Function at 0x140029bc0
Capabilities:
Link many functions at runtime
Send data
Send http request
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf08]
mov eax, 0x1008
call fcn.1400c78c0
sub rsp, rax
mov qword [rbp + 0x308], 0xfffffffffffffffe
mov rax, qword [0x1401a1e90]
xor rax, rsp
mov qword [rbp + 0xef0], rax
mov r13, r9
mov qword [rbp + 0xe0], r9
mov qword [rbp - 0x50], r8
mov r12, rdx
mov r15, rcx
mov qword [rbp + 0x3b0], rcx
xor edi, edi
mov dword [rsp + 0x44], edi
mov rcx, r9
call fcn.140027f80
lea rcx, [0x1401a19a8]
test al, al
mov rax, qword [0x1401a19a8]
je 0x140029cb7
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x28], rax
lea rdx, str.this_module_doesnt_support_file_request
test rdx, 0xffffffffffff0000
jne 0x140029c74
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140029c7e
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x28]
call fcn.140002750
jmp 0x140029c7e
lea rcx, [rbp + 0x28]
call fcn.1400032d0
nop
lea rdx, [rbp + 0x28]
mov rcx, r15
call fcn.1400277d0
mov r12d, 1
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cf49
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x14002cf49
call qword [rax + 0x18]
add rax, 0x18
test r12, r12
jne 0x140029d21
mov qword [rbp + 0x38], rax
lea rdx, str.InternetOpen_Failed
test rdx, 0xffffffffffff0000
jne 0x140029cf7
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140029d01
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.140002750
jmp 0x140029d01
lea rcx, [rbp + 0x38]
call fcn.1400032d0
nop
lea rdx, [rbp + 0x38]
mov rcx, r15
call fcn.1400277d0
mov r12d, 1
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x38]
jmp 0x14002cf35
mov qword [rsp + 0x60], rax
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
mov ebx, edi
lea rax, [rbp + 0x2a8]
mov qword [rbp + 0x70], rax
lea rdx, [0x1401371fc]
mov rcx, r13
call fcn.1400345c0
mov rdx, qword [rax]
mov qword [rbp + 0x2c0], 0xf
mov qword [rbp + 0x2b8], rdi
mov byte [rbp + 0x2a8], bl
or rsi, 0xffffffffffffffff
cmp byte [rdx], bl
jne 0x140029d83
mov r8, rdi
jmp 0x140029d8f
mov r8, rsi
inc r8
cmp byte [rdx + r8], bl
jne 0x140029d86
lea rcx, [rbp + 0x2a8]
call fcn.1400013f0
nop
lea rdx, [rbp + 0x2a8]
lea rcx, [rsp + 0x58]
call fcn.14001f080
nop
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [rbp + 0x228]
call fcn.1400c7c50
mov dword [rbp + 0x220], 0x68
mov ecx, 0x1000
call fcn.1400c1e58
mov qword [rbp + 0x238], rax
mov dword [rbp + 0x240], 0x800
mov ecx, 0x1000
call fcn.1400c1e58
mov qword [rbp + 0x268], rax
mov dword [rbp + 0x270], 0x800
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x140029e38
mov rcx, qword [rbp + 0x238]
call fcn.1400c2f38
mov qword [rbp + 0x238], rdi
mov rcx, qword [rbp + 0x268]
call fcn.1400c2f38
xor al, al
jmp 0x140029f2e
lea rdx, str.InternetCrackUrlW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140029e73
mov rcx, qword [rbp + 0x238]
call fcn.1400c2f38
mov qword [rbp + 0x238], rdi
mov rcx, qword [rbp + 0x268]
call fcn.1400c2f38
xor al, al
jmp 0x140029f2e
mov rcx, qword [rsp + 0x58]
lea r9, [rbp + 0x220]
xor r8d, r8d
mov edx, dword [rcx - 0x10]
call rax
test eax, eax
jne 0x140029eb1
mov rcx, qword [rbp + 0x238]
call fcn.1400c2f38
mov qword [rbp + 0x238], rdi
mov rcx, qword [rbp + 0x268]
call fcn.1400c2f38
xor al, al
jmp 0x140029f2e
mov rdx, qword [rbp + 0x238]
test rdx, rdx
jne 0x140029ec1
mov eax, edi
jmp 0x140029ece
mov rax, rsi
inc rax
cmp word [rdx + rax*2], 0
jne 0x140029ec4
mov r8d, eax
lea rcx, [rsp + 0x60]
call fcn.140002460
mov rdx, qword [rbp + 0x268]
test rdx, rdx
jne 0x140029eeb
mov eax, edi
jmp 0x140029efa
mov rax, rsi
nop
inc rax
cmp word [rdx + rax*2], 0
jne 0x140029ef0
mov r8d, eax
lea rcx, [rbp - 0x70]
call fcn.140002460
movzx ebx, word [rbp + 0x244]
mov rcx, qword [rbp + 0x238]
call fcn.1400c2f38
mov qword [rbp + 0x238], rdi
mov rcx, qword [rbp + 0x268]
call fcn.1400c2f38
mov al, 1
movzx eax, al
test eax, eax
jne 0x140029ff4
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
lea rdx, str.InternetCrackUrl_Failed
test rdx, 0xffffffffffff0000
jne 0x140029f82
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140029f8c
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140002750
jmp 0x140029f8c
lea rcx, [rbp + 0x50]
call fcn.1400032d0
nop
lea rdx, [rbp + 0x50]
mov rcx, r15
call fcn.1400277d0
mov r12d, 1
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140029fbc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140029fd6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140029fef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
mov byte [rsp + 0x41], 0
lea rdx, str.redirectCheck
mov rcx, r13
call fcn.1400345c0
lea rcx, [0x1401aa3b8]
cmp rax, rcx
je 0x14002a044
lea rdx, str.redirectCheck
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 5
jne 0x14002a044
lea rdx, str.redirectCheck
mov rcx, r13
call fcn.1400345c0
mov rcx, rax
call fcn.140033f70
mov byte [rsp + 0x41], al
xor r14b, r14b
mov edi, 0x50
lea rax, [rbp - 0x10]
mov qword [rbp + 0x70], rax
mov rcx, qword [rsp + 0x58]
add rcx, 0xffffffffffffffe8
call fcn.1400025b0
add rax, 0x18
mov qword [rbp - 0x10], rax
lea rax, [rbp - 0x10]
mov qword [rbp + 0x70], rax
lea rcx, [rbp - 0x10]
call fcn.1400238a0
mov eax, dword [0x1401a9d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x30c30c31
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x15
sub ecx, edx
cmp ecx, 4
jne 0x14002a0af
call fcn.1400c31d0
mov dword [0x1401a9d80], eax
mov rcx, qword [rbp - 0x10]
cmp dword [rcx - 0x10], 0
jl 0x14002a0dd
lea rdx, str.https:__
call fcn.1400c3664
test rax, rax
je 0x14002a0dd
sub rax, qword [rbp - 0x10]
sar rax, 1
test eax, eax
jne 0x14002a0dd
mov r14b, 1
mov edi, 0x1bb
mov rdx, qword [rbp - 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a0f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.port
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 1
jne 0x14002a125
lea rdx, str.port
mov rcx, r13
call fcn.1400345c0
mov rcx, rax
call fcn.140033bf0
mov ebx, eax
jmp 0x14002a12a
test ebx, ebx
cmove ebx, edi
mov byte [rsp + 0x40], 0
mov r8d, ebx
lea rdx, [rsp + 0x60]
mov rcx, qword [rbp - 0x50]
call fcn.140027e20
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14002a286
mov rax, qword [0x1401aa920]
test rax, rax
jne 0x14002a190
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002a184
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401aa920], rax
jmp 0x14002a18b
mov rax, qword [0x1401aa920]
test rax, rax
je 0x14002a1c6
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rcx
xor r9d, r9d
movzx r8d, bx
mov rdx, qword [rsp + 0x60]
mov rcx, r12
call rax
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14002a281
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x60], rax
lea rdx, str.InternetConnect_Failed
test rdx, 0xffffffffffff0000
jne 0x14002a20f
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002a219
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140002750
jmp 0x14002a219
lea rcx, [rbp + 0x60]
call fcn.1400032d0
nop
lea rdx, [rbp + 0x60]
mov rcx, r15
call fcn.1400277d0
mov r12d, 1
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a249
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a263
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a27c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
mov byte [rsp + 0x40], 1
mov edi, 0x80400200
mov eax, 0x80600200
cmp byte [rsp + 0x41], 0
cmovne edi, eax
or edi, 0xc000
test r14b, r14b
je 0x14002a2a9
or edi, 0x803080
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, [0x140137238]
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 4
jne 0x14002a386
lea rax, [rbp + 0x418]
mov qword [rbp - 0x50], rax
lea rdx, [0x140137238]
mov rcx, r13
call fcn.1400345c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x418]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1a8]
call fcn.14001f080
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a36b
cmp dword [rbx + 0x10], 0
jl 0x14002a35d
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a35d
call fcn.1400025b0
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a353
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x78], rax
jmp 0x14002a36b
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.140002460
nop
mov rdx, qword [rbp + 0x1a8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a386
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
lea rdx, [0x1401373b8]
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 4
jne 0x14002a467
lea rax, [rbp + 0x3d8]
mov qword [rbp - 0x50], rax
lea rdx, [0x1401373b8]
mov rcx, r13
call fcn.1400345c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x3d8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x158]
call fcn.14001f080
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x68]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a44c
cmp dword [rbx + 0x10], 0
jl 0x14002a43d
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a43d
call fcn.1400025b0
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a432
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rsp + 0x68], rax
jmp 0x14002a44c
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x68]
call fcn.140002460
nop
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a467
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.referer
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 4
jne 0x14002a548
lea rax, [rbp + 0x518]
mov qword [rbp - 0x50], rax
lea rdx, str.referer
mov rcx, r13
call fcn.1400345c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x518]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.14001f080
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a52d
cmp dword [rbx + 0x10], 0
jl 0x14002a51e
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a51e
call fcn.1400025b0
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a513
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rsp + 0x78], rax
jmp 0x14002a52d
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x78]
call fcn.140002460
nop
mov rdx, qword [rbp + 0x168]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a548
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, str.acceptTypes
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 4
jne 0x14002a629
lea rax, [rbp + 0x478]
mov qword [rbp - 0x50], rax
lea rdx, str.acceptTypes
mov rcx, r13
call fcn.1400345c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x478]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.14001f080
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a60e
cmp dword [rbx + 0x10], 0
jl 0x14002a5ff
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a5ff
call fcn.1400025b0
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a5f4
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rsp + 0x70], rax
jmp 0x14002a60e
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.140002460
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a629
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rsp + 0x70]
cmp dword [rax - 0x10], 0
mov ecx, 0
cmove rax, rcx
mov qword [rbp + 0x2c8], rax
mov qword [rbp + 0x2d0], rcx
mov rax, qword [rsp + 0x78]
cmp dword [rax - 0x10], ecx
cmove rax, rcx
mov r9, qword [rsp + 0x68]
cmp dword [r9 - 0x10], ecx
cmove r9, rcx
mov rdx, qword [rbp - 0x78]
cmp dword [rdx - 0x10], ecx
cmove rdx, rcx
mov r12d, 1
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x2c8]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r8, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov rdi, rax
mov qword [rbp - 0x50], rax
lea rcx, [0x1401a19a8]
test rax, rax
mov rax, qword [0x1401a19a8]
jne 0x14002a7c7
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
lea rdx, str.HttpOpenRequest_Failed
test rdx, 0xffffffffffff0000
jne 0x14002a6f4
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002a6fe
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.140002750
jmp 0x14002a6fe
lea rcx, [rbp + 0x58]
call fcn.1400032d0
nop
lea rdx, [rbp + 0x58]
mov rcx, r15
call fcn.1400277d0
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a728
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a742
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a75c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a776
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a78f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a7a9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a7c2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
lea rdx, [0x140137400]
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 4
jne 0x14002a99b
lea rdx, [0x1401373f8]
lea rcx, [rbp + 0xd8]
call fcn.1400022a0
nop
lea rax, [rbp + 0x4f8]
mov qword [rbp], rax
lea rdx, [0x140137400]
mov rcx, r13
call fcn.1400345c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x4f8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.14001f080
mov r14, rax
lea rcx, [0x1401a19a8]
mov rdx, qword [0x1401a19a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp + 0x48], rax
lea rdx, str.Content_Type:
test rdx, 0xffffffffffff0000
jne 0x14002a885
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002a88f
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140002750
jmp 0x14002a88f
lea rcx, [rbp + 0x48]
call fcn.1400032d0
nop
mov r8, r14
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x1a0]
call fcn.14001f390
nop
lea r8, [rbp + 0xd8]
mov rdx, rax
lea rcx, [rbp + 0x188]
call fcn.14001f390
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x50]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a913
cmp dword [rbx + 0x10], 0
jl 0x14002a904
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a904
call fcn.1400025b0
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a8f9
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x14002a913
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140002460
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a92f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a94b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a964
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a980
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xd8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a99b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.additionalRequestHeaders
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 4
jne 0x14002aa5c
lea rax, [rbp + 0x4b8]
mov qword [rbp], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r13
call fcn.1400345c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x4b8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1c0]
call fcn.14001f080
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.14000f520
nop
mov rdx, qword [rbp + 0x1c0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002aa1b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x50]
add rcx, 0xffffffffffffffe8
call fcn.1400025b0
add rax, 0x18
mov qword [rbp + 0x98], rax
lea rcx, [rbp + 0x98]
call fcn.14002cf70
nop
mov rdx, qword [rbp + 0x98]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002aa5c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, str.postData
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 4
jne 0x14002ab39
lea rax, [rbp + 0x438]
mov qword [rbp], rax
lea rdx, str.postData
mov rcx, r13
call fcn.1400345c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x438]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x210]
call fcn.14001f080
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x80]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002ab1e
cmp dword [rbx + 0x10], 0
jl 0x14002ab10
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002ab10
call fcn.1400025b0
mov r14, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002ab06
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp - 0x80], rax
jmp 0x14002ab1e
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x80]
call fcn.140002460
nop
mov rdx, qword [rbp + 0x210]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ab39
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbp - 0x80]
add rcx, 0xffffffffffffffe8
call fcn.1400025b0
add rax, 0x18
mov qword [rbp - 0x68], rax
mov rax, qword [rbp - 0x80]
mov ecx, dword [rax - 0x10]
lea r14d, [rcx + rcx]
cmp byte [rsp + 0x41], 0
je 0x14002ab95
mov dword [rbp - 8], 0x2710
mov r9d, 4
lea r8, [rbp - 8]
lea edx, [r9 + 2]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp - 8]
lea edx, [r9 + 1]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x50]
mov rbx, rax
cmp dword [rax - 0x10], 0
mov ecx, 0
cmove rbx, rcx
mov r9, qword [rbp - 0x68]
mov r8d, r12d
sub r8d, dword [r9 - 8]
mov ecx, dword [r9 - 0xc]
or ecx, r8d
jge 0x14002abd2
xor edx, edx
lea rcx, [rbp - 0x68]
call fcn.140002550
mov rax, qword [rsp + 0x50]
mov r9, qword [rbp - 0x68]
mov dword [rsp + 0x20], r14d
mov r8d, dword [rax - 0x10]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x14002adcd
lea rcx, [rbp + 0xc8]
call fcn.1400241b0
nop
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002ac16
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
lea rdx, str.HttpSendRequest_Failed_with:
test rdx, 0xffffffffffff0000
jne 0x14002ac5f
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14002ac69
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140002750
jmp 0x14002ac69
lea rcx, [rbp + 0x68]
call fcn.1400032d0
nop
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x68]
lea rcx, [rbp + 0x198]
call fcn.14001f390
nop
mov rdx, rax
mov rcx, r15
call fcn.1400277d0
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002acad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002acc6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xc8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ace2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002acfb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ad14
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ad2e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ad48
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ad62
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ad7c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ad95
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002adaf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002adc8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
lea rdx, str.noResponse
mov rcx, r13
call fcn.1400345c0
cmp byte [rax + 8], 5
jne 0x14002afe3
lea rdx, str.noResponse
mov rcx, r13
call fcn.1400345c0
mov rcx, rax
call fcn.140033f70
test al, al
je 0x14002afe3
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002ae1f
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rbp + 0xf0]
and eax, 0xffffff00
mov dword [rbp + 0xf0], eax
btr eax, 8
mov dword [rbp + 0xf0], eax
xor ecx, ecx
mov qword [rbp + 0xf8], rcx
mov eax, dword [rbp + 0x1d8]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1d8], eax
mov qword [rbp + 0x1e0], rcx
mov byte [rbp + 0x1d0], 1
lea rdx, str.result
lea rcx, [rbp + 0xe8]
call fcn.1400343c0
mov rcx, rax
lea rdx, [rbp + 0x1d0]
call fcn.140033a30
nop
lea rcx, [rbp + 0x1d0]
call fcn.140033980
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x328]
call fcn.1400336d0
nop
lea rdx, str.content
lea rcx, [rbp + 0xe8]
call fcn.1400343c0
mov rcx, rax
lea rdx, [rbp + 0x328]
call fcn.140033a30
nop
lea rcx, [rbp + 0x328]
call fcn.140033980
lea rdx, [rbp + 0xe8]
mov rcx, r15
call fcn.140033820
mov dword [rsp + 0x44], r12d
lea rcx, [rbp + 0xe8]
call fcn.140033980
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002af11
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002af2a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002af44
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002af5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002af78
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002af92
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002afab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002afc5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002afde
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
mov byte [rbp + 0x6d0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x6d1]
call fcn.1400c7c50
mov dword [rbp + 0x7c], 0x400
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x14002b201
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401a9d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 0x13
jne 0x14002b0c5
test r8d, r8d
je 0x14002b0c5
mov eax, r8d
and eax, 0x80000001
jge 0x14002b064
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x14002b07b
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov r8d, eax
mov dword [0x1401a9d80], eax
jmp 0x14002b08a
lea r8d, [r8*2 + 1]
mov dword [0x1401a9d80], r8d
mov eax, 0x55555556
imul r8d
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
mov ecx, r8d
sub ecx, eax
je 0x14002b0ae
sub ecx, 2
je 0x14002b0b2
dec ecx
je 0x14002b0b5
jmp 0x14002b0c0
add r8d, 2
inc r8d
add r8d, 2
mov dword [0x1401a9d80], r8d
test r8d, r8d
jne 0x14002b053
cmp byte [rsp + 0x40], 0
je 0x14002b0d6
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x130]
call fcn.1400030f0
nop
mov rdx, rax
mov rcx, r15
call fcn.1400277d0
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x130]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b116
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b12f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b148
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b162
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b17c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b196
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b1b0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b1c9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b1e3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b1fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rdi
test rax, rax
jne 0x14002b35f
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002b234
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x190]
call fcn.1400030f0
nop
mov rdx, rax
mov rcx, r15
call fcn.1400277d0
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b274
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b28d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b2a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b2c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b2da
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b2f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b30e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b327
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b341
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b35a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x7c]
lea r8, [rbp + 0x6d0]
lea edx, [rbx + 0x13]
call rax
test eax, eax
jne 0x14002b4c2
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], bl
je 0x14002b397
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x140]
call fcn.1400030f0
nop
mov rdx, rax
mov rcx, r15
call fcn.1400277d0
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 0x140]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b3d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b3f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b409
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b423
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b43d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b457
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b471
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b48a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4a4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4bd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x6d0]
lea rcx, [rsp + 0x48]
call fcn.1400032d0
nop
lea rdx, str.acceptedStatusCodes
mov rcx, r13
call fcn.1400345c0
mov r14, rax
movzx eax, byte [rax + 8]
test al, al
je 0x14002b769
cmp al, 6
je 0x14002b769
cmp al, 7
jne 0x14002b720
mov r13d, ebx
mov rcx, r14
call fcn.140033ff0
test eax, eax
jle 0x14002cdbb
nop
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x30], rax
mov r8d, r13d
lea rdx, [0x140133488]
lea rcx, [rbp + 0x30]
call fcn.14002d380
mov rdi, qword [rbp + 0x30]
mov rdx, rdi
mov rcx, r14
call fcn.1400345c0
mov rdx, rdi
mov rcx, r14
cmp byte [rax + 8], 4
jne 0x14002b5f0
lea rax, [rbp + 0x458]
mov qword [rbp], rax
call fcn.1400345c0
mov rdx, qword [rax]
lea rcx, [rbp + 0x458]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1c8]
call fcn.14001f080
nop
mov rdx, qword [rax]
xor edi, edi
mov eax, edi
test rdx, rdx
setne al
test eax, eax
je 0x14002b6f0
mov rax, qword [rsp + 0x48]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002b5da
add rax, 2
test cx, cx
jne 0x14002b5c4
mov eax, edi
jmp 0x14002b5df
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x1c8]
jmp 0x14002b6a7
call fcn.1400345c0
cmp byte [rax + 8], 1
jne 0x14002b6c3
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x150], rbx
mov rdx, rdi
mov rcx, r14
call fcn.1400345c0
mov rcx, rax
call fcn.140033bf0
mov r8d, eax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xd0]
call fcn.14001f2f0
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b659
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor edi, edi
mov ecx, edi
mov rax, qword [rbp + 0xd0]
test rax, rax
setne cl
test ecx, ecx
je 0x14002b715
mov rcx, qword [rsp + 0x48]
sub rax, rcx
nop word [rax + rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002b696
add rcx, 2
test dx, dx
jne 0x14002b680
mov eax, edi
jmp 0x14002b69b
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b6bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002b6fb
mov rdi, qword [rbp + 0x30]
lea rdx, [rdi - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b6d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r13d
mov rcx, r14
call fcn.140033ff0
cmp r13d, eax
jge 0x14002cdbb
jmp 0x14002b530
mov ecx, 0x80004005
call fcn.140001920
nop
mov rdx, qword [rbp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b755
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002b755
mov ecx, 0x80004005
call fcn.140001920
nop
xor edi, edi
mov ecx, edi
mov rdx, qword [rsp + 0x48]
lea r8, [0x140137498]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14002b749
cmp rcx, 4
jne 0x14002b730
mov eax, edi
jmp 0x14002b74e
sbb eax, eax
or eax, 1
test eax, eax
sete bl
jmp 0x14002b75c
mov r13, qword [rbp + 0xe0]
test bl, bl
jne 0x14002b946
jmp 0x14002cdbb
mov ecx, dword [0x1401a9d80]
imul ecx, ecx
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
cmp ecx, 5
jne 0x14002b7b3
mov r8d, r12d
mov eax, r12d
mov edx, 0xc5
nop word [rax + rax]
lea ecx, [rax + r8]
lea r8d, [rax]
mov eax, ecx
dec edx
jns 0x14002b7a0
mov dword [0x1401a9d80], ecx
mov edi, ebx
mov rcx, r14
call fcn.140033ff0
test eax, eax
jle 0x14002cdbb
mov edx, edi
mov rcx, r14
call fcn.1400342d0
mov edx, edi
mov rcx, r14
cmp byte [rax + 8], 4
jne 0x14002b851
lea rax, [rbp + 0x498]
mov qword [rbp], rax
call fcn.1400342d0
mov rdx, qword [rax]
lea rcx, [rbp + 0x498]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x100]
call fcn.14001f080
nop
mov rdx, qword [rax]
mov eax, ebx
test rdx, rdx
setne al
test eax, eax
je 0x14002b939
mov rax, qword [rsp + 0x48]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002b83b
add rax, 2
test cx, cx
jne 0x14002b825
mov eax, ebx
jmp 0x14002b840
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x100]
jmp 0x14002b908
call fcn.1400342d0
cmp byte [rax + 8], 1
jne 0x14002b922
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x160], rbx
mov edx, edi
mov rcx, r14
call fcn.1400342d0
mov rcx, rax
call fcn.140033bf0
mov r8d, eax
lea rdx, [rbp + 0x160]
lea rcx, [rbp + 0xa0]
call fcn.14001f2f0
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b8b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
mov ecx, r8d
mov rax, qword [rbp + 0xa0]
test rax, rax
setne cl
test ecx, ecx
je 0x14002cdb0
mov rcx, qword [rsp + 0x48]
sub rax, rcx
nop dword [rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002b8f7
add rcx, 2
test dx, dx
jne 0x14002b8e0
mov eax, r8d
jmp 0x14002b8fc
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b91c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002b944
xor ebx, ebx
inc edi
mov rcx, r14
call fcn.140033ff0
cmp edi, eax
jge 0x14002cdbb
jmp 0x14002b7c5
mov ecx, 0x80004005
call fcn.140001920
nop
xor edi, edi
mov dword [rbp - 0x18], edi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002b98b
lea rdx, str.HttpQueryInfoW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, qword [rbp - 0x50]
test rax, rax
je 0x14002b98f
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x18]
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, r14
call rax
jmp 0x14002b98f
mov r14, qword [rbp - 0x50]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
mov r9d, dword [rbp - 0x18]
test r9d, r9d
je 0x14002ba78
mov r8d, dword [0x1401a9d80]
mov ecx, r8d
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
add eax, eax
sub ecx, eax
cmp ecx, 5
jne 0x14002b9eb
test r8d, r8d
cmove r8d, r12d
mov dword [0x1401a9d80], r8d
mov rcx, r9
call fcn.1400c1e58
mov rbx, rax
test rax, rax
je 0x14002ba78
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002ba38
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002ba38
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x18]
mov r8, rbx
mov edx, 0x16
mov rcx, r14
call rax
mov rdx, rbx
lea rcx, [rbp + 0x208]
call fcn.140026ee0
nop
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400023c0
nop
mov rdx, qword [rbp + 0x208]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ba70
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400c2f38
cmp byte [rsp + 0x41], 0
je 0x14002c431
mov eax, dword [rbp + 0x18]
and eax, 0xffffff00
mov dword [rbp + 0x18], eax
btr eax, 8
mov dword [rbp + 0x18], eax
mov qword [rbp + 0x20], rdi
mov rdx, rdi
mov rax, qword [rsp + 0x48]
lea r8, [0x140137490]
nop dword [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002bac9
cmp rdx, 4
jne 0x14002bab0
mov ecx, edi
jmp 0x14002bace
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002bcd4
mov rdx, rdi
lea r8, [0x1401374a8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002bb09
cmp rdx, 4
jne 0x14002baf0
mov ecx, edi
jmp 0x14002bb0e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002bcd4
mov rdx, rdi
lea r8, [0x1401374a0]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002bb49
cmp rdx, 4
jne 0x14002bb30
mov ecx, edi
jmp 0x14002bb4e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002bcd4
mov rdx, rdi
lea r8, [0x1401374c8]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002bb89
cmp rdx, 4
jne 0x14002bb70
mov eax, edi
jmp 0x14002bb8e
sbb eax, eax
or eax, 1
test eax, eax
setne al
test al, al
je 0x14002bcd4
lea rdx, [rbp + 0x10]
mov rcx, r15
call fcn.140033820
mov dword [rsp + 0x44], r12d
lea rcx, [rbp + 0x10]
call fcn.140033980
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bbcf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bbe9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc02
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc1b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc35
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc4f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc69
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc83
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc9c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bcb6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bccf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
mov rcx, qword [rbp - 0x60]
add rcx, 0xffffffffffffffe8
call fcn.1400025b0
add rax, 0x18
mov qword [rbp + 8], rax
lea rcx, [rbp + 8]
call fcn.1400238a0
mov rbx, qword [rbp + 8]
cmp dword [rbx - 0x10], 0
jl 0x14002c2ca
lea rdx, str.location:
mov rcx, rbx
call fcn.1400c3664
mov rdi, rax
test rax, rax
je 0x14002c2ca
sub rdi, rbx
sar rdi, 1
cmp edi, 0xffffffff
je 0x14002c2ca
test edi, edi
js 0x14002bd6c
cmp edi, dword [rbx - 0x10]
jg 0x14002bd6c
movsxd rax, edi
lea rcx, [rbx + rax*2]
lea rdx, [0x1401373f8]
call fcn.1400c3664
test rax, rax
je 0x14002bd6c
sub rax, rbx
sar rax, 1
jmp 0x14002bd6e
mov eax, esi
sub eax, edi
mov r9d, eax
mov r8d, edi
lea rdx, [rbp + 0x170]
lea rcx, [rbp + 8]
call fcn.14000e970
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400023c0
nop
mov rdx, qword [rbp + 0x170]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bdaf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x20]
cmp dword [rbx - 0x10], 0
jl 0x14002c15f
lea rdx, str.http
mov rcx, rbx
call fcn.1400c3664
test rax, rax
je 0x14002c15f
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x14002c15f
mov r8d, dword [rbx - 0x10]
sub r8d, eax
lea rdx, [rbp + 0x1b8]
lea rcx, [rbp - 0x20]
call fcn.140019990
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400023c0
nop
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002be24
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp + 0x1f8]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x1f8], eax
xor ebx, ebx
mov qword [rbp + 0x200], rbx
mov byte [rbp + 0x1f0], 1
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x10]
call fcn.1400343c0
mov rcx, rax
lea rdx, [rbp + 0x1f0]
call fcn.140033a30
nop
lea rcx, [rbp + 0x1f0]
call fcn.140033980
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x538]
call fcn.14001f120
nop
mov rdx, rax
lea rcx, [rbp + 0x3b8]
call fcn.140033760
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x10]
call fcn.1400343c0
mov rcx, rax
lea rdx, [rbp + 0x3b8]
call fcn.140033a30
nop
lea rcx, [rbp + 0x3b8]
call fcn.140033980
nop
cmp qword [rbp + 0x550], 0x10
jb 0x14002bed9
mov rcx, qword [rbp + 0x538]
call fcn.1400c27f0
mov qword [rbp + 0x550], 0xf
mov qword [rbp + 0x548], rbx
mov byte [rbp + 0x538], 0
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x558]
call fcn.14001f120
nop
mov rdx, rax
lea rcx, [rbp + 0x2d8]
call fcn.140033760
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x10]
call fcn.1400343c0
mov rcx, rax
lea rdx, [rbp + 0x2d8]
call fcn.140033a30
nop
lea rcx, [rbp + 0x2d8]
call fcn.140033980
nop
cmp qword [rbp + 0x570], 0x10
jb 0x14002bf56
mov rcx, qword [rbp + 0x558]
call fcn.1400c27f0
mov qword [rbp + 0x570], 0xf
mov qword [rbp + 0x568], rbx
mov byte [rbp + 0x558], 0
mov rcx, qword [rsp + 0x48]
mov edx, r12d
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x14002bf92
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.140002550
mov rcx, qword [rsp + 0x48]
call fcn.1400c3974
mov ecx, dword [rbp + 0x110]
and ecx, 0xffffff01
or ecx, 1
mov dword [rbp + 0x110], ecx
mov qword [rbp + 0x118], rbx
mov dword [rbp + 0x108], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x10]
call fcn.1400343c0
mov rcx, rax
lea rdx, [rbp + 0x108]
call fcn.140033a30
nop
lea rcx, [rbp + 0x108]
call fcn.140033980
call fcn.140027110
test al, al
jne 0x14002bff4
dec dword [0x1401aa398]
lea rdx, [rbp + 0x10]
mov rcx, r15
call fcn.140033820
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c01e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c037
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x10]
call fcn.140033980
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c05a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c074
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c08d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c0a6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c0c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c0da
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c0f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c10e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c127
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c141
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c15a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
lea rdx, [rbp + 0x10]
mov rcx, r15
call fcn.140033820
mov dword [rsp + 0x44], r12d
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c189
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c1a2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x10]
call fcn.140033980
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c1c5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c1df
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c1f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c211
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c22b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c245
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c25f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c279
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c292
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c2ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c2c5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
lea rdx, [rbp + 0x10]
mov rcx, r15
call fcn.140033820
mov dword [rsp + 0x44], r12d
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c2f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c309
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x10]
call fcn.140033980
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c32c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c346
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c35f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c378
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c392
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3e0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c413
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c42c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002cf30
mov rax, rdi
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rdi
xor esi, esi
mov qword [rbp - 0x38], rsi
mov dword [rbp - 0x28], esi
nop word [rax + rax]
sub rdi, rax
lea rdx, [rdi + 0x400]
lea rcx, [rbp - 0x48]
call fcn.14002d150
mov dword [rbp - 0x28], esi
mov rbx, qword [rbp - 0x48]
add rbx, rdi
call fcn.1400260f0
mov rcx, rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, r14
call fcn.14003afa0
test eax, eax
je 0x14002cd5f
mov edx, dword [rbp - 0x28]
add rdx, rdi
lea rcx, [rbp - 0x48]
call fcn.14002d150
cmp dword [rbp - 0x28], 0
je 0x14002c4b0
mov rdi, qword [rbp - 0x40]
mov rax, qword [rbp - 0x48]
jmp 0x14002c450
mov byte [rbp + 0xae0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xae1]
call fcn.1400c7c50
mov dword [rbp + 0x78], 0x400
mov rbx, rsi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002c4fa
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x78]
lea r8, [rbp + 0xae0]
mov edx, 0x1d
mov rcx, r14
call rbx
test eax, eax
je 0x14002c6a5
lea rdx, [rbp + 0xae0]
lea rcx, [rbp + 0x88]
call fcn.140026ee0
nop
lea rdx, str.gzip
lea rcx, [rbp + 0x88]
call fcn.140019dc0
test al, al
je 0x14002c699
lea rcx, [rbp + 0x290]
call fcn.140019e00
nop
lea rcx, [rbp - 0x48]
call fcn.14002d250
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002d260
mov rcx, rax
lea r8, [rbp + 0x290]
mov rdx, rbx
call fcn.140027160
test eax, eax
jne 0x14002c67b
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002c5a3
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x180]
call fcn.1400030f0
nop
mov rdx, rax
mov rcx, r15
call fcn.1400277d0
mov dword [rsp + 0x44], r12d
lea rcx, [rbp + 0x180]
call fcn.140002340
nop
lea rcx, [rbp + 0x290]
call fcn.140026f30
nop
lea rcx, [rbp + 0x88]
call fcn.140002340
nop
lea rcx, [rbp - 0x48]
call fcn.140026f30
nop
lea rcx, [rbp - 0x60]
call fcn.140002340
nop
lea rcx, [rsp + 0x48]
call fcn.140002340
nop
lea rcx, [rbp - 0x68]
call fcn.140002340
nop
lea rcx, [rbp - 0x80]
call fcn.140002340
nop
lea rcx, [rsp + 0x50]
call fcn.140002340
nop
lea rcx, [rsp + 0x70]
call fcn.140002340
nop
lea rcx, [rsp + 0x78]
call fcn.140002340
nop
lea rcx, [rsp + 0x68]
call fcn.140002340
nop
lea rcx, [rbp - 0x78]
call fcn.140002340
nop
lea rcx, [rsp + 0x58]
call fcn.140002340
nop
lea rcx, [rbp - 0x70]
call fcn.140002340
nop
lea rcx, [rsp + 0x60]
call fcn.140002340
jmp 0x14002cf49
lea rdx, [rbp + 0x290]
lea rcx, [rbp - 0x48]
call fcn.14002d030
nop
lea rcx, [rbp + 0x290]
call fcn.140026f30
nop
lea rcx, [rbp + 0x88]
call fcn.140002340
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002c6bf
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
xor dil, dil
lea rdx, [0x140137220]
mov rcx, r13
call fcn.1400345c0
mov rcx, rax
call fcn.140034a90
test al, al
je 0x14002c769
lea rax, [rbp + 0x4d8]
mov qword [rbp], rax
lea rdx, [0x140137220]
mov rcx, r13
call fcn.1400345c0
mov rcx, rax
call fcn.1400030a0
mov rdx, rax
lea rcx, [rbp + 0x4d8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.14001f080
nop
lea rdx, str.base64
lea rcx, [rbp + 0x80]
call fcn.140019dc0
test al, al
je 0x14002c740
mov bl, 1
jmp 0x14002c75d
lea rdx, str.binary
lea rcx, [rbp + 0x80]
call fcn.140019dc0
movzx edi, dil
test al, al
cmovne edi, r12d
lea rcx, [rbp + 0x80]
call fcn.140002340
lea rcx, [rbp - 0x30]
call fcn.140002260
nop
test bl, bl
je 0x14002c828
lea rcx, [rbp - 0x48]
call fcn.14002d250
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002d260
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x1e8]
call fcn.14001edc0
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140002380
nop
lea rcx, [rbp + 0x1e8]
call fcn.140002340
lea rcx, [rbp + 0x120]
call fcn.1400254f0
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140019d80
movzx ebx, al
lea rcx, [rbp + 0x120]
call fcn.140002340
test bl, bl
je 0x14002c934
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x128]
call fcn.1400030f0
nop
mov rdx, rax
mov rcx, r15
call fcn.1400277d0
mov dword [rsp + 0x44], r12d
lea rcx, [rbp + 0x128]
call fcn.140002340
nop
lea rcx, [rbp - 0x30]
jmp 0x14002c5e8
test dil, dil
jne 0x14002c934
lea rcx, [rbp - 0x48]
call fcn.14002d250
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x48]
call fcn.14002d260
cmp byte [rax], dil
je 0x14002c86b
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x48]
call fcn.14002d150
mov rdx, rbx
lea rcx, [rbp - 0x48]
call fcn.14002d260
mov byte [rax], dil
lea rcx, [rbp - 0x48]
call fcn.14002d250
cmp rax, 3
jbe 0x14002c900
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002d260
cmp byte [rax], 0xef
jne 0x14002c900
mov rdx, r12
lea rcx, [rbp - 0x48]
call fcn.14002d260
cmp byte [rax], 0xbb
jne 0x14002c900
mov edx, 2
lea rcx, [rbp - 0x48]
call fcn.14002d260
cmp byte [rax], 0xbf
jne 0x14002c900
lea rdx, [rbp + 0x378]
lea rcx, [rbp - 0x48]
call fcn.14002d140
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x358]
call fcn.14002d300
mov rbx, qword [rax]
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp - 0x48]
call fcn.14002d140
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x48]
call fcn.14002d270
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002d260
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.1400030f0
nop
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140002380
nop
lea rcx, [rbp + 0x138]
call fcn.140002340
xor bl, bl
lea rdx, str.outputFile
mov rcx, r13
call fcn.1400345c0
mov rcx, rax
call fcn.140034a90
test al, al
je 0x14002caa6
lea rax, [rbp + 0x3f8]
mov qword [rbp + 0xc0], rax
lea rdx, str.outputFile
mov rcx, r13
call fcn.1400345c0
mov rcx, rax
call fcn.1400030a0
mov rdx, rax
lea rcx, [rbp + 0x3f8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.14001f080
nop
mov r8d, dword [0x1401a9d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0x15
jne 0x14002c9e5
mov ecx, r12d
cmp r8d, ecx
jle 0x14002c9df
nop dword [rax]
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, r8d
jl 0x14002c9d0
mov dword [0x1401a9d80], ecx
lea rcx, [rbp + 0x40]
call fcn.14000dfa0
test al, al
jne 0x14002ca9d
test dil, dil
je 0x14002ca69
mov qword [rbp + 0x90], rsi
lea rcx, [rbp + 0x40]
call fcn.1400030a0
mov rdx, rax
lea r8, [0x140137564]
lea rcx, [rbp + 0x90]
call fcn.1400c5610
test eax, eax
jne 0x14002ca9d
mov rdi, qword [rbp + 0x90]
test rdi, rdi
je 0x14002ca9d
lea rcx, [rbp - 0x48]
call fcn.14002d250
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x48]
call fcn.14002d260
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, r12
call fcn.1400c5a44
mov rcx, qword [rbp + 0x90]
call fcn.1400c492c
mov bl, 1
jmp 0x14002ca9d
lea rax, [rbp + 0x148]
mov qword [rbp + 0xc0], rax
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x148]
call fcn.1400030b0
nop
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.1400267f0
movzx ebx, bl
test al, al
cmovne ebx, r12d
lea rcx, [rbp + 0x40]
call fcn.140002340
xor edx, edx
lea rcx, [rbp + 0xa8]
call fcn.140033610
nop
mov dl, 1
lea rcx, [rbp + 0x398]
call fcn.140033800
nop
lea rdx, str.result
lea rcx, [rbp + 0xa8]
call fcn.1400343b0
mov rcx, rax
lea rdx, [rbp + 0x398]
call fcn.140033a30
nop
lea rcx, [rbp + 0x398]
call fcn.140033980
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.140024b80
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x578]
call fcn.14001f120
nop
mov rdx, rax
lea rcx, [rbp + 0x2f0]
call fcn.140033760
nop
lea rdx, str.content
lea rcx, [rbp + 0xa8]
call fcn.1400343b0
mov rcx, rax
lea rdx, [rbp + 0x2f0]
call fcn.140033a30
nop
lea rcx, [rbp + 0x2f0]
call fcn.140033980
nop
lea rcx, [rbp + 0x578]
call fcn.1400013b0
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x5b8]
call fcn.14001f120
nop
mov rdx, rax
lea rcx, [rbp + 0x310]
call fcn.140033760
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xa8]
call fcn.1400343b0
mov rcx, rax
lea rdx, str.headers
call fcn.1400343b0
mov rcx, rax
lea rdx, [rbp + 0x310]
call fcn.140033a30
nop
lea rcx, [rbp + 0x310]
call fcn.140033980
nop
lea rcx, [rbp + 0x5b8]
call fcn.1400013b0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x5f8]
call fcn.14001f120
nop
mov rdx, rax
lea rcx, [rbp + 0x340]
call fcn.140033760
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xa8]
call fcn.1400343b0
mov rcx, rax
lea rdx, str.httpCode
call fcn.1400343b0
mov rcx, rax
lea rdx, [rbp + 0x340]
call fcn.140033a30
nop
lea rcx, [rbp + 0x340]
call fcn.140033980
nop
lea rcx, [rbp + 0x5f8]
call fcn.1400013b0
lea rdx, str.empty
lea rcx, [rbp + 0x5d8]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x360]
call fcn.140033760
nop
lea rdx, str.noData
lea rcx, [rbp + 0xa8]
call fcn.1400343b0
mov rcx, rax
lea rdx, [rbp + 0x360]
call fcn.140033a30
nop
lea rcx, [rbp + 0x360]
call fcn.140033980
nop
lea rcx, [rbp + 0x5d8]
call fcn.1400013b0
lea rdx, str.outputFile
mov rcx, r13
call fcn.1400345c0
mov rcx, rax
call fcn.140034a90
test al, al
je 0x14002cd35
movzx edx, bl
lea rcx, [rbp + 0x380]
call fcn.140033800
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x598]
call fcn.140001370
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x618]
call fcn.14002d3b0
nop
mov rdx, rax
lea rcx, [rbp + 0xa8]
call fcn.1400346d0
mov rcx, rax
lea rdx, [rbp + 0x380]
call fcn.140033a30
nop
lea rcx, [rbp + 0x618]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x598]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x380]
call fcn.140033980
lea rdx, [rbp + 0xa8]
mov rcx, r15
call fcn.140033820
mov dword [rsp + 0x44], r12d
lea rcx, [rbp + 0xa8]
call fcn.140033980
nop
lea rcx, [rbp - 0x30]
jmp 0x14002c5e8
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002cd79
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0x70]
call fcn.1400030f0
nop
mov rdx, rax
mov rcx, r15
call fcn.1400277d0
mov dword [rsp + 0x44], r12d
lea rcx, [rbp + 0x70]
call fcn.140002450
mov rcx, rax
call fcn.140001a90
jmp 0x14002c5ee
mov ecx, 0x80004005
call fcn.140001920
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002cdd6
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rax, [rbp + 0x648]
mov qword [rbp + 0x640], rax
mov r8d, 3
mov rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0x640]
call fcn.14001a120
nop
mov rcx, qword [rbp + 0x640]
call fcn.1400c3980
mov edx, eax
mov rcx, r15
call fcn.140027a60
mov dword [rsp + 0x44], r12d
lea rax, [rbp + 0x648]
mov rcx, qword [rbp + 0x640]
cmp rcx, rax
je 0x14002ce30
call fcn.1400c3358
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ce4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ce63
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ce7c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ce96
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ceb0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ceca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cee4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cefd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cf17
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cf30
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002cf49
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, r15
mov rcx, qword [rbp + 0xef0]
xor rcx, rsp
call fcn.1400c2810
add rsp, 0x1008
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret