [rax]
lea rcx, [rbp + 0x418]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.1400225b0
mov rdi, rax
lea rcx, [0x1401be9a8]
mov rdx, qword [0x1401be9a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
lea rdx, str.Content_Type:
test rdx, 0xffffffffffff0000
jne 0x140030ea9
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140030eb3
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400026e0
jmp 0x140030eb3
lea rcx, [rbp + 0x50]
call fcn.140003550
nop
mov r8, rdi
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x1c0]
call fcn.140022810
nop
lea r8, [rbp + 0x28]
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.140022810
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x50]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x140030f34
cmp dword [rbx + 0x10], 0
jl 0x140030f25
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x140030f25
call fcn.140002540
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x140030f1a
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x140030f34
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.1400023f0
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030f50
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1c0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030f6c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030f85
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1d0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030fa1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140030fc6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140030fc6
mov ecx, 0x80070057
call fcn.140001920
nop
mov rbx, qword [rbp - 0x50]
cmp byte [r12 + 8], 0
jne 0x140030fd7
mov rax, r13
jmp 0x140030fe6
lea rdx, [0x14014cc68]
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 4
jne 0x1400310a5
lea rax, [rbp + 0x378]
mov qword [rbp - 0x30], rax
cmp byte [r12 + 8], 0
jne 0x140031008
mov rax, r13
jmp 0x140031017
lea rdx, [0x14014cc88]
mov rcx, r12
call fcn.14003aff0
mov rdx, qword [rax]
lea rcx, [rbp + 0x378]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.1400225b0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140010000
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031064
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002540
add rax, 0x18
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0xf0]
call fcn.140033840
nop
mov rdx, qword [rbp + 0xf0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400310a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
cmp byte [r12 + 8], 0
jne 0x1400310cb
mov rax, r13
jmp 0x1400310da
lea rdx, [0x14014cce8]
mov rcx, r12
call fcn.14003aff0
cmp byte [rax + 8], 4
jne 0x14003114f
lea rax, [rbp + 0x3b8]
mov qword [rbp - 0x30], rax
cmp byte [r12 + 8], 0
jne 0x1400310f8
mov rax, r13
jmp 0x140031107
lea rdx, str.postData
mov rcx, r12
call fcn.14003aff0
mov rdx, qword [rax]
lea rcx, [rbp + 0x3b8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.1400225b0
nop
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140002360
nop
mov rdx, qword [rbp + 0x128]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003114f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x60]
add rcx, 0xffffffffffffffe8
call fcn.140002540
add rax, 0x18
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x60]
mov ecx, dword [rax - 0x10]
lea edi, [rcx + rcx]
cmp byte [rsp + 0x48], 0
je 0x1400311aa
mov dword [rbp - 0x40], 0x2710
mov r9d, 4
lea r8, [rbp - 0x40]
lea edx, [r9 + 2]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp - 0x40]
lea edx, [r9 + 1]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x50]
mov rbx, rax
cmp dword [rax - 0x10], 0
cmove rbx, r14
mov r9, qword [rbp - 0x68]
mov r8d, r15d
sub r8d, dword [r9 - 8]
mov ecx, dword [r9 - 0xc]
or ecx, r8d
jge 0x1400311e2
xor edx, edx
lea rcx, [rbp - 0x68]
call fcn.1400024e0
mov rax, qword [rsp + 0x50]
mov r9, qword [rbp - 0x68]
mov dword [rsp + 0x20], edi
mov r8d, dword [rax - 0x10]
mov rdx, rbx
mov rdi, qword [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x140031485
lea rcx, [rbp + 0xd0]
call fcn.140029570
nop
mov r8d, dword [0x1401c6d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0xe
jne 0x1400312ee
nop word [rax + rax]
mov ecx, r14d
and ecx, 1
dec ecx
not ecx
and ecx, r8d
mov eax, r14d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
not ecx
and ecx, r8d
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, r8d
sar ecx, 1
xor eax, ecx
add r8d, eax
inc r14d
cmp r14d, 0x100
jl 0x140031250
mov dword [0x1401c6d80], r8d
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140031308
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpSendRequest_Failed_with:
lea rcx, [rbp + 0x138]
call fcn.140003450
nop
lea r8, [rbp + 0xd0]
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.140022810
nop
mov rdx, rax
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14002d0f0
mov dword [rsp + 0x44], r15d
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031363
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x138]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003137f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003139b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400313b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400313cd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400313e7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031401
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003141a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031433
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003144c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031466
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031480
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
mov rcx, r12
call fcn.14002dcf0
test al, al
jne 0x1400316e7
mov eax, dword [0x1401c6d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 0xb
jne 0x140031508
mov eax, dword [str.QYYeT]
mov dword [rbp + 0xb0], eax
movzx eax, word [0x14014c248]
mov word [rbp + 0xb4], ax
lea rax, [rbp + 0xb0]
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400314e3
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400cbef8
mov rcx, rax
call fcn.1400cd9ec
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140031522
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rbp + 0x100]
and eax, 0xffffff00
mov dword [rbp + 0x100], eax
btr eax, 8
mov dword [rbp + 0x100], eax
mov qword [rbp + 0x108], r14
mov eax, dword [rbp + 0x1e8]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1e8], eax
mov qword [rbp + 0x1f0], r14
mov byte [rbp + 0x1e0], 1
lea rdx, [0x14014c06c]
lea rcx, [rbp + 0xf8]
call fcn.14003adf0
mov rcx, rax
lea rdx, [rbp + 0x1e0]
call fcn.14003a460
nop
lea rcx, [rbp + 0x1e0]
call fcn.14003a3b0
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x308]
call fcn.14003a100
nop
lea rdx, [0x14014cd38]
lea rcx, [rbp + 0xf8]
call fcn.14003adf0
mov rcx, rax
lea rdx, [rbp + 0x308]
call fcn.14003a460
nop
lea rcx, [rbp + 0x308]
call fcn.14003a3b0
lea rdx, [rbp + 0xf8]
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14003a250
mov dword [rsp + 0x44], r15d
lea rcx, [rbp + 0xf8]
call fcn.14003a3b0
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031616
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003162f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031649
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031663
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003167c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031695
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400316ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400316c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400316e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
mov byte [rbp + 0xf50], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xf51]
call fcn.1400d1cf0
mov dword [rbp + 0xa8], 0x400
lea rcx, [0x14014cd20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x14003186a
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14003173c
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x1c8]
call fcn.140003450
nop
mov rdx, rax
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14002d0f0
mov dword [rsp + 0x44], r15d
mov rdx, qword [rbp + 0x1c8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031780
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031799
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400317b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400317cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400317e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400317ff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031818
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031831
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003184b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031865
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
lea rdx, [0x14014cd88]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rdi
test rax, rax
jne 0x1400319cb
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14003189d
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [0x14014cd40]
lea rcx, [rbp + 0x148]
call fcn.140003450
nop
mov rdx, rax
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14002d0f0
mov dword [rsp + 0x44], r15d
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400318e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400318fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031913
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003192d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031947
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031960
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031979
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031992
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400319ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400319c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xa8]
lea r8, [rbp + 0xf50]
mov edx, 0x13
call rax
test eax, eax
jne 0x140031b35
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140031a07
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [0x14014cd58]
lea rcx, [rbp + 0x1a8]
call fcn.140003450
nop
mov rdx, rax
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14002d0f0
mov dword [rsp + 0x44], r15d
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031a4b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031a64
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031a7d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031a97
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031ab1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031aca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031ae3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031afc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031b16
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031b30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [rbp + 0xf50]
lea rcx, [rsp + 0x78]
call fcn.140003550
nop
cmp byte [r12 + 8], 0
jne 0x140031b6e
mov r15, r13
jmp 0x140031b80
lea rdx, [0x14014cdb0]
mov rcx, r12
call fcn.14003aff0
mov r15, rax
movzx eax, byte [r15 + 8]
test al, al
je 0x140031e81
cmp al, 6
je 0x140031e81
cmp al, 7
jne 0x140031e35
mov ecx, dword [0x1401c6d80]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 0x8000000f
jge 0x140031bb8
dec edx
or edx, 0xfffffff0
inc edx
mov eax, dword [0x1401c76dc]
mov ecx, 0x602f687c
cmp edx, 5
cmove eax, ecx
mov dword [0x1401c76dc], eax
mov edi, r14d
mov dword [rbp - 0x30], r14d
mov rcx, r15
call fcn.14003aa20
test eax, eax
jle 0x1400335d9
nop word [rax + rax]
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
mov r8d, edi
lea rdx, [0x14014bf7c]
lea rcx, [rbp + 0x68]
call fcn.140033c50
mov rbx, qword [rbp + 0x68]
cmp byte [r15 + 8], 0
jne 0x140031c2c
mov rax, r13
jmp 0x140031c37
mov rdx, rbx
mov rcx, r15
call fcn.14003aff0
cmp byte [rax + 8], 4
jne 0x140031ce5
lea rax, [rbp + 0x3f8]
mov qword [rbp - 0x30], rax
cmp byte [r15 + 8], 0
jne 0x140031c58
mov rax, r13
jmp 0x140031c63
mov rdx, rbx
mov rcx, r15
call fcn.14003aff0
mov rdx, qword [rax]
lea rcx, [rbp + 0x3f8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x158]
call fcn.1400225b0
nop
mov rdx, qword [rax]
mov eax, r14d
test rdx, rdx
setne al
test eax, eax
je 0x140031e05
mov rax, qword [rsp + 0x78]
sub rdx, rax
nop
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x140031cb7
add rax, 2
test cx, cx
jne 0x140031ca0
mov eax, r14d
jmp 0x140031cbc
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031dcf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140031dcf
cmp byte [r15 + 8], 0
jne 0x140031cf1
mov rax, r13
jmp 0x140031cfc
mov rdx, rbx
mov rcx, r15
call fcn.14003aff0
cmp byte [rax + 8], 1
jne 0x140031dd7
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rbp + 0x1f8], rdi
cmp byte [r15 + 8], 0
jne 0x140031d2e
mov rax, r13
jmp 0x140031d39
mov rdx, rbx
mov rcx, r15
call fcn.14003aff0
mov rcx, rax
call fcn.14003a620
mov r8d, eax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0xc8]
call fcn.140022790
nop
lea rdx, [rdi - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031d6c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, r14d
mov rax, qword [rbp + 0xc8]
test rax, rax
setne cl
test ecx, ecx
je 0x140031e2a
mov rcx, qword [rsp + 0x78]
sub rax, rcx
nop dword [rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x140031da7
add rcx, 2
test dx, dx
jne 0x140031d90
mov eax, r14d
jmp 0x140031dac
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xc8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031dcc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edi, dword [rbp - 0x30]
test bl, bl
jne 0x140031e10
mov rbx, qword [rbp + 0x68]
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031deb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc edi
mov dword [rbp - 0x30], edi
mov rcx, r15
call fcn.14003aa20
cmp edi, eax
jge 0x1400335d9
jmp 0x140031bf0
mov ecx, 0x80004005
call fcn.140001920
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031e74
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140031e74
mov ecx, 0x80004005
call fcn.140001920
nop
mov rcx, r14
mov rdx, qword [rsp + 0x78]
lea r8, [0x14014cd98]
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x140031e6a
cmp rcx, 4
jne 0x140031e50
mov eax, r14d
jmp 0x140031e6f
sbb eax, eax
or eax, 1
test eax, eax
sete bl
test bl, bl
jne 0x140032012
jmp 0x1400335d9
mov edi, r14d
mov rcx, r15
call fcn.14003aa20
test eax, eax
jle 0x1400335d9
mov edx, edi
mov rcx, r15
call fcn.14003ad00
mov edx, edi
mov rcx, r15
cmp byte [rax + 8], 4
jne 0x140031f22
lea rax, [rbp + 0x438]
mov qword [rbp - 0x30], rax
call fcn.14003ad00
mov rdx, qword [rax]
lea rcx, [rbp + 0x438]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.1400225b0
nop
mov rdx, qword [rax]
mov eax, r14d
test rdx, rdx
setne al
test eax, eax
je 0x140032007
mov rax, qword [rsp + 0x78]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x140031f0c
add rax, 2
test cx, cx
jne 0x140031ef5
mov eax, r14d
jmp 0x140031f11
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x110]
jmp 0x140031fd8
call fcn.14003ad00
cmp byte [rax + 8], 1
jne 0x140031ff0
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1b8], rbx
mov edx, edi
mov rcx, r15
call fcn.14003ad00
mov rcx, rax
call fcn.14003a620
mov r8d, eax
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp + 0xb8]
call fcn.140022790
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031f8a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, r14d
mov rax, qword [rbp + 0xb8]
test rax, rax
setne cl
test ecx, ecx
je 0x1400335ce
mov rcx, qword [rsp + 0x78]
sub rax, rcx
nop word [rax + rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x140031fc7
add rcx, 2
test dx, dx
jne 0x140031fb0
mov eax, r14d
jmp 0x140031fcc
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140031fec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x140032012
inc edi
mov rcx, r15
call fcn.14003aa20
cmp edi, eax
jge 0x1400335d9
jmp 0x140031e94
mov ecx, 0x80004005
call fcn.140001920
nop
mov dword [rbp + 0x18], r14d
lea r9, [rbp + 0x18]
mov rdi, qword [rbp - 0x50]
mov rcx, rdi
call fcn.140030060
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov eax, dword [rbp + 0x18]
test eax, eax
je 0x140032116
mov ecx, eax
call fcn.1400cbef8
mov rbx, rax
mov ecx, dword [0x1401c6d80]
lea r8d, [rcx + 1]
imul r8d, ecx
mov eax, 0x38e38e39
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [rdx + rdx*8]
add eax, eax
sub r8d, eax
mov eax, dword [0x1401c7668]
mov ecx, 0x6fb11eb6
cmp r8d, 0x10
cmove eax, ecx
mov dword [0x1401c7668], eax
test rbx, rbx
je 0x140032116
lea rcx, [0x14014cdd8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x1400320d6
lea rdx, [0x14014cdf0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400320d6
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x18]
mov r8, rbx
mov edx, 0x16
mov rcx, rdi
call rax
mov rdx, rbx
lea rcx, [rbp + 0x178]
call fcn.14002c5d0
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.140002360
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003210e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400cd9ec
cmp byte [rsp + 0x48], 0
je 0x14003299d
mov eax, dword [rbp + 0x40]
and eax, 0xffffff00
mov dword [rbp + 0x40], eax
btr eax, 8
mov dword [rbp + 0x40], eax
mov qword [rbp + 0x48], r14
mov rdx, r14
mov rax, qword [rsp + 0x78]
lea r8, [0x14014cdc8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14003216a
cmp rdx, 4
jne 0x140032150
mov ecx, r14d
jmp 0x14003216f
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14003237c
mov rdx, r14
lea r8, [0x14014cdd0]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x1400321aa
cmp rdx, 4
jne 0x140032190
mov ecx, r14d
jmp 0x1400321af
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14003237c
mov rdx, r14
lea r8, [0x14014ce18]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x1400321ea
cmp rdx, 4
jne 0x1400321d0
mov ecx, r14d
jmp 0x1400321ef
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14003237c
mov rdx, r14
lea r8, [0x14014ce20]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x140032227
cmp rdx, 4
jne 0x140032210
jmp 0x14003222e
sbb r14d, r14d
or r14d, 1
test r14d, r14d
setne al
test al, al
je 0x14003237c
lea rdx, [rbp + 0x38]
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14003a250
mov eax, 1
mov dword [rsp + 0x44], eax
lea rcx, [rbp + 0x38]
call fcn.14003a3b0
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032278
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032292
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400322ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400322c4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400322de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400322f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032311
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003232a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032343
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003235d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032377
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
mov rcx, qword [rbp - 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002540
add rax, 0x18
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x10]
call fcn.140028af0
mov rcx, qword [rbp + 0x10]
cmp dword [rcx - 0x10], 0
jl 0x14003282b
lea rdx, str.location:
call fcn.1400cd6fc
mov rbx, rax
test rax, rax
je 0x14003282b
mov rcx, qword [rbp + 0x10]
sub rbx, rcx
sar rbx, 1
cmp ebx, 0xffffffff
je 0x14003282b
test ebx, ebx
js 0x140032416
cmp ebx, dword [rcx - 0x10]
jg 0x140032416
movsxd rax, ebx
lea rcx, [rcx + rax*2]
lea rdx, [0x14014c2a4]
call fcn.1400cd6fc
test rax, rax
je 0x140032416
sub rax, qword [rbp + 0x10]
sar rax, 1
jmp 0x140032418
mov eax, esi
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x10]
call fcn.14000f450
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140002360
nop
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032459
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x28]
cmp dword [rcx - 0x10], 0
jl 0x1400326b9
lea rdx, [0x14014ce48]
call fcn.1400cd6fc
test rax, rax
je 0x1400326b9
mov rcx, qword [rbp - 0x28]
sub rax, rcx
sar rax, 1
cmp eax, 0xffffffff
je 0x1400326b9
mov r8d, dword [rcx - 0x10]
sub r8d, eax
lea rdx, [rbp + 0x188]
lea rcx, [rbp - 0x28]
call fcn.14001b4b0
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140002360
nop
lea rcx, [rbp + 0x188]
call fcn.140002340
mov dl, 1
lea rcx, [rbp + 0x248]
call fcn.14003a230
nop
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x38]
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x248]
call fcn.14003a460
nop
lea rcx, [rbp + 0x248]
call fcn.14003a3b0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x598]
call fcn.140022650
nop
mov rdx, rax
lea rcx, [rbp + 0x358]
call fcn.14003a190
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x38]
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x358]
call fcn.14003a460
nop
lea rcx, [rbp + 0x358]
call fcn.14003a3b0
nop
lea rcx, [rbp + 0x598]
call fcn.1400013b0
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x5b8]
call fcn.140022650
nop
mov rdx, rax
lea rcx, [rbp + 0x2d8]
call fcn.14003a190
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x38]
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x2d8]
call fcn.14003a460
nop
lea rcx, [rbp + 0x2d8]
call fcn.14003a3b0
nop
lea rcx, [rbp + 0x5b8]
call fcn.1400013b0
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.1400021c0
mov rcx, rax
call fcn.1400cda14
mov edx, eax
lea rcx, [rbp + 0x260]
call fcn.14003a0e0
nop
lea rdx, str.statusCode
lea rcx, [rbp + 0x38]
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x260]
call fcn.14003a460
nop
lea rcx, [rbp + 0x260]
call fcn.14003a3b0
lea rdx, [rbp + 0x38]
mov rcx, qword [rbp - 0x58]
call fcn.14003a250
mov eax, 1
mov dword [rsp + 0x44], eax
lea rcx, [rbp + 0x10]
call fcn.1400022e0
nop
lea rcx, [rbp - 0x28]
call fcn.1400022e0
nop
lea rcx, [rbp + 0x38]
call fcn.14003a3b0
nop
lea rcx, [rbp - 0x48]
call fcn.1400022e0
nop
lea rcx, [rsp + 0x78]
call fcn.1400022e0
nop
lea rcx, [rbp - 0x68]
call fcn.1400022e0
nop
lea rcx, [rbp - 0x60]
call fcn.1400022e0
nop
lea rcx, [rsp + 0x50]
call fcn.1400022e0
nop
lea rcx, [rsp + 0x68]
call fcn.1400022e0
nop
lea rcx, [rbp - 0x70]
call fcn.1400022e0
nop
lea rcx, [rbp - 0x80]
call fcn.1400022e0
nop
lea rcx, [rbp - 0x78]
call fcn.1400022e0
nop
lea rcx, [rsp + 0x58]
call fcn.1400022e0
nop
lea rcx, [rsp + 0x70]
call fcn.1400022e0
nop
lea rcx, [rsp + 0x60]
call fcn.1400022e0
mov rax, qword [rbp - 0x58]
jmp 0x140033814
lea rdx, [rbp + 0x38]
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14003a250
mov eax, 1
mov dword [rsp + 0x44], eax
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400326eb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032704
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x38]
call fcn.14003a3b0
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032727
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032741
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003275a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032773
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003278d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400327a7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400327c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400327d9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400327f2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003280c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032826
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
lea rdx, [rbp + 0x38]
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14003a250
mov eax, 1
mov dword [rsp + 0x44], eax
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003285d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032876
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x38]
call fcn.14003a3b0
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032899
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400328b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400328cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400328e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400328ff
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032919
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032932
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003294b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032964
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003297e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140032998
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400337f8
lea rcx, [rbp - 8]
call fcn.14001b920
nop
mov dword [rbp - 0x10], r14d
mov rsi, qword [rbp - 0x50]
nop
lea rcx, [rbp - 8]
call fcn.140033b20
mov rdi, rax
lea rdx, [rax + 0x400]
lea rcx, [rbp - 8]
call fcn.140033a20
mov dword [rbp - 0x10], r14d
mov rdx, rdi
lea rcx, [rbp - 8]
call fcn.140033b30
mov rbx, rax
call fcn.14002b620
mov rcx, rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, rsi
call fcn.140041ae0
test eax, eax
je 0x140033576
mov edx, dword [rbp - 0x10]
add rdx, rdi
lea rcx, [rbp - 8]
call fcn.140033a20
mov r8d, dword [0x1401c6d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
mov r15d, 1
cmp ecx, 5
jne 0x140032a4e
test r8d, r8d
cmove r8d, r15d
mov dword [0x1401c6d80], r8d
cmp dword [rbp - 0x10], 0
jne 0x1400329b0
mov byte [rbp + 0xb40], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xb41]
call fcn.1400d1cf0
mov dword [rbp + 0xac], 0x400
mov rbx, r14
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140032aa5
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xac]
lea r8, [rbp + 0xb40]
mov edx, 0x1d
mov rcx, rsi
call rbx
test eax, eax
je 0x140032d12
mov ecx, dword [0x1401c6d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x88888889
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub r8d, edx
cmp r8d, 2
jne 0x140032b21
lea ecx, [r8 + 2]
call fcn.1400cd068
mov rbx, rax
call fcn.1400cd268
mov dword [rbx], eax
mov dword [0x1401c6d80], eax
mov rcx, rbx
call fcn.1400cc890
lea rdx, [rbp + 0xb40]
lea rcx, [rbp + 0xa0]
call fcn.14002c5d0
nop
lea rdx, str.gzip
lea rcx, [rbp + 0xa0]
call fcn.14001b8e0
test al, al
je 0x140032d06
call fcn.14002c880
test al, al
jne 0x140032b6b
mov eax, dword [0x1401c6d80]
test eax, eax
cmove eax, r15d
mov dword [0x1401c6d80], eax
lea rcx, [rbp + 0x200]
call fcn.14001b920
nop
call fcn.14002c800
test al, al
jne 0x140032bf2
mov esi, r14d
lea rdi, [rbp + 0x720]
nop dword [rax + rax]
mov r10d, r14d
nop word [rax + rax]
lea ebx, [r10 + 1]
lea ecx, [rsi + 1]
mov r8d, dword [0x1401c6d80]
mov eax, r8d
cdq
idiv ecx
mov r9d, edx
mov ecx, r8d
sub ecx, esi
imul r9d, ecx
mov eax, r8d
cdq
idiv ebx
add r9d, eax
sub r9d, r10d
mov edx, r9d
lea rcx, [0x14014bfec]
call fcn.1400cd1bc
mov r10d, ebx
add rdi, 4
cmp ebx, 0x1d
jl 0x140032ba0
inc esi
cmp esi, 9
jl 0x140032b90
mov rsi, qword [rbp - 0x50]
lea rcx, [rbp - 8]
call fcn.140033b20
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 8]
call fcn.140033b30
mov rcx, rax
lea r8, [rbp + 0x200]
mov rdx, rbx
call fcn.14002c8c0
test eax, eax
jne 0x140032ce8
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401c6d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 9
jne 0x140032c7d
test r8d, r8d
je 0x140032c76
nop dword [rax + rax]
mov ecx, r8d
and ecx, 1
add r14d, ecx
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
jne 0x140032c60
mov dword [0x1401c6d80], r14d
cmp byte [rsp + 0x40], 0
je 0x140032c8e
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x118]
call fcn.140003450
nop
mov rdx, rax
mov rcx, qword [rbp - 0x58]
call fcn.14002d0f0
mov dword [rsp + 0x44], r15d
lea rcx, [rbp + 0x118]
call fcn.1400022e0
nop
lea rcx, [rbp + 0x200]
call fcn.14002c620
nop
lea rcx, [rbp + 0xa0]
call fcn.1400022e0
nop
lea rcx, [rbp - 8]
call fcn.14002c620
jmp 0x140032633
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 8]
call fcn.140033900
nop
lea rcx, [rbp + 0x200]
call fcn.14002c620
nop
lea rcx, [rbp + 0xa0]
call fcn.1400022e0
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140032d2c
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
xor dil, dil
mov dword [rbp - 0x40], edi
cmp byte [r12 + 8], bl
jne 0x140032d40
mov rax, r13
jmp 0x140032d4f
lea rdx, [0x14014ced8]
mov rcx, r12
call fcn.14003aff0
mov rcx, rax
call fcn.14003b4f0
test al, al
je 0x140032df5
lea rax, [rbp + 0x478]
mov qword [rbp + 0x30], rax
cmp byte [r12 + 8], 0
jne 0x140032d77
mov rax, r13
jmp 0x140032d86
lea rdx, [0x14014cf20]
mov rcx, r12
call fcn.14003aff0
mov rcx, rax
call fcn.140003400
mov rdx, rax
lea rcx, [rbp + 0x478]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.1400225b0
nop
lea rdx, str.base64
lea rcx, [rbp + 0x98]
call fcn.14001b8e0
test al, al
je 0x140032dc9
mov bl, 1
jmp 0x140032de9
lea rdx, [0x14014cef8]
lea rcx, [rbp + 0x98]
call fcn.14001b8e0
movzx edi, dil
test al, al
cmovne edi, r15d
mov dword [rbp - 0x40], edi
lea rcx, [rbp + 0x98]
call fcn.1400022e0
lea rcx, [rbp - 0x18]
call fcn.140002200
nop
test bl, bl
je 0x140032efb
call fcn.14002c840
test al, al
jne 0x140032e3e
mov eax, 0x1a
mov r8d, 0xf9
nop dword [rax + rax]
test r8d, r8d
je 0x140032e35
mov ecx, r8d
cdq
idiv r8d
mov r8d, edx
mov eax, ecx
test ecx, ecx
jne 0x140032e20
add eax, r8d
mov dword [0x1401c6d80], eax
lea rcx, [rbp - 8]
call fcn.140033b20
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 8]
call fcn.140033b30
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x120]
call fcn.140022420
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140002320
nop
lea rcx, [rbp + 0x120]
call fcn.1400022e0
lea rcx, [rbp + 0x130]
call fcn.14002a920
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.14001b8a0
movzx ebx, al
lea rcx, [rbp + 0x130]
call fcn.1400022e0
test bl, bl
je 0x140033179
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x140]
call fcn.140003450
nop
mov rdx, rax
mov rcx, qword [rbp - 0x58]
call fcn.14002d0f0
mov dword [rsp + 0x44], r15d
lea rcx, [rbp + 0x140]
call fcn.1400022e0
nop
lea rcx, [rbp - 0x18]
call fcn.1400022e0
nop
lea rcx, [rbp - 8]
call fcn.14002c620
jmp 0x140032633
test dil, dil
jne 0x140033179
lea rcx, [rbp - 8]
call fcn.140033b20
mov rsi, rax
mov ebx, dword [0x1401c6d80]
lea r8d, [rbx + 1]
imul r8d, ebx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 3
jne 0x140032f8d
mov r8d, 0x5d
mov r11d, r14d
mov eax, ebx
cdq
sub eax, edx
sar eax, 1
mov edi, eax
nop
test edi, edi
jle 0x140032f82
mov eax, ebx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov r9d, r14d
mov r10, rdi
test eax, eax
jle 0x140032f7a
mov ecx, r9d
mov edx, eax
nop
add r8d, ecx
dec ecx
dec rdx
jne 0x140032f70
add r9d, r11d
dec r10
jne 0x140032f65
inc r11d
cmp r11d, r8d
jl 0x140032f50
mov edi, dword [rbp - 0x40]
lea rdx, [rsi - 1]
lea rcx, [rbp - 8]
call fcn.140033b30
cmp byte [rax], 0
je 0x140032fc1
lea rdx, [rsi + 1]
lea rcx, [rbp - 8]
call fcn.140033a20
mov rdx, rsi
lea rcx, [rbp - 8]
call fcn.140033b30
mov byte [rax], 0
mov ebx, dword [0x1401c6d80]
lea rcx, [rbp - 8]
call fcn.140033b20
cmp rax, 3
jbe 0x140033145
lea ecx, [rbx + 2]
lea eax, [rbx + 1]
imul ecx, eax
imul ecx, ebx
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 7
jne 0x14003307d
mov word [rbp + 0x47f0], r14w
xor edx, edx
mov r8d, 0xe1c6
lea rcx, [rbp + 0x47f2]
call fcn.1400d1cf0
mov r10, r14
mov r9, r14
mov r8, r14
test r10, r10
je 0x140033051
test r8, r8
je 0x140033051
lea rdx, [r8 + r9]
lea rax, [r8 + r9]
movzx ecx, word [rbp + rax*2 + 0x469c]
inc cx
add cx, word [rbp + rdx*2 + 0x47ee]
mov word [rbp + rdx*2 + 0x47f0], cx
inc r8
cmp r8, 0xaa
jl 0x140033024
inc r10
add r9, 0xaa
cmp r9, 0x70e4
jl 0x140033021
movsx ebx, word [rbp + 0x129b6]
mov dword [0x1401c6d80], ebx
xor edx, edx
lea rcx, [rbp - 8]
call fcn.140033b30
cmp byte [rax], 0xef
jne 0x140033105
mov rdx, r15
lea rcx, [rbp - 8]
call fcn.140033b30
cmp byte [rax], 0xbb
jne 0x140033105
mov edx, 2
lea rcx, [rbp - 8]
call fcn.140033b30
cmp byte [rax], 0xbf
jne 0x140033105
lea rdx, [rbp + 0x298]
lea rcx, [rbp - 8]
call fcn.140033a10
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x2b8]
call fcn.140033bd0
mov rbx, qword [rax]
lea rdx, [rbp + 0x370]
lea rcx, [rbp - 8]
call fcn.140033a10
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 8]
call fcn.140033b40
mov ebx, dword [0x1401c6d80]
imul ebx, ebx
mov eax, 0xb21642c9
imul ebx
add edx, ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ebx, edx
cmp ebx, 7
jne 0x140033145
lea ecx, [rbx - 3]
call fcn.1400cd068
mov rbx, rax
call fcn.1400cd268
mov dword [rbx], eax
mov dword [0x1401c6d80], eax
mov rcx, rbx
call fcn.1400cc890
xor edx, edx
lea rcx, [rbp - 8]
call fcn.140033b30
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.140003450
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140002320
nop
lea rcx, [rbp + 0x150]
call fcn.1400022e0
xor bl, bl
cmp byte [r12 + 8], bl
jne 0x140033187
mov rax, r13
jmp 0x140033196
lea rdx, [0x14014cf40]
mov rcx, r12
call fcn.14003aff0
mov rcx, rax
call fcn.14003b4f0
test al, al
je 0x1400332b6
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0xc0], rax
cmp byte [r12 + 8], 0
jne 0x1400331c1
mov rax, r13
jmp 0x1400331d0
lea rdx, [0x14014cf50]
mov rcx, r12
call fcn.14003aff0
mov rcx, rax
call fcn.140003400
mov rdx, rax
lea rcx, [rbp + 0x4b8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.1400225b0
nop
lea rcx, [rbp + 0x78]
call fcn.14000ea70
test al, al
jne 0x1400332ad
test dil, dil
je 0x140033279
mov qword [rbp + 0x90], r14
lea rcx, [rbp + 0x78]
call fcn.140003400
mov rdx, rax
lea r8, [0x14014c32c]
lea rcx, [rbp + 0x90]
call fcn.1400cf6b0
test eax, eax
jne 0x1400332ad
mov rdi, qword [rbp + 0x90]
test rdi, rdi
je 0x1400332ad
lea rcx, [rbp - 8]
call fcn.140033b20
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 8]
call fcn.140033b30
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, r15
call fcn.1400cfae4
mov rcx, qword [rbp + 0x90]
call fcn.1400ce9cc
mov bl, 1
jmp 0x1400332ad
lea rax, [rbp + 0x160]
mov qword [rbp + 0xc0], rax
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x160]
call fcn.140003410
nop
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.14002be10
movzx ebx, bl
test al, al
cmovne ebx, r15d
lea rcx, [rbp + 0x78]
call fcn.1400022e0
xor edx, edx
lea rcx, [rbp + 0xd8]
call fcn.14003a020
nop
mov dl, 1
lea rcx, [rbp + 0x280]
call fcn.14003a230
nop
lea rdx, str.result
lea rcx, [rbp + 0xd8]
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x280]
call fcn.14003a460
nop
lea rcx, [rbp + 0x280]
call fcn.14003a3b0
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x18]
call fcn.14002a0e0
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x4d8]
call fcn.140022650
nop
mov rdx, rax
lea rcx, [rbp + 0x2a0]
call fcn.14003a190
nop
lea rdx, str.content
lea rcx, [rbp + 0xd8]
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x2a0]
call fcn.14003a460
nop
lea rcx, [rbp + 0x2a0]
call fcn.14003a3b0
nop
lea rcx, [rbp + 0x4d8]
call fcn.1400013b0
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x558]
call fcn.140022650
nop
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.14003a190
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xd8]
call fcn.14003ade0
mov rcx, rax
lea rdx, str.headers
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x2c0]
call fcn.14003a460
nop
lea rcx, [rbp + 0x2c0]
call fcn.14003a3b0
nop
lea rcx, [rbp + 0x558]
call fcn.1400013b0
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x518]
call fcn.140022650
nop
mov rdx, rax
lea rcx, [rbp + 0x2f0]
call fcn.14003a190
nop
lea rdx, [0x14014cf68]
lea rcx, [rbp + 0xd8]
call fcn.14003ade0
mov rcx, rax
lea rdx, str.httpCode
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x2f0]
call fcn.14003a460
nop
lea rcx, [rbp + 0x2f0]
call fcn.14003a3b0
nop
lea rcx, [rbp + 0x518]
call fcn.1400013b0
lea rdx, str.empty
lea rcx, [rbp + 0x538]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x320]
call fcn.14003a190
nop
lea rdx, str.noData
lea rcx, [rbp + 0xd8]
call fcn.14003ade0
mov rcx, rax
lea rdx, [rbp + 0x320]
call fcn.14003a460
nop
lea rcx, [rbp + 0x320]
call fcn.14003a3b0
nop
lea rcx, [rbp + 0x538]
call fcn.1400013b0
cmp byte [r12 + 8], 0
je 0x1400334c0
lea rdx, str.outputFile
mov rcx, r12
call fcn.14003aff0
mov r13, rax
mov rcx, r13
call fcn.14003b4f0
test al, al
je 0x140033550
movzx edx, bl
lea rcx, [rbp + 0x340]
call fcn.14003a230
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x4f8]
call fcn.140001370
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x578]
call fcn.140033c80
nop
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.14003b0f0
mov rcx, rax
lea rdx, [rbp + 0x340]
call fcn.14003a460
nop
lea rcx, [rbp + 0x578]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x4f8]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x340]
call fcn.14003a3b0
lea rdx, [rbp + 0xd8]
mov rcx, qword [rbp - 0x58]
call fcn.14003a250
mov dword [rsp + 0x44], r15d
lea rcx, [rbp + 0xd8]
call fcn.14003a3b0
jmp 0x140032ee3
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x140033590
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0x30]
call fcn.140003450
nop
mov rdx, rax
mov rcx, qword [rbp - 0x58]
call fcn.14002d0f0
mov eax, 1
mov dword [rsp + 0x44], eax
lea rcx, [rbp + 0x30]
call fcn.1400022e0
nop
lea rcx, [rbp - 8]
call fcn.14002c620
jmp 0x140032633
mov ecx, 0x80004005
call fcn.140001920
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [0x1401c6d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xe
jne 0x140033686
mov word [rbp + 0x1360], r14w
xor edx, edx
mov r8d, 0x3486
lea rcx, [rbp + 0x1362]
call fcn.1400d1cf0
mov r10, r14
mov r9, r14
mov r8, r14
test r10, r10
je 0x140033660
test r8, r8
je 0x140033660
lea rdx, [r8 + r9]
lea rax, [r8 + r9]
movzx ecx, word [rbp + rax*2 + 0x12bc]
inc cx
add cx, word [rbp + rdx*2 + 0x135e]
mov word [rbp + rdx*2 + 0x1360], cx
inc r8
cmp r8, 0x52
jl 0x140033633
inc r10
add r9, 0x52
cmp r9, 0x1a44
jl 0x140033630
movsx eax, word [rbp + 0x47e6]
mov dword [0x1401c6d80], eax
cmp byte [rsp + 0x40], 0
je 0x140033697
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rax, [rbp + 0x5e8]
mov qword [rbp + 0x5e0], rax
mov r8d, 3
mov rdx, qword [rsp + 0x78]
lea rcx, [rbp + 0x5e0]
call fcn.14001bc40
nop
mov rcx, qword [rbp + 0x5e0]
call fcn.1400cda20
mov edx, eax
mov rbx, qword [rbp - 0x58]
mov rcx, rbx
call fcn.14002d540
mov eax, 1
mov dword [rsp + 0x44], eax
lea rax, [rbp + 0x5e8]
mov rcx, qword [rbp + 0x5e0]
cmp rcx, rax
je 0x1400336f9
call fcn.1400cd3f0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033713
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003372c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033745
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14003375f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033779
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033792
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400337ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400337c4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400337de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400337f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140033811
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, rbx
mov rcx, qword [rbp + 0x129c0]
xor rcx, rsp
call fcn.1400cc8b0
add rsp, 0x12ad8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret