Function at 0x140029d80
Capabilities:
Link many functions at runtime
Write file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xff8]
mov eax, 0x10f8
call fcn.1400c8a20
sub rsp, rax
mov qword [rbp + 0x388], 0xfffffffffffffffe
mov rax, qword [0x1401a1e90]
xor rax, rsp
mov qword [rbp + 0xfe0], rax
mov r12, r9
mov qword [rbp + 0xf8], r9
mov rsi, r8
mov rbx, rdx
mov qword [rbp - 0x50], rdx
mov r15, rcx
mov qword [rbp + 0x238], rcx
mov qword [rbp + 0x2c0], rcx
xor edi, edi
mov dword [rsp + 0x44], edi
mov rcx, r9
call fcn.140028170
lea rcx, [0x1401a19a8]
test al, al
mov rax, qword [0x1401a19a8]
je 0x140029e81
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x58], rax
lea rdx, str.this_module_doesnt_support_file_request
test rdx, 0xffffffffffff0000
jne 0x140029e3e
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140029e48
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x58]
call fcn.140002530
jmp 0x140029e48
lea rcx, [rbp + 0x58]
call fcn.140003150
nop
lea rdx, [rbp + 0x58]
mov rcx, r15
call fcn.140027460
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d2b7
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x14002d2b7
call qword [rax + 0x18]
add rax, 0x18
test rbx, rbx
jne 0x140029efa
mov qword [rbp + 0x80], rax
lea rdx, str.InternetOpen_Failed
test rdx, 0xffffffffffff0000
jne 0x140029ec7
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x140029ed4
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.140002530
jmp 0x140029ed4
lea rcx, [rbp + 0x80]
call fcn.140003150
nop
lea rdx, [rbp + 0x80]
mov rcx, r15
call fcn.140027460
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x80]
jmp 0x14002d2a3
mov qword [rsp + 0x60], rax
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x28], edi
lea rax, [rbp + 0x260]
mov qword [rbp + 0x70], rax
lea rdx, [0x140136de0]
mov rcx, r12
call fcn.140034990
mov rdx, qword [rax]
mov qword [rbp + 0x278], 0xf
mov qword [rbp + 0x270], rdi
mov byte [rbp + 0x260], 0
or r14, 0xffffffffffffffff
cmp byte [rdx], 0
jne 0x140029f5f
mov r8, rdi
jmp 0x140029f6c
mov r8, r14
inc r8
cmp byte [rdx + r8], 0
jne 0x140029f62
lea rcx, [rbp + 0x260]
call fcn.1400013f0
nop
lea rdx, [rbp + 0x260]
lea rcx, [rsp + 0x68]
call fcn.14001e680
nop
lea r9, [rbp - 0x28]
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.140027fb0
movzx eax, al
test eax, eax
jne 0x14002a068
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x48], rax
lea rdx, str.InternetCrackUrl_Failed
test rdx, 0xffffffffffff0000
jne 0x140029ff6
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x14002a000
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x48]
call fcn.140002530
jmp 0x14002a000
lea rcx, [rbp + 0x48]
call fcn.140003150
nop
lea rdx, [rbp + 0x48]
mov rcx, r15
call fcn.140027460
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a030
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a04a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a063
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
mov byte [rsp + 0x48], 0
lea rdx, str.redirectCheck
mov rcx, r12
call fcn.140034990
lea rcx, [0x1401aa398]
cmp rax, rcx
je 0x14002a0b8
lea rdx, str.redirectCheck
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 5
jne 0x14002a0b8
lea rdx, str.redirectCheck
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140034340
mov byte [rsp + 0x48], al
xor r13b, r13b
mov edi, 0x50
lea rax, [rbp + 8]
mov qword [rbp + 0x70], rax
mov rcx, qword [rsp + 0x68]
add rcx, 0xffffffffffffffe8
call fcn.140002390
add rax, 0x18
mov qword [rbp + 8], rax
lea rax, [rbp + 8]
mov qword [rbp + 0x70], rax
lea rcx, [rbp + 8]
call fcn.140022fc0
mov rcx, qword [rbp + 8]
cmp dword [rcx - 0x10], 0
jl 0x14002a11d
lea rdx, str.https:__
call fcn.1400c4670
test rax, rax
je 0x14002a11d
sub rax, qword [rbp + 8]
sar rax, 1
test eax, eax
jne 0x14002a11d
mov r13b, 1
mov edi, 0x1bb
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a135
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.port
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 1
jne 0x14002a168
lea rdx, str.port
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140033fc0
mov ebx, eax
mov dword [rbp - 0x28], eax
jmp 0x14002a173
mov ebx, dword [rbp - 0x28]
test ebx, ebx
cmove ebx, edi
mov dword [rbp - 0x28], ebx
mov byte [rsp + 0x40], 0
mov rdi, qword [rsi]
mov rdx, qword [rsp + 0x60]
xor esi, esi
test rdi, rdi
je 0x14002a220
mov r11d, esi
mov r10d, esi
mov r9, rdi
cmp qword [r9 + 0x10], rsi
je 0x14002a220
cmp dword [r9 + 8], ebx
jne 0x14002a1e5
mov eax, esi
test rdx, rdx
setne al
test eax, eax
je 0x14002a215
mov rax, qword [r9]
mov r8, rdx
sub r8, rax
nop dword [rax]
movzx ecx, word [rax]
cmp cx, word [rax + r8]
jne 0x14002a1d7
add rax, 2
test cx, cx
jne 0x14002a1c0
mov eax, esi
jmp 0x14002a1dc
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
jne 0x14002a1fa
inc r11d
inc r10
add r9, 0x18
cmp r10, 0x400
jge 0x14002a220
jmp 0x14002a194
movsxd rax, r11d
lea rcx, [rax + rax*2]
mov rax, qword [rdi + rcx*8 + 0x10]
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14002a358
jmp 0x14002a220
mov ecx, 0x80004005
call fcn.140001930
int3
mov rax, qword [0x1401aa8a8]
test rax, rax
jne 0x14002a268
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002a257
lea rdx, str.InternetConnectW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401aa8a8], rax
jmp 0x14002a25e
mov rax, qword [0x1401aa8a8]
test rax, rax
je 0x14002a298
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rsi
xor r9d, r9d
movzx r8d, bx
mov rcx, qword [rbp - 0x50]
call rax
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x14002a353
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x68], rax
lea rdx, str.InternetConnect_Failed
test rdx, 0xffffffffffff0000
jne 0x14002a2e1
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x14002a2eb
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140002530
jmp 0x14002a2eb
lea rcx, [rbp + 0x68]
call fcn.140003150
nop
lea rdx, [rbp + 0x68]
mov rcx, r15
call fcn.140027460
mov r13d, 1
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a31b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a335
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a34e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
mov byte [rsp + 0x40], 1
mov edi, 0x80400200
mov eax, 0x80600200
cmp byte [rsp + 0x48], 0
cmovne edi, eax
or edi, 0xc000
test r13b, r13b
je 0x14002a37b
or edi, 0x803080
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, [0x140136e14]
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 4
jne 0x14002a458
lea rax, [rbp + 0x390]
mov qword [rbp - 0x50], rax
lea rdx, [0x140136e14]
mov rcx, r12
call fcn.140034990
mov rdx, qword [rax]
lea rcx, [rbp + 0x390]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x178]
call fcn.14001e680
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x80]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a43d
cmp dword [rbx + 0x10], 0
jl 0x14002a42f
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a42f
call fcn.140002390
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a425
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x80], rax
jmp 0x14002a43d
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x80]
call fcn.140002240
nop
mov rdx, qword [rbp + 0x178]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a458
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, [0x140136fb8]
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 4
jne 0x14002a535
lea rax, [rbp + 0x470]
mov qword [rbp - 0x50], rax
lea rdx, [0x140136fb8]
mov rcx, r12
call fcn.140034990
mov rdx, qword [rax]
lea rcx, [rbp + 0x470]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.14001e680
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a51a
cmp dword [rbx + 0x10], 0
jl 0x14002a50c
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a50c
call fcn.140002390
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a502
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x70], rax
jmp 0x14002a51a
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x70]
call fcn.140002240
nop
mov rdx, qword [rbp + 0x180]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a535
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, str.referer
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 4
jne 0x14002a616
lea rax, [rbp + 0x430]
mov qword [rbp - 0x50], rax
lea rdx, str.referer
mov rcx, r12
call fcn.140034990
mov rdx, qword [rax]
lea rcx, [rbp + 0x430]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.14001e680
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a5fb
cmp dword [rbx + 0x10], 0
jl 0x14002a5ec
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a5ec
call fcn.140002390
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a5e1
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x78], rax
jmp 0x14002a5fb
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x78]
call fcn.140002240
nop
mov rdx, qword [rbp + 0x190]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a616
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.acceptTypes
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 4
jne 0x14002a6f3
lea rax, [rbp + 0x4b0]
mov qword [rbp - 0x50], rax
lea rdx, str.acceptTypes
mov rcx, r12
call fcn.140034990
mov rdx, qword [rax]
lea rcx, [rbp + 0x4b0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1a0]
call fcn.14001e680
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp - 0x78]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a6d8
cmp dword [rbx + 0x10], 0
jl 0x14002a6ca
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a6ca
call fcn.140002390
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a6c0
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rbp - 0x78], rax
jmp 0x14002a6d8
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x78]
call fcn.140002240
nop
mov rdx, qword [rbp + 0x1a0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a6f3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x78]
cmp dword [rax - 0x10], 0
mov esi, 0
cmove rax, rsi
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x288], rsi
mov rax, qword [rsp + 0x78]
cmp dword [rax - 0x10], esi
cmove rax, rsi
mov r9, qword [rbp - 0x70]
cmp dword [r9 - 0x10], esi
cmove r9, rsi
mov rdx, qword [rbp - 0x80]
cmp dword [rdx - 0x10], esi
cmove rdx, rsi
mov r13d, 1
mov qword [rsp + 0x38], r13
mov dword [rsp + 0x30], edi
lea rcx, [rbp + 0x280]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r8, qword [rbp - 0x60]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov rdi, rax
mov qword [rbp - 0x50], rax
lea rcx, [0x1401a19a8]
test rax, rax
mov rax, qword [0x1401a19a8]
jne 0x14002a88d
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x38], rax
lea rdx, str.HttpOpenRequest_Failed
test rdx, 0xffffffffffff0000
jne 0x14002a7bc
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x14002a7c6
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x38]
call fcn.140002530
jmp 0x14002a7c6
lea rcx, [rbp + 0x38]
call fcn.140003150
nop
lea rdx, [rbp + 0x38]
mov rcx, r15
call fcn.140027460
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a7f0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a809
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a823
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a83c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a855
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a86f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a888
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x140136eb8]
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 4
jne 0x14002aa63
lea rdx, [0x140137008]
lea rcx, [rbp + 0xf0]
call fcn.140002090
nop
lea rax, [rbp + 0x3d0]
mov qword [rbp - 8], rax
lea rdx, [0x140136eb8]
mov rcx, r12
call fcn.140034990
mov rdx, qword [rax]
lea rcx, [rbp + 0x3d0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1d0]
call fcn.14001e680
mov rsi, rax
lea rcx, [0x1401a19a8]
mov rdx, qword [0x1401a19a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp + 0x78], rax
lea rdx, str.Content_Type:
test rdx, 0xffffffffffff0000
jne 0x14002a94b
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x14002a955
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.140002530
jmp 0x14002a955
lea rcx, [rbp + 0x78]
call fcn.140003150
nop
mov r8, rsi
lea rdx, [rbp + 0x78]
lea rcx, [rbp + 0x1c0]
call fcn.14001e8e0
nop
lea r8, [rbp + 0xf0]
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.14001e8e0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x70]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002a9d9
cmp dword [rbx + 0x10], 0
jl 0x14002a9ca
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002a9ca
call fcn.140002390
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002a9bf
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x70], rax
jmp 0x14002a9d9
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.140002240
nop
mov rdx, qword [rbp + 0x1b0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002a9f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1c0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002aa11
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002aa2a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x1d0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002aa46
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xf0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002aa61
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor esi, esi
lea rdx, str.additionalRequestHeaders
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 4
jne 0x14002ab24
lea rax, [rbp + 0x410]
mov qword [rbp - 8], rax
lea rdx, str.additionalRequestHeaders
mov rcx, r12
call fcn.140034990
mov rdx, qword [rax]
lea rcx, [rbp + 0x410]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.14001e680
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x70]
call fcn.14000f920
nop
mov rdx, qword [rbp + 0x1e0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002aae3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rsp + 0x70]
add rcx, 0xffffffffffffffe8
call fcn.140002390
add rax, 0x18
mov qword [rbp + 0xe0], rax
lea rcx, [rbp + 0xe0]
call fcn.14002d2e0
nop
mov rdx, qword [rbp + 0xe0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ab24
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov dword [rbp - 8], esi
lea rdx, str.postData
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 4
jne 0x14002ad36
lea rax, [rbp + 0x450]
mov qword [rbp + 0x98], rax
lea rdx, str.postData
mov rcx, r12
call fcn.140034990
mov rdx, qword [rax]
lea rcx, [rbp + 0x450]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x1f0]
call fcn.14001e680
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x50]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14002abf2
cmp dword [rbx + 0x10], 0
jl 0x14002abe3
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14002abe3
call fcn.140002390
mov rsi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14002abd6
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rsi + 0x18]
mov qword [rsp + 0x50], rax
xor esi, esi
jmp 0x14002abf2
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140002240
nop
mov rdx, qword [rbp + 0x1f0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002ac0d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r8d, dword [0x1401a9d80]
lea ecx, [r8 + 2]
lea eax, [r8 + 1]
imul ecx, eax
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0xc
jne 0x14002acb5
mov ecx, esi
mov eax, 0xd62b80d7
imul r8d
add edx, r8d
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x99
mov eax, r8d
sub eax, edx
cmp eax, 0xfd
je 0x14002acaf
nop word [rax + rax]
mov eax, r8d
or eax, 0xffffff28
add r8d, eax
inc ecx
mov eax, r8d
imul eax, r8d
cmp ecx, eax
jg 0x14002acaf
mov eax, 0xd62b80d7
imul r8d
add edx, r8d
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x99
mov eax, r8d
sub eax, edx
cmp eax, 0xfd
jne 0x14002ac70
mov dword [0x1401a9d80], ecx
lea rdx, str.datatype
mov rcx, r12
call fcn.140034990
lea rcx, [0x1401aa398]
cmp rax, rcx
je 0x14002acff
lea rdx, str.datatype
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 1
jne 0x14002acff
lea rdx, str.datatype
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140033fc0
mov dword [rbp - 8], eax
mov ecx, dword [0x1401a9d80]
mov r8d, ecx
imul r8d, ecx
imul r8d, ecx
mov eax, 0x6bca1af3
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x13
sub r8d, edx
cmp r8d, 0xf
jne 0x14002ad36
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileType]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
cmp dword [rbp - 8], 0
jne 0x14002ade3
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x530]
call fcn.14001e720
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14002ad77
mov rdx, qword [rax]
test rdx, rdx
jne 0x14002ad80
mov eax, esi
jmp 0x14002ad8c
mov rax, r14
inc rax
cmp byte [rdx + rax], 0
jne 0x14002ad83
mov r8d, eax
lea rcx, [rbp - 0x68]
call fcn.140024bc0
nop
cmp qword [rbp + 0x548], 0x10
jb 0x14002adaf
mov rcx, qword [rbp + 0x530]
call fcn.1400c3950
mov qword [rbp + 0x548], 0xf
mov qword [rbp + 0x540], rsi
mov byte [rbp + 0x530], 0
mov rax, qword [rbp - 0x68]
mov ebx, dword [rax - 0x10]
mov dword [rbp - 8], ebx
lea rcx, [rsp + 0x50]
call fcn.140001fd0
mov rax, qword [rsp + 0x50]
jmp 0x14002adf0
mov rax, qword [rsp + 0x50]
mov ecx, dword [rax - 0x10]
add ecx, ecx
mov dword [rbp - 8], ecx
cmp byte [rsp + 0x48], 0
je 0x14002ae31
mov dword [rbp + 0x18], 0x2710
mov r9d, 4
lea r8, [rbp + 0x18]
lea edx, [r9 + 2]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov r9d, 4
lea r8, [rbp + 0x18]
lea edx, [r9 + 1]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov rax, qword [rsp + 0x50]
cmp dword [rax - 0x10], 0
jne 0x14002ae53
mov rdi, qword [rbp - 0x68]
cmp dword [rdi - 8], 1
jle 0x14002ae6e
mov edx, dword [rdi - 0x10]
lea rcx, [rbp - 0x68]
call fcn.140019e40
mov rdi, qword [rbp - 0x68]
jmp 0x14002ae6e
cmp dword [rax - 8], 1
jle 0x14002ae6b
mov edx, dword [rax - 0x10]
lea rcx, [rsp + 0x50]
call fcn.140002430
mov rax, qword [rsp + 0x50]
mov rdi, rax
mov rbx, qword [rsp + 0x70]
mov esi, dword [rbx - 0x10]
test esi, esi
mov eax, 0
cmove rbx, rax
call fcn.1400259f0
mov rcx, rax
mov eax, dword [rbp - 8]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
mov r9d, esi
mov r8, rbx
mov rdi, qword [rbp - 0x50]
mov rdx, rdi
call fcn.14003b790
test eax, eax
jne 0x14002b08c
lea rcx, [rbp + 0xb8]
call fcn.140023a30
nop
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002aed6
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x40], rax
lea rdx, str.HttpSendRequest_Failed_with:
test rdx, 0xffffffffffff0000
jne 0x14002af1f
movzx ebx, dx
mov ecx, ebx
call fcn.1400019f0
test rax, rax
je 0x14002af29
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x40]
call fcn.140002530
jmp 0x14002af29
lea rcx, [rbp + 0x40]
call fcn.140003150
nop
lea r8, [rbp + 0xb8]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x240]
call fcn.14001e8e0
nop
mov rdx, rax
mov rcx, r15
call fcn.140027460
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x240]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002af6d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002af86
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002afa2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002afbb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002afd5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002afef
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b008
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b022
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b03b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b054
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b06e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b087
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
lea rdx, str.noResponse
mov rcx, r12
call fcn.140034990
cmp byte [rax + 8], 5
jne 0x14002b2a1
lea rdx, str.noResponse
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140034340
test al, al
je 0x14002b2a1
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002b0de
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rbp + 0x108]
and eax, 0xffffff00
mov dword [rbp + 0x108], eax
btr eax, 8
mov dword [rbp + 0x108], eax
xor ecx, ecx
mov qword [rbp + 0x110], rcx
mov eax, dword [rbp + 0x208]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x208], eax
mov qword [rbp + 0x210], rcx
mov byte [rbp + 0x200], 1
lea rdx, str.result
lea rcx, [rbp + 0x100]
call fcn.140034790
mov rcx, rax
lea rdx, [rbp + 0x200]
call fcn.140033e00
nop
lea rcx, [rbp + 0x200]
call fcn.140033d50
lea rdx, str.no_response_needed
lea rcx, [rbp + 0x370]
call fcn.140033aa0
nop
lea rdx, str.content
lea rcx, [rbp + 0x100]
call fcn.140034790
mov rcx, rax
lea rdx, [rbp + 0x370]
call fcn.140033e00
nop
lea rcx, [rbp + 0x370]
call fcn.140033d50
lea rdx, [rbp + 0x100]
mov rcx, r15
call fcn.140033bf0
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x100]
call fcn.140033d50
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b1d0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b1ea
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b204
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b21d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b237
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b250
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b269
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b283
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b29c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
mov byte [rbp + 0x7c0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x7c1]
call fcn.1400c8db0
mov dword [rbp + 0x94], 0x400
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x14002b420
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002b2f6
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x1b8]
call fcn.140002f70
nop
mov rdx, rax
mov rcx, r15
call fcn.140027460
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x1b8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b336
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b34f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b369
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b383
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b39c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b3b6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b3cf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b3e8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b402
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b41b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rdi
test rax, rax
jne 0x14002b57d
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002b453
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x158]
call fcn.140002f70
nop
mov rdx, rax
mov rcx, r15
call fcn.140027460
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x158]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b493
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4ac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4e0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b4f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b513
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b52c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b545
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b55f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b578
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
xor ebx, ebx
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x94]
lea r8, [rbp + 0x7c0]
lea edx, [rbx + 0x13]
call rax
test eax, eax
jne 0x14002b74a
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, dword [0x1401a9d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
shl eax, 2
sub ecx, eax
cmp ecx, 1
jne 0x14002b610
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x63
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, r14
mov rcx, rax
call fcn.1400c2fb8
mov rcx, rax
call fcn.1400c4098
cmp byte [rsp + 0x40], bl
je 0x14002b620
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.HttpQueryInfo_Failed
lea rcx, [rbp + 0x218]
call fcn.140002f70
nop
mov rdx, rax
mov rcx, r15
call fcn.140027460
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x218]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b660
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b679
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b693
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b6ad
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b6c6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b6e0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b6f9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b712
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b72c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b745
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x7c0]
lea rcx, [rsp + 0x58]
call fcn.140003150
nop
lea rdx, str.acceptedStatusCodes
mov rcx, r12
call fcn.140034990
mov rsi, rax
movzx eax, byte [rax + 8]
test al, al
je 0x14002b9f9
cmp al, 6
je 0x14002b9f9
cmp al, 7
jne 0x14002b9b0
mov r12d, ebx
mov rcx, rsi
call fcn.1400343c0
test eax, eax
jle 0x14002d12a
nop word [rax + rax]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x50], rax
mov r8d, r12d
lea rdx, [0x140135ea0]
lea rcx, [rbp + 0x50]
call fcn.14002d700
mov rdi, qword [rbp + 0x50]
mov rdx, rdi
mov rcx, rsi
call fcn.140034990
mov rdx, rdi
mov rcx, rsi
cmp byte [rax + 8], 4
jne 0x14002b883
lea rax, [rbp + 0x490]
mov qword [rbp + 0x98], rax
call fcn.140034990
mov rdx, qword [rax]
lea rcx, [rbp + 0x490]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.14001e680
nop
mov rdx, qword [rax]
xor edi, edi
mov eax, edi
test rdx, rdx
setne al
test eax, eax
je 0x14002b980
mov rax, qword [rsp + 0x58]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002b86d
add rax, 2
test cx, cx
jne 0x14002b857
mov eax, edi
jmp 0x14002b872
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x168]
jmp 0x14002b937
call fcn.140034990
cmp byte [rax + 8], 1
jne 0x14002b953
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1c8], rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140034990
mov rcx, rax
call fcn.140033fc0
mov r8d, eax
lea rdx, [rbp + 0x1c8]
lea rcx, [rbp + 0xe8]
call fcn.14001e860
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b8ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor edi, edi
mov ecx, edi
mov rax, qword [rbp + 0xe8]
test rax, rax
setne cl
test ecx, ecx
je 0x14002b9a5
mov rcx, qword [rsp + 0x58]
sub rax, rcx
nop dword [rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002b926
add rcx, 2
test dx, dx
jne 0x14002b910
mov eax, edi
jmp 0x14002b92b
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xe8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b94b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002b98b
mov rdi, qword [rbp + 0x50]
lea rdx, [rdi - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b967
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
inc r12d
mov rcx, rsi
call fcn.1400343c0
cmp r12d, eax
jge 0x14002d12a
jmp 0x14002b7c0
mov ecx, 0x80004005
call fcn.140001930
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002b9e5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14002b9e5
mov ecx, 0x80004005
call fcn.140001930
nop
xor edi, edi
mov ecx, edi
mov rdx, qword [rsp + 0x58]
lea r8, [0x140137070]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14002b9d9
cmp rcx, 4
jne 0x14002b9c0
mov eax, edi
jmp 0x14002b9de
sbb eax, eax
or eax, 1
test eax, eax
sete bl
jmp 0x14002b9ec
mov r12, qword [rbp + 0xf8]
test bl, bl
jne 0x14002bb96
jmp 0x14002d12a
mov edi, ebx
mov rcx, rsi
call fcn.1400343c0
test eax, eax
jle 0x14002d12a
nop dword [rax + rax]
mov edx, edi
mov rcx, rsi
call fcn.1400346a0
mov edx, edi
mov rcx, rsi
cmp byte [rax + 8], 4
jne 0x14002ba9f
lea rax, [rbp + 0x4d0]
mov qword [rbp + 0x98], rax
call fcn.1400346a0
mov rdx, qword [rax]
lea rcx, [rbp + 0x4d0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x128]
call fcn.14001e680
nop
mov rdx, qword [rax]
mov eax, ebx
test rdx, rdx
setne al
test eax, eax
je 0x14002bb89
mov rax, qword [rsp + 0x58]
sub rdx, rax
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x14002ba89
add rax, 2
test cx, cx
jne 0x14002ba73
mov eax, ebx
jmp 0x14002ba8e
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0x128]
jmp 0x14002bb58
call fcn.1400346a0
cmp byte [rax + 8], 1
jne 0x14002bb72
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x1f8], rbx
mov edx, edi
mov rcx, rsi
call fcn.1400346a0
mov rcx, rax
call fcn.140033fc0
mov r8d, eax
lea rdx, [rbp + 0x1f8]
lea rcx, [rbp + 0xb0]
call fcn.14001e860
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bb07
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor r8d, r8d
mov ecx, r8d
mov rax, qword [rbp + 0xb0]
test rax, rax
setne cl
test ecx, ecx
je 0x14002d11f
mov rcx, qword [rsp + 0x58]
sub rax, rcx
nop word [rax + rax]
movzx edx, word [rcx]
cmp dx, word [rcx + rax]
jne 0x14002bb47
add rcx, 2
test dx, dx
jne 0x14002bb30
mov eax, r8d
jmp 0x14002bb4c
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bb6c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
jne 0x14002bb94
xor ebx, ebx
inc edi
mov rcx, rsi
call fcn.1400343c0
cmp edi, eax
jge 0x14002d12a
jmp 0x14002ba10
mov ecx, 0x80004005
call fcn.140001930
nop
xor edi, edi
mov dword [rbp], edi
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002bbdb
lea rdx, str.HttpQueryInfoW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, qword [rbp - 0x50]
test rax, rax
je 0x14002bbdf
mov qword [rsp + 0x20], rdi
lea r9, [rbp]
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, rsi
call rax
jmp 0x14002bbdf
mov rsi, qword [rbp - 0x50]
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
mov eax, dword [rbp]
test eax, eax
je 0x14002bc8f
mov ecx, eax
call fcn.1400c2fb8
mov rbx, rax
test rax, rax
je 0x14002bc8f
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002bc4f
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14002bc4f
mov qword [rsp + 0x20], rdi
lea r9, [rbp]
mov r8, rbx
mov edx, 0x16
mov rcx, rsi
call rax
mov rdx, rbx
lea rcx, [rbp + 0x188]
call fcn.140026ae0
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.1400021b0
nop
mov rdx, qword [rbp + 0x188]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bc87
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, rbx
call fcn.1400c4098
cmp byte [rsp + 0x48], 0
je 0x14002c761
mov eax, dword [rbp + 0x28]
and eax, 0xffffff00
mov dword [rbp + 0x28], eax
btr eax, 8
mov dword [rbp + 0x28], eax
mov qword [rbp + 0x30], rdi
mov rdx, rdi
mov rax, qword [rsp + 0x58]
lea r8, [0x140137080]
nop
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002bcd9
cmp rdx, 4
jne 0x14002bcc0
mov ecx, edi
jmp 0x14002bcde
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002bee3
mov rdx, rdi
lea r8, [0x140137078]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002bd19
cmp rdx, 4
jne 0x14002bd00
mov ecx, edi
jmp 0x14002bd1e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002bee3
mov rdx, rdi
lea r8, [0x140137090]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002bd59
cmp rdx, 4
jne 0x14002bd40
mov ecx, edi
jmp 0x14002bd5e
sbb ecx, ecx
or ecx, 1
test ecx, ecx
setne cl
test cl, cl
je 0x14002bee3
mov rdx, rdi
lea r8, [0x140137088]
nop word [rax + rax]
movzx ecx, word [rax + rdx*2]
inc rdx
cmp cx, word [r8 + rdx*2 - 2]
jne 0x14002bd99
cmp rdx, 4
jne 0x14002bd80
mov eax, edi
jmp 0x14002bd9e
sbb eax, eax
or eax, 1
test eax, eax
setne al
test al, al
je 0x14002bee3
lea rdx, [rbp + 0x20]
mov rcx, r15
call fcn.140033bf0
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x20]
call fcn.140033d50
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bddf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bdf9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002be12
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002be2c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002be46
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002be5f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002be79
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002be92
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002beab
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bec5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bede
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
lea rcx, [0x1401a19a8]
mov rax, qword [0x1401a19a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x18], rax
mov rcx, qword [rbp - 0x48]
add rcx, 0xffffffffffffffe8
call fcn.140002390
add rax, 0x18
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x10]
call fcn.140022fc0
mov rbx, qword [rbp + 0x10]
cmp dword [rbx - 0x10], 0
jl 0x14002c5c5
lea rdx, str.location:
mov rcx, rbx
call fcn.1400c4670
mov rdi, rax
test rax, rax
je 0x14002c5c5
sub rdi, rbx
sar rdi, 1
cmp edi, 0xffffffff
je 0x14002c5c5
test edi, edi
js 0x14002bf7b
cmp edi, dword [rbx - 0x10]
jg 0x14002bf7b
movsxd rax, edi
lea rcx, [rbx + rax*2]
lea rdx, [0x140137008]
call fcn.1400c4670
test rax, rax
je 0x14002bf7b
sub rax, rbx
sar rax, 1
jmp 0x14002bf7e
mov eax, r14d
sub eax, edi
mov r9d, eax
mov r8d, edi
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0x10]
call fcn.14000ed70
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400021b0
nop
mov rdx, qword [rbp + 0x1d8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002bfbf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rbx, qword [rbp - 0x18]
cmp dword [rbx - 0x10], 0
jl 0x14002c45b
lea rdx, str.http
mov rcx, rbx
call fcn.1400c4670
test rax, rax
je 0x14002c45b
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x14002c45b
mov r8d, dword [rbx - 0x10]
sub r8d, eax
lea rdx, [rbp + 0x198]
lea rcx, [rbp - 0x18]
call fcn.1400194b0
nop
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400021b0
nop
mov rdx, qword [rbp + 0x198]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c034
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rbp + 0x228]
and eax, 0xffffff05
or eax, 5
mov dword [rbp + 0x228], eax
xor ebx, ebx
mov qword [rbp + 0x230], rbx
mov byte [rbp + 0x220], 1
lea rdx, str.urlRedirected
lea rcx, [rbp + 0x20]
call fcn.140034790
mov rcx, rax
lea rdx, [rbp + 0x220]
call fcn.140033e00
nop
lea rcx, [rbp + 0x220]
call fcn.140033d50
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0x4f0]
call fcn.14001e720
nop
mov rdx, rax
lea rcx, [rbp + 0x290]
call fcn.140033b30
nop
lea rdx, str.requestUrl
lea rcx, [rbp + 0x20]
call fcn.140034790
mov rcx, rax
lea rdx, [rbp + 0x290]
call fcn.140033e00
nop
lea rcx, [rbp + 0x290]
call fcn.140033d50
nop
cmp qword [rbp + 0x508], 0x10
jb 0x14002c0e9
mov rcx, qword [rbp + 0x4f0]
call fcn.1400c3950
mov qword [rbp + 0x508], 0xf
mov qword [rbp + 0x500], rbx
mov byte [rbp + 0x4f0], 0
call fcn.140026d60
test al, al
jne 0x14002c18a
xor r15d, r15d
mov esi, r15d
lea rdi, [rbp + 0x6a0]
nop dword [rax + rax]
mov r10d, r15d
nop word [rax + rax]
lea ebx, [r10 + 1]
lea ecx, [rsi + 1]
mov r8d, dword [0x1401a9d80]
mov eax, r8d
cdq
idiv ecx
mov r9d, edx
mov ecx, r8d
sub ecx, esi
imul r9d, ecx
mov eax, r8d
cdq
idiv ebx
add r9d, eax
sub r9d, r10d
mov dword [rdi], r9d
mov edx, r9d
lea rcx, [0x140135ea0]
call fcn.1400c4884
mov r10d, ebx
add rdi, 4
cmp ebx, 0x17
jl 0x14002c130
inc esi
cmp esi, 3
jl 0x14002c120
mov r15, qword [rbp + 0x238]
xor ebx, ebx
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0x510]
call fcn.14001e720
nop
mov rdx, rax
lea rcx, [rbp + 0x340]
call fcn.140033b30
nop
lea rdx, str.redirectUrl
lea rcx, [rbp + 0x20]
call fcn.140034790
mov rcx, rax
lea rdx, [rbp + 0x340]
call fcn.140033e00
nop
lea rcx, [rbp + 0x340]
call fcn.140033d50
nop
cmp qword [rbp + 0x528], 0x10
jb 0x14002c1ee
mov rcx, qword [rbp + 0x510]
call fcn.1400c3950
mov qword [rbp + 0x528], 0xf
mov qword [rbp + 0x520], rbx
mov byte [rbp + 0x510], 0
mov eax, dword [0x1401a9d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 0xd
jne 0x14002c27b
mov rax, qword [str.OdX1pVBzE]
mov qword [rbp + 0x118], rax
movzx eax, word [0x1401370c8]
mov word [rbp + 0x120], ax
lea rax, [rbp + 0x118]
mov rcx, r14
inc rcx
cmp byte [rax + rcx], 0
jne 0x14002c256
mov eax, 4
mul rcx
cmovo rax, r14
mov rcx, rax
call fcn.1400c2fb8
mov rcx, rax
call fcn.1400c4098
mov rcx, qword [rsp + 0x58]
mov edx, r13d
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x14002c29e
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.140002330
mov rcx, qword [rsp + 0x58]
call fcn.1400c4a44
mov ecx, dword [rbp + 0x138]
and ecx, 0xffffff01
or ecx, 1
mov dword [rbp + 0x138], ecx
mov qword [rbp + 0x140], rbx
mov dword [rbp + 0x130], eax
lea rdx, str.statusCode
lea rcx, [rbp + 0x20]
call fcn.140034790
mov rcx, rax
lea rdx, [rbp + 0x130]
call fcn.140033e00
nop
lea rcx, [rbp + 0x130]
call fcn.140033d50
lea rdx, [rbp + 0x20]
mov rcx, r15
call fcn.140033bf0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c31b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c334
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.140033d50
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c357
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c371
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c38a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3a4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3be
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c3f1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c40a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c423
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c43d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c456
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
lea rdx, [rbp + 0x20]
mov rcx, r15
call fcn.140033bf0
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x10]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c485
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c49e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.140033d50
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c4c1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c4db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c4f4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c50e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c528
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c541
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c55b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c574
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c58d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c5a7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c5c0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
mov ecx, dword [0x1401a9d80]
imul ecx, ecx
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xe
jne 0x14002c5fb
mov ecx, 4
call fcn.1400c4130
mov ecx, dword [0x1401a9d80]
mov dword [rax], ecx
lea rdx, [rbp + 0x20]
mov rcx, r15
call fcn.140033bf0
mov dword [rsp + 0x44], r13d
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c621
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c63a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x20]
call fcn.140033d50
nop
mov rdx, qword [rbp - 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c65d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c677
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c690
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c6aa
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c6c4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c6dd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c6f7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c710
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c729
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c743
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002c75c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14002d29e
mov rax, rdi
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rdi
xor ebx, ebx
mov qword [rbp - 0x30], rbx
mov dword [rbp - 0x24], ebx
nop word [rax + rax]
sub rdi, rax
lea rdx, [rdi + 0x400]
lea rcx, [rbp - 0x40]
call fcn.14002d4c0
mov dword [rbp - 0x24], ebx
mov rbx, qword [rbp - 0x40]
add rbx, rdi
call fcn.1400259f0
mov rcx, rax
lea rax, [rbp - 0x24]
mov qword [rsp + 0x20], rax
mov r8, rbx
mov rdx, rsi
call fcn.14003b380
test eax, eax
je 0x14002d08d
mov edx, dword [rbp - 0x24]
add rdx, rdi
lea rcx, [rbp - 0x40]
call fcn.14002d4c0
cmp dword [rbp - 0x24], 0
je 0x14002c7e2
mov rdi, qword [rbp - 0x38]
mov rax, qword [rbp - 0x40]
xor ebx, ebx
jmp 0x14002c780
mov byte [rbp + 0xbd0], 0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0xbd1]
call fcn.1400c8db0
mov dword [rbp + 0x90], 0x400
xor r14d, r14d
mov ebx, r14d
lea rcx, str.Wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
je 0x14002c832
lea rdx, str.HttpQueryInfoA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x90]
lea r8, [rbp + 0xbd0]
mov edx, 0x1d
mov rcx, rsi
call rbx
test eax, eax
je 0x14002ca1e
lea rdx, [rbp + 0xbd0]
lea rcx, [rbp + 0xa8]
call fcn.140026ae0
nop
call fcn.140026d10
test al, al
jne 0x14002c87f
call fcn.1400c426c
mov dword [0x1401a9d80], eax
lea rdx, str.gzip
lea rcx, [rbp + 0xa8]
call fcn.140019810
test al, al
je 0x14002ca12
lea rcx, [rbp + 0x248]
call fcn.140019850
nop
lea rcx, [rbp - 0x40]
call fcn.14002d5c0
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
mov rcx, rax
lea r8, [rbp + 0x248]
mov rdx, rbx
call fcn.140026df0
test eax, eax
jne 0x14002c9c9
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002c8f2
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.gzip_decompressing_error
lea rcx, [rbp + 0x1a8]
call fcn.140002f70
nop
mov rdx, rax
mov rcx, r15
call fcn.140027460
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x1a8]
call fcn.140002130
nop
lea rcx, [rbp + 0x248]
call fcn.140026b30
nop
lea rcx, [rbp + 0xa8]
call fcn.140002130
nop
lea rcx, [rbp - 0x40]
call fcn.140026b30
nop
lea rcx, [rbp - 0x48]
call fcn.140002130
nop
lea rcx, [rsp + 0x58]
call fcn.140002130
nop
lea rcx, [rbp - 0x68]
call fcn.140002130
nop
lea rcx, [rsp + 0x50]
call fcn.140002130
nop
lea rcx, [rsp + 0x70]
call fcn.140002130
nop
lea rcx, [rbp - 0x78]
call fcn.140002130
nop
lea rcx, [rsp + 0x78]
call fcn.140002130
nop
lea rcx, [rbp - 0x70]
call fcn.140002130
nop
lea rcx, [rbp - 0x80]
call fcn.140002130
nop
lea rcx, [rsp + 0x68]
call fcn.140002130
nop
lea rcx, [rbp - 0x60]
call fcn.140002130
nop
lea rcx, [rsp + 0x60]
call fcn.140002130
jmp 0x14002d2b7
lea rdx, [rbp + 0x248]
lea rcx, [rbp - 0x40]
call fcn.14002d3a0
call fcn.140026db0
test al, al
jne 0x14002ca05
mov ecx, 4
call fcn.1400c4130
mov rbx, rax
call fcn.1400c426c
mov dword [rbx], eax
mov dword [0x1401a9d80], eax
mov rcx, rbx
call fcn.1400c3950
nop
lea rcx, [rbp + 0x248]
call fcn.140026b30
nop
lea rcx, [rbp + 0xa8]
call fcn.140002130
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002ca38
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor bl, bl
xor dil, dil
lea rdx, [0x140136dd0]
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140034e60
test al, al
je 0x14002cae5
lea rax, [rbp + 0x3b0]
mov qword [rbp + 0x98], rax
lea rdx, [0x140136dd0]
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140002f20
mov rdx, rax
lea rcx, [rbp + 0x3b0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.14001e680
nop
lea rdx, str.base64
lea rcx, [rbp + 0xa0]
call fcn.140019810
test al, al
je 0x14002cabc
mov bl, 1
jmp 0x14002cad9
lea rdx, str.binary
lea rcx, [rbp + 0xa0]
call fcn.140019810
movzx edi, dil
test al, al
cmovne edi, r13d
lea rcx, [rbp + 0xa0]
call fcn.140002130
lea rcx, [rbp - 0x20]
call fcn.140002050
nop
test bl, bl
je 0x14002cba4
lea rcx, [rbp - 0x40]
call fcn.14002d5c0
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
mov rdx, rax
mov r8, rbx
lea rcx, [rbp + 0x1e8]
call fcn.14001e3f0
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140002170
nop
lea rcx, [rbp + 0x1e8]
call fcn.140002130
lea rcx, [rbp + 0x148]
call fcn.140024ee0
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400197d0
movzx ebx, al
lea rcx, [rbp + 0x148]
call fcn.140002130
test bl, bl
je 0x14002ccb0
lea rdx, str.Base64_encdng_error
lea rcx, [rbp + 0x150]
call fcn.140002f70
nop
mov rdx, rax
mov rcx, r15
call fcn.140027460
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0x150]
call fcn.140002130
nop
lea rcx, [rbp - 0x20]
jmp 0x14002c937
test dil, dil
jne 0x14002ccb0
lea rcx, [rbp - 0x40]
call fcn.14002d5c0
mov rbx, rax
lea rdx, [rax - 1]
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
cmp byte [rax], dil
je 0x14002cbe7
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x40]
call fcn.14002d4c0
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
mov byte [rax], dil
lea rcx, [rbp - 0x40]
call fcn.14002d5c0
cmp rax, 3
jbe 0x14002cc7c
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
cmp byte [rax], 0xef
jne 0x14002cc7c
mov rdx, r13
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
cmp byte [rax], 0xbb
jne 0x14002cc7c
mov edx, 2
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
cmp byte [rax], 0xbf
jne 0x14002cc7c
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 0x40]
call fcn.14002d4b0
mov rcx, rax
mov r8d, 3
lea rdx, [rbp + 0x2e0]
call fcn.14002d670
mov rbx, qword [rax]
lea rdx, [rbp + 0x300]
lea rcx, [rbp - 0x40]
call fcn.14002d4b0
mov r9, rbx
mov r8, qword [rax]
lea rdx, [rbp + 0xd8]
lea rcx, [rbp - 0x40]
call fcn.14002d5e0
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.140002f70
nop
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140002170
nop
lea rcx, [rbp + 0x160]
call fcn.140002130
xor bl, bl
lea rdx, str.outputFile
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140034e60
test al, al
je 0x14002cdd4
lea rax, [rbp + 0x3f0]
mov qword [rbp + 0xd8], rax
lea rdx, str.outputFile
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140002f20
mov rdx, rax
lea rcx, [rbp + 0x3f0]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.14001e680
nop
lea rcx, [rbp + 0x60]
call fcn.14000e350
test al, al
jne 0x14002cdcb
test dil, dil
je 0x14002cd97
mov qword [rbp + 0x88], r14
lea rcx, [rbp + 0x60]
call fcn.140002f20
mov rdx, rax
lea r8, [0x140137170]
lea rcx, [rbp + 0x88]
call fcn.1400c66e0
test eax, eax
jne 0x14002cdcb
mov rdi, qword [rbp + 0x88]
test rdi, rdi
je 0x14002cdcb
lea rcx, [rbp - 0x40]
call fcn.14002d5c0
mov rbx, rax
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14002d5d0
mov rcx, rax
mov r9, rdi
mov r8, rbx
mov rdx, r13
call fcn.1400c6b14
mov rcx, qword [rbp + 0x88]
call fcn.1400c5970
mov bl, 1
jmp 0x14002cdcb
lea rax, [rbp + 0x170]
mov qword [rbp + 0xd8], rax
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x170]
call fcn.140002f30
nop
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.1400262d0
movzx ebx, bl
test al, al
cmovne ebx, r13d
lea rcx, [rbp + 0x60]
call fcn.140002130
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.1400339e0
nop
mov dl, 1
lea rcx, [rbp + 0x2a8]
call fcn.140033bd0
nop
lea rdx, str.result
lea rcx, [rbp + 0xc0]
call fcn.140034780
mov rcx, rax
lea rdx, [rbp + 0x2a8]
call fcn.140033e00
nop
lea rcx, [rbp + 0x2a8]
call fcn.140033d50
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.1400243f0
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x5d0]
call fcn.14001e720
nop
mov rdx, rax
lea rcx, [rbp + 0x2c8]
call fcn.140033b30
nop
lea rdx, str.content
lea rcx, [rbp + 0xc0]
call fcn.140034780
mov rcx, rax
lea rdx, [rbp + 0x2c8]
call fcn.140033e00
nop
lea rcx, [rbp + 0x2c8]
call fcn.140033d50
nop
lea rcx, [rbp + 0x5d0]
call fcn.1400013b0
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x590]
call fcn.14001e720
nop
mov rdx, rax
lea rcx, [rbp + 0x2e8]
call fcn.140033b30
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xc0]
call fcn.140034780
mov rcx, rax
lea rdx, str.headers
call fcn.140034780
mov rcx, rax
lea rdx, [rbp + 0x2e8]
call fcn.140033e00
nop
lea rcx, [rbp + 0x2e8]
call fcn.140033d50
nop
lea rcx, [rbp + 0x590]
call fcn.1400013b0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x5f0]
call fcn.14001e720
nop
mov rdx, rax
lea rcx, [rbp + 0x308]
call fcn.140033b30
nop
lea rdx, str.additionalInfo
lea rcx, [rbp + 0xc0]
call fcn.140034780
mov rcx, rax
lea rdx, str.httpCode
call fcn.140034780
mov rcx, rax
lea rdx, [rbp + 0x308]
call fcn.140033e00
nop
lea rcx, [rbp + 0x308]
call fcn.140033d50
nop
lea rcx, [rbp + 0x5f0]
call fcn.1400013b0
lea rdx, str.empty
lea rcx, [rbp + 0x550]
call fcn.140001370
nop
mov rdx, rax
lea rcx, [rbp + 0x328]
call fcn.140033b30
nop
lea rdx, str.noData
lea rcx, [rbp + 0xc0]
call fcn.140034780
mov rcx, rax
lea rdx, [rbp + 0x328]
call fcn.140033e00
nop
lea rcx, [rbp + 0x328]
call fcn.140033d50
nop
lea rcx, [rbp + 0x550]
call fcn.1400013b0
lea rdx, str.outputFile
mov rcx, r12
call fcn.140034990
mov rcx, rax
call fcn.140034e60
test al, al
je 0x14002d063
movzx edx, bl
lea rcx, [rbp + 0x358]
call fcn.140033bd0
nop
lea rdx, str.outputFi
lea rcx, [rbp + 0x570]
call fcn.140001370
nop
lea r8, str.leResult
mov rdx, rax
lea rcx, [rbp + 0x5b0]
call fcn.14002d730
nop
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.140034aa0
mov rcx, rax
lea rdx, [rbp + 0x358]
call fcn.140033e00
nop
lea rcx, [rbp + 0x5b0]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x570]
call fcn.1400013b0
nop
lea rcx, [rbp + 0x358]
call fcn.140033d50
lea rdx, [rbp + 0xc0]
mov rcx, r15
call fcn.140033bf0
mov dword [rsp + 0x44], r13d
lea rcx, [rbp + 0xc0]
call fcn.140033d50
nop
lea rcx, [rbp - 0x20]
jmp 0x14002c937
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002d0a7
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, str.InternetReadFile_Failed
lea rcx, [rbp + 0x70]
call fcn.140002f70
nop
mov rdx, rax
mov rcx, r15
call fcn.140027460
mov dword [rsp + 0x44], r13d
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d0e1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdi, qword [rbp - 0x40]
test rdi, rdi
je 0x14002c947
mov rbx, qword [rbp - 0x30]
sub rbx, rdi
lea rdx, [rbp - 0x10]
call fcn.14002d6f0
mov rcx, rax
mov r8, rbx
mov rdx, rdi
call fcn.140001530
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
jmp 0x14002c947
mov ecx, 0x80004005
call fcn.140001930
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp byte [rsp + 0x40], 0
je 0x14002d145
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rax, [rbp + 0x618]
mov qword [rbp + 0x610], rax
mov r8d, 3
mov rdx, qword [rsp + 0x58]
lea rcx, [rbp + 0x610]
call fcn.140019b70
nop
mov rcx, qword [rbp + 0x610]
call fcn.1400c4af8
mov edx, eax
mov rcx, r15
call fcn.1400276f0
mov dword [rsp + 0x44], r13d
lea rax, [rbp + 0x618]
mov rcx, qword [rbp + 0x610]
cmp rcx, rax
je 0x14002d19f
call fcn.1400c4364
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d1b9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d1d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d1ec
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d206
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d21f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d239
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d252
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d26b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d285
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d29e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14002d2b7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, r15
mov rcx, qword [rbp + 0xfe0]
xor rcx, rsp
call fcn.1400c3970
add rsp, 0x10f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret