Function at 0x140022028
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xec8]
sub rsp, 0xfc8
mov qword [rbp + 0x3b0], 0xfffffffffffffffe
mov rax, qword [0x140184e90]
xor rax, rsp
mov qword [rbp + 0xeb0], rax
mov r15, r9
mov qword [rbp - 0x10], r8
mov r13, rdx
mov r14, rcx
mov qword [rbp + 0x478], rcx
xor esi, esi
mov dword [rsp + 0x44], esi
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x38], rax
lea rdx, [0x14011ec4c]
mov rcx, r15
call fcn.14002abf4
or r12, 0xffffffffffffffff
cmp byte [rax + 8], 4
jne 0x140022150
lea rax, [rbp + 0x2e0]
mov qword [rbp + 0xb0], rax
lea rdx, [0x14011ec4c]
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x2f8], 0xf
mov qword [rbp + 0x2f0], rsi
mov byte [rbp + 0x2e0], sil
cmp byte [rdx], sil
jne 0x1400220f3
mov r8d, esi
jmp 0x1400220ff
mov r8, r12
inc r8
cmp byte [rdx + r8], sil
jne 0x1400220f6
lea rcx, [rbp + 0x2e0]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp + 0x188]
call fcn.14001a528
nop
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x140022150
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [rbp + 0x38]
call fcn.14001e020
mov rbx, qword [rbp + 0x38]
cmp dword [rbx - 0x10], esi
jl 0x140022176
lea rdx, str.file:__
mov rcx, rbx
call fcn.1400b1a54
test rax, rax
jne 0x14002217b
mov eax, r12d
jmp 0x140022181
sub rax, rbx
sar rax, 1
test eax, eax
sete dil
lea rdx, [rbx - 0x18]
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x1400221a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test dil, dil
je 0x1400221fd
lea rdx, str.this_module_doesnt_support_file_request
lea rcx, [rbp + 0x190]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov esi, 1
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
mov ecx, r12d
lock xadd dword [rdx + 0x10], ecx
add ecx, r12d
test ecx, ecx
jg 0x1400255af
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x1400255af
test r13, r13
jne 0x140022244
lea rdx, str.InternetOpen_Failed
lea rcx, [rbp + 0x1a0]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
lea esi, [r13 + 1]
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
jmp 0x1400255a2
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov dword [rbp - 0x1c], esi
lea rax, [rbp + 0x350]
mov qword [rsp + 0x78], rax
lea rdx, [0x14011ec4c]
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x368], 0xf
mov qword [rbp + 0x360], rsi
mov byte [rbp + 0x350], sil
cmp byte [rdx], sil
jne 0x1400222bc
mov r8, rsi
jmp 0x1400222c8
mov r8, r12
inc r8
cmp byte [rdx + r8], sil
jne 0x1400222bf
lea rcx, [rbp + 0x350]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x350]
lea rcx, [rsp + 0x60]
call fcn.14001a528
nop
lea r9, [rbp - 0x1c]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.1400210cc
movzx eax, al
test eax, eax
jne 0x1400223a4
lea rdx, str.InternetCrackUrl_Failed
lea rcx, [rbp + 0x1b0]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov esi, 1
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x140022356
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x140022378
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x14002239a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
jmp 0x140022230
mov byte [rsp + 0x41], sil
lea rbx, str.redirectCheck
mov rdx, rbx
mov rcx, r15
call fcn.14002abf4
lea rcx, [0x14018d368]
cmp rax, rcx
je 0x1400223ef
mov rdx, rbx
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 5
jne 0x1400223ef
mov rdx, rbx
mov rcx, r15
call fcn.14002abf4
mov rcx, rax
call fcn.14002a780
mov byte [rsp + 0x41], al
mov r12b, sil
mov edi, 0x50
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x458]
call fcn.140002948
mov rbx, rax
mov qword [rsp + 0x78], rax
mov rcx, rax
call fcn.14001e020
mov rcx, qword [rbx]
lea esi, [rdi - 0x4f]
xor eax, eax
cmp dword [rcx - 0x10], eax
jl 0x140022448
lea rdx, str.https:__
call fcn.1400b1a54
test rax, rax
je 0x140022448
sub rax, qword [rbx]
sar rax, 1
test eax, eax
jne 0x140022448
mov r12b, sil
mov edi, 0x1bb
mov rdx, qword [rbx]
sub rdx, 0x18
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002245f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.port
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], sil
jne 0x140022494
lea rdx, str.port
mov rcx, r15
call fcn.14002abf4
mov rcx, rax
call fcn.14002a474
mov ebx, eax
mov dword [rbp - 0x1c], eax
xor eax, eax
jmp 0x1400224a1
mov ebx, dword [rbp - 0x1c]
xor eax, eax
test ebx, ebx
cmove ebx, edi
mov dword [rbp - 0x1c], ebx
mov byte [rsp + 0x40], al
mov r8d, ebx
lea rdx, [rsp + 0x58]
mov rcx, qword [rbp - 0x10]
call fcn.140021220
mov rdi, rax
mov qword [rbp - 0x10], rax
xor ecx, ecx
test rax, rax
jne 0x14002263e
mov rax, qword [0x14018d808]
test rax, rax
jne 0x140022562
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
mov edx, dword [0x14018cd80]
lea r8d, [rdx + 2]
lea ecx, [rdx + 1]
imul r8d, ecx
imul r8d, edx
mov eax, 0x2aaaaaab
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [rdx + rdx*2]
add eax, eax
sub r8d, eax
cmp r8d, 5
jne 0x14002252b
lea ecx, [r8 - 1]
call fcn.1400b1450
mov ecx, dword [0x14018cd80]
mov dword [rax], ecx
xor ecx, ecx
test rdi, rdi
je 0x14002254d
lea rdx, str.InternetConnectW
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14018d808], rax
xor ecx, ecx
jmp 0x140022554
mov rax, qword [0x14018d808]
test rax, rax
jne 0x140022562
mov rdi, rcx
mov qword [rbp - 0x10], rcx
jmp 0x140022590
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rcx
xor r9d, r9d
movzx r8d, bx
mov rdx, qword [rsp + 0x58]
mov rcx, r13
call rax
mov rdi, rax
mov qword [rbp - 0x10], rax
test rdi, rdi
jne 0x140022639
lea rdx, str.InternetConnect_Failed
lea rcx, [rbp + 0x1c0]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1c0]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400225e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022602
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022622
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
jmp 0x1400255a2
mov byte [rsp + 0x40], sil
mov ebx, 0x80400200
mov eax, 0x80600200
mov r13b, byte [rsp + 0x41]
test r13b, r13b
cmovne ebx, eax
or ebx, 0xc000
test r12b, r12b
je 0x140022664
or ebx, 0x803080
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x58], rax
lea rdx, [0x14011ec88]
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 4
jne 0x14002273a
lea rax, [rbp + 0x280]
mov qword [rsp + 0x78], rax
lea rdx, [0x14011ec88]
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x298], 0xf
xor eax, eax
mov qword [rbp + 0x290], rax
mov byte [rbp + 0x280], al
or r12, 0xffffffffffffffff
cmp byte [rdx], al
jne 0x1400226db
mov r8d, eax
jmp 0x1400226e7
mov r8, r12
inc r8
cmp byte [rdx + r8], al
jne 0x1400226de
lea rcx, [rbp + 0x280]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0x1d0]
call fcn.14001a528
nop
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0x1d0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x14002273e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002273e
or r12, 0xffffffffffffffff
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, [0x14011ee28]
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 4
jne 0x14002280e
lea rax, [rbp + 0x240]
mov qword [rsp + 0x78], rax
lea rdx, [0x14011ee28]
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x258], 0xf
xor eax, eax
mov qword [rbp + 0x250], rax
mov byte [rbp + 0x240], al
cmp byte [rdx], al
jne 0x1400227b1
mov r8d, eax
jmp 0x1400227bd
mov r8, r12
inc r8
cmp byte [rdx + r8], al
jne 0x1400227b4
lea rcx, [rbp + 0x240]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x240]
lea rcx, [rbp + 0xd8]
call fcn.14001a528
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x14002280e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.referer
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 4
jne 0x1400228de
lea rax, [rbp + 0x260]
mov qword [rsp + 0x78], rax
lea rdx, str.referer
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x278], 0xf
xor eax, eax
mov qword [rbp + 0x270], rax
mov byte [rbp + 0x260], al
cmp byte [rdx], al
jne 0x140022881
mov r8d, eax
jmp 0x14002288d
mov r8, r12
inc r8
cmp byte [rdx + r8], al
jne 0x140022884
lea rcx, [rbp + 0x260]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0xe8]
call fcn.14001a528
nop
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0xe8]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x1400228de
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdx, str.acceptTypes
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 4
jne 0x1400229ae
lea rax, [rbp + 0x2c0]
mov qword [rsp + 0x78], rax
lea rdx, str.acceptTypes
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x2d8], 0xf
xor eax, eax
mov qword [rbp + 0x2d0], rax
mov byte [rbp + 0x2c0], al
cmp byte [rdx], al
jne 0x140022951
mov r8d, eax
jmp 0x14002295d
mov r8, r12
inc r8
cmp byte [rdx + r8], al
jne 0x140022954
lea rcx, [rbp + 0x2c0]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0xe0]
call fcn.14001a528
nop
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
mov eax, r12d
lock xadd dword [rdx + 0x10], eax
add eax, r12d
test eax, eax
jg 0x1400229ae
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x60]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rdx, rdx
and rdx, rax
mov qword [rbp + 0x320], rdx
xor eax, eax
mov qword [rbp + 0x328], rax
mov rax, qword [rbp - 0x78]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r8, r8
and r8, rax
mov rax, qword [rbp - 0x68]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r9, r9
and r9, rax
mov rax, qword [rbp - 0x58]
mov ecx, dword [rax - 0x10]
neg ecx
sbb rdx, rdx
and rdx, rax
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], ebx
lea rax, [rbp + 0x320]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
mov r8, qword [rsp + 0x68]
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov r12, rax
xor ebx, ebx
test rax, rax
jne 0x140022b96
mov ecx, dword [0x14018cd80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 9
jne 0x140022a8c
xor edi, edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
lea rdx, str.HttpOpenRequest_Failed
lea rcx, [rbp + 0x1e0]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1e0]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022ad5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022af4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022b13
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022b32
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022b51
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022b71
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022b91
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140022622
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x14011ee30]
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 4
jne 0x140022d47
lea rdx, [0x14011ee68]
lea rcx, [rbp + 0x90]
call fcn.140001cb0
nop
lea rax, [rbp + 0x300]
mov qword [rsp + 0x78], rax
lea rdx, [0x14011ee30]
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x318], 0xf
mov qword [rbp + 0x310], rbx
mov byte [rbp + 0x300], bl
cmp byte [rdx], bl
jne 0x140022c1c
mov r8, rbx
jmp 0x140022c29
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], bl
jne 0x140022c20
lea rcx, [rbp + 0x300]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x300]
lea rcx, [rbp + 0x200]
call fcn.14001a528
mov rbx, rax
lea rdx, str.Content_Type:
lea rcx, [rbp + 0x110]
call fcn.1400029e4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.14001a818
nop
lea r8, [rbp + 0x90]
mov rdx, rax
lea rcx, [rbp + 0xf0]
call fcn.14001a818
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0xf0]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022cbe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1f0]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022ce0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x110]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022d02
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x200]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022d24
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022d4b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140022d4b
or rbx, 0xffffffffffffffff
lea rdx, str.additionalRequestHeaders
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 4
jne 0x140022edf
lea rax, [rbp + 0x330]
mov qword [rsp + 0x78], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x348], 0xf
xor r13d, r13d
mov qword [rbp + 0x340], r13
mov byte [rbp + 0x330], r13b
cmp byte [rdx], r13b
jne 0x140022da8
mov r8d, r13d
jmp 0x140022db4
mov r8, rbx
inc r8
cmp byte [rdx + r8], r13b
jne 0x140022dab
lea rcx, [rbp + 0x330]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x130]
call fcn.14001a528
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.14000d9c4
nop
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022e08
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x70]
lea rcx, [rbp]
call fcn.140002948
nop
mov r13, qword [rbp]
xor eax, eax
mov ebx, eax
cmp word [r13], ax
je 0x140022eb8
xor edi, edi
movzx ecx, word [r13]
call fcn.1400b3f50
test eax, eax
je 0x140022e44
test rbx, rbx
jne 0x140022e47
mov rbx, r13
jmp 0x140022e47
mov rbx, rdi
add r13, 2
cmp word [r13], di
jne 0x140022e2c
test rbx, rbx
mov rdi, qword [rbp - 0x10]
je 0x140022eb8
mov rax, qword [rbp]
sub rbx, rax
sar rbx, 1
xor r8d, r8d
test ebx, ebx
jns 0x140022e77
mov ecx, 0x80070057
call fcn.140001874
int3
mov edx, esi
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, ebx
or ecx, edx
jge 0x140022e97
mov edx, ebx
lea rcx, [rbp]
call fcn.140001f54
mov rax, qword [rbp]
xor r8d, r8d
cmp ebx, dword [rax - 0xc]
jg 0x140022ead
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rbp]
mov word [rax + rcx*2], r8w
jmp 0x140022eb8
mov ecx, 0x80070057
call fcn.140001874
nop
mov rdx, qword [rbp]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022eda
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r13b, byte [rsp + 0x41]
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.postData
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 4
jne 0x140022fad
lea rax, [rbp + 0x370]
mov qword [rsp + 0x78], rax
lea rdx, str.postData
mov rcx, r15
call fcn.14002abf4
mov rdx, qword [rax]
mov qword [rbp + 0x388], 0xf
xor eax, eax
mov qword [rbp + 0x380], rax
mov byte [rbp + 0x370], al
cmp byte [rdx], al
jne 0x140022f52
mov r8d, eax
jmp 0x140022f5e
mov r8, rbx
inc r8
cmp byte [rdx + r8], al
jne 0x140022f55
lea rcx, [rbp + 0x370]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x370]
lea rcx, [rbp + 0x210]
call fcn.14001a528
nop
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0x210]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140022fad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x80]
call fcn.140002948
nop
mov rax, qword [rbp - 0x70]
mov ecx, dword [rax - 0x10]
lea eax, [rcx + rcx]
mov dword [rsp + 0x78], eax
test r13b, r13b
je 0x140023003
mov dword [rbp + 8], 0x2710
mov r9d, 4
lea r8, [rbp + 8]
lea edx, [r9 + 2]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp + 8]
lea edx, [r9 + 1]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x70]
mov ecx, dword [rax - 0x10]
neg ecx
sbb r13, r13
and r13, rax
mov rcx, qword [rbp - 0x80]
mov edx, esi
sub edx, dword [rcx - 8]
mov ecx, dword [rcx - 0xc]
or ecx, edx
jge 0x140023033
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.140001f54
mov rax, qword [rsp + 0x70]
mov ebx, dword [rax - 0x10]
call fcn.14001fd2c
mov rcx, rax
mov eax, dword [rsp + 0x78]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp - 0x80]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8, r13
mov rdx, r12
call fcn.1400308fc
xor r13d, r13d
test eax, eax
jne 0x140023251
lea rcx, [rbp + 0x80]
call fcn.14001e5ec
nop
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x14002308e
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpSendRequest_Failed_with:
lea rcx, [rbp + 0x220]
call fcn.1400029e4
nop
lea r8, [rbp + 0x80]
mov rdx, rax
lea rcx, [rbp + 0x150]
call fcn.14001a818
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x150]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400230ee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x220]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023110
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023132
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023151
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023170
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023190
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400231af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400231ce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400231ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002320c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002322c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002324c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140022622
lea rdx, str.noResponse
mov rcx, r15
call fcn.14002abf4
cmp byte [rax + 8], 5
jne 0x140023488
lea rdx, str.noResponse
mov rcx, r15
call fcn.14002abf4
mov rcx, rax
call fcn.14002a780
test al, al
je 0x140023488
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x1400232a2
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor edx, edx
lea rcx, [rbp + 0x228]
call fcn.140029f98
nop
mov eax, dword [rbp + 0x100]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x100], eax
mov qword [rbp + 0x108], r13
mov byte [rbp + 0xf8], sil
lea rdx, str.result
lea rcx, [rbp + 0x228]
call fcn.14002aa80
mov rcx, rax
lea rdx, [rbp + 0xf8]
call fcn.14002a29c
nop
lea rcx, [rbp + 0xf8]
call fcn.14002a1f0
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x3f0]
call fcn.14002a010
nop
lea rdx, str.content
lea rcx, [rbp + 0x228]
call fcn.14002aa80
mov rcx, rax
lea rdx, [rbp + 0x3f0]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x3f0]
call fcn.14002a1f0
lea rdx, [rbp + 0x228]
mov rcx, r14
call fcn.14002a0b8
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x228]
call fcn.14002a1f0
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023388
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400233a7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400233c7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400233e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023405
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023424
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023443
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023463
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023483
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140022622
mov byte [rbp + 0x690], r13b
mov ebx, 0x400
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0x691]
call fcn.1400b60d0
mov dword [rbp + 0x48], ebx
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x14002363f
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x1400234d7
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x208]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x208]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023520
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002353f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002355e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002357e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002359d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400235bc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400235db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400235fa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002361a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002363a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140022622
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r12
test rax, rax
jne 0x1400237d9
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x140023671
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x168]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400236ba
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400236d9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400236f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023718
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023737
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023756
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023775
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023794
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400237b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400237d4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140022622
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x48]
lea r8, [rbp + 0x690]
mov edx, 0x13
call rax
test eax, eax
jne 0x140023979
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x140023811
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x1c8]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0x1c8]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002385a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023879
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023898
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400238b8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400238d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400238f6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023915
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023934
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023954
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140023974
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140022622
lea rdx, [rbp + 0x690]
lea rcx, [rsp + 0x50]
call fcn.1400207c4
nop
lea rdx, str.acceptedStatusCodes
mov rcx, r15
call fcn.14002abf4
mov r13, rax
mov al, byte [rax + 8]
xor r9d, r9d
test al, al
je 0x140023b9d
cmp al, 6
je 0x140023b9d
cmp al, 7
jne 0x140023b6d
mov ebx, r9d
mov dword [rsp + 0x78], ebx
mov rcx, r13
call fcn.14002a7f0
test eax, eax
jle 0x140025392
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x10], rax
mov r8d, ebx
lea rdx, [0x14011b228]
lea rcx, [rbp + 0x10]
call fcn.1400257b8
mov rdi, qword [rbp + 0x10]
mov rdx, rdi
mov rcx, r13
call fcn.14002abf4
mov rdx, rdi
mov rcx, r13
cmp byte [rax + 8], 4
jne 0x140023a67
lea rax, [rbp + 0x498]
mov qword [rbp + 0x70], rax
call fcn.14002abf4
mov rdx, qword [rax]
lea rcx, [rbp + 0x498]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.14001a528
nop
mov rdx, qword [rax]
lea rcx, [rsp + 0x50]
call fcn.140002c80
test eax, eax
sete bl
mov rdx, qword [rbp + 0x178]
jmp 0x140023af2
call fcn.14002abf4
cmp byte [rax + 8], sil
jne 0x140023b12
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1f8], rbx
mov rdx, rdi
mov rcx, r13
call fcn.14002abf4
mov rcx, rax
call fcn.14002a474
mov r8d, eax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0x88]
call fcn.14001a7a4
nop
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
dec eax
jg 0x140023ad5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, qword [rbp + 0x88]
lea rcx, [rsp + 0x50]
call fcn.140002c80
test eax, eax
sete bl
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140023b06
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x140023b4b
mov rdi, qword [rbp + 0x10]
mov ebx, dword [rsp + 0x78]
lea rdx, [rdi - 0x18]
or rdi, 0xffffffffffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140023b30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
add ebx, esi
mov dword [rsp + 0x78], ebx
mov rcx, r13
call fcn.14002a7f0
cmp ebx, eax
jge 0x140025396
jmp 0x1400239d2
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
xor r13d, r13d
dec eax
jg 0x140023b88
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140023b88
lea rdx, [0x14011eee8]
lea rcx, [rsp + 0x50]
call fcn.140002c80
xor r13d, r13d
test eax, eax
sete bl
jmp 0x140023b8c
mov rdi, qword [rbp - 0x10]
test bl, bl
jne 0x140023d99
or rdi, 0xffffffffffffffff
jmp 0x140025399
mov ebx, r9d
mov dword [rsp + 0x78], ebx
mov rcx, r13
call fcn.14002a7f0
test eax, eax
jle 0x140025392
mov edx, ebx
mov rcx, r13
call fcn.14002aa14
mov edx, ebx
mov rcx, r13
cmp byte [rax + 8], 4
jne 0x140023c99
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x70], rax
call fcn.14002aa14
mov rdx, qword [rax]
mov qword [rbp + 0x2b8], 0xf
xor eax, eax
mov qword [rbp + 0x2b0], rax
mov byte [rbp + 0x2a0], al
cmp byte [rdx], al
jne 0x140023c03
mov r8d, eax
jmp 0x140023c10
or r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], al
jne 0x140023c07
lea rcx, [rbp + 0x2a0]
call fcn.1400013c8
nop
lea rdx, [rbp + 0x2a0]
lea rcx, [rbp + 0xd0]
call fcn.14001a528
nop
mov rcx, qword [rax]
xor r8d, r8d
mov eax, r8d
test rcx, rcx
setne al
test eax, eax
je 0x140023d8b
mov rax, qword [rsp + 0x50]
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x140023c67
add rax, 2
test dx, dx
jne 0x140023c50
mov eax, r8d
jmp 0x140023c6b
sbb eax, eax
or eax, esi
test eax, eax
sete byte [rsp + 0x48]
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140023d69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
jmp 0x140023d69
call fcn.14002aa14
cmp byte [rax + 8], sil
jne 0x140023d70
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1d8], rbx
mov edx, dword [rsp + 0x78]
mov rcx, r13
call fcn.14002aa14
mov rcx, rax
call fcn.14002a474
mov r8d, eax
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x68]
call fcn.14001a7a4
nop
lea rdx, [rbx - 0x18]
or eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
xor r8d, r8d
dec eax
jg 0x140023d0b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
mov ecx, r8d
mov rax, qword [rbp + 0x68]
test rax, rax
setne cl
test ecx, ecx
je 0x140025387
mov rcx, qword [rsp + 0x50]
sub rax, rcx
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x140023d3f
add rcx, 2
test dx, dx
jne 0x140023d28
mov eax, r8d
jmp 0x140023d43
sbb eax, eax
or eax, esi
test eax, eax
sete byte [rsp + 0x48]
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140023d65
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
mov ebx, dword [rsp + 0x78]
cmp byte [rsp + 0x48], r8b
jne 0x140023d96
add ebx, esi
mov dword [rsp + 0x78], ebx
mov rcx, r13
call fcn.14002a7f0
cmp ebx, eax
jge 0x140025392
jmp 0x140023bb4
mov ecx, 0x80004005
call fcn.140001874
nop
xor r13d, r13d
mov dword [rbp - 8], r13d
lea r9, [rbp - 8]
mov rcx, r12
call fcn.140021f5c
lea rcx, [0x1401849a8]
mov rax, qword [0x1401849a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
mov eax, dword [rbp - 8]
test eax, eax
je 0x140023e6b
mov ecx, eax
call fcn.1400b0308
mov rbx, rax
test rax, rax
je 0x140023e6b
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x140023e1d
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140023e1d
mov qword [rsp + 0x20], r13
lea r9, [rbp - 8]
mov r8, rbx
mov edx, 0x16
mov rcx, r12
call rax
mov rdx, rbx
lea rcx, [rbp + 0x198]
call fcn.1400207c4
nop
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
or r13, 0xffffffffffffffff
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140023e61
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400b13b8
jmp 0x140023e6f
or r13, 0xffffffffffffffff
xor ecx, ecx
cmp byte [rsp + 0x41], cl
je 0x1400248dc
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140029f98
nop
mov r9d, dword [0x14018cd80]
lea r8d, [r9 + 1]
lea ecx, [r9 + 2]
imul ecx, r8d
imul ecx, r9d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0xf
cmove r9d, r8d
mov dword [0x14018cd80], r9d
lea rdx, [0x14011eee0]
lea rcx, [rsp + 0x50]
call fcn.140002c80
xor edi, edi
test eax, eax
je 0x1400240cd
lea rdx, [0x14011eef8]
lea rcx, [rsp + 0x50]
call fcn.140002c80
test eax, eax
je 0x1400240cd
lea rdx, [0x14011eef0]
lea rcx, [rsp + 0x50]
call fcn.140002c80
test eax, eax
je 0x1400240cd
lea rdx, [0x14011ef18]
lea rcx, [rsp + 0x50]
call fcn.140002c80
test eax, eax
je 0x1400240cd
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.14002a0b8
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x20]
call fcn.14002a1f0
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140023f66
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140023f88
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140023fa9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140023fca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140023fec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002400d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002402e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002404f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024070
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024092
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400240b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
jmp 0x1400255a2
lea rcx, [rbp - 0x30]
call fcn.140001c78
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x18]
call fcn.140002948
nop
lea rcx, [rbp - 0x18]
call fcn.14001e020
mov rcx, qword [rbp - 0x18]
cmp dword [rcx - 0x10], edi
jl 0x14002470c
lea rdx, str.location:
call fcn.1400b1a54
mov rbx, rax
test rax, rax
je 0x14002470c
sub rbx, qword [rbp - 0x18]
sar rbx, 1
cmp ebx, r13d
je 0x14002470c
mov r8d, ebx
lea rdx, [0x14011ee68]
lea rcx, [rbp - 0x18]
call fcn.14000ce7c
sub eax, ebx
mov r9d, eax
mov r8d, ebx
lea rdx, [rbp + 0x218]
lea rcx, [rbp - 0x18]
call fcn.14000cebc
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0x218]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002417f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
lea rdx, str.http
lea rcx, [rbp - 0x30]
call fcn.14000ce7c
mov ecx, eax
cmp eax, r13d
jne 0x14002436d
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.14002a0b8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400241ce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400241ef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.14002a1f0
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002421a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002423c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002425d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002427e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400242a0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400242c1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400242e2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024303
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024324
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024346
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024368
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400240b4
mov rax, qword [rbp - 0x30]
mov r8d, dword [rax - 0x10]
sub r8d, ecx
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp - 0x30]
call fcn.1400168f8
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140001d7c
nop
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400243b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp + 0x120]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x120], eax
mov qword [rbp + 0x128], rdi
mov byte [rbp + 0x118], sil
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x20]
call fcn.14002aa80
mov rcx, rax
lea rdx, [rbp + 0x118]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x118]
call fcn.14002a1f0
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x598]
call fcn.14001a5bc
nop
mov rdx, rax
lea rcx, [rbp + 0x410]
call fcn.14002a054
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x20]
call fcn.14002aa80
mov rcx, rax
lea rdx, [rbp + 0x410]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x410]
call fcn.14002a1f0
nop
xor r8d, r8d
mov dl, sil
lea rcx, [rbp + 0x598]
call fcn.14000136c
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x5d8]
call fcn.14001a5bc
nop
mov rdx, rax
lea rcx, [rbp + 0x440]
call fcn.14002a054
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x20]
call fcn.14002aa80
mov rcx, rax
lea rdx, [rbp + 0x440]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x440]
call fcn.14002a1f0
nop
xor r8d, r8d
mov dl, sil
lea rcx, [rbp + 0x5d8]
call fcn.14000136c
mov rcx, qword [rsp + 0x50]
mov edx, esi
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x1400244ea
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.140001f54
mov rcx, qword [rsp + 0x50]
call fcn.1400b1d64
mov ecx, dword [rbp + 0x140]
and ecx, 0xffffff01
or ecx, esi
mov dword [rbp + 0x140], ecx
mov qword [rbp + 0x148], rdi
mov dword [rbp + 0x138], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x20]
call fcn.14002aa80
mov rcx, rax
lea rdx, [rbp + 0x138]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x138]
call fcn.14002a1f0
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.14002a0b8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002456d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002458e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.14002a1f0
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400245b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400245db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400245fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002461d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002463f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024660
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024681
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400246a2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400246c3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400246e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024707
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400240b4
lea rdx, [rbp + 0x20]
mov rcx, r14
call fcn.14002a0b8
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002473d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002475e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.14002a1f0
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024789
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400247ab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400247cc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400247ed
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x14002480f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024830
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024851
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024872
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x140024893
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400248b5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, r13d
lock xadd dword [rdx + 0x10], eax
add eax, r13d
test eax, eax
jg 0x1400248d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x1400240b4
mov rax, rcx
mov qword [rbp - 0x48], rcx
mov r13, rcx
mov qword [rbp - 0x40], rcx
mov qword [rbp - 0x38], rcx
mov dword [rbp - 0x20], ecx
sub r13, rax
lea rdx, [r13 + 0x400]
lea rcx, [rbp - 0x48]
call fcn.140020840
xor eax, eax
mov dword [rbp - 0x20], eax
mov rbx, qword [rbp - 0x48]
add rbx, r13
call fcn.14001fd2c
mov rcx, rax
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r12
call fcn.140030258
test eax, eax
je 0x1400251aa
mov edx, dword [rbp - 0x20]
add rdx, r13
lea rcx, [rbp - 0x48]
call fcn.140020840
xor r13d, r13d
cmp dword [rbp - 0x20], r13d
je 0x140024956
mov r13, qword [rbp - 0x40]
mov rax, qword [rbp - 0x48]
jmp 0x1400248f1
mov byte [rbp + 0xaa0], r13b
mov ebx, 0x400
mov r8d, ebx
xor edx, edx
lea rcx, [rbp + 0xaa1]
call fcn.1400b60d0
mov dword [rbp + 0x60], ebx
mov rbx, r13
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002499e
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x60]
lea r8, [rbp + 0xaa0]
mov edx, 0x1d
mov rcx, r12
call rbx
test eax, eax
je 0x140024b77
lea rdx, [rbp + 0xaa0]
lea rcx, [rbp + 0x50]
call fcn.1400207c4
nop
mov ecx, dword [0x14018cd80]
lea edx, [rcx + 2]
lea eax, [rcx + 1]
imul edx, eax
imul edx, ecx
and edx, 0x8000000f
jge 0x1400249f2
sub edx, esi
or edx, 0xfffffff0
add edx, esi
cmp edx, esi
jne 0x140024a0b
mov edx, 0xe6
lea r8d, [rdx + 1]
lea rcx, str._d__d_n
call fcn.1400b15a4
lea rdx, str.gzip
lea rcx, [rbp + 0x50]
call fcn.140016c48
test al, al
je 0x140024b6e
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], r13
mov qword [rbp + 0xc8], r13
mov rbx, qword [rbp - 0x40]
sub rbx, qword [rbp - 0x48]
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.140025724
mov rcx, rax
lea r8, [rbp + 0xb8]
mov rdx, rbx
call fcn.1400209e0
test eax, eax
jne 0x140024b50
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x140024a7e
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x1e8]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x1e8]
call fcn.140001d4c
nop
lea rcx, [rbp + 0xb8]
call fcn.140020814
nop
lea rcx, [rbp + 0x50]
call fcn.140001d4c
nop
lea rcx, [rbp - 0x48]
call fcn.140020814
nop
lea rcx, [rbp - 0x50]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x50]
call fcn.140001d4c
nop
lea rcx, [rbp - 0x80]
call fcn.140001d4c
nop
lea rcx, [rbp - 0x70]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x70]
call fcn.140001d4c
nop
lea rcx, [rbp - 0x60]
call fcn.140001d4c
nop
lea rcx, [rbp - 0x78]
call fcn.140001d4c
nop
lea rcx, [rbp - 0x68]
call fcn.140001d4c
nop
lea rcx, [rbp - 0x58]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x60]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x68]
call fcn.140001d4c
nop
lea rcx, [rsp + 0x58]
call fcn.140001d4c
jmp 0x1400255af
lea rdx, [rbp + 0xb8]
lea rcx, [rbp - 0x48]
call fcn.1400255d8
nop
lea rcx, [rbp + 0xb8]
call fcn.140020814
nop
lea rcx, [rbp + 0x50]
call fcn.140001d4c
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x140024b90
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov bl, r13b
mov dil, r13b
lea rdx, [0x14011ec70]
mov rcx, r15
call fcn.14002abf4
mov rcx, rax
call fcn.14002af04
test al, al
je 0x140024c2b
lea rax, [rbp + 0x4d8]
mov qword [rbp + 0x70], rax
lea rdx, [0x14011ec70]
mov rcx, r15
call fcn.14002abf4
mov rcx, rax
call fcn.140002944
mov rdx, rax
lea rcx, [rbp + 0x4d8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.14001a528
nop
lea rdx, str.base64
lea rcx, [rbp + 0x58]
call fcn.140016c48
test al, al
je 0x140024c09
mov bl, sil
jmp 0x140024c22
lea rdx, str.binary
lea rcx, [rbp + 0x58]
call fcn.140016c48
movzx edi, dil
test al, al
cmovne edi, esi
lea rcx, [rbp + 0x58]
call fcn.140001d4c
lea rcx, [rbp - 0x28]
call fcn.140001c78
nop
test bl, bl
je 0x140024ce8
lea rcx, [rbp - 0x48]
call fcn.14002571c
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.140025724
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x1b8]
call fcn.14001a3dc
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140001d7c
nop
lea rcx, [rbp + 0x1b8]
call fcn.140001d4c
lea rcx, [rbp + 0x158]
call fcn.14001f458
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140016c08
mov bl, al
lea rcx, [rbp + 0x158]
call fcn.140001d4c
test bl, bl
je 0x140024ded
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x160]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x160]
call fcn.140001d4c
nop
lea rcx, [rbp - 0x28]
jmp 0x140024abf
test dil, dil
jne 0x140024ded
lea rcx, [rbp - 0x48]
call fcn.14002571c
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x48]
call fcn.140025724
cmp byte [rax], r13b
je 0x140024d2b
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x48]
call fcn.140020840
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.140025724
mov byte [rax], r13b
lea rcx, [rbp - 0x48]
call fcn.14002571c
cmp rax, 3
jbe 0x140024db9
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.140025724
cmp byte [rax], 0xef
jne 0x140024db9
mov rdx, rsi
lea rcx, [rbp - 0x48]
call fcn.140025724
cmp byte [rax], 0xbb
jne 0x140024db9
mov edx, 2
lea rcx, [rbp - 0x48]
call fcn.140025724
cmp byte [rax], 0xbf
jne 0x140024db9
lea rdx, [rbp + 0x390]
lea rcx, [rbp - 0x48]
call fcn.140025710
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x3d0]
call fcn.1400257a8
mov rbx, qword [rax]
lea rdx, [rbp + 0x408]
lea rcx, [rbp - 0x48]
call fcn.140025710
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0x78]
lea rcx, [rbp - 0x48]
call fcn.14002572c
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.140025724
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.1400029e4
nop
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140001d7c
nop
lea rcx, [rbp + 0x170]
call fcn.140001d4c
mov bl, r13b
lea r12, str.outputFile
mov rdx, r12
mov rcx, r15
call fcn.14002abf4
mov rcx, rax
call fcn.14002af04
test al, al
je 0x140024eff
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0x78], rax
mov rdx, r12
mov rcx, r15
call fcn.14002abf4
mov rcx, rax
call fcn.140002944
mov rdx, rax
lea rcx, [rbp + 0x4b8]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.14001a528
nop
lea rcx, [rbp + 0x18]
call fcn.14000c508
test al, al
jne 0x140024ef6
test dil, dil
je 0x140024ec6
mov qword [rbp + 0x40], r13
lea rcx, [rbp + 0x18]
call fcn.140002944
mov rdx, rax
lea r8, [0x14011efd0]
lea rcx, [rbp + 0x40]
call fcn.1400b3a00
test eax, eax
jne 0x140024ef6
mov rdi, qword [rbp + 0x40]
test rdi, rdi
je 0x140024ef6
lea rcx, [rbp - 0x48]
call fcn.14002571c
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.140025724
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, rsi
call fcn.1400b3e34
mov rcx, qword [rbp + 0x40]
call fcn.1400b2c90
mov bl, sil
jmp 0x140024ef6
lea rax, [rbp + 0x180]
mov qword [rbp + 0x78], rax
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x180]
call fcn.140002948
nop
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.140020184
movzx ebx, bl
test al, al
cmovne ebx, esi
lea rcx, [rbp + 0x18]
call fcn.140001d4c
xor edx, edx
lea rcx, [rbp + 0x98]
call fcn.140029f98
nop
mov dl, sil
lea rcx, [rbp + 0x460]
call fcn.14002a0a8
nop
lea rdx, str.result
lea rcx, [rbp + 0x98]
call fcn.14002aa78
mov rcx, rax
lea rdx, [rbp + 0x460]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x460]
call fcn.14002a1f0
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x28]
call fcn.14001ec4c
lea rdx, [rbp - 0x28]
lea rcx, [rbp + 0x558]
call fcn.14001a5bc
nop
mov rdx, rax
lea rcx, [rbp + 0x398]
call fcn.14002a054
nop
lea rdx, str.content
lea rcx, [rbp + 0x98]
call fcn.14002aa78
mov rcx, rax
lea rdx, [rbp + 0x398]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x398]
call fcn.14002a1f0
nop
lea rcx, [rbp + 0x558]
call fcn.14000133c
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x5b8]
call fcn.14001a5bc
nop
mov rdx, rax
lea rcx, [rbp + 0x480]
call fcn.14002a054
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0x98]
call fcn.14002aa78
mov rcx, rax
lea rdx, str.headers
call fcn.14002aa78
mov rcx, rax
lea rdx, [rbp + 0x480]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x480]
call fcn.14002a1f0
nop
lea rcx, [rbp + 0x5b8]
call fcn.14000133c
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x4f8]
call fcn.14001a5bc
nop
mov rdx, rax
lea rcx, [rbp + 0x3b8]
call fcn.14002a054
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0x98]
call fcn.14002aa78
mov rcx, rax
lea rdx, str.httpCode
call fcn.14002aa78
mov rcx, rax
lea rdx, [rbp + 0x3b8]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x3b8]
call fcn.14002a1f0
nop
lea rcx, [rbp + 0x4f8]
call fcn.14000133c
lea rdx, str.empty
lea rcx, [rbp + 0x518]
call fcn.1400012fc
nop
mov rdx, rax
lea rcx, [rbp + 0x428]
call fcn.14002a054
nop
lea rdx, str.noData
lea rcx, [rbp + 0x98]
call fcn.14002aa78
mov rcx, rax
lea rdx, [rbp + 0x428]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x428]
call fcn.14002a1f0
nop
lea rcx, [rbp + 0x518]
call fcn.14000133c
mov rdx, r12
mov rcx, r15
call fcn.14002abf4
mov rcx, rax
call fcn.14002af04
test al, al
je 0x140025186
mov dl, bl
lea rcx, [rbp + 0x3d8]
call fcn.14002a0a8
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x578]
call fcn.1400012fc
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x538]
call fcn.140025860
nop
mov rdx, rax
lea rcx, [rbp + 0x98]
call fcn.14002ac58
mov rcx, rax
lea rdx, [rbp + 0x3d8]
call fcn.14002a29c
nop
lea rcx, [rbp + 0x538]
call fcn.14000133c
nop
lea rcx, [rbp + 0x578]
call fcn.14000133c
nop
lea rcx, [rbp + 0x3d8]
call fcn.14002a1f0
lea rdx, [rbp + 0x98]
mov rcx, r14
call fcn.14002a0b8
mov dword [rsp + 0x44], esi
lea rcx, [rbp + 0x98]
call fcn.14002a1f0
jmp 0x140024cdf
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor r15d, r15d
cmp byte [rsp + 0x40], r15b
je 0x1400251c6
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0xb0]
call fcn.1400029e4
nop
mov rdx, rax
mov rcx, r14
call fcn.140020e1c
mov dword [rsp + 0x44], esi
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
or rbx, 0xffffffffffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x14002520f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x140025229
call fcn.1400b0c74
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140025248
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140025268
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140025287
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400252a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400252c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400252e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140025304
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140025323
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140025342
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140025362
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x140025382
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x140022622
mov ecx, 0x80004005
call fcn.140001874
nop
or rdi, 0xffffffffffffffff
xor r13d, r13d
mov r8d, dword [0x14018cd80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub ecx, edx
cmp ecx, 2
jne 0x1400253fb
mov r9d, r13d
mov edx, r9d
mov r10d, 8
mov ecx, edx
and ecx, esi
sub ecx, esi
not ecx
and ecx, r8d
mov eax, edx
sar eax, 1
mov edx, ecx
xor edx, eax
sub r10, rsi
jne 0x1400253cd
add r8d, edx
add r9d, esi
cmp r9d, 0x100
jl 0x1400253c4
mov dword [0x14018cd80], r8d
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], r13b
je 0x140025415
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rdx, qword [rsp + 0x50]
lea rcx, [rbp + 0x600]
call fcn.140016d58
nop
mov rcx, qword [rax]
call fcn.1400b1e18
mov edx, eax
mov rcx, r14
call fcn.140020f20
mov dword [rsp + 0x44], esi
lea rax, [rbp + 0x608]
mov rcx, qword [rbp + 0x600]
cmp rcx, rax
je 0x140025456
call fcn.1400b1748
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140025476
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140025495
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400254b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400254d4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400254f3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140025512
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140025531
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140025550
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140025570
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x140025590
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x1400255af
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, r14
mov rcx, qword [rbp + 0xeb0]
xor rcx, rsp
call fcn.1400b0c90
add rsp, 0xfc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret