Function at 0x14000d460
Capabilities:
Get file size
Prepare http request
Read and send data from client to server
Read file on windows
Receive http response
Send data
Send http request

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x218]
sub rsp, 0x318
mov r14, r8
mov rdi, rdx
mov rsi, rcx
xor r13d, r13d
mov dword [rbp + 0x278], r13d
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
lea ecx, [r13 + 0x30]
call fcn.14004bd50
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x40], rax
mov rax, qword [r14]
lea r15, [0x14007a7c4]
test rax, rax
je 0x14000d4d7
cmp qword [rax], r15
je 0x14000d526
mov rcx, r14
call fcn.1400053c0
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0x50], rax
test rax, rax
je 0x14000d517
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f80c
jmp 0x14000d51a
mov rbx, r13
mov qword [r14], rbx
test rbx, rbx
je 0x14000f982
lea rax, [rdi + 0x18]
mov qword [rbp - 0x50], rax
mov rax, qword [rax]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14000d54e
lock inc dword [rax + 0x10]
mov rax, qword [rbp - 0x70]
mov rcx, qword [rax]
mov rdi, qword [rbp + 0x268]
jmp 0x14000d551
mov rcx, r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 7]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x14000d586
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14000d601
lea rdx, [rbp - 0x28]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSizeEx]
mov rax, qword [rbp - 0x28]
cmp rax, 0x2000000
jle 0x14000d5b0
mov r14d, 0xdf
lea rcx, [rbp - 0x70]
call fcn.1400053c0
jmp 0x14000d616
mov ecx, eax
call fcn.140059d40
mov rsi, rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x150]
mov r8d, dword [rbp - 0x28]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x14000d6ab
mov rcx, rsi
call fcn.140059d2c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rsi, qword [rbp + 0x260]
mov r14d, eax
lea rcx, [rbp - 0x70]
call fcn.1400053c0
test r14d, r14d
je 0x14000d69d
mov r8d, r14d
lea rdx, [rbp - 0x78]
mov rcx, rsi
call fcn.14000bc80
lea rbx, [rdi + 0x28]
lea rax, [rbp - 0x78]
cmp rbx, rax
je 0x14000d64e
mov rcx, rbx
call fcn.1400053c0
mov rax, qword [rbp - 0x78]
mov qword [rbx], rax
test rax, rax
je 0x14000f787
lock inc dword [rax + 0x10]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x14000f787
mov ecx, 0xffffffff
lock xadd dword [rax + 0x10], ecx
cmp ecx, 1
jne 0x14000f787
mov rbx, qword [rbp - 0x78]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000d683
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000d695
call fcn.14004bd8c
mov qword [rbx + 8], r13
mov rcx, rbx
jmp 0x14000f77c
mov rsi, qword [rbp + 0x278]
mov qword [rsp + 0x68], rsi
jmp 0x14000d6c4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp - 0x28]
mov dword [rsp + 0x58], eax
lea rcx, [rbp - 0x70]
call fcn.1400053c0
mov qword [rsp + 0x60], rsi
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x48], r13
mov ecx, 0x18
call fcn.14004bd50
mov rsi, rax
mov qword [rbp + 0xb8], rax
test rax, rax
je 0x14000d715
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, str.___________________________41184676334
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14000f817
jmp 0x14000d718
mov rsi, r13
mov qword [rbp + 0xb8], rsi
test rsi, rsi
je 0x14000f977
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000d765
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad90]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f822
jmp 0x14000d768
mov rbx, r13
mov qword [rbp + 0xd0], rbx
test rbx, rbx
je 0x14000f801
mov dword [rbp + 0x278], 2
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000d7b1
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0xd0]
mov rcx, rax
call fcn.140006f00
mov rdi, rax
jmp 0x14000d7b4
mov rdi, r13
test rdi, rdi
je 0x14000f801
mov r12d, 0xffffffff
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000d800
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000d7e1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000d7f3
call fcn.14004bd8c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov qword [rbp + 0xd0], rdi
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0xc0], rax
test rax, rax
je 0x14000d846
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f82d
jmp 0x14000d849
mov rbx, r13
mov qword [rbp + 0xc0], rbx
test rbx, rbx
je 0x14000f801
mov qword [rbp + 0xe0], rdi
lock inc dword [rdi + 0x10]
mov dword [rbp + 0x278], 6
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000d89d
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0xe0]
mov rcx, rax
call fcn.140006f00
mov r14, rax
jmp 0x14000d8a0
mov r14, r13
test r14, r14
je 0x14000fad7
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000d8e6
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000d8c7
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000d8d9
call fcn.14004bd8c
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.14004bd8c
mov qword [rbp + 0xe0], r14
mov ecx, 0x18
call fcn.14004bd50
mov r15, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000d97a
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
mov rcx, qword [r14]
test rcx, rcx
je 0x14000d922
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r12d, eax
jmp 0x14000d925
mov r12d, r13d
mov eax, r12d
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14000f838
lea edx, [r12 + r12]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [r15], rax
test rax, rax
jne 0x14000d95b
test r12d, r12d
jne 0x14000f838
jmp 0x14000d972
mov rdx, qword [r14]
test rdx, rdx
je 0x14000d972
lea r8d, [r12 + 1]
add r8, r8
je 0x14000d972
call fcn.14004fcc0
mov r12d, 0xffffffff
jmp 0x14000d97d
mov r15, r13
test r15, r15
je 0x14000fad7
mov qword [rsp + 0x48], r15
mov eax, r12d
lock xadd dword [r14 + 0x10], eax
cmp eax, 1
jne 0x14000d9ca
mov rcx, qword [r14]
test rcx, rcx
je 0x14000d9aa
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [r14], r13
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x14000d9bc
call fcn.14004bd8c
mov qword [r14 + 8], r13
mov edx, 0x18
mov rcx, r14
call fcn.14004bd8c
nop
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000da08
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000d9e8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000d9fa
call fcn.14004bd8c
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
nop
mov eax, r12d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000da46
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000da26
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000da38
call fcn.14004bd8c
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.14004bd8c
nop
mov eax, r12d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14000da83
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000da64
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], r13
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14000da76
call fcn.14004bd8c
mov qword [rsi + 8], r13
mov edx, 0x18
mov rcx, rsi
call fcn.14004bd8c
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000dac0
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, str.Content_Disposition:_form_data__name_apikey__r_n
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f843
jmp 0x14000dac3
mov rbx, r13
mov qword [rbp + 0x200], rbx
test rbx, rbx
je 0x14000f977
mov ecx, 0x18
call fcn.14004bd50
mov r13, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14000dc16
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
mov rcx, qword [r15]
test rcx, rcx
je 0x14000db10
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov r14d, eax
jmp 0x14000db13
xor r14d, r14d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000db25
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov esi, eax
jmp 0x14000db27
xor esi, esi
lea edi, [rsi + r14]
cmp edi, esi
jb 0x14000f84e
mov eax, edi
add rax, rax
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14000f84e
lea edx, [rdi + rdi]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [r13], rax
test rax, rax
jne 0x14000db6a
test edi, edi
jne 0x14000f84e
jmp 0x14000dc11
mov rdx, qword [r15]
mov r10d, dword [rsp + 0x40]
mov dword [rsp + 0x58], r10d
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x68], rax
test rdx, rdx
je 0x14000dbd6
lea r8d, [r14 + 1]
lea r9d, [rdi + 1]
add r9, r9
mov dword [rsp + 0x58], r10d
mov rdi, rax
mov qword [rsp + 0x68], rax
add r8, r8
je 0x14000dbd6
cmp r9, r8
jb 0x14000dbaf
call fcn.14004fcc0
jmp 0x14000dbc9
mov r8, r9
xor edx, edx
call fcn.14004e310
call fcn.14005a36c
mov dword [rax], 0x22
call fcn.14005a158
mov eax, dword [rsp + 0x40]
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x58], eax
mov rdx, qword [rbx]
test rdx, rdx
je 0x14000dc11
lea r8d, [rsi + 1]
add r8, r8
mov ecx, r14d
mov rax, qword [r13]
lea rcx, [rax + rcx*2]
je 0x14000dc11
test rcx, rcx
jne 0x14000dc0c
call fcn.14005a36c
mov dword [rax], 0x16
call fcn.14005a158
xor r14d, r14d
jmp 0x14000dc1c
call fcn.14004fcc0
xor r14d, r14d
jmp 0x14000dc1c
xor r14d, r14d
mov r13d, r14d
test r13, r13
je 0x14000f98d
mov eax, r12d
lock xadd dword [r15 + 0x10], eax
cmp eax, 1
jne 0x14000dc75
mov rcx, qword [r15]
test rcx, rcx
je 0x14000dc44
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [r15], r14
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14000dc56
call fcn.14004bd8c
mov qword [r15 + 8], r14
mov edx, 0x18
mov rcx, r15
call fcn.14004bd8c
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x58], eax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x48], r13
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000dcb7
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000dc98
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000dcaa
call fcn.14004bd8c
mov qword [rbx + 8], r14
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14000dcf3
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f859
jmp 0x14000dcf6
mov rbx, r14
mov qword [rbp + 0x1f8], rbx
test rbx, rbx
je 0x14000f977
mov ecx, 0x18
call fcn.14004bd50
mov r15, rax
mov qword [rbp - 0x30], rax
test rax, rax
je 0x14000dd38
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, str.4e3202fdbe953d628f650229af5b3eb49cd46b2d3bfe5546ae3c5fa48b554e0c
call fcn.14004dff0
mov qword [r15], rax
jmp 0x14000dd3b
mov r15, r14
mov qword [rbp - 0x30], r15
test r15, r15
je 0x14000f998
mov qword [rbp + 0x58], rbx
lock inc dword [rbx + 0x10]
mov dword [rbp + 0x278], 8
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000dd83
lea r8, [rbp - 0x30]
lea rdx, [rbp + 0x58]
mov rcx, rax
call fcn.140006f00
mov rdi, rax
jmp 0x14000dd86
mov rdi, r14
test rdi, rdi
je 0x14000facc
mov eax, r12d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000ddcc
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000ddad
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000ddbf
call fcn.14004bd8c
mov qword [rbx + 8], r14
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov qword [rbp + 0x58], rdi
mov ecx, 0x18
call fcn.14004bd50
mov rsi, rax
mov qword [rbp + 0xc8], rax
test rax, rax
je 0x14000de0f
mov qword [rax + 8], r14
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
je 0x14000f864
jmp 0x14000de12
mov rsi, r14
mov qword [rbp + 0xc8], rsi
test rsi, rsi
je 0x14000facc
mov qword [rbp + 0x60], rdi
lock inc dword [rdi + 0x10]
mov dword [rbp + 0x278], 0x18
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000de60
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x60]
mov rcx, rax
call fcn.140006f00
mov r12, rax
jmp 0x14000de63
mov r12, r14
test r12, r12
je 0x14000fac1
mov eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000deab
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000de8c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r14
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000de9e
call fcn.14004bd8c
mov qword [rdi + 8], r14
mov edx, 0x18
mov rcx, rdi
call fcn.14004bd8c
mov qword [rbp + 0x60], r12
mov ecx, 0x18
call fcn.14004bd50
mov r14, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000dfe7
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
mov rcx, qword [r13]
test rcx, rcx
je 0x14000deee
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov dword [rsp + 0x50], eax
jmp 0x14000def6
mov dword [rsp + 0x50], 0
mov rcx, qword [r12]
test rcx, rcx
je 0x14000df07
call qword [sym.imp.OLEAUT32.dll_VariantInit]
jmp 0x14000df09
xor eax, eax
mov dword [rsp + 0x40], eax
mov ecx, dword [rsp + 0x50]
add ecx, eax
cmp ecx, eax
jb 0x14000f86f
mov eax, ecx
add rax, rax
mov edx, 0xffffffff
cmp rax, rdx
ja 0x14000f86f
lea edx, [rcx + rcx]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov rcx, rax
mov qword [r14], rax
test rax, rax
jne 0x14000df57
mov eax, dword [rsp + 0x40]
add eax, dword [rsp + 0x50]
jne 0x14000f86f
jmp 0x14000dfea
mov rdx, qword [r13]
mov r11d, dword [rsp + 0x50]
mov r10d, dword [rsp + 0x40]
test rdx, rdx
je 0x14000dfad
lea r8d, [r11 + 1]
lea r9d, [r11 + 1]
add r9d, r10d
add r9, r9
add r8, r8
je 0x14000dfad
cmp r9, r8
jb 0x14000df89
call fcn.14004fcc0
jmp 0x14000dfa3
mov r8, r9
xor edx, edx
call fcn.14004e310
call fcn.14005a36c
mov dword [rax], 0x22
call fcn.14005a158
mov r11d, dword [rsp + 0x50]
mov r10d, dword [rsp + 0x40]
mov rdx, qword [r12]
test rdx, rdx
je 0x14000dfea
lea r8d, [r10 + 1]
add r8, r8
mov ecx, r11d
mov rax, qword [r14]
lea rcx, [rax + rcx*2]
je 0x14000dfea
test rcx, rcx
jne 0x14000dfe0
call fcn.14005a36c
mov dword [rax], 0x16
call fcn.14005a158
jmp 0x14000dfea
call fcn.14004fcc0
jmp 0x14000dfea
xor r14d, r14d
test r14, r14
je 0x14000fac1
mov eax, 0xffffffff
lock xadd dword [r13 + 0x10], eax
cmp eax, 1
jne 0x14000e03d
mov rcx, qword [r13]
test rcx, rcx
je 0x14000e01a
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [r13], 0
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x14000e030
call fcn.14004bd8c
mov qword [r13 + 8], 0
mov edx, 0x18
mov rcx, r13
call fcn.14004bd8c
mov qword [rsp + 0x48], r14
mov r13d, 0xffffffff
mov eax, r13d
lock xadd dword [r12 + 0x10], eax
cmp eax, 1
jne 0x14000e094
mov rcx, qword [r12]
test rcx, rcx
je 0x14000e06e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [r12], 0
mov rcx, qword [r12 + 8]
test rcx, rcx
je 0x14000e086
call fcn.14004bd8c
mov qword [r12 + 8], 0
mov edx, 0x18
mov rcx, r12
call fcn.14004bd8c
nop
mov eax, r13d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x14000e0d9
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000e0b6
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], 0
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x14000e0cc
call fcn.14004bd8c
mov qword [rsi + 8], 0
mov edx, 0x18
mov rcx, rsi
call fcn.14004bd8c
xor r12d, r12d
mov dword [rbp + 0x278], r12d
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000e121
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000e101
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r12
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000e113
call fcn.14004bd8c
mov qword [rdi + 8], r12
mov edx, 0x18
mov rcx, rdi
call fcn.14004bd8c
nop
mov eax, r13d
lock xadd dword [r15 + 0x10], eax
cmp eax, 1
jne 0x14000e160
mov rcx, qword [r15]
test rcx, rcx
je 0x14000e140
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [r15], r12
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14000e152
call fcn.14004bd8c
mov qword [r15 + 8], r12
mov edx, 0x18
mov rcx, r15
call fcn.14004bd8c
nop
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000e19d
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000e17e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000e190
call fcn.14004bd8c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp - 8], rax
test rax, rax
je 0x14000e1d9
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.___________________________41184676334
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f87a
jmp 0x14000e1dc
mov rbx, r12
mov qword [rbp - 8], rbx
test rbx, rbx
je 0x14000f9a3
lea r8, [rbp - 8]
lea rdx, [0x14007ad90]
lea rcx, [rbp + 0x1e8]
call fcn.1400073f0
mov rdi, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp - 0x10], rax
test rax, rax
je 0x14000e23f
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f885
jmp 0x14000e242
mov rbx, r12
mov qword [rbp - 0x10], rbx
test rbx, rbx
je 0x14000f9ae
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0x1a0]
mov rcx, rdi
call fcn.1400074d0
mov rbx, rax
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000e28e
mov r8, rbx
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140006f00
mov rbx, rax
jmp 0x14000e291
mov rbx, r12
test rbx, rbx
je 0x14000f9b9
mov eax, r13d
lock xadd dword [r14 + 0x10], eax
cmp eax, 1
jne 0x14000e2d8
mov rcx, qword [r14]
test rcx, rcx
je 0x14000e2b9
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [r14], r12
mov rcx, qword [r14 + 8]
test rcx, rcx
je 0x14000e2cb
call fcn.14004bd8c
mov qword [r14 + 8], r12
mov edx, 0x18
mov rcx, r14
call fcn.14004bd8c
mov qword [rsp + 0x48], rbx
lea rcx, [rbp + 0x1a0]
call fcn.1400053c0
nop
lea rcx, [rbp - 0x10]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x1e8]
call fcn.1400053c0
nop
lea rcx, [rbp - 8]
call fcn.1400053c0
mov ecx, 0x18
call fcn.14004bd50
mov rdi, rax
mov qword [rbp], rax
test rax, rax
je 0x14000e346
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.Content_Disposition:_form_data__name_creation_datetime__r_n
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14000f890
jmp 0x14000e349
mov rdi, r12
mov qword [rbp], rdi
test rdi, rdi
je 0x14000f977
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000e380
lea r8, [rbp]
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140006f00
mov rdi, rax
jmp 0x14000e383
mov rdi, r12
test rdi, rdi
je 0x14000f9c4
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000e3c9
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000e3aa
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000e3bc
call fcn.14004bd8c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov qword [rsp + 0x48], rdi
lea rcx, [rbp]
call fcn.1400053c0
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000e413
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f89b
jmp 0x14000e416
mov rbx, r12
mov qword [rbp + 0x10], rbx
test rbx, rbx
je 0x14000f9cf
mov r8, qword [rbp + 0x268]
add r8, 0x20
lea rdx, [rbp + 0xf8]
mov r15, qword [rbp + 0x260]
mov rcx, r15
call fcn.140007af0
nop
mov r8, rax
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0x10]
call fcn.1400074d0
mov rsi, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 8], rax
test rax, rax
je 0x14000e497
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8a6
jmp 0x14000e49a
mov rbx, r12
mov qword [rbp + 8], rbx
test rbx, rbx
je 0x14000f9da
lea r8, [rbp + 8]
lea rdx, [rbp + 0xe8]
mov rcx, rsi
call fcn.1400074d0
mov rbx, rax
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000e4e6
mov r8, rbx
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140006f00
mov rbx, rax
jmp 0x14000e4e9
mov rbx, r12
test rbx, rbx
je 0x14000f9e5
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000e52f
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000e510
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r12
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000e522
call fcn.14004bd8c
mov qword [rdi + 8], r12
mov edx, 0x18
mov rcx, rdi
call fcn.14004bd8c
mov qword [rsp + 0x48], rbx
lea rcx, [rbp + 0xe8]
call fcn.1400053c0
nop
lea rcx, [rbp + 8]
call fcn.1400053c0
nop
lea rcx, [rbp + 0xf0]
call fcn.1400053c0
nop
lea rcx, [rbp + 0xf8]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x10]
call fcn.1400053c0
mov rdi, qword [rbp + 0x268]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000e810
mov rcx, qword [rcx]
test rcx, rcx
je 0x14000e810
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000e810
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14000e5d7
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.___________________________41184676334
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8b1
jmp 0x14000e5da
mov rbx, r12
mov qword [rbp + 0x70], rbx
test rbx, rbx
je 0x14000f9f0
lea r8, [rbp + 0x70]
lea rdx, [0x14007ad90]
lea rcx, [rbp + 0x108]
call fcn.1400073f0
mov rsi, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14000e63d
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8bc
jmp 0x14000e640
mov rbx, r12
mov qword [rbp + 0x68], rbx
test rbx, rbx
je 0x14000f9fb
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x100]
mov rcx, rsi
call fcn.1400074d0
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140007560
nop
lea rcx, [rbp + 0x100]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x68]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x108]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x70]
call fcn.1400053c0
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14000e6d8
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.Content_Disposition:_form_data__name_autostart_location__r_n
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8c7
jmp 0x14000e6db
mov rbx, r12
mov qword [rbp - 0x58], rbx
test rbx, rbx
je 0x14000f977
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000e712
lea r8, [rbp - 0x58]
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140006f00
mov rsi, rax
jmp 0x14000e715
mov rsi, r12
test rsi, rsi
je 0x14000fa06
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x14000e771
mov ecx, r13d
lock xadd dword [rax + 0x10], ecx
cmp ecx, 1
jne 0x14000e76a
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000e74b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000e75d
call fcn.14004bd8c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov rdi, qword [rbp + 0x268]
mov qword [rsp + 0x48], rsi
lea rcx, [rbp - 0x58]
call fcn.1400053c0
lea rdx, [0x14007ad98]
lea rcx, [rbp + 0x128]
call fcn.1400070d0
nop
mov r8, rdi
lea rdx, [rbp + 0x120]
mov rcx, rax
call fcn.1400074d0
mov rbx, rax
lea rdx, [0x14007ad98]
lea rcx, [rbp + 0x118]
call fcn.1400070d0
nop
mov r8, rax
lea rdx, [rbp + 0x110]
mov rcx, rbx
call fcn.1400074d0
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140007560
nop
lea rcx, [rbp + 0x110]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x118]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x120]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x128]
call fcn.1400053c0
lea rsi, [rdi + 8]
mov rax, qword [rsi]
test rax, rax
je 0x14000ea37
mov rcx, qword [rax]
test rcx, rcx
je 0x14000ea37
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000ea37
lea rdx, str.___________________________41184676334
lea rcx, [rbp + 0x140]
call fcn.1400070d0
nop
mov r8, rax
lea rdx, [0x14007ad90]
lea rcx, [rbp + 0x138]
call fcn.1400073f0
mov rdi, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14000e8a3
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8d2
jmp 0x14000e8a6
mov rbx, r12
mov qword [rbp + 0x30], rbx
test rbx, rbx
je 0x14000fa11
lea r8, [rbp + 0x30]
lea rdx, [rbp + 0x130]
mov rcx, rdi
call fcn.1400074d0
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140007560
nop
lea rcx, [rbp + 0x130]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x30]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x138]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x140]
call fcn.1400053c0
lea rdx, str.Content_Disposition:_form_data__name_autostart_entry__r_n
lea rcx, [rbp + 0x78]
call fcn.1400070d0
nop
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000e940
lea r8, [rbp + 0x78]
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140006f00
mov rdi, rax
jmp 0x14000e943
mov rdi, r12
test rdi, rdi
je 0x14000fa1c
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x14000e998
mov ecx, r13d
lock xadd dword [rax + 0x10], ecx
cmp ecx, 1
jne 0x14000e998
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000e979
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000e98b
call fcn.14004bd8c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov qword [rsp + 0x48], rdi
lea rcx, [rbp + 0x78]
call fcn.1400053c0
lea rdx, [0x14007ad98]
lea rcx, [rbp + 0x160]
call fcn.1400070d0
nop
mov r8, rsi
lea rdx, [rbp + 0x158]
mov rcx, rax
call fcn.1400074d0
mov rbx, rax
lea rdx, [0x14007ad98]
lea rcx, [rbp + 0x1a8]
call fcn.1400070d0
nop
mov r8, rax
lea rdx, [rbp + 0x148]
mov rcx, rbx
call fcn.1400074d0
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140007560
nop
lea rcx, [rbp + 0x148]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x1a8]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x158]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x160]
call fcn.1400053c0
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000ea74
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.___________________________41184676334
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8dd
jmp 0x14000ea77
mov rbx, r12
mov qword [rbp + 0x88], rbx
test rbx, rbx
je 0x14000fa27
lea r8, [rbp + 0x88]
lea rdx, [0x14007ad90]
lea rcx, [rbp + 0x170]
call fcn.1400073f0
mov rdi, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000eae1
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8e8
jmp 0x14000eae4
mov rbx, r12
mov qword [rbp + 0x80], rbx
test rbx, rbx
je 0x14000fa32
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x168]
mov rcx, rdi
call fcn.1400074d0
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140007560
nop
lea rcx, [rbp + 0x168]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x80]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x170]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x88]
call fcn.1400053c0
mov r8, qword [rbp - 0x50]
lea rdx, str.Content_Disposition:_form_data__name_file___filename_
lea rcx, [rbp + 0x188]
call fcn.1400073f0
mov rdi, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000eba3
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007aff0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8f3
jmp 0x14000eba6
mov rbx, r12
mov qword [rbp + 0x90], rbx
test rbx, rbx
je 0x14000fa3d
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0x180]
mov rcx, rdi
call fcn.1400074d0
mov rdi, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000ec0c
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f8fe
jmp 0x14000ec0f
mov rbx, r12
mov qword [rbp + 0xa8], rbx
test rbx, rbx
je 0x14000fa48
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0x178]
mov rcx, rdi
call fcn.1400074d0
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140007560
nop
lea rcx, [rbp + 0x178]
call fcn.1400053c0
nop
lea rcx, [rbp + 0xa8]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x180]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x90]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x188]
call fcn.1400053c0
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14000ecc1
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f909
jmp 0x14000ecc4
mov rbx, r12
mov qword [rsp + 0x70], rbx
test rbx, rbx
je 0x14000f977
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000ed0f
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.Content_Type:_application_octet_stream_r_n
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f914
jmp 0x14000ed12
mov rbx, r12
mov qword [rbp - 0x20], rbx
test rbx, rbx
je 0x14000fab6
mov dword [rbp + 0x278], 1
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000ed53
lea r8, [rsp + 0x70]
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.140006f00
mov rdi, rax
jmp 0x14000ed56
mov rdi, r12
test rdi, rdi
je 0x14000fab6
mov eax, r13d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000ed9c
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000ed7d
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000ed8f
call fcn.14004bd8c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov qword [rbp - 0x20], rdi
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x60], rax
test rax, rax
je 0x14000edca
lea r8, [rbp - 0x20]
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.140006f00
mov rsi, rax
jmp 0x14000edcd
mov rsi, r12
test rsi, rsi
je 0x14000fab6
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x14000ee22
mov ecx, r13d
lock xadd dword [rax + 0x10], ecx
cmp ecx, 1
jne 0x14000ee22
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000ee03
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r12
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000ee15
call fcn.14004bd8c
mov qword [rbx + 8], r12
mov edx, 0x18
mov rcx, rbx
call fcn.14004bd8c
mov qword [rsp + 0x48], rsi
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000ee65
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000ee45
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r12
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000ee57
call fcn.14004bd8c
mov qword [rdi + 8], r12
mov edx, 0x18
mov rcx, rdi
call fcn.14004bd8c
nop
lea rcx, [rsp + 0x70]
call fcn.1400053c0
mov qword [rbp + 0x98], r12
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0xd8], rax
test rax, rax
je 0x14000eeb5
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f91f
jmp 0x14000eeb8
mov rbx, r12
mov qword [rbp + 0xd8], rbx
test rbx, rbx
je 0x14000fa53
mov ecx, 0x18
call fcn.14004bd50
mov rdi, rax
mov qword [rbp + 0x40], rax
test rax, rax
je 0x14000ef04
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad90]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
je 0x14000f92a
jmp 0x14000ef07
mov rdi, r12
mov qword [rbp + 0x40], rdi
test rdi, rdi
je 0x14000fa5e
mov qword [rbp - 0x60], rbx
lock inc dword [rbx + 0x10]
mov dword [rbp + 0x278], 0x20
mov ecx, 0x18
call fcn.14004bd50
mov qword [rbp - 0x48], rax
test rax, rax
je 0x14000ef4e
lea r8, [rbp + 0x40]
lea rdx, [rbp - 0x60]
mov rcx, rax
call fcn.140006f00
mov rbx, rax
jmp 0x14000ef51
mov rbx, r12
test rbx, rbx
je 0x14000faab
lea rcx, [rbp - 0x60]
call fcn.1400053c0
mov qword [rbp - 0x60], rbx
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp - 0x48], rax
test rax, rax
je 0x14000efa3
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, str.___________________________41184676334
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f935
jmp 0x14000efa6
mov rbx, r12
mov qword [rbp - 0x48], rbx
test rbx, rbx
je 0x14000faab
lea r8, [rbp - 0x48]
lea rdx, [rbp + 0x198]
lea rcx, [rbp - 0x60]
call fcn.1400074d0
mov rdi, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0x38], rax
test rax, rax
je 0x14000f006
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad90]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f940
jmp 0x14000f009
mov rbx, r12
mov qword [rbp + 0x38], rbx
test rbx, rbx
je 0x14000fa69
mov rax, qword [rdi]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x14000f026
lock inc dword [rax + 0x10]
mov dword [rbp + 0x278], 0x60
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000f059
lea r8, [rbp + 0x38]
lea rdx, [rbp - 0x68]
mov rcx, rax
call fcn.140006f00
mov rbx, rax
jmp 0x14000f05c
mov rbx, r12
test rbx, rbx
je 0x14000faa0
lea rcx, [rbp - 0x68]
call fcn.1400053c0
mov qword [rbp - 0x68], rbx
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000f0af
mov qword [rax + 8], r12
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f94b
jmp 0x14000f0b2
mov rbx, r12
mov qword [rbp + 0xa0], rbx
test rbx, rbx
je 0x14000faa0
lea r8, [rbp + 0xa0]
lea rdx, [rbp + 0x190]
lea rcx, [rbp - 0x68]
call fcn.1400074d0
mov rbx, rax
mov ecx, 0x18
call fcn.14004bd50
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000f107
mov r8, rbx
lea rdx, [rbp + 0x98]
mov rcx, rax
call fcn.140006f00
mov rdi, rax
jmp 0x14000f10a
mov rdi, r12
test rdi, rdi
je 0x14000fa74
mov qword [rbp + 0x98], rdi
lea rcx, [rbp + 0x190]
call fcn.1400053c0
nop
lea rcx, [rbp + 0xa0]
call fcn.1400053c0
nop
lea rcx, [rbp - 0x68]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x38]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x198]
call fcn.1400053c0
nop
lea rcx, [rbp - 0x48]
call fcn.1400053c0
nop
lea rcx, [rbp - 0x60]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x40]
call fcn.1400053c0
nop
lea rcx, [rbp + 0xd8]
call fcn.1400053c0
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str.vtapi_v2_file_scan
lea rdx, str.POST
mov rcx, qword [r15 + 8]
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r12, rax
mov rdx, rax
mov rcx, r15
call fcn.14000ce20
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000f1fb
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, str.Content_Type:_multipart_form_data__boundary
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f956
jmp 0x14000f1fd
xor ebx, ebx
mov qword [rsp + 0x78], rbx
test rbx, rbx
je 0x14000fa7f
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0x18], rax
test rax, rax
je 0x14000f24b
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, str.___________________________41184676334
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f961
jmp 0x14000f24d
xor ebx, ebx
mov qword [rbp + 0x18], rbx
test rbx, rbx
je 0x14000fa8a
lea r8, [rbp + 0x18]
lea rdx, [rbp + 0x1f0]
lea rcx, [rsp + 0x78]
call fcn.1400074d0
mov r14, rax
mov ecx, 0x18
call fcn.14004bd50
mov rbx, rax
mov qword [rbp + 0x48], rax
test rax, rax
je 0x14000f2b2
mov qword [rax + 8], 0
mov dword [rax + 0x10], 1
lea rcx, [0x14007ad98]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x14000f96c
jmp 0x14000f2b4
xor ebx, ebx
mov qword [rbp + 0x48], rbx
test rbx, rbx
je 0x14000fa95
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0xb0]
mov rcx, r14
call fcn.1400074d0
nop
lea rcx, [rbp + 0x48]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x1f0]
call fcn.1400053c0
nop
lea rcx, [rbp + 0x18]
call fcn.1400053c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400053c0
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000f312
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov ebx, eax
jmp 0x14000f314
xor ebx, ebx
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000f324
call qword [sym.imp.OLEAUT32.dll_VariantInit]
jmp 0x14000f326
xor eax, eax
mov r14d, dword [rsp + 0x58]
lea ecx, [rbx + r14]
add ecx, eax
mov rax, qword [rbp + 0xb0]
test rax, rax
je 0x14000f342
mov rdx, qword [rax]
jmp 0x14000f344
xor edx, edx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x14000f3e0
mov r14, qword [rsp + 0x68]
mov rcx, r14
call fcn.140059d2c
xor r8d, r8d
lea rdx, [rbp + 0x28]
mov rcx, r15
call fcn.14000bc80
mov rbx, qword [rbp + 0x268]
add rbx, 0x28
lea rax, [rbp + 0x28]
cmp rbx, rax
je 0x14000f3b4
mov rcx, rbx
call fcn.1400053c0
mov rax, qword [rbp + 0x28]
mov qword [rbx], rax
test rax, rax
je 0x14000f3b4
lock inc dword [rax + 0x10]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call fcn.140059d2c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rcx, [rbp + 0x28]
call fcn.1400053c0
lea r15, [rsi + 8]
jmp 0x14000f6f1
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000f3f2
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov ebx, eax
jmp 0x14000f3f4
xor ebx, ebx
lea r15, [rsi + 8]
mov rax, qword [r15]
test rax, rax
jne 0x14000f40b
mov rcx, qword [rsi]
call fcn.14004ded0
mov qword [r15], rax
lea r9, [rbp - 0x80]
mov r8d, ebx
mov rdx, rax
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
lea r9, [rbp - 0x80]
mov r8d, r14d
mov r14, qword [rsp + 0x68]
mov rdx, r14
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000f448
call qword [sym.imp.OLEAUT32.dll_VariantInit]
mov ebx, eax
jmp 0x14000f44a
xor ebx, ebx
mov rax, qword [rdi + 8]
test rax, rax
jne 0x14000f45f
mov rcx, qword [rdi]
call fcn.14004ded0
mov qword [rdi + 8], rax
lea r9, [rbp - 0x80]
mov r8d, ebx
mov rdx, rax
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
mov rcx, r14
call fcn.140059d2c
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x14000f4e9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [rbp + 0x20]
mov rcx, qword [rbp + 0x260]
call fcn.14000bc80
mov rbx, qword [rbp + 0x268]
add rbx, 0x28
lea rax, [rbp + 0x20]
cmp rbx, rax
je 0x14000f4ce
mov rcx, rbx
call fcn.1400053c0
mov rax, qword [rbp + 0x20]
mov qword [rbx], rax
test rax, rax
je 0x14000f4ce
lock inc dword [rax + 0x10]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rcx, [rbp + 0x20]
jmp 0x14000f6eb
mov r8, qword [rbp + 0x270]
mov rdx, r12
mov rbx, qword [rbp + 0x260]
mov rcx, rbx
call fcn.14000c740
mov r14d, eax
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test r14d, r14d
jne 0x14000f6ac
mov rax, qword [rbp + 0x270]
mov rax, qword [rax]
test rax, rax
je 0x14000f52b
mov rcx, qword [rax]
jmp 0x14000f52d
xor ecx, ecx
mov qword [rbp + 0x1b0], rcx
lea r9, [rbp - 0x40]
lea r8, [rbp + 0x1b0]
lea rdx, [rbp - 0x50]
mov r12, qword [rbp + 0x260]
mov rcx, r12
call fcn.14000be00
nop
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x14000f6a6
mov rcx, qword [rax]
test rcx, rcx
je 0x14000f6a6
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x14000f6a6
lea rdx, str.permalink
lea rcx, [rbp + 0x1b8]
call fcn.1400070d0
mov r9, rax
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x1c0]
mov rcx, r12
call fcn.14000c4e0
mov r13, qword [rbp + 0x268]
mov rdx, rax
lea rcx, [r13 + 0x30]
call fcn.140007310
lea rcx, [rbp + 0x1c0]
call fcn.1400053c0
mov rcx, qword [r13 + 0x30]
test rcx, rcx
je 0x14000f5ef
lea rcx, [rbp - 0x50]
jmp 0x14000f6eb
mov r8d, r14d
lea rdx, [rbp - 0x18]
mov rcx, rbx
call fcn.14000bc80
mov rbx, qword [rbp + 0x268]
add rbx, 0x28
lea rax, [rbp - 0x18]
cmp rbx, rax
je 0x14000f6e7
mov rcx, rbx
call fcn.1400053c0
mov rax, qword [rbp - 0x18]
mov qword [rbx], rax
test rax, rax
je 0x14000f6e7
lock inc dword [rax + 0x10]
lea rcx, [rbp - 0x18]
call fcn.1400053c0
nop
lea rcx, [rbp + 0xb0]
call fcn.1400053c0
nop
mov eax, r13d
lock xadd dword [rdi + 0x10], eax
cmp eax, 1
jne 0x14000f744
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000f720
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], 0
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14000f736
call fcn.14004bd8c
mov qword [rdi + 8], 0
mov edx, 0x18
mov rcx, rdi
call fcn.14004bd8c
nop
lock xadd dword [rsi + 0x10], r13d
cmp r13d, 1
jne 0x14000f787
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000f765
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], 0
mov rcx, qword [r15]
test rcx, rcx
je 0x14000f779
mov edx, 0x18
call fcn.14004bd8c
nop
mov rcx, qword [rbp - 0x40]
mov rsi, qword [rcx + 8]
cmp byte [rsi + 0x19], 0
jne 0x14000f7e0
nop word [rax + rax]
mov r8, qword [rsi + 0x10]
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x40]
call fcn.140006c40
mov rdi, rsi
mov rsi, qword [rsi]
lea rcx, [rdi + 0x28]
call fcn.1400053c0
lea rcx, [rdi + 0x20]
call fcn.1400053c0
mov edx, 0x30
mov rcx, rdi
call fcn.14004bd8c
cmp byte [rsi + 0x19], 0
je 0x14000f7a0
mov edx, 0x30
call fcn.14004bd8c
mov eax, r14d
add rsp, 0x318
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
nop
mov ecx, 0x8007000e
call fcn.14004dd40
int3