Function at 0x140027188
Capabilities:
Check for time delay via gettickcount
Get disk size
Link many functions at runtime
Send data
Send http request
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1728]
mov eax, 0x1828
call fcn.1400c29d0
sub rsp, rax
mov qword [rbp + 0x3f0], 0xfffffffffffffffe
mov rax, qword [0x1401a2e90]
xor rax, rsp
mov qword [rbp + 0x1710], rax
mov r15, r9
mov r13, r8
mov r12, rdx
mov r14, rcx
mov qword [rbp + 0x88], rcx
mov qword [rbp + 0x3a8], rcx
xor esi, esi
mov dword [rsp + 0x44], esi
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
lea rdx, [0x14013bd40]
mov rcx, r15
call fcn.140030290
or rdi, 0xffffffffffffffff
cmp byte [rax + 8], 4
jne 0x1400272b7
lea rax, [rbp + 0x2f8]
mov qword [rbp + 0x78], rax
lea rdx, [0x14013bd40]
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x310], 0xf
mov qword [rbp + 0x308], rsi
mov byte [rbp + 0x2f8], sil
cmp byte [rdx], sil
jne 0x14002725c
mov r8d, esi
jmp 0x140027268
mov r8, rdi
inc r8
cmp byte [rdx + r8], sil
jne 0x14002725f
lea rcx, [rbp + 0x2f8]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2f8]
lea rcx, [rbp + 0x188]
call fcn.14001d830
nop
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400272b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp + 0x40]
call fcn.140021d38
mov rbx, qword [rbp + 0x40]
cmp dword [rbx - 0x10], esi
jl 0x1400272dd
lea rdx, str.file:__
mov rcx, rbx
call fcn.1400be6e4
test rax, rax
jne 0x1400272e1
mov eax, edi
jmp 0x1400272e7
sub rax, rbx
sar rax, 1
test eax, eax
sete dil
lea rdx, [rbx - 0x18]
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002730b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test dil, dil
je 0x140027363
lea rdx, str.this_module_doesnt_support_file_request
lea rcx, [rbp + 0x1a0]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov esi, 1
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
mov ecx, ebx
lock xadd dword [rdx + 0x10], ecx
add ecx, ebx
test ecx, ecx
jg 0x14002ab45
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x14002ab45
test r12, r12
jne 0x1400273a9
lea rdx, str.InternetOpen_Failed
lea rcx, [rbp + 0x1b0]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
lea esi, [r12 + 1]
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
jmp 0x14002ab38
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x10], esi
lea rax, [rbp + 0x368]
mov qword [rbp - 8], rax
lea rdx, [0x14013bd40]
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x380], 0xf
mov qword [rbp + 0x378], rsi
mov byte [rbp + 0x368], sil
cmp byte [rdx], sil
jne 0x140027420
mov r8, rsi
jmp 0x14002742c
mov r8, rbx
inc r8
cmp byte [rdx + r8], sil
jne 0x140027423
lea rcx, [rbp + 0x368]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x368]
lea rcx, [rsp + 0x60]
call fcn.14001d830
nop
lea r9, [rbp - 0x10]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.140025fb8
movzx eax, al
test eax, eax
jne 0x140027502
lea rdx, str.InternetCrackUrl_Failed
lea rcx, [rbp + 0x1c0]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov esi, 1
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1c0]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400274b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400274d8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400274f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
jmp 0x140027397
mov byte [rsp + 0x48], sil
lea rbx, str.redirectCheck
mov rdx, rbx
mov rcx, r15
call fcn.140030290
lea rcx, [0x1401abee0]
cmp rax, rcx
je 0x14002754d
mov rdx, rbx
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 5
jne 0x14002754d
mov rdx, rbx
mov rcx, r15
call fcn.140030290
mov rcx, rax
call fcn.14002fe1c
mov byte [rsp + 0x48], al
mov byte [rsp + 0x59], sil
mov dword [rbp + 0x10], 0x50
lea rax, [rbp + 0x1d0]
mov qword [rbp - 8], rax
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x1d0]
call fcn.140002d5c
nop
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x59]
mov rcx, rax
call fcn.1400262a8
lea rdx, str.port
mov rcx, r15
call fcn.140030290
mov esi, 1
cmp byte [rax + 8], sil
jne 0x1400275c1
lea rdx, str.port
mov rcx, r15
call fcn.140030290
mov rcx, rax
call fcn.14002fb10
mov ebx, eax
mov dword [rbp - 0x10], eax
xor eax, eax
jmp 0x1400275cf
mov ebx, dword [rbp - 0x10]
xor eax, eax
test ebx, ebx
cmove ebx, dword [rbp + 0x10]
mov dword [rbp - 0x10], ebx
mov byte [rsp + 0x40], al
mov rdi, qword [r13]
mov rdx, qword [rsp + 0x68]
xor r13d, r13d
test rdi, rdi
je 0x140027677
mov r11d, r13d
mov r10d, r13d
mov rcx, rdi
cmp qword [rcx + 0x10], r13
je 0x140027667
cmp dword [rcx + 8], ebx
jne 0x140027639
mov eax, r13d
test rdx, rdx
setne al
test eax, eax
je 0x14002765c
mov rax, qword [rcx]
mov r9, rdx
sub r9, rax
movzx r8d, word [rax]
cmp r8w, word [rax + r9]
jne 0x14002762c
add rax, 2
test r8w, r8w
jne 0x140027612
mov eax, r13d
jmp 0x140027630
sbb eax, eax
or eax, esi
test eax, eax
sete al
test al, al
jne 0x14002764e
add r11d, esi
add r10, rsi
add rcx, 0x18
cmp r10, 0x400
jge 0x140027667
jmp 0x1400275f1
movsxd rax, r11d
lea rcx, [rax + rax*2]
mov rdi, qword [rdi + rcx*8 + 0x10]
jmp 0x14002766a
mov ecx, 0x80004005
call fcn.140001874
int3
mov rdi, r13
mov qword [rbp - 8], rdi
test rdi, rdi
jne 0x140027798
mov rax, qword [0x1401aced8]
test rax, rax
jne 0x1400276cd
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x1400276ae
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401aced8], rax
jmp 0x1400276b5
mov rax, qword [0x1401aced8]
test rax, rax
je 0x1400276c1
mov rdx, qword [rsp + 0x68]
jmp 0x1400276cd
xor r12d, r12d
mov edi, r12d
mov qword [rbp - 8], r12
jmp 0x1400276fa
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], r13d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r13
xor r9d, r9d
movzx r8d, bx
mov rcx, r12
call rax
mov rdi, rax
mov qword [rbp - 8], rax
xor r12d, r12d
test rdi, rdi
jne 0x140027791
lea rdx, str.InternetConnect_Failed
lea rcx, [rbp + 0x1e0]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1e0]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002774c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002776c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002778c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400274f8
mov byte [rsp + 0x40], sil
jmp 0x14002779b
xor r12d, r12d
mov ebx, 0x80400200
mov eax, 0x80600200
cmp byte [rsp + 0x48], r12b
cmovne ebx, eax
or ebx, 0xc000
cmp byte [rsp + 0x59], r12b
je 0x1400277c0
or ebx, 0x803080
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [0x14013bd74]
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 4
jne 0x140027895
lea rax, [rbp + 0x2b8]
mov qword [rbp - 0x50], rax
lea rdx, [0x14013bd74]
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x2d0], 0xf
mov qword [rbp + 0x2c8], r12
mov byte [rbp + 0x2b8], r12b
or r13, 0xffffffffffffffff
cmp byte [rdx], r12b
jne 0x140027836
mov r8, r12
jmp 0x140027842
mov r8, r13
inc r8
cmp byte [rdx + r8], r12b
jne 0x140027839
lea rcx, [rbp + 0x2b8]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2b8]
lea rcx, [rbp + 0x1f0]
call fcn.14001d830
nop
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x1f0]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027899
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140027899
or r13, 0xffffffffffffffff
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdx, [0x14013bf08]
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 4
jne 0x140027968
lea rax, [rbp + 0x2d8]
mov qword [rbp - 0x50], rax
lea rdx, [0x14013bf08]
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x2f0], 0xf
mov qword [rbp + 0x2e8], r12
mov byte [rbp + 0x2d8], r12b
cmp byte [rdx], r12b
jne 0x14002790b
mov r8, r12
jmp 0x140027917
mov r8, r13
inc r8
cmp byte [rdx + r8], r12b
jne 0x14002790e
lea rcx, [rbp + 0x2d8]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2d8]
lea rcx, [rbp + 0x200]
call fcn.14001d830
nop
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x200]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027968
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, str.referer
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 4
jne 0x140027a37
lea rax, [rbp + 0x318]
mov qword [rbp - 0x50], rax
lea rdx, str.referer
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x330], 0xf
mov qword [rbp + 0x328], r12
mov byte [rbp + 0x318], r12b
cmp byte [rdx], r12b
jne 0x1400279da
mov r8, r12
jmp 0x1400279e6
mov r8, r13
inc r8
cmp byte [rdx + r8], r12b
jne 0x1400279dd
lea rcx, [rbp + 0x318]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x318]
lea rcx, [rbp + 0x100]
call fcn.14001d830
nop
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x100]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027a37
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.acceptTypes
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 4
jne 0x140027b06
lea rax, [rbp + 0x258]
mov qword [rbp - 0x50], rax
lea rdx, str.acceptTypes
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x270], 0xf
mov qword [rbp + 0x268], r12
mov byte [rbp + 0x258], r12b
cmp byte [rdx], r12b
jne 0x140027aa9
mov r8, r12
jmp 0x140027ab5
mov r8, r13
inc r8
cmp byte [rdx + r8], r12b
jne 0x140027aac
lea rcx, [rbp + 0x258]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x258]
lea rcx, [rbp + 0x210]
call fcn.14001d830
nop
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x210]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027b06
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x78]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rdx, rdx
and rdx, rax
mov qword [rbp + 0x358], rdx
mov qword [rbp + 0x360], r12
mov rax, qword [rbp - 0x58]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r8, r8
and r8, rax
mov rax, qword [rbp - 0x60]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r9, r9
and r9, rax
mov rax, qword [rbp - 0x80]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rdx, rdx
and rdx, rax
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], ebx
lea rax, [rbp + 0x358]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
mov r8, qword [rsp + 0x78]
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov r12, rax
xor ebx, ebx
test rax, rax
jne 0x140027cae
lea rdx, str.HttpOpenRequest_Failed
lea rcx, [rbp + 0x120]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x120]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027bcd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027bee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027c0f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027c30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027c51
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027c73
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027c95
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
jmp 0x14002ab38
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x14013bf10]
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 4
jne 0x140027e5a
lea rdx, [0x14013bf48]
lea rcx, [rbp + 0x70]
call fcn.140001f6c
nop
lea rax, [rbp + 0x278]
mov qword [rbp - 0x50], rax
lea rdx, [0x14013bf10]
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x290], 0xf
mov qword [rbp + 0x288], rbx
mov byte [rbp + 0x278], bl
cmp byte [rdx], bl
jne 0x140027d30
mov r8, rbx
jmp 0x140027d3c
mov r8, r13
inc r8
cmp byte [rdx + r8], bl
jne 0x140027d33
lea rcx, [rbp + 0x278]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x278]
lea rcx, [rbp + 0x1e8]
call fcn.14001d830
mov rbx, rax
lea rdx, str.Content_Type:
lea rcx, [rbp + 0x138]
call fcn.140002df8
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.14001dacc
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp + 0x220]
call fcn.14001dacc
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x220]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
xor ebx, ebx
test eax, eax
jg 0x140027dce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027df2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x138]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027e16
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1e8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027e3a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027e5a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.additionalRequestHeaders
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 4
jne 0x140027fe6
lea rax, [rbp + 0x298]
mov qword [rbp - 0x50], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x2b0], 0xf
mov qword [rbp + 0x2a8], rbx
mov byte [rbp + 0x298], bl
cmp byte [rdx], bl
jne 0x140027eb1
mov r8, rbx
jmp 0x140027ebd
mov r8, r13
inc r8
cmp byte [rdx + r8], bl
jne 0x140027eb4
lea rcx, [rbp + 0x298]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x298]
lea rcx, [rbp + 0x148]
call fcn.14001d830
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.14000e884
nop
mov rdx, qword [rbp + 0x148]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027f13
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 8]
call fcn.140002d5c
nop
mov r13, qword [rbp + 8]
xor eax, eax
cmp word [r13], ax
je 0x140027fc0
xor r14d, r14d
movzx ecx, word [r13]
call fcn.1400c0be0
test eax, eax
je 0x140027f4e
test rbx, rbx
jne 0x140027f51
mov rbx, r13
jmp 0x140027f51
mov rbx, r14
add r13, 2
cmp word [r13], r14w
jne 0x140027f36
test rbx, rbx
mov r14, qword [rbp + 0x88]
je 0x140027fc0
mov rax, qword [rbp + 8]
sub rbx, rax
sar rbx, 1
test ebx, ebx
jns 0x140027f81
mov ecx, 0x80070057
call fcn.140001874
int3
mov edx, esi
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, ebx
or ecx, edx
jge 0x140027f9e
mov edx, ebx
lea rcx, [rbp + 8]
call fcn.140002210
mov rax, qword [rbp + 8]
cmp ebx, dword [rax - 0xc]
jg 0x140027fb5
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rbp + 8]
xor ebx, ebx
mov word [rax + rcx*2], bx
jmp 0x140027fc2
mov ecx, 0x80070057
call fcn.140001874
int3
xor ebx, ebx
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
or r13, 0xffffffffffffffff
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140027fe6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.postData
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 4
jne 0x1400280b3
lea rax, [rbp + 0x388]
mov qword [rbp - 0x50], rax
lea rdx, str.postData
mov rcx, r15
call fcn.140030290
mov rdx, qword [rax]
mov qword [rbp + 0x3a0], 0xf
mov qword [rbp + 0x398], rbx
mov byte [rbp + 0x388], bl
cmp byte [rdx], bl
jne 0x140028056
mov r8, rbx
jmp 0x140028062
mov r8, r13
inc r8
cmp byte [rdx + r8], bl
jne 0x140028059
lea rcx, [rbp + 0x388]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x388]
lea rcx, [rbp + 0x1b8]
call fcn.14001d830
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400280b3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x70]
call fcn.140002d5c
nop
mov rax, qword [rbp - 0x68]
mov ecx, dword [rax - 0x10]
lea r13d, [rcx + rcx]
cmp byte [rsp + 0x48], bl
je 0x140028107
mov dword [rbp + 0x14], 0x2710
mov r9d, 4
lea r8, [rbp + 0x14]
lea edx, [r9 + 2]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp + 0x14]
lea edx, [r9 + 1]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rbx, rbx
and rbx, rax
mov r9, qword [rbp - 0x70]
mov r8d, esi
sub r8d, dword [r9 - 8]
mov ecx, dword [r9 - 0xc]
or ecx, r8d
jge 0x14002813f
xor edx, edx
lea rcx, [rbp - 0x70]
call fcn.140002210
mov rax, qword [rsp + 0x70]
mov r9, qword [rbp - 0x70]
mov dword [rsp + 0x20], r13d
mov r8d, dword [rax - 0x10]
mov rdx, rbx
mov rcx, r12
call qword [sym.imp.WININET.dll_HttpSendRequestW]
xor r13d, r13d
test eax, eax
jne 0x140028412
mov ecx, dword [0x1401aad80]
imul ecx, ecx
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0x14
jne 0x140028190
lea rcx, [rbp + 0x6a0]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
lea rcx, [rbp + 0xb8]
call fcn.140022434
nop
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401aad80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0xd
jne 0x1400281ff
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
mov r8d, dword [0x1401aad80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0x10
jne 0x14002823f
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
cmp byte [rsp + 0x40], r13b
je 0x14002824f
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpSendRequest_Failed_with:
lea rcx, [rbp + 0x208]
call fcn.140002df8
nop
lea r8, [rbp + 0xb8]
mov rdx, rax
lea rcx, [rbp + 0x158]
call fcn.14001dacc
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400282af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x208]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400282d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400282f3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028312
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028331
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028351
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028370
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002838f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400283ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400283cd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400283ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002840d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400274f8
lea rdx, str.noResponse
mov rcx, r15
call fcn.140030290
cmp byte [rax + 8], 5
jne 0x1400286c1
lea rdx, str.noResponse
mov rcx, r15
call fcn.140030290
mov rcx, rax
call fcn.14002fe1c
test al, al
je 0x1400286c1
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [0x1401aad80]
imul ecx, ecx
and ecx, 0x80000007
jge 0x14002846b
sub ecx, esi
or ecx, 0xfffffff8
add ecx, esi
mov eax, dword [0x1401abe3c]
mov edx, 0x56a9592c
cmp ecx, 6
cmove eax, edx
mov dword [0x1401abe3c], eax
cmp byte [rsp + 0x40], r13b
je 0x140028492
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
lea rcx, [rbp + 0x228]
call fcn.14002f634
nop
mov eax, dword [rbp + 0xd8]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0xd8], eax
mov qword [rbp + 0xe0], r13
mov byte [rbp + 0xd0], sil
lea rdx, str.result
lea rcx, [rbp + 0x228]
call fcn.14003011c
mov rcx, rax
lea rdx, [rbp + 0xd0]
call fcn.14002f938
nop
lea rcx, [rbp + 0xd0]
call fcn.14002f88c
mov eax, dword [0x1401aad80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
and ecx, 0x8000000f
jge 0x14002850f
sub ecx, esi
or ecx, 0xfffffff0
add ecx, esi
cmp ecx, 0xa
jne 0x14002853b
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0xcccccccd
mul r8d
shr edx, 6
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
lea eax, [r8 + 1]
mov dword [0x1401aad80], eax
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x410]
call fcn.14002f6ac
nop
lea rdx, str.content
lea rcx, [rbp + 0x228]
call fcn.14003011c
mov rcx, rax
lea rdx, [rbp + 0x410]
call fcn.14002f938
nop
lea rcx, [rbp + 0x410]
call fcn.14002f88c
lea rdx, [rbp + 0x228]
mov rcx, r14
call fcn.14002f754
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x228]
call fcn.14002f88c
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400285c1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400285e0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028600
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002861f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002863e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002865d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002867c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002869c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400286bc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400274f8
mov byte [rbp + 0x1090], r13b
mov ebx, 0x400
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x1091]
call fcn.1400c2d60
mov dword [rbp + 0x68], ebx
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140028878
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x140028710
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x168]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028759
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028778
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028797
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400287b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400287d6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400287f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028814
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028833
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028853
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028873
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400274f8
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140028ae2
mov r8d, dword [0x1401aad80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xd
sub ecx, edx
cmp ecx, 5
jne 0x1400288e8
mov ecx, r13d
lea rdx, [rbp + 0x750]
mov eax, dword [rdx]
imul eax, eax, 0xfb
add r8d, eax
add ecx, esi
lea rdx, [rdx + 4]
movsxd rax, ecx
cmp rax, 0x1f4
jb 0x1400288c5
mov dword [0x1401aad80], r8d
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401aad80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0x16
jne 0x14002896a
lea r10d, [rcx - 0xe]
mov ecx, r13d
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r15d, eax
test r15d, r15d
jle 0x140028963
mov eax, r8d
cdq
and edx, 3
add eax, edx
sar eax, 2
mov r9d, r13d
mov rbx, r15
test eax, eax
jle 0x14002895b
mov edx, r9d
mov r11d, eax
add r10d, edx
sub edx, esi
sub r11, rsi
jne 0x140028951
add r9d, ecx
sub rbx, rsi
jne 0x140028947
add ecx, esi
cmp ecx, r10d
jl 0x140028930
cmp byte [rsp + 0x40], r13b
je 0x14002897a
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x1c8]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1c8]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400289c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400289e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028a01
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028a21
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028a40
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028a5f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028a7e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028a9d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028abd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028add
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400274f8
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x68]
lea r8, [rbp + 0x1090]
mov edx, 0x13
mov rcx, r12
call rax
test eax, eax
jne 0x140028ccd
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, dword [0x1401aad80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 9
jne 0x140028b55
mov edx, 0xc0
lea r8d, [rdx + 1]
lea rcx, str._d__d_n
call fcn.1400be234
cmp byte [rsp + 0x40], r13b
je 0x140028b65
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x178]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028bae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028bcd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028bec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028c0c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028c2b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028c4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028c69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028c88
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028ca8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140028cc8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400274f8
lea rdx, [rbp + 0x1090]
lea rcx, [rsp + 0x50]
call fcn.140025350
nop
lea rdx, str.acceptedStatusCodes
mov rcx, r15
call fcn.140030290
mov r13, rax
mov al, byte [rax + 8]
xor r9d, r9d
test al, al
je 0x140028f03
cmp al, 6
je 0x140028f03
cmp al, 7
jne 0x140028ed3
mov ebx, r9d
mov dword [rbp - 0x50], ebx
mov rcx, r13
call fcn.14002fe8c
test eax, eax
jle 0x14002a956
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x20], rax
mov r8d, ebx
lea rdx, [0x140138060]
lea rcx, [rbp + 0x20]
call fcn.14002ad4c
mov rdi, qword [rbp + 0x20]
mov rdx, rdi
mov rcx, r13
call fcn.140030290
mov rdx, rdi
mov rcx, r13
cmp byte [rax + 8], 4
jne 0x140028dc1
lea rax, [rbp + 0x4c8]
mov qword [rbp + 0x80], rax
call fcn.140030290
mov rdx, qword [rax]
lea rcx, [rbp + 0x4c8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x1f8]
call fcn.14001d830
nop
mov rdx, qword [rax]
lea rcx, [rsp + 0x50]
call fcn.140003094
test eax, eax
sete bl
mov rdx, qword [rbp + 0x1f8]
or rdi, 0xffffffffffffffff
jmp 0x140028e53
call fcn.140030290
cmp byte [rax + 8], sil
jne 0x140028e78
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0xc8], rbx
mov rdx, rdi
mov rcx, r13
call fcn.140030290
mov rcx, rax
call fcn.14002fb10
mov r8d, eax
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0xc0]
call fcn.14001d9ec
nop
lea rdx, [rbx - 0x18]
or rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
xor ebx, ebx
test eax, eax
jg 0x140028e36
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp + 0xc0]
lea rcx, [rsp + 0x50]
call fcn.140003094
test eax, eax
sete bl
mov rdx, qword [rbp + 0xc0]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140028e6d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x140028eb0
mov rdi, qword [rbp + 0x20]
mov ebx, dword [rbp - 0x50]
lea rdx, [rdi - 0x18]
or rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140028e96
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add ebx, esi
mov dword [rbp - 0x50], ebx
mov rcx, r13
call fcn.14002fe8c
cmp ebx, eax
jge 0x14002a95a
jmp 0x140028d25
mov rdx, qword [rbp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
xor r13d, r13d
test eax, eax
jg 0x140028eee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140028eee
lea rdx, [0x14013bfb0]
lea rcx, [rsp + 0x50]
call fcn.140003094
xor r13d, r13d
test eax, eax
sete bl
jmp 0x140028ef2
mov rdi, qword [rbp - 8]
test bl, bl
jne 0x1400290af
or rdi, 0xffffffffffffffff
jmp 0x14002a95d
mov ebx, r9d
mov dword [rbp - 0x50], ebx
mov rcx, r13
call fcn.14002fe8c
test eax, eax
jle 0x14002a956
mov edx, ebx
mov rcx, r13
call fcn.1400300b0
mov edx, ebx
mov rcx, r13
cmp byte [rax + 8], 4
jne 0x140028fdb
lea rax, [rbp + 0x338]
mov qword [rbp + 0x80], rax
call fcn.1400300b0
mov rdx, qword [rax]
mov qword [rbp + 0x350], 0xf
xor eax, eax
mov qword [rbp + 0x348], rax
mov byte [rbp + 0x338], al
cmp byte [rdx], al
jne 0x140028f6b
mov r8d, eax
jmp 0x140028f78
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], al
jne 0x140028f6f
lea rcx, [rbp + 0x338]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x338]
lea rcx, [rbp + 0x1d8]
call fcn.14001d830
nop
mov rdx, qword [rax]
lea rcx, [rsp + 0x50]
call fcn.140003094
test eax, eax
sete byte [rsp + 0x58]
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
or rcx, 0xffffffffffffffff
mov eax, ecx
lock xadd dword [rdx + 0x10], eax
add eax, ecx
test eax, eax
jg 0x14002908a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002908a
call fcn.1400300b0
cmp byte [rax + 8], sil
jne 0x140029092
lea rcx, [0x1401a29a8]
mov rax, qword [0x1401a29a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x198], rbx
mov edx, dword [rbp - 0x50]
mov rcx, r13
call fcn.1400300b0
mov rcx, rax
call fcn.14002fb10
mov r8d, eax
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x98]
call fcn.14001d9ec
nop
lea rdx, [rbx - 0x18]
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002904e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp + 0x98]
lea rcx, [rsp + 0x50]
call fcn.140003094
test eax, eax
sete byte [rsp + 0x58]
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140029087
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ebx, dword [rbp - 0x50]
xor eax, eax
cmp byte [rsp + 0x58], al
jne 0x1400290ac
add ebx, esi
mov dword [rbp - 0x50], ebx
mov rcx, r13
call fcn.14002fe8c
cmp ebx, eax
jge 0x14002a956
jmp 0x140028f19
xor r13d, r13d
mov dword [rbp - 0x20], r13d
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x1400290ef
lea rdx, str.HttpQueryInfoW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400290ef
mov qword [rsp + 0x20], r13
lea r9, [rbp - 0x20]
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, r12
call rax
lea rcx, [rbp - 0x48]
call fcn.140001f34
nop
cmp dword [rbp - 0x20], r13d
je 0x140029241
mov ecx, dword [0x1401aad80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 7
jne 0x14002914d
call fcn.1400be2e0
mov ecx, dword [0x1401aad80]
cmp ecx, eax
jne 0x14002914d
sub ecx, esi
mov dword [0x1401aad80], ecx
mov ecx, dword [rbp - 0x20]
call fcn.1400bcf98
mov r13, rax
mov edx, dword [0x1401aad80]
lea r8d, [rdx + 2]
lea ecx, [rdx + 1]
imul r8d, ecx
imul r8d, edx
mov eax, 0x2aaaaaab
imul r8d
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [rdx + rdx*2]
shl eax, 3
sub r8d, eax
cmp r8d, esi
jne 0x1400291af
mov ecx, 4
call fcn.1400be0e0
mov rbx, rax
call fcn.1400be2e0
mov dword [rbx], eax
mov dword [0x1401aad80], eax
mov rcx, rbx
call fcn.1400bd904
xor ebx, ebx
test r13, r13
je 0x140029247
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x1400291f5
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400291f5
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x20]
mov r8, r13
lea edx, [rbx + 0x16]
mov rcx, r12
call rax
mov rdx, r13
lea rcx, [rbp + 0x218]
call fcn.140025350
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x218]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140029237
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, r13
call fcn.1400be048
jmp 0x14002924b
or rbx, 0xffffffffffffffff
jmp 0x14002924e
or rbx, 0xffffffffffffffff
xor r13d, r13d
cmp byte [rsp + 0x48], r13b
je 0x140029d89
xor edx, edx
lea rcx, [rbp + 0x28]
call fcn.14002f634
nop
mov r8d, dword [0x1401aad80]
lea eax, [r8 + 1]
imul eax, r8d
and eax, 0x8000000f
jge 0x140029282
sub eax, esi
or eax, 0xfffffff0
add eax, esi
cmp eax, 7
jne 0x1400292a3
mov ecx, esi
cmp r8d, esi
jle 0x14002929d
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, r8d
jl 0x14002928e
mov dword [0x1401aad80], ecx
lea rdx, [0x14013bfd0]
lea rcx, [rsp + 0x50]
call fcn.140003094
test eax, eax
je 0x14002947f
lea rdx, [0x14013bfc8]
lea rcx, [rsp + 0x50]
call fcn.140003094
test eax, eax
je 0x14002947f
lea rdx, [0x14013bfe0]
lea rcx, [rsp + 0x50]
call fcn.140003094
test eax, eax
je 0x14002947f
lea rdx, [0x14013bfd8]
lea rcx, [rsp + 0x50]
call fcn.140003094
test eax, eax
je 0x14002947f
lea rdx, [rbp + 0x28]
mov rcx, r14
call fcn.14002f754
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x28]
call fcn.14002f88c
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140029340
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140029360
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002937f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002939e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400293be
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400293dd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400293fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002941b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002943a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002945a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002947a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400274f8
lea rcx, [rbp - 0x28]
call fcn.140001f34
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp]
call fcn.140002d5c
nop
lea rcx, [rbp]
call fcn.140021d38
mov ecx, dword [0x1401aad80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub r8d, edx
cmp r8d, 0xb
jne 0x1400294fd
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r8d, eax
mov eax, 0xcccccccd
mul r8d
shr edx, 6
lea ecx, [rdx + rdx*4]
shl ecx, 4
sub r8d, ecx
lea eax, [r8 + 1]
mov dword [0x1401aad80], eax
xor r8d, r8d
lea rdx, str.location:
lea rcx, [rbp]
call fcn.140018e78
mov ebx, eax
or r15, 0xffffffffffffffff
cmp eax, r15d
jne 0x140029703
lea rdx, [rbp + 0x28]
mov rcx, r14
call fcn.14002f754
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029550
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029571
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x28]
call fcn.14002f88c
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x14002959c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400295be
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400295df
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029600
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029622
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029643
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029664
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029685
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400296a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400296c8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400296ea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
jmp 0x14002ab38
mov r8d, eax
lea rdx, [0x14013bf48]
lea rcx, [rbp]
call fcn.140018e78
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rbp + 0x128]
lea rcx, [rbp]
call fcn.14000dd7c
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x128]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x14002975f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [0x1401aad80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 7
jne 0x1400297c2
mov ecx, 0x28
call fcn.1400bcf98
mov rdi, rax
mov rbx, r13
call fcn.1400be2e0
add eax, dword [0x1401aad80]
mov dword [rdi + rbx*4], eax
add rbx, rsi
cmp rbx, 0xa
jl 0x14002979a
mov eax, dword [rdi + 0x24]
mov dword [0x1401aad80], eax
mov rcx, rdi
call fcn.1400be048
xor r8d, r8d
lea rdx, str.http
lea rcx, [rbp - 0x28]
call fcn.140018e78
mov ecx, eax
cmp eax, r15d
jne 0x1400299b0
lea rdx, [rbp + 0x28]
mov rcx, r14
call fcn.14002f754
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029811
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029832
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x28]
call fcn.14002f88c
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x14002985d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x14002987f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400298a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400298c1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400298e3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029904
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029925
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029946
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029967
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029989
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400299ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400296ea
mov rax, qword [rbp - 0x28]
mov r8d, dword [rax - 0x10]
sub r8d, ecx
lea rdx, [rbp + 0x130]
lea rcx, [rbp - 0x28]
call fcn.140018eb8
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140002038
nop
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x1400299fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp + 0xf0]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0xf0], eax
mov qword [rbp + 0xf8], r13
mov byte [rbp + 0xe8], sil
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x28]
call fcn.14003011c
mov rcx, rax
lea rdx, [rbp + 0xe8]
call fcn.14002f938
nop
lea rcx, [rbp + 0xe8]
call fcn.14002f88c
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x5e8]
call fcn.14001d8c4
nop
mov rdx, rax
lea rcx, [rbp + 0x440]
call fcn.14002f6f0
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x28]
call fcn.14003011c
mov rcx, rax
lea rdx, [rbp + 0x440]
call fcn.14002f938
nop
lea rcx, [rbp + 0x440]
call fcn.14002f88c
nop
xor r8d, r8d
mov dl, sil
lea rcx, [rbp + 0x5e8]
call fcn.14000136c
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x508]
call fcn.14001d8c4
nop
mov rdx, rax
lea rcx, [rbp + 0x3b0]
call fcn.14002f6f0
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x28]
call fcn.14003011c
mov rcx, rax
lea rdx, [rbp + 0x3b0]
call fcn.14002f938
nop
lea rcx, [rbp + 0x3b0]
call fcn.14002f88c
nop
xor r8d, r8d
mov dl, sil
lea rcx, [rbp + 0x508]
call fcn.14000136c
mov r8d, dword [0x1401aad80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
cmp ecx, 4
jne 0x140029b45
test r8d, r8d
cmove r8d, esi
mov dword [0x1401aad80], r8d
mov rcx, qword [rsp + 0x50]
mov edx, esi
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x140029b67
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.140002210
mov rcx, qword [rsp + 0x50]
call fcn.1400be9f4
mov ecx, dword [rbp + 0x110]
and ecx, 0xffffff01
or ecx, esi
mov dword [rbp + 0x110], ecx
mov qword [rbp + 0x118], r13
mov dword [rbp + 0x108], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x28]
call fcn.14003011c
mov rcx, rax
lea rdx, [rbp + 0x108]
call fcn.14002f938
nop
lea rcx, [rbp + 0x108]
call fcn.14002f88c
lea rdx, [rbp + 0x28]
mov rcx, r14
call fcn.14002f754
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029bea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029c0b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x28]
call fcn.14002f88c
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029c36
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029c58
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029c79
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029c9a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029cbc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029cdd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029cfe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029d1f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029d40
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029d62
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r15d
lock xadd dword [rdx + 0x10], eax
add eax, r15d
test eax, eax
jg 0x140029d84
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400296ea
mov rax, r13
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], r13
xor ecx, ecx
mov qword [rbp - 0x30], rcx
mov dword [rbp - 0xc], ecx
sub r13, rax
lea rdx, [r13 + 0x400]
lea rcx, [rbp - 0x40]
call fcn.1400253cc
xor eax, eax
mov dword [rbp - 0xc], eax
mov rbx, qword [rbp - 0x40]
add rbx, r13
call fcn.1400242a8
mov rcx, rax
lea rax, [rbp - 0xc]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r12
call fcn.1400359a4
test eax, eax
je 0x14002a77e
mov edx, dword [rbp - 0xc]
add rdx, r13
lea rcx, [rbp - 0x40]
call fcn.1400253cc
xor r13d, r13d
cmp dword [rbp - 0xc], r13d
je 0x140029e02
mov r13, qword [rbp - 0x38]
mov rax, qword [rbp - 0x40]
jmp 0x140029d9d
mov byte [rbp + 0xc80], r13b
mov ebx, 0x400
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0xc81]
call fcn.1400c2d60
mov dword [rbp + 0x58], ebx
mov rbx, r13
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140029e7c
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
call fcn.14002559c
test al, al
jne 0x140029e7c
mov r8d, r13d
lea r9, [rbp + 0x950]
mov r11d, dword [0x1401aad80]
mov r10d, r11d
add r8d, esi
sub r10d, esi
lea r9, [r9 + 4]
movsxd rax, r8d
cmp rax, 0xc9
jb 0x140029e67
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x58]
lea r8, [rbp + 0xc80]
mov edx, 0x1d
mov rcx, r12
call rbx
test eax, eax
je 0x14002a02b
lea rdx, [rbp + 0xc80]
lea rcx, [rbp + 0x50]
call fcn.140025350
nop
lea rdx, str.gzip
lea rcx, [rbp + 0x50]
call fcn.1400192c0
test al, al
je 0x14002a022
lea rcx, [rbp + 0x240]
call fcn.1400192fc
nop
lea rcx, [rbp - 0x40]
call fcn.14002acb0
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002acb8
mov rcx, rax
lea r8, [rbp + 0x240]
mov rdx, rbx
call fcn.140025808
test eax, eax
jne 0x140029ff0
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x140029f1e
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x140]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x140]
call fcn.140002008
nop
lea rcx, [rbp + 0x240]
call fcn.1400253a0
nop
lea rcx, [rbp + 0x50]
call fcn.140002008
nop
lea rcx, [rbp - 0x40]
call fcn.1400253a0
nop
lea rcx, [rbp - 0x48]
call fcn.140002008
nop
lea rcx, [rsp + 0x50]
call fcn.140002008
nop
lea rcx, [rbp - 0x70]
call fcn.140002008
nop
lea rcx, [rbp - 0x68]
call fcn.140002008
nop
lea rcx, [rsp + 0x70]
call fcn.140002008
nop
lea rcx, [rbp - 0x78]
call fcn.140002008
nop
lea rcx, [rbp - 0x58]
call fcn.140002008
nop
lea rcx, [rbp - 0x60]
call fcn.140002008
nop
lea rcx, [rbp - 0x80]
call fcn.140002008
nop
lea rcx, [rsp + 0x60]
call fcn.140002008
nop
lea rcx, [rsp + 0x78]
call fcn.140002008
nop
lea rcx, [rsp + 0x68]
call fcn.140002008
jmp 0x14002ab45
lea rdx, [rbp + 0x240]
lea rcx, [rbp - 0x40]
call fcn.14002ab6c
call fcn.1400257c8
test al, al
jne 0x14002a015
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x1401aad80], eax
lea rcx, [rbp + 0x240]
call fcn.1400253a0
nop
lea rcx, [rbp + 0x50]
call fcn.140002008
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x14002a044
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov bl, r13b
mov dil, r13b
lea rdx, [0x14013bd30]
mov rcx, r15
call fcn.140030290
mov rcx, rax
call fcn.1400305a0
test al, al
je 0x14002a0e2
lea rax, [rbp + 0x4e8]
mov qword [rbp + 0x80], rax
lea rdx, [0x14013bd30]
mov rcx, r15
call fcn.140030290
mov rcx, rax
call fcn.140002d58
mov rdx, rax
lea rcx, [rbp + 0x4e8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14001d830
nop
lea rdx, str.base64
lea rcx, [rbp + 0x60]
call fcn.1400192c0
test al, al
je 0x14002a0c0
mov bl, sil
jmp 0x14002a0d9
lea rdx, str.binary
lea rcx, [rbp + 0x60]
call fcn.1400192c0
movzx edi, dil
test al, al
cmovne edi, esi
lea rcx, [rbp + 0x60]
call fcn.140002008
lea rcx, [rbp - 0x18]
call fcn.140001f34
nop
test bl, bl
je 0x14002a212
lea rcx, [rbp - 0x40]
call fcn.14002acb0
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002acb8
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x150]
call fcn.14001d5ec
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140002038
nop
lea rcx, [rbp + 0x150]
call fcn.140002008
lea rcx, [rbp + 0x160]
call fcn.14002386c
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140019280
mov bl, al
lea rcx, [rbp + 0x160]
call fcn.140002008
test bl, bl
je 0x14002a3b6
mov r9d, dword [0x1401aad80]
mov ecx, r9d
imul ecx, r9d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 5
jne 0x14002a1d9
xor r14d, r14d
mov r10d, r14d
lea r8, [rbp + 0x14a0]
mov dil, r9b
sub dil, r10b
mov ebx, esi
mov r12d, 0xd
mov r11, r14
mov r15d, esi
add r15d, esi
add r11, rsi
cmp r11, 3
jl 0x14002a1b2
add ebx, esi
add r8, 3
sub r12, rsi
jne 0x14002a1ac
add r10d, esi
cmp r10d, 0x10
jl 0x14002a19e
mov r14, qword [rbp + 0x88]
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x170]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x170]
call fcn.140002008
nop
lea rcx, [rbp - 0x18]
jmp 0x140029f5f
test dil, dil
jne 0x14002a3b6
lea rcx, [rbp - 0x40]
call fcn.14002acb0
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x40]
call fcn.14002acb8
cmp byte [rax], r13b
je 0x14002a255
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x40]
call fcn.1400253cc
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14002acb8
mov byte [rax], r13b
lea rcx, [rbp - 0x40]
call fcn.14002acb0
cmp rax, 3
jbe 0x14002a330
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002acb8
cmp byte [rax], 0xef
jne 0x14002a2ea
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.14002acb8
cmp byte [rax], 0xbb
jne 0x14002a2ea
mov edx, 2
lea rcx, [rbp - 0x40]
call fcn.14002acb8
cmp byte [rax], 0xbf
jne 0x14002a2ea
lea rdx, [rbp + 0x3c8]
lea rcx, [rbp - 0x40]
call fcn.14002aca4
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x488]
call fcn.14002ad3c
mov rbx, qword [rax]
lea rdx, [rbp + 0x3e8]
lea rcx, [rbp - 0x40]
call fcn.14002aca4
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0x90]
lea rcx, [rbp - 0x40]
call fcn.14002acc0
mov ecx, dword [0x1401aad80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x66666667
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub r8d, eax
cmp r8d, 2
jne 0x14002a330
lea ecx, [r8 + 2]
call fcn.1400be0e0
mov ecx, dword [0x1401aad80]
mov dword [rax], ecx
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002acb8
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.140002df8
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.140002038
nop
lea rcx, [rbp + 0x180]
call fcn.140002008
call fcn.14002556c
test al, al
jne 0x14002a3b6
mov r8d, dword [0x1401aad80]
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x7b
movsxd rcx, r8d
mov eax, 4
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1400bcf98
mov rcx, rax
call fcn.1400be048
mov bl, r13b
lea r12, str.outputFile
mov rdx, r12
mov rcx, r15
call fcn.140030290
mov rcx, rax
call fcn.1400305a0
test al, al
je 0x14002a4d3
call fcn.1400255e0
lea rax, [rbp + 0x4a8]
mov qword [rbp + 0x90], rax
