Function at 0x14002aef0
Capabilities:
Link many functions at runtime
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f488]
mov eax, 0x1f588
call fcn.1400ccc90
sub rsp, rax
mov qword [rbp + 0x308], 0xfffffffffffffffe
movaps xmmword [rsp + 0x1f570], xmm6
mov rax, qword [0x1401ace90]
xor rax, rsp
mov qword [rbp + 0x1f460], rax
mov r15, r9
mov qword [rbp + 0xb8], r9
mov rdi, r8
mov r14, rdx
mov r12, rcx
mov qword [rbp + 0x370], rcx
xor ebx, ebx
mov dword [rsp + 0x44], ebx
mov rcx, r9
call fcn.140028df0
test al, al
je 0x14002aff2
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x38], rax
lea rdx, str.this_module_doesnt_support_file_request
test rdx, 0xffffffffffff0000
jne 0x14002afaf
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002afb9
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.1400026c0
jmp 0x14002afb9
lea rcx, [rbp + 0x38]
call fcn.140003500
nop
lea rdx, [rbp + 0x38]
mov rcx, r12
call fcn.1400284c0
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e562
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x14002e562
test r14, r14
jne 0x14002b09d
mov eax, dword [0x1401b4d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 0xd
jne 0x14002b02a
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x70], rax
lea rdx, str.InternetOpen_Failed
test rdx, 0xffffffffffff0000
jne 0x14002b073
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002b07d
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400026c0
jmp 0x14002b07d
lea rcx, [rbp + 0x70]
call fcn.140003500
nop
lea rdx, [rbp + 0x70]
mov rcx, r12
call fcn.1400284c0
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x70]
jmp 0x14002e54e
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
mov dword [rbp - 0x24], ebx
lea rax, [rbp + 0x248]
mov qword [rbp + 0x48], rax
lea rdx, [0x140141b40]
mov rcx, r15
call fcn.140035c90
mov rdx, qword [rax]
mov qword [rbp + 0x260], 0xf
mov qword [rbp + 0x258], rbx
mov byte [rbp + 0x248], 0
or rsi, 0xffffffffffffffff
cmp byte [rdx], 0
jne 0x14002b118
mov r8, rbx
jmp 0x14002b12a
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002b120
lea rcx, [rbp + 0x248]
call fcn.1400013f0
nop
lea rdx, [rbp + 0x248]
lea rcx, [rsp + 0x60]
call fcn.14001f270
nop
lea r9, [rbp - 0x24]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.140028ad0
movzx eax, al
test eax, eax
jne 0x14002b228
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
lea rdx, str.InternetCrackUrl_Failed
test rdx, 0xffffffffffff0000
jne 0x14002b1b5
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002b1bf
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.1400026c0
jmp 0x14002b1bf
lea rcx, [rbp + 0x50]
call fcn.140003500
nop
lea rdx, [rbp + 0x50]
mov rcx, r12
call fcn.1400284c0
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b1ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b209
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b223
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
xor r13b, r13b
mov byte [rsp + 0x48], r13b
lea rdx, str.redirectCheck
mov rcx, r15
call fcn.140035c90
lea rcx, [0x1401b56f8]
cmp rax, rcx
je 0x14002b27f
lea rdx, str.redirectCheck
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 5
jne 0x14002b27f
lea rdx, str.redirectCheck
mov rcx, r15
call fcn.140035c90
mov rcx, rax
call fcn.140035640
movzx r13d, al
mov byte [rsp + 0x48], al
mov byte [rsp + 0x49], 0
mov dword [rbp - 8], 0x50
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x48], rax
mov rcx, qword [rsp + 0x60]
add rcx, 0xffffffffffffffe8
call fcn.140002520
add rax, 0x18
mov qword [rbp + 0xf0], rax
lea r8, [rbp - 8]
lea rdx, [rsp + 0x49]
lea rcx, [rbp + 0xf0]
call fcn.140028cd0
lea rdx, str.port
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 1
jne 0x14002b2f7
lea rdx, str.port
mov rcx, r15
call fcn.140035c90
mov rcx, rax
call fcn.1400352c0
mov ebx, eax
mov dword [rbp - 0x24], eax
jmp 0x14002b303
mov ebx, dword [rbp - 0x24]
test ebx, ebx
cmove ebx, dword [rbp - 8]
mov dword [rbp - 0x24], ebx
mov byte [rsp + 0x40], 0
mov rdi, qword [rdi]
mov rdx, qword [rsp + 0x68]
test rdi, rdi
je 0x14002b3b4
xor eax, eax
mov r11d, eax
mov r10d, eax
mov r9, rdi
cmp qword [r9 + 0x10], 0
je 0x14002b3b4
cmp dword [r9 + 8], ebx
jne 0x14002b379
test rdx, rdx
setne al
test eax, eax
je 0x14002b3a9
mov rax, qword [r9]
mov r8, rdx
sub r8, rax
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, word [rax + r8]
jne 0x14002b369
add rax, 2
test cx, cx
jne 0x14002b350
xor ecx, ecx
mov eax, ecx
jmp 0x14002b36e
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
jne 0x14002b38e
xor eax, eax
inc r11d
inc r10
add r9, 0x18
cmp r10, 0x400
jge 0x14002b3b4
jmp 0x14002b324
movsxd rax, r11d
lea rcx, [rax + rax*2]
mov rax, qword [rdi + rcx*8 + 0x10]
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14002b4ee
jmp 0x14002b3b4
mov ecx, 0x80004005
call fcn.140001920
int3
mov rax, qword [0x1401b5f50]
test rax, rax
jne 0x14002b3fc
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002b3eb
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401b5f50], rax
jmp 0x14002b3f2
mov rax, qword [0x1401b5f50]
test rax, rax
je 0x14002b42d
mov rdx, qword [rsp + 0x68]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rcx
xor r9d, r9d
movzx r8d, bx
mov rcx, r14
call rax
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14002b4e9
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x60], rax
lea rdx, str.InternetConnect_Failed
test rdx, 0xffffffffffff0000
jne 0x14002b476
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002b480
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.1400026c0
jmp 0x14002b480
lea rcx, [rbp + 0x60]
call fcn.140003500
nop
lea rdx, [rbp + 0x60]
mov rcx, r12
call fcn.1400284c0
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4e4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
mov byte [rsp + 0x40], 1
mov edi, 0x80400200
mov eax, 0x80600200
test r13b, r13b
cmovne edi, eax
or edi, 0xc000
cmp byte [rsp + 0x49], 0
je 0x14002b511
or edi, 0x803080
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, [0x140141b74]
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 4
jne 0x14002b5ee
lea rax, [rbp + 0x3d8]
mov qword [rbp + 0x48], rax
lea rdx, [0x140141b74]
mov rcx, r15
call fcn.140035c90
mov rdx, qword [rax]
lea rcx, [rbp + 0x3d8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.14001f270
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002b5d3
cmp dword [rbx + 0x10], 0
jl 0x14002b5c5
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002b5c5
call fcn.140002520
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002b5bb
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x78], rax
jmp 0x14002b5d3
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.1400023d0
nop
mov rdx, qword [rbp + 0x1d0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b5ee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, [0x140141d08]
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 4
jne 0x14002b6cb
lea rax, [rbp + 0x418]
mov qword [rbp - 0x30], rax
lea rdx, [0x140141d08]
mov rcx, r15
call fcn.140035c90
mov rdx, qword [rax]
lea rcx, [rbp + 0x418]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.14001f270
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002b6b0
cmp dword [rbx + 0x10], 0
jl 0x14002b6a2
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002b6a2
call fcn.140002520
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002b698
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x70], rax
jmp 0x14002b6b0
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x70]
call fcn.1400023d0
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b6cb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.referer
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 4
jne 0x14002b7a8
lea rax, [rbp + 0x378]
mov qword [rbp - 0x30], rax
lea rdx, str.referer
mov rcx, r15
call fcn.140035c90
mov rdx, qword [rax]
lea rcx, [rbp + 0x378]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.14001f270
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x68]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002b78d
cmp dword [rbx + 0x10], 0
jl 0x14002b77f
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002b77f
call fcn.140002520
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002b775
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x68], rax
jmp 0x14002b78d
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x68]
call fcn.1400023d0
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b7a8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, str.acceptTypes
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 4
jne 0x14002b885
lea rax, [rbp + 0x438]
mov qword [rbp - 0x30], rax
lea rdx, str.acceptTypes
mov rcx, r15
call fcn.140035c90
mov rdx, qword [rax]
lea rcx, [rbp + 0x438]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.14001f270
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x80]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002b86a
cmp dword [rbx + 0x10], 0
jl 0x14002b85c
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002b85c
call fcn.140002520
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002b852
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x80], rax
jmp 0x14002b86a
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x80]
call fcn.1400023d0
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b885
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x80]
cmp dword [rax - 0x10], 0
mov ecx, 0
cmove rax, rcx
mov qword [rbp + 0x268], rax
mov qword [rbp + 0x270], rcx
mov rax, qword [rbp - 0x68]
cmp dword [rax - 0x10], ecx
cmove rax, rcx
mov r9, qword [rbp - 0x70]
cmp dword [r9 - 0x10], ecx
cmove r9, rcx
mov rdx, qword [rbp - 0x78]
cmp dword [rdx - 0x10], ecx
cmove rdx, rcx
mov r13d, 1
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x268]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x14002ba90
mov eax, dword [0x1401b4d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0xc
jne 0x14002b976
mov eax, dword [str.kBgb9]
mov dword [rbp + 0x98], eax
movzx eax, word [0x140141d2c]
mov word [rbp + 0x9c], ax
lea rax, [rbp + 0x98]
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], 0
jne 0x14002b951
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400c7228
mov rcx, rax
call fcn.1400c8c8c
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
lea rdx, str.HttpOpenRequest_Failed
test rdx, 0xffffffffffff0000
jne 0x14002b9bf
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002b9c9
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.1400026c0
jmp 0x14002b9c9
lea rcx, [rbp + 0x68]
call fcn.140003500
nop
lea rdx, [rbp + 0x68]
mov rcx, r12
call fcn.1400284c0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b9f3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ba0c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ba25
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ba3e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ba57
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ba71
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ba8b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [0x140141d38]
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 4
jne 0x14002bc72
lea rdx, [0x140141d30]
lea rcx, [rbp + 0xa8]
call fcn.140002220
nop
lea rax, [rbp + 0x458]
mov qword [rbp + 8], rax
lea rdx, [0x140141d38]
mov rcx, r15
call fcn.140035c90
mov rdx, qword [rax]
lea rcx, [rbp + 0x458]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1b8]
call fcn.14001f270
mov rdi, rax
lea rcx, str._k_f_
mov rdx, qword [str._k_f_]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
lea rdx, str.Content_Type:
test rdx, 0xffffffffffff0000
jne 0x14002bb5c
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002bb66
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.1400026c0
jmp 0x14002bb66
lea rcx, [rbp + 0x58]
call fcn.140003500
nop
mov r8, rdi
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x1a8]
call fcn.14001f4d0
nop
lea r8, [rbp + 0xa8]
mov rdx, rax
lea rcx, [rbp + 0x198]
call fcn.14001f4d0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x58]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002bbea
cmp dword [rbx + 0x10], 0
jl 0x14002bbdb
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002bbdb
call fcn.140002520
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002bbd0
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x58], rax
jmp 0x14002bbea
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.1400023d0
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc06
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc22
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc3b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc57
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xa8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc72
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.additionalRequestHeaders
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 4
jne 0x14002bd33
lea rax, [rbp + 0x3b8]
mov qword [rbp + 8], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r15
call fcn.140035c90
mov rdx, qword [rax]
lea rcx, [rbp + 0x3b8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1c8]
call fcn.14001f270
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.140010100
nop
mov rdx, qword [rbp + 0x1c8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bcf2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.140002520
add rax, 0x18
mov qword [rbp + 0xb0], rax
lea rcx, [rbp + 0xb0]
call fcn.14002e5a0
nop
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bd33
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, str.postData
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 4
jne 0x14002be14
lea rax, [rbp + 0x3f8]
mov qword [rbp + 8], rax
lea rdx, str.postData
mov rcx, r15
call fcn.140035c90
mov rdx, qword [rax]
lea rcx, [rbp + 0x3f8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.14001f270
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002bdf9
cmp dword [rbx + 0x10], 0
jl 0x14002bdea
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002bdea
call fcn.140002520
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002bddf
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x70], rax
jmp 0x14002bdf9
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.1400023d0
nop
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002be14
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140002520
add rax, 0x18
mov qword [rbp - 0x60], rax
mov rax, qword [rsp + 0x70]
mov ecx, dword [rax - 0x10]
lea r14d, [rcx + rcx]
cmp byte [rsp + 0x48], 0
je 0x14002be74
mov dword [rbp - 4], 0x2710
mov r9d, 4
lea r8, [rbp - 4]
lea edx, [r9 + 2]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp - 4]
lea edx, [r9 + 1]
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x58]
mov rdi, rax
cmp dword [rax - 0x10], 0
mov ecx, 0
cmove rdi, rcx
mov rcx, qword [rbp - 0x60]
mov edx, r13d
sub edx, dword [rcx - 8]
mov ecx, dword [rcx - 0xc]
or ecx, edx
jge 0x14002beaa
xor edx, edx
lea rcx, [rbp - 0x60]
call fcn.1400024c0
mov rax, qword [rsp + 0x58]
mov ebx, dword [rax - 0x10]
call fcn.140026d20
mov rcx, rax
mov dword [rsp + 0x28], r14d
mov rax, qword [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8, rdi
mov rdi, qword [rbp - 0x30]
mov rdx, rdi
call fcn.14003cad0
test eax, eax
jne 0x14002c124
lea rcx, [rbp + 0xe8]
call fcn.140024940
nop
mov r8d, dword [0x1401b4d80]
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 0xc
jne 0x14002bf54
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x63
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400c7228
mov rcx, rax
call fcn.1400c8c8c
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002bf6e
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
lea rdx, str.HttpSendRequest_Failed_with:
test rdx, 0xffffffffffff0000
jne 0x14002bfb7
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002bfc1
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1400026c0
jmp 0x14002bfc1
lea rcx, [rbp + 0x40]
call fcn.140003500
nop
lea r8, [rbp + 0xe8]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x130]
call fcn.14001f4d0
nop
mov rdx, rax
mov rcx, r12
call fcn.1400284c0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c005
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c01e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xe8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c03a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c053
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c06d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c087
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c0a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c0b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c0d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c0eb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c105
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c11f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
lea rdx, str.noResponse
mov rcx, r15
call fcn.140035c90
cmp byte [rax + 8], 5
jne 0x14002c40b
lea rdx, str.noResponse
mov rcx, r15
call fcn.140035c90
mov rcx, rax
call fcn.140035640
test al, al
je 0x14002c40b
mov r11d, dword [0x1401b4d80]
mov eax, r11d
imul eax, r11d
imul eax, r11d
and eax, 0x80000007
jge 0x14002c17c
dec eax
or eax, 0xfffffff8
inc eax
xor ebx, ebx
cmp eax, 4
jne 0x14002c1b0
mov r8d, ebx
lea r9, [rbp + 0x6d0]
mov r10d, r11d
lea ecx, [r8 + r11]
mov eax, r10d
cdq
idiv ecx
mov dword [r9], edx
inc r8d
dec r10d
lea r9, [r9 + 4]
movsxd rax, r8d
cmp rax, 0x3f
jb 0x14002c190
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002c1ca
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rbp + 0x108]
and eax, 0xffffff00
mov dword [rbp + 0x108], eax
btr eax, 8
mov dword [rbp + 0x108], eax
mov qword [rbp + 0x110], rbx
mov eax, dword [rbp + 0x1e0]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1e0], eax
mov qword [rbp + 0x1e8], rbx
mov byte [rbp + 0x1d8], 1
lea rdx, str.result
lea rcx, [rbp + 0x100]
call fcn.140035a90
mov rcx, rax
lea rdx, [rbp + 0x1d8]
call fcn.140035100
nop
lea rcx, [rbp + 0x1d8]
call fcn.140035050
mov r8d, dword [0x1401b4d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0xa
jne 0x14002c2bd
movsd xmm3, qword [0x140144ec8]
xorps xmm2, xmm2
movd xmm4, r8d
cvtdq2pd xmm4, xmm4
movsd xmm5, qword [0x140144ef0]
movsd xmm6, qword [0x140144ec0]
nop dword [rax]
addsd xmm2, xmm3
movaps xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x14002c2a9
subsd xmm2, xmm3
divsd xmm3, xmm5
movaps xmm1, xmm2
mulsd xmm1, xmm2
movaps xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm6
ja 0x14002c290
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x358]
call fcn.140034da0
nop
lea rdx, str.content
lea rcx, [rbp + 0x100]
call fcn.140035a90
mov rcx, rax
lea rdx, [rbp + 0x358]
call fcn.140035100
nop
lea rcx, [rbp + 0x358]
call fcn.140035050
lea rdx, [rbp + 0x100]
mov rcx, r12
call fcn.140034ef0
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x100]
call fcn.140035050
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c33a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c354
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c36e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c387
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c406
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
mov byte [rbp + 0x7d0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x7d1]
call fcn.1400cd020
mov dword [rbp + 0x80], 0x400
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x14002c58a
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002c460
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x1f0]
call fcn.140003320
nop
mov rdx, rax
mov rcx, r12
call fcn.1400284c0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x1f0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c4a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c4b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c4d3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c4ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c506
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c51f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c538
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c551
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c56b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c585
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rdi
test rax, rax
jne 0x14002c767
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov edi, dword [0x1401b4d80]
lea eax, [rdi + 1]
imul eax, eax
imul eax, edi
imul eax, edi
and eax, 0x80000003
jge 0x14002c5cc
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x14002c62c
xor ecx, ecx
mov r8d, 0xfd
mov r11d, ecx
mov eax, edi
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
test ebx, ebx
jle 0x14002c624
mov eax, edi
cdq
and edx, 3
add eax, edx
sar eax, 2
mov r9d, ecx
mov r10, rbx
nop dword [rax]
test eax, eax
jle 0x14002c61a
mov ecx, r9d
mov edx, eax
nop dword [rax]
add r8d, ecx
dec ecx
dec rdx
jne 0x14002c610
add r9d, r11d
dec r10
jne 0x14002c600
xor ecx, ecx
inc r11d
cmp r11d, r8d
jl 0x14002c5e4
cmp byte [rsp + 0x40], 0
je 0x14002c63d
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x140]
call fcn.140003320
nop
mov rdx, rax
mov rcx, r12
call fcn.1400284c0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x140]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c67d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c696
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c6b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c6ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c6e3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c6fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c715
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c72e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c748
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c762
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x80]
lea r8, [rbp + 0x7d0]
lea edx, [rbx + 0x13]
call rax
test eax, eax
jne 0x14002c8cc
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], bl
je 0x14002c7a2
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x1a0]
call fcn.140003320
nop
mov rdx, rax
mov rcx, r12
call fcn.1400284c0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c7e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c7fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c815
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c82f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c848
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c861
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c87a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c893
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c8ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c8c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x7d0]
lea rcx, [rsp + 0x50]
call fcn.140003500
nop
lea rdx, str.acceptedStatusCodes
mov rcx, r15
call fcn.140035c90
mov r14, rax
movzx eax, byte [rax + 8]
test al, al
je 0x14002cb79
cmp al, 6
je 0x14002cb79
cmp al, 7
jne 0x14002cb30
mov r15d, ebx
mov rcx, r14
call fcn.1400356c0
test eax, eax
jle 0x14002e3d5
nop dword [rax]
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x28], rax
mov r8d, r15d
lea rdx, [0x140140c00]
lea rcx, [rbp + 0x28]
call fcn.14002e9b0
mov rdi, qword [rbp + 0x28]
mov rdx, rdi
mov rcx, r14
call fcn.140035c90
mov rdx, rdi
mov rcx, r14
cmp byte [rax + 8], 4
jne 0x14002ca00
lea rax, [rbp + 0x478]
mov qword [rbp + 8], rax
call fcn.140035c90
mov rdx, qword [rax]
lea rcx, [rbp + 0x478]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.14001f270
nop
mov rdx, qword [rax]
xor edi, edi
mov eax, edi
test rdx, rdx
setne al
test eax, eax
je 0x14002cb00
mov rax, qword [rsp + 0x50]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002c9ea
add rax, 2
test cx, cx
jne 0x14002c9d4
mov eax, edi
jmp 0x14002c9ef
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x150]
jmp 0x14002cab7
call fcn.140035c90
cmp byte [rax + 8], 1
jne 0x14002cad3
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x118], rbx
mov rdx, rdi
mov rcx, r14
call fcn.140035c90
mov rcx, rax
call fcn.1400352c0
mov r8d, eax
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0xf8]
call fcn.14001f450
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ca69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor edi, edi
mov ecx, edi
mov rax, qword [rbp + 0xf8]
test rax, rax
setne cl
test ecx, ecx
je 0x14002cb25
mov rcx, qword [rsp + 0x50]
sub rax, rcx
nop word [rax + rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002caa6
add rcx, 2
test dx, dx
jne 0x14002ca90
mov eax, edi
jmp 0x14002caab
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xf8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cacb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002cb0b
mov rdi, qword [rbp + 0x28]
lea rdx, [rdi - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cae7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r15d
mov rcx, r14
call fcn.1400356c0
cmp r15d, eax
jge 0x14002e3d5
jmp 0x14002c940
mov ecx, 0x80004005
call fcn.140001920
nop
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cb65
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002cb65
mov ecx, 0x80004005
call fcn.140001920
nop
xor edi, edi
mov ecx, edi
mov rdx, qword [rsp + 0x50]
lea r8, [0x140141dd0]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14002cb59
cmp rcx, 4
jne 0x14002cb40
mov eax, edi
jmp 0x14002cb5e
sbb eax, eax
or eax, 1
test eax, eax
sete bl
jmp 0x14002cb6c
mov r15, qword [rbp + 0xb8]
test bl, bl
jne 0x14002cd3d
jmp 0x14002e3d5
mov eax, dword [0x1401b4d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xb
jne 0x14002cba6
dec dword [0x1401b5678]
mov edi, ebx
mov rcx, r14
call fcn.1400356c0
test eax, eax
jle 0x14002e3d5
nop dword [rax + rax]
mov edx, edi
mov rcx, r14
call fcn.1400359a0
mov edx, edi
mov rcx, r14
cmp byte [rax + 8], 4
jne 0x14002cc4c
lea rax, [rbp + 0x4b8]
mov qword [rbp + 8], rax
call fcn.1400359a0
mov rdx, qword [rax]
lea rcx, [rbp + 0x4b8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.14001f270
nop
mov rdx, qword [rax]
mov eax, ebx
test rdx, rdx
setne al
test eax, eax
je 0x14002cd30
mov rax, qword [rsp + 0x50]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002cc36
add rax, 2
test cx, cx
jne 0x14002cc20
mov eax, ebx
jmp 0x14002cc3b
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x160]
jmp 0x14002ccff
call fcn.1400359a0
cmp byte [rax + 8], 1
jne 0x14002cd19
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1b0], rbx
mov edx, edi
mov rcx, r14
call fcn.1400359a0
mov rcx, rax
call fcn.1400352c0
mov r8d, eax
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0xc0]
call fcn.14001f450
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ccb4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
mov ecx, r8d
mov rax, qword [rbp + 0xc0]
test rax, rax
setne cl
test ecx, ecx
je 0x14002e3ca
mov rcx, qword [rsp + 0x50]
sub rax, rcx
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002ccee
add rcx, 2
test dx, dx
jne 0x14002ccd7
mov eax, r8d
jmp 0x14002ccf3
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xc0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cd13
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002cd3b
xor ebx, ebx
inc edi
mov rcx, r14
call fcn.1400356c0
cmp edi, eax
jge 0x14002e3d5
jmp 0x14002cbc0
mov ecx, 0x80004005
call fcn.140001920
nop
xor edi, edi
mov dword [rbp - 0x28], edi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002cd82
lea rdx, str.HttpQueryInfoW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, qword [rbp - 0x30]
test rax, rax
je 0x14002cd86
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x28]
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, r14
call rax
jmp 0x14002cd86
mov r14, qword [rbp - 0x30]
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
cmp dword [rbp - 0x28], 0
je 0x14002ce76
mov eax, dword [0x1401b4d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0x11
jne 0x14002cde9
call fcn.1400c84d4
mov ecx, dword [0x1401b4d80]
cmp ecx, eax
jne 0x14002cde9
dec ecx
mov dword [0x1401b4d80], ecx
mov ecx, dword [rbp - 0x28]
call fcn.1400c7228
mov rbx, rax
test rax, rax
je 0x14002ce76
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002ce36
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002ce36
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x28]
mov r8, rbx
mov edx, 0x16
mov rcx, r14
call rax
mov rdx, rbx
lea rcx, [rbp + 0x170]
call fcn.140027b50
nop
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140002340
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ce6e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400c8c8c
cmp byte [rsp + 0x48], 0
je 0x14002d866
mov eax, dword [rbp + 0x18]
and eax, 0xffffff00
mov dword [rbp + 0x18], eax
btr eax, 8
mov dword [rbp + 0x18], eax
mov qword [rbp + 0x20], rdi
mov rdx, rdi
mov rax, qword [rsp + 0x50]
lea r8, [0x140141dc8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002cec9
cmp rdx, 4
jne 0x14002ceb0
mov ecx, edi
jmp 0x14002cece
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002d0d3
mov rdx, rdi
lea r8, [0x140141de0]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002cf09
cmp rdx, 4
jne 0x14002cef0
mov ecx, edi
jmp 0x14002cf0e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002d0d3
mov rdx, rdi
lea r8, [0x140141dd8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002cf49
cmp rdx, 4
jne 0x14002cf30
mov ecx, edi
jmp 0x14002cf4e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002d0d3
mov rdx, rdi
lea r8, [0x140141de8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002cf89
cmp rdx, 4
jne 0x14002cf70
mov eax, edi
jmp 0x14002cf8e
sbb eax, eax
or eax, 1
test eax, eax
setne al
test al, al
je 0x14002d0d3
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.140034ef0
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x10]
call fcn.140035050
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cfcf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cfe9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d002
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d01c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d036
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d04f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d068
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d081
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d09a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d0b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d0ce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
lea rcx, str._k_f_
mov rax, qword [str._k_f_]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x10], rax
mov ecx, dword [0x1401b4d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x66666667
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub r8d, eax
mov eax, dword [0x1401b56b8]
mov ecx, 0x38e45827
cmp r8d, 2
cmove eax, ecx
mov dword [0x1401b56b8], eax
mov rcx, qword [rbp - 0x50]
add rcx, 0xffffffffffffffe8
call fcn.140002520
add rax, 0x18
mov qword [rbp], rax
lea rcx, [rbp]
call fcn.140023f80
mov rbx, qword [rbp]
cmp dword [rbx - 0x10], 0
jl 0x14002d700
lea rdx, str.location:
mov rcx, rbx
call fcn.1400c88d8
mov rdi, rax
test rax, rax
je 0x14002d700
sub rdi, rbx
sar rdi, 1
cmp edi, 0xffffffff
je 0x14002d700
test edi, edi
js 0x14002d1b3
cmp edi, dword [rbx - 0x10]
jg 0x14002d1b3
movsxd rax, edi
lea rcx, [rbx + rax*2]
lea rdx, [0x140141d30]
call fcn.1400c88d8
test rax, rax
je 0x14002d1b3
sub rax, rbx
sar rax, 1
jmp 0x14002d1b5
mov eax, esi
sub eax, edi
mov r9d, eax
mov r8d, edi
lea rdx, [rbp + 0x210]
lea rcx, [rbp]
call fcn.14000f550
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140002340
nop
mov rdx, qword [rbp + 0x210]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d1f6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x10]
cmp dword [rbx - 0x10], 0
jl 0x14002d596
lea rdx, str.http
mov rcx, rbx
call fcn.1400c88d8
test rax, rax
je 0x14002d596
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x14002d596
mov r8d, dword [rbx - 0x10]
sub r8d, eax
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x10]
call fcn.140019970
nop
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140002340
nop
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d26b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp + 0x200]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x200], eax
xor ebx, ebx
mov qword [rbp + 0x208], rbx
mov byte [rbp + 0x1f8], 1
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x10]
call fcn.140035a90
mov rcx, rax
lea rdx, [rbp + 0x1f8]
call fcn.140035100
nop
lea rcx, [rbp + 0x1f8]
call fcn.140035050
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x4d8]
call fcn.14001f310
nop
mov rdx, rax
lea rcx, [rbp + 0x278]
call fcn.140034e30
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x10]
call fcn.140035a90
mov rcx, rax
lea rdx, [rbp + 0x278]
call fcn.140035100
nop
lea rcx, [rbp + 0x278]
call fcn.140035050
nop
cmp qword [rbp + 0x4f0], 0x10
jb 0x14002d320
mov rcx, qword [rbp + 0x4d8]
call fcn.1400c7bc0
mov qword [rbp + 0x4f0], 0xf
mov qword [rbp + 0x4e8], rbx
mov byte [rbp + 0x4d8], 0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x4f8]
call fcn.14001f310
nop
mov rdx, rax
lea rcx, [rbp + 0x328]
call fcn.140034e30
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x10]
call fcn.140035a90
mov rcx, rax
lea rdx, [rbp + 0x328]
call fcn.140035100
nop
lea rcx, [rbp + 0x328]
call fcn.140035050
nop
cmp qword [rbp + 0x510], 0x10
jb 0x14002d39d
mov rcx, qword [rbp + 0x4f8]
call fcn.1400c7bc0
mov qword [rbp + 0x510], 0xf
mov qword [rbp + 0x508], rbx
mov byte [rbp + 0x4f8], 0
mov rcx, qword [rsp + 0x50]
mov edx, r13d
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x14002d3d9
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1400024c0
mov rcx, qword [rsp + 0x50]
call fcn.1400c8cb4
mov ecx, dword [rbp + 0x220]
and ecx, 0xffffff01
or ecx, 1
mov dword [rbp + 0x220], ecx
mov qword [rbp + 0x228], rbx
mov dword [rbp + 0x218], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x10]
call fcn.140035a90
mov rcx, rax
lea rdx, [rbp + 0x218]
call fcn.140035100
nop
lea rcx, [rbp + 0x218]
call fcn.140035050
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.140034ef0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d456
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d46f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x10]
call fcn.140035050
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d492
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d4ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d4c5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d4df
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d4f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d512
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d52b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d544
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d55d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d577
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d591
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.140034ef0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d5c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d5d9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x10]
call fcn.140035050
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d5fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d616
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d62f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d649
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d663
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d67c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d695
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d6ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d6c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d6e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d6fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.140034ef0
mov dword [rsp + 0x44], r13d
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d726
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d73f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x10]
call fcn.140035050
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d762
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d77c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d795
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d7af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d7c9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d7e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d7fb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d814
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d82d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d847
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d861
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002e549
mov rax, rdi
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rdi
xor ebx, ebx
mov qword [rbp - 0x38], rbx
mov dword [rbp - 0x18], ebx
nop word [rax + rax]
sub rdi, rax
lea rdx, [rdi + 0x400]
lea rcx, [rbp - 0x48]
call fcn.14002e780
mov dword [rbp - 0x18], ebx
mov rbx, qword [rbp - 0x48]
add rbx, rdi
call fcn.140026d20
mov rcx, rax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r14
call fcn.14003c680
test eax, eax
je 0x14002e21b
mov edx, dword [rbp - 0x18]
add rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.14002e780
cmp dword [rbp - 0x18], 0
je 0x14002d8e2
mov rdi, qword [rbp - 0x40]
mov rax, qword [rbp - 0x48]
xor ebx, ebx
jmp 0x14002d880
mov byte [rbp + 0xbe0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xbe1]
call fcn.1400cd020
mov dword [rbp + 0xa0], 0x400
xor esi, esi
mov ebx, esi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002d966
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
call fcn.140027e10
test al, al
jne 0x14002d966
mov r8d, esi
mov eax, dword [0x1401b4d80]
test eax, eax
je 0x14002d95f
nop word [rax + rax]
mov ecx, eax
and ecx, 1
add r8d, ecx
cdq
sub eax, edx
sar eax, 1
jne 0x14002d950
mov dword [0x1401b4d80], r8d
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0xa0]
lea r8, [rbp + 0xbe0]
mov edx, 0x1d
mov rcx, r14
call rbx
test eax, eax
je 0x14002dbaf
lea rdx, [rbp + 0xbe0]
lea rcx, [rbp + 0x78]
call fcn.140027b50
nop
lea rdx, str.gzip
lea rcx, [rbp + 0x78]
call fcn.140019cd0
test al, al
je 0x14002dba6
mov eax, dword [0x1401b4d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
and ecx, 0x8000000f
jge 0x14002d9d1
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 0xa
jne 0x14002da5c
mov word [rbp + 0xff0], si
xor edx, edx
mov r8d, 0x1e460
lea rcx, [rbp + 0xff2]
call fcn.1400cd020
mov r10, rsi
mov r9, rsi
nop dword [rax + rax]
mov r8, rsi
test r10, r10
je 0x14002da30
test r8, r8
je 0x14002da30
lea rdx, [r8 + r9]
lea rax, [r8 + r9]
movzx ecx, word [rbp + rax*2 + 0xdfe]
inc cx
add cx, word [rbp + rdx*2 + 0xfee]
mov word [rbp + rdx*2 + 0xff0], cx
inc r8
cmp r8, 0xf9
jl 0x14002da03
inc r10
add r9, 0xf9
cmp r9, 0xf231
jl 0x14002da00
movsx eax, word [rbp + 0x1f450]
mov dword [0x1401b4d80], eax
lea rcx, [rbp + 0x230]
call fcn.140019d10
nop
lea rcx, [rbp - 0x48]
call fcn.14002e880
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002e890
mov rcx, rax
lea r8, [rbp + 0x230]
mov rdx, rbx
call fcn.140027e50
test eax, eax
jne 0x14002db88
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002dab4
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x1c0]
call fcn.140003320
nop
mov rdx, rax
mov rcx, r12
call fcn.1400284c0
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x1c0]
call fcn.1400022c0
nop
lea rcx, [rbp + 0x230]
call fcn.140027ba0
nop
lea rcx, [rbp + 0x78]
call fcn.1400022c0
nop
lea rcx, [rbp - 0x48]
call fcn.140027ba0
nop
lea rcx, [rbp - 0x50]
call fcn.1400022c0
nop
lea rcx, [rsp + 0x50]
call fcn.1400022c0
nop
lea rcx, [rbp - 0x60]
call fcn.1400022c0
nop
lea rcx, [rsp + 0x70]
call fcn.1400022c0
nop
lea rcx, [rsp + 0x58]
call fcn.1400022c0
nop
lea rcx, [rbp - 0x80]
call fcn.1400022c0
nop
lea rcx, [rbp - 0x68]
call fcn.1400022c0
nop
lea rcx, [rbp - 0x70]
call fcn.1400022c0
nop
lea rcx, [rbp - 0x78]
call fcn.1400022c0
nop
lea rcx, [rsp + 0x60]
call fcn.1400022c0
nop
lea rcx, [rsp + 0x78]
call fcn.1400022c0
nop
lea rcx, [rsp + 0x68]
call fcn.1400022c0
jmp 0x14002e562
lea rdx, [rbp + 0x230]
lea rcx, [rbp - 0x48]
call fcn.14002e660
nop
lea rcx, [rbp + 0x230]
call fcn.140027ba0
nop
lea rcx, [rbp + 0x78]
call fcn.1400022c0
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002dbc9
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
xor dil, dil
lea rdx, [0x140141b30]
mov rcx, r15
call fcn.140035c90
mov rcx, rax
call fcn.140036160
test al, al
je 0x14002dc73
lea rax, [rbp + 0x498]
mov qword [rbp + 8], rax
lea rdx, [0x140141b30]
mov rcx, r15
call fcn.140035c90
mov rcx, rax
call fcn.1400032d0
mov rdx, rax
lea rcx, [rbp + 0x498]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.14001f270
nop
lea rdx, str.base64
lea rcx, [rbp + 0x90]
call fcn.140019cd0
test al, al
je 0x14002dc4a
mov bl, 1
jmp 0x14002dc67
lea rdx, str.binary
lea rcx, [rbp + 0x90]
call fcn.140019cd0
movzx edi, dil
test al, al
cmovne edi, r13d
lea rcx, [rbp + 0x90]
call fcn.1400022c0
lea rcx, [rbp - 0x20]
call fcn.1400021e0
nop
test bl, bl
je 0x14002dd32
lea rcx, [rbp - 0x48]
call fcn.14002e880
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002e890
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x120]
call fcn.14001f040
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140002300
nop
lea rcx, [rbp + 0x120]
call fcn.1400022c0
lea rcx, [rbp + 0x128]
call fcn.140026120
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140019c90
movzx ebx, al
lea rcx, [rbp + 0x128]
call fcn.1400022c0
test bl, bl
je 0x14002de3e
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x138]
call fcn.140003320
nop
mov rdx, rax
mov rcx, r12
call fcn.1400284c0
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x138]
call fcn.1400022c0
nop
lea rcx, [rbp - 0x20]
jmp 0x14002daf6
test dil, dil
jne 0x14002de3e
lea rcx, [rbp - 0x48]
call fcn.14002e880
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x48]
call fcn.14002e890
cmp byte [rax], dil
je 0x14002dd75
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x48]
call fcn.14002e780
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.14002e890
mov byte [rax], dil
lea rcx, [rbp - 0x48]
call fcn.14002e880
cmp rax, 3
jbe 0x14002de0a
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002e890
cmp byte [rax], 0xef
jne 0x14002de0a
mov rdx, r13
lea rcx, [rbp - 0x48]
call fcn.14002e890
cmp byte [rax], 0xbb
jne 0x14002de0a
mov edx, 2
lea rcx, [rbp - 0x48]
call fcn.14002e890
cmp byte [rax], 0xbf
jne 0x14002de0a
lea rdx, [rbp + 0x2c8]
lea rcx, [rbp - 0x48]
call fcn.14002e770
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x2e8]
call fcn.14002e930
mov rbx, qword [rax]
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp - 0x48]
call fcn.14002e770
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x48]
call fcn.14002e8a0
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002e890
mov rdx, rax
lea rcx, [rbp + 0x148]
call fcn.140003320
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140002300
nop
lea rcx, [rbp + 0x148]
call fcn.1400022c0
xor bl, bl
lea rdx, str.outputFile
mov rcx, r15
call fcn.140035c90
mov rcx, rax
call fcn.140036160
test al, al
je 0x14002df62
lea rax, [rbp + 0x398]
mov qword [rbp + 0xc8], rax
lea rdx, str.outputFile
mov rcx, r15
call fcn.140035c90
mov rcx, rax
call fcn.1400032d0
mov rdx, rax
lea rcx, [rbp + 0x398]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.14001f270
nop
lea rcx, [rbp + 0x30]
call fcn.14000eb30
test al, al
jne 0x14002df59
test dil, dil
je 0x14002df25
mov qword [rbp + 0x88], rsi
lea rcx, [rbp + 0x30]
call fcn.1400032d0
mov rdx, rax
lea r8, [0x140141e8c]
lea rcx, [rbp + 0x88]
call fcn.1400ca950
test eax, eax
jne 0x14002df59
mov rdi, qword [rbp + 0x88]
test rdi, rdi
je 0x14002df59
lea rcx, [rbp - 0x48]
call fcn.14002e880
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002e890
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, r13
call fcn.1400cad84
mov rcx, qword [rbp + 0x88]
call fcn.1400c9be0
mov bl, 1
jmp 0x14002df59
lea rax, [rbp + 0x158]
mov qword [rbp + 0xc8], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x158]
call fcn.1400032e0
nop
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.140027460
movzx ebx, bl
test al, al
cmovne ebx, r13d
lea rcx, [rbp + 0x30]
call fcn.1400022c0
xor edx, edx
lea rcx, [rbp + 0xd0]
call fcn.140034ce0
nop
mov dl, 1
lea rcx, [rbp + 0x290]
call fcn.140034ed0
nop
lea rdx, str.result
lea rcx, [rbp + 0xd0]
call fcn.140035a80
mov rcx, rax
lea rdx, [rbp + 0x290]
call fcn.140035100
nop
lea rcx, [rbp + 0x290]
call fcn.140035050
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.1400253d0
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x518]
call fcn.14001f310
nop
mov rdx, rax
lea rcx, [rbp + 0x2b0]
call fcn.140034e30
nop
lea rdx, str.content
lea rcx, [rbp + 0xd0]
call fcn.140035a80
mov rcx, rax
lea rdx, [rbp + 0x2b0]
call fcn.140035100
nop
lea rcx, [rbp + 0x2b0]
call fcn.140035050
nop
lea rcx, [rbp + 0x518]
call fcn.1400013b0
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x5b8]
call fcn.14001f310
nop
mov rdx, rax
lea rcx, [rbp + 0x2d0]
call fcn.140034e30
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xd0]
call fcn.140035a80
mov rcx, rax
lea rdx, str.headers
call fcn.140035a80
mov rcx, rax
lea rdx, [rbp + 0x2d0]
call fcn.140035100
nop
lea rcx, [rbp + 0x2d0]
call fcn.140035050
nop
lea rcx, [rbp + 0x5b8]
call fcn.1400013b0
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x578]
call fcn.14001f310
nop
mov rdx, rax
lea rcx, [rbp + 0x2f0]
call fcn.140034e30
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xd0]
call fcn.140035a80
mov rcx, rax
lea rdx, str.httpCode
call fcn.140035a80
mov rcx, rax
lea rdx, [rbp + 0x2f0]
call fcn.140035100
nop
lea rcx, [rbp + 0x2f0]
call fcn.140035050
nop
lea rcx, [rbp + 0x578]
call fcn.1400013b0
lea rdx, str.empty
lea rcx, [rbp + 0x538]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x310]
call fcn.140034e30
nop
lea rdx, str.noData
lea rcx, [rbp + 0xd0]
call fcn.140035a80
mov rcx, rax
lea rdx, [rbp + 0x310]
call fcn.140035100
nop
lea rcx, [rbp + 0x310]
call fcn.140035050
nop
lea rcx, [rbp + 0x538]
call fcn.1400013b0
lea rdx, str.outputFile
mov rcx, r15
call fcn.140035c90
mov rcx, rax
call fcn.140036160
test al, al
je 0x14002e1f1
movzx edx, bl
lea rcx, [rbp + 0x340]
call fcn.140034ed0
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x598]
call fcn.140001370
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x558]
call fcn.14002e9e0
nop
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.140035da0
mov rcx, rax
lea rdx, [rbp + 0x340]
call fcn.140035100
nop
lea rcx, [rbp + 0x558]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x598]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x340]
call fcn.140035050
lea rdx, [rbp + 0xd0]
mov rcx, r12
call fcn.140034ef0
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0xd0]
call fcn.140035050
nop
lea rcx, [rbp - 0x20]
jmp 0x14002daf6
mov r9d, dword [0x1401b4d80]
lea ecx, [r9 + 1]
imul ecx, r9d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
xor r15d, r15d
cmp ecx, 8
jne 0x14002e2d4
mov r14d, r15d
lea rdi, [rbp + 0x670]
nop dword [rax]
mov r10d, r15d
nop word [rax + rax]
lea ebx, [r10 + 1]
lea ecx, [r14 + 1]
mov eax, r9d
cdq
idiv ecx
mov r8d, edx
mov ecx, r9d
sub ecx, r14d
imul r8d, ecx
mov eax, r9d
cdq
idiv ebx
add r8d, eax
sub r8d, r10d
mov dword [rdi], r8d
mov edx, r8d
lea rcx, [0x140140c00]
call fcn.1400c8aec
mov r10d, ebx
add rdi, 4
cmp ebx, 2
jge 0x14002e2be
mov r9d, dword [0x1401b4d80]
jmp 0x14002e270
inc r14d
cmp r14d, 0xb
jge 0x14002e2d0
mov r9d, dword [0x1401b4d80]
jmp 0x14002e260
mov r14, qword [rbp - 0x30]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002e2ee
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0x48]
call fcn.140003320
nop
mov rdx, rax
mov rcx, r12
call fcn.1400284c0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e328
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14002e342
call fcn.1400c7bc0
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e35b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e375
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e38e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e3a8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002db3b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002db3b
mov ecx, 0x80004005
call fcn.140001920
nop
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002e3f0
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rax, [rbp + 0x5e8]
mov qword [rbp + 0x5e0], rax
mov r8d, 3
mov rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x5e0]
call fcn.14001a030
nop
mov rcx, qword [rbp + 0x5e0]
call fcn.1400c8d68
mov edx, eax
mov rcx, r12
call fcn.140028710
mov dword [rsp + 0x44], r13d
lea rax, [rbp + 0x5e8]
mov rcx, qword [rbp + 0x5e0]
cmp rcx, rax
je 0x14002e44a
call fcn.1400c85cc
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e464
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e47d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e497
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e4b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e4ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e4e3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e4fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e515
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e52f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e549
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002e562
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, r12
mov rcx, qword [rbp + 0x1f460]
xor rcx, rsp
call fcn.1400c7be0
movaps xmm6, xmmword [rsp + 0x1f570]
add rsp, 0x1f588
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret