ActiveSync Windows Phone query decode

 when HTTP_REQUEST {
     create variable to contain the query string
    set string_b64encoded [HTTP::query]
     test the contents of the query string to see if it is base64 and if so place the content
     in a variable
    if {[catch {b64decode $string_b64encoded} string_b64decoded] == 0 and  $string_b64decoded ne ""}{
     scan the decoded content for the Device ID length
     the "x4H2" format says to move forward 4 bytes and select the next 2 places
     as HEX and put them in varible  IDlenHEX
    binary scan $string_b64decoded x4H2 IDlenHEX
     convert HEX to decimal
    scan $IDlenHEX %x IDlenDEC
     multiply by two to get the correct character count
    set IDlen [expr "$IDlenDEC * 2"]
     knowing the DeviceID starts at the 6th pair we move "x5" to the that starting place
     then select "H$IDlen" to put in variable HEXdeviceID
    binary scan $string_b64decoded x5H$IDlen HEXdeviceID
    try to match the found ID  to a data group of allowed IDs
        if { [matchclass $HEXdeviceID contains allowHEXdeviceIDs] } {
            pool ASOWA.example.com_443
            log local0. "Found ALLOWED Hexadecimal DeviceID: $HEXdeviceID"
        } else {
            log local0. "Found DENIED Hexadecimal DeviceID: $HEXdeviceID"
                    discard
            }
        }
    }

when HTTP_REQUEST {
set string_b64encoded [HTTP::query]
if {[catch {b64decode $string_b64encoded} string_b64decoded] == 0 and $string_b64decoded ne ""}{
binary scan $string_b64decoded x4H2 IDlenHEX
scan $IDlenHEX %x IDlenDEC
set IDlen [expr "$IDlenDEC * 2"]
binary scan $string_b64decoded x5H$IDlen HEXdeviceID
set string_sentid [string toupper $HEXdeviceID]
log local0. "EAS deviceID was HEX: $string_sentid"
} else {
set string_sentid [string toupper [URI::query [HTTP::uri] "DeviceId"]]
}
set string_URI [string tolower [HTTP::uri]]
set string_useragent [string toupper [HTTP::header User-Agent]]
set string_requestmethod [HTTP::method]
if { $string_sentid != "" && [class match $string_sentid contains EASDeviceIDAllowed] } {
log local0. "EAS Device ID match ALLOWED: URI: $string_URI DeviceID: $string_sentid Agent: $string_useragent Method: $string_requestmethod"
pool AS-owa.example.com_443
}
else {
log local0. "EAS default no match DENIED: $string_URI DeviceID: $string_sentid Agent: $string_useragent Method: $string_requestmethod"
discard
}
}