mov rdx, r12
mov rcx, r15
call fcn.140030290
mov rcx, rax
call fcn.140002d58
mov rdx, rax
lea rcx, [rbp + 0x4a8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.14001d830
nop
lea rcx, [rbp + 0x18]
call fcn.14000d408
test al, al
jne 0x14002a4ca
test dil, dil
je 0x14002a497
mov qword [rbp + 0x48], r13
lea rcx, [rbp + 0x18]
call fcn.140002d58
mov rdx, rax
lea r8, [0x14013c0c0]
lea rcx, [rbp + 0x48]
call fcn.1400c0690
test eax, eax
jne 0x14002a4ca
mov rdi, qword [rbp + 0x48]
test rdi, rdi
je 0x14002a4ca
lea rcx, [rbp - 0x40]
call fcn.14002acb0
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002acb8
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, rsi
call fcn.1400c0ac4
mov rcx, qword [rbp + 0x48]
call fcn.1400bf9ac
mov bl, sil
jmp 0x14002a4ca
lea rax, [rbp + 0x190]
mov qword [rbp + 0x90], rax
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x190]
call fcn.140002d5c
nop
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.1400248b8
movzx ebx, bl
test al, al
cmovne ebx, esi
lea rcx, [rbp + 0x18]
call fcn.140002008
xor edx, edx
lea rcx, [rbp + 0xa0]
call fcn.14002f634
nop
mov dl, sil
lea rcx, [rbp + 0x3f8]
call fcn.14002f744
nop
lea rdx, str.result
lea rcx, [rbp + 0xa0]
call fcn.140030114
mov rcx, rax
lea rdx, [rbp + 0x3f8]
call fcn.14002f938
nop
lea rcx, [rbp + 0x3f8]
call fcn.14002f88c
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x18]
call fcn.140022eb0
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x5c8]
call fcn.14001d8c4
nop
mov rdx, rax
lea rcx, [rbp + 0x428]
call fcn.14002f6f0
nop
lea rdx, str.content
lea rcx, [rbp + 0xa0]
call fcn.140030114
mov rcx, rax
lea rdx, [rbp + 0x428]
call fcn.14002f938
nop
lea rcx, [rbp + 0x428]
call fcn.14002f88c
nop
lea rcx, [rbp + 0x5c8]
call fcn.14000133c
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x588]
call fcn.14001d8c4
nop
mov rdx, rax
lea rcx, [rbp + 0x490]
call fcn.14002f6f0
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xa0]
call fcn.140030114
mov rcx, rax
lea rdx, str.headers
call fcn.140030114
mov rcx, rax
lea rdx, [rbp + 0x490]
call fcn.14002f938
nop
lea rcx, [rbp + 0x490]
call fcn.14002f88c
nop
lea rcx, [rbp + 0x588]
call fcn.14000133c
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x548]
call fcn.14001d8c4
nop
mov rdx, rax
lea rcx, [rbp + 0x458]
call fcn.14002f6f0
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xa0]
call fcn.140030114
mov rcx, rax
lea rdx, str.httpCode
call fcn.140030114
mov rcx, rax
lea rdx, [rbp + 0x458]
call fcn.14002f938
nop
lea rcx, [rbp + 0x458]
call fcn.14002f88c
nop
lea rcx, [rbp + 0x548]
call fcn.14000133c
lea rdx, str.empty
lea rcx, [rbp + 0x568]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x3d0]
call fcn.14002f6f0
nop
lea rdx, str.noData
lea rcx, [rbp + 0xa0]
call fcn.140030114
mov rcx, rax
lea rdx, [rbp + 0x3d0]
call fcn.14002f938
nop
lea rcx, [rbp + 0x3d0]
call fcn.14002f88c
nop
lea rcx, [rbp + 0x568]
call fcn.14000133c
mov rdx, r12
mov rcx, r15
call fcn.140030290
mov rcx, rax
call fcn.1400305a0
test al, al
je 0x14002a75a
mov dl, bl
lea rcx, [rbp + 0x470]
call fcn.14002f744
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x528]
call fcn.1400012fc
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x5a8]
call fcn.14002adf4
nop
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.1400302f4
mov rcx, rax
lea rdx, [rbp + 0x470]
call fcn.14002f938
nop
lea rcx, [rbp + 0x5a8]
call fcn.14000133c
nop
lea rcx, [rbp + 0x528]
call fcn.14000133c
nop
lea rcx, [rbp + 0x470]
call fcn.14002f88c
lea rdx, [rbp + 0xa0]
mov rcx, r14
call fcn.14002f754
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0xa0]
call fcn.14002f88c
jmp 0x14002a209
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
call fcn.140025750
xor r15d, r15d
test al, al
jne 0x14002a7a8
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
cmp byte [rsp + 0x40], r15b
je 0x14002a7b8
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0x78]
call fcn.140002df8
nop
mov rdx, rax
mov rcx, r14
call fcn.140025cb8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a7fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14002a815
call fcn.1400bd904
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a834
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a854
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a873
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a892
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a8b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a8d1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a8f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a90f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002a92e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140029fd6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140029fd6
or rdi, 0xffffffffffffffff
xor r13d, r13d
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [0x1401aad80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0xb21642c9
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x17
sub ecx, edx
cmp ecx, 0x16
jne 0x14002a99a
call fcn.1400be2e0
mov dword [0x1401aad80], eax
cmp byte [rsp + 0x40], r13b
je 0x14002a9ab
mov rcx, qword [rbp - 8]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x610]
call fcn.1400193d0
nop
mov rcx, qword [rax]
call fcn.1400bea00
mov edx, eax
mov rcx, r14
call fcn.140025dbc
mov dword [rsp + 0x44], esi
lea rax, [rbp + 0x618]
mov rcx, qword [rbp + 0x610]
cmp rcx, rax
je 0x14002a9ec
call fcn.1400be3d8
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002aa0c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002aa2b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002aa4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002aa6a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002aa89
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002aaa8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002aac7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002aae6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002ab06
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002ab26
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14002ab45
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, r14
mov rcx, qword [rbp + 0x1710]
xor rcx, rsp
call fcn.1400bd920
add rsp, 0x1828
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret