Function at 0x1400346e4
Capabilities:
Receive http request

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x98
mov qword [rbp - 0x31], 0xfffffffffffffffe
mov r14, rcx
xor ebx, ebx
mov dword [rbp + 0x67], ebx
mov r15b, bl
mov r12b, bl
xor edx, edx
lea r8d, [rbx + 0x20]
lea rcx, [rbp - 9]
call sub.msvcrt.dll_memset
nop
xor r9d, r9d
xor r8d, r8d
lea edx, [rbx + 1]
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
mov qword [rbp + 0xf], rax
xor r8d, r8d
xor edx, edx
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.websocket.dll_WebSocketReceive]
test eax, eax
js 0x1400349c5
mov dword [rbp + 0x77], 1
xor eax, eax
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x39], rbx
lea rax, [rbp - 0x39]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x77]
lea r8, [rbp - 0x29]
mov edx, 2
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.websocket.dll_WebSocketGetAction]
mov esi, eax
test eax, eax
js 0x1400349c5
cmp dword [rbp + 0x6f], 0x80000004
jne 0x1400347c7
xor r8d, r8d
mov rdx, qword [rbp - 0x39]
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.websocket.dll_WebSocketCompleteAction]
mov r15b, 1
jmp 0x14003488d
mov eax, dword [rbp + 0x67]
cmp eax, 3
jne 0x14003492b
mov ebx, dword [rbp - 0x21]
mov rdi, qword [rbp - 0x29]
mov r8d, ebx
xor edx, edx
mov rcx, rdi
call sub.msvcrt.dll_memset
mov rcx, qword [r14 + 8]
mov r13, qword [rcx + 0x80]
mov rax, qword [rcx]
mov rax, qword [rax + 0x130]
call qword [0x1400f5e38]
lea rcx, [rbp - 9]
mov qword [rsp + 0x30], rcx
and qword [rsp + 0x28], 0
mov dword [rsp + 0x20], ebx
mov r9, rdi
xor r8d, r8d
mov rdx, qword [rax + 0x10]
mov rcx, qword [r13 + 0x20]
call qword [sym.imp.HTTPAPI.dll_HttpReceiveRequestEntityBody]
cmp eax, 0x3e5
mov ebx, 0
cmove eax, ebx
test eax, eax
jne 0x1400348b2
mov rax, qword [rbp + 0xf]
mov qword [rbp - 0x19], rax
mov rax, qword [r14 + 0x78]
mov qword [rbp - 0x11], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp - 0x19]
lea ecx, [rbx + 2]
call qword [sym.imp.api_ms_win_core_synch_l1_2_1.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1400348c2
xor r9d, r9d
lea r8, [rbp + 0x7f]
lea rdx, [rbp - 9]
mov rcx, qword [r13 + 0x20]
call qword [sym.imp.api_ms_win_core_io_l1_1_0.dll_GetOverlappedResult]
test eax, eax
je 0x1400348ac
mov r8d, dword [rbp + 0x7f]
mov rdx, qword [rbp - 0x39]
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.websocket.dll_WebSocketCompleteAction]
test esi, esi
js 0x1400349a4
test r15b, r15b
jne 0x1400349a9
test r12b, r12b
jne 0x1400349c5
jmp 0x14003474f
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
jmp 0x14003488d
cmp eax, 1
je 0x1400348e9
cmp eax, 0xffffffff
je 0x1400348d3
mov esi, 0x8000ffff
jmp 0x1400348ec
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
jmp 0x1400348ec
mov r12b, 1
lea rdx, [rbp - 9]
mov rcx, qword [r13 + 0x20]
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_CancelIoEx]
test eax, eax
jne 0x140034919
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_GetLastError]
cmp eax, 0x490
jne 0x140034919
mov rcx, qword [rbp + 0x5f]
call fcn.1400363b4
jmp 0x14003488d
or edx, 0xffffffff
mov rcx, qword [rbp + 0xf]
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_WaitForSingleObject]
jmp 0x14003488d
xor r8d, r8d
test eax, eax
jne 0x140034950
mov rdx, qword [rbp - 0x39]
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.websocket.dll_WebSocketCompleteAction]
mov ecx, 0x3e8
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_Sleep]
jmp 0x14003488d
cmp eax, 4
jne 0x14003487f
mov rdx, qword [rbp - 0x39]
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.websocket.dll_WebSocketCompleteAction]
mov rcx, qword [r14 + 0x80]
mov rax, qword [rcx]
mov r9d, dword [rbp + 0x6f]
mov r8d, dword [rbp - 0x21]
mov rdx, qword [rbp - 0x29]
mov rax, qword [rax + 0x18]
call qword [0x1400f5e38]
cmp eax, 0x8000000e
je 0x1400349c5
xor r8d, r8d
xor edx, edx
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.websocket.dll_WebSocketReceive]
mov esi, eax
jmp 0x14003488d
test r15b, r15b
je 0x1400349c5
mov rax, qword [r14]
mov r8d, 0x3e8
xor r9d, r9d
xor edx, edx
mov rcx, r14
mov rax, qword [rax + 0x48]
call qword [0x1400f5e38]
nop
mov rcx, qword [rbp + 0xf]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400349d9
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_CloseHandle]
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret