Function at 0x180011874
Capabilities:
Initialize winhttp library
Read http header

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x498]
sub rsp, 0x558
movaps xmmword [rax - 0x58], xmm6
mov r13, r9
mov rdi, rcx
xor r15d, r15d
mov dword [rbp - 0x68], r15d
mov qword [rbp + 0x260], r15
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x270], xmm0
lea rcx, [rbp + 0x260]
call fcn.180015990
nop
lea rax, [rbp + 0x118]
mov qword [rbp + 0x4c0], rax
mov qword [rbp + 0x68], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp + 0x78], xmm0
mov word [rbp + 0x68], r15w
lea rdx, [0x1800fccd8]
lea rcx, [rbp + 0x68]
call fcn.1800095ac
nop
mov qword [rbp + 0x40], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], r15w
lea rdx, str.iaaae
lea rcx, [rbp + 0x40]
call fcn.1800095ac
nop
mov qword [rbp - 0x60], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r15w
lea rdx, str.http:__aaa.ap
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
lea r8, [rbp + 0x40]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x90]
call fcn.180009ae4
nop
lea r8, [rbp + 0x68]
mov rdx, rax
lea rcx, [rbp + 0x118]
call fcn.180009ae4
mov rbx, rax
mov qword [rsp + 0x78], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
lea rdx, str.tpok
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
lea rdx, str.mmoooot
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], r15w
lea rdx, str.mtmymu
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x140]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp + 0x208]
call fcn.180009ae4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.18007a150
nop
lea rcx, [rbp + 0x140]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp + 0x90]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
nop
lea rcx, [rbp + 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0x68]
call fcn.180009548
lea rax, [rbp + 0x118]
mov qword [rbp + 0x4c0], rax
mov qword [rbp + 0x40], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], r15w
lea rdx, str.ok.com_
lea rcx, [rbp + 0x40]
call fcn.1800095ac
nop
mov qword [rbp - 0x60], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r15w
lea rdx, str.w.facebo
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
mov qword [rsp + 0x78], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rbp - 0x78], xmm0
mov word [rsp + 0x78], r15w
lea rdx, str.https:__ww
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x68]
call fcn.180009ae4
nop
lea r8, [rbp + 0x40]
mov rdx, rax
lea rcx, [rbp + 0x118]
call fcn.180009ae4
mov rbx, rax
mov qword [rsp + 0x58], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r15w
lea rdx, [0x1800fcd88]
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
movdqa xmm0, xmmword [0x1801049b0]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], r15w
lea rdx, [0x1800fcd90]
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x208]
call fcn.180009ae4
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x260]
call fcn.18007a150
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rbp + 0x68]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
nop
lea rcx, [rbp + 0x40]
call fcn.180009548
lea rdx, [rbp + 0x260]
lea rcx, [rbp + 0x360]
call fcn.180010d0c
nop
mov qword [rdi], r15
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r15b
lea eax, [r15 + 1]
mov r14d, eax
mov dword [rbp - 0x68], eax
mov r12d, r15d
lea esi, [rax + 1]
test r12d, r12d
je 0x180011c49
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], r15
mov rax, qword [rbp + 0x4d0]
mov rcx, rax
cmp qword [rax + 0x18], 8
jb 0x180011c6f
mov rcx, qword [rax]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rbx, rax
test rax, rax
jne 0x180011c99
mov rbx, r15
mov qword [rbp + 0x110], rbx
mov rax, r15
jmp 0x180011ca0
mov qword [rbp + 0x110], rax
test rax, rax
jne 0x180011caa
jmp 0x180014006
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], r15
lea rdx, [rbp + 0x3a0]
lea rcx, [rbp + 0x20]
call fcn.180015990
or r14d, 4
mov dword [rbp - 0x68], r14d
lea rdi, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdi, qword [rbp + 0x20]
lea rcx, [rbp + 0x360]
call fcn.180011330
movzx r8d, ax
xor r9d, r9d
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rdi, rax
lea rcx, [rbp + 0x20]
call fcn.180009548
or r14d, esi
mov dword [rbp - 0x68], r14d
test rdi, rdi
jne 0x180011d22
mov rdi, r15
mov qword [rbp + 0x138], r15
mov rax, r15
jmp 0x180011d2f
mov qword [rbp + 0x138], rdi
mov rax, rdi
mov r15, rdi
xor esi, esi
test rax, rax
jne 0x180011d4d
xor r15d, r15d
test rbx, rbx
je 0x180011d48
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
jmp 0x180014001
mov qword [rbp + 0x1b8], rsi
mov qword [rbp + 0x1c8], rsi
mov eax, 7
mov qword [rbp + 0x1d0], rax
mov word [rbp + 0x1b8], si
mov qword [rbp], rsi
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rax
lea rcx, [rbp]
cmp qword [r13 + 0x10], rsi
lea rdx, str.POST
jne 0x180011d92
lea rdx, [0x1800fcda8]
call fcn.1800095ac
lea rcx, [rbp + 0x1b8]
call fcn.180009548
mov r8d, 0x20
lea rdx, [rbp]
lea rcx, [rbp + 0x1b8]
call fcn.1800ac6d0
mov eax, 7
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x18], rax
mov word [rbp], si
lea rcx, [rbp]
call fcn.180009548
lea r9, [rbp + 0x360]
lea r8, [rbp + 0x1b8]
lea rdx, [rbp + 0x138]
lea rcx, [rsp + 0x30]
call fcn.1800114f4
nop
mov rsi, qword [rsp + 0x30]
test rsi, rsi
jne 0x180011e21
lea rcx, [rbp + 0x1b8]
call fcn.180009548
nop
test r15, r15
je 0x180011d36
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x180011d36
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
movups xmmword [rbp + 0x218], xmm0
xorps xmm1, xmm1
xor eax, eax
movups xmmword [rbp + 0x1a0], xmm1
mov qword [rbp + 0x1b0], rax
mov dword [rbp + 0x60], 0x3300
lea rcx, [rbp + 0x208]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
xor edi, edi
test eax, eax
je 0x180011fef
mov rax, qword [rbp + 0x218]
test rax, rax
je 0x180011ea6
mov qword [rbp + 0x228], 3
mov qword [rbp + 0x230], rax
mov qword [rbp + 0x238], rdi
movups xmm0, xmmword [rbp + 0x228]
movups xmmword [rbp + 0x1a0], xmm0
movsd xmm1, qword [rbp + 0x238]
movsd qword [rbp + 0x1b0], xmm1
mov rax, qword [rbp + 0x210]
test rax, rax
je 0x180011f7c
xorps xmm6, xmm6
xor ecx, ecx
mov qword [rbp + 0x300], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d8], xmm0
mov qword [rbp + 0x1e8], rcx
mov qword [rbp + 0x280], 2
mov qword [rbp + 0x288], rax
mov dword [rbp + 0x29c], 1
mov qword [rbp + 0x290], rdi
mov dword [rbp + 0x298], edi
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x20]
call fcn.180015990
or r14d, 8
mov dword [rbp - 0x68], r14d
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
lea r9, [rbp + 0x1d8]
lea r8, [rbp + 0x280]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
mov ebx, eax
lea rcx, [rbp + 0x20]
call fcn.180009548
test ebx, ebx
je 0x180011f65
movups xmm6, xmmword [rbp + 0x1d8]
movsd xmm0, qword [rbp + 0x1e8]
jmp 0x180011f6d
movsd xmm0, qword [rbp + 0x300]
movups xmmword [rbp + 0x1a0], xmm6
movsd qword [rbp + 0x1b0], xmm0
cmp dword [rbp + 0x208], edi
je 0x180011fb5
lea r8, [rbp + 0x360]
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x160]
call fcn.180011110
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp + 0x1b0], xmm1
cmp qword [rbp + 0x1a8], rdi
je 0x180011fef
mov r9d, 0x18
lea r8, [rbp + 0x1a0]
lea edx, [r9 + 0xe]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, 4
lea r8, [rbp + 0x60]
lea edx, [r9 + 0x1b]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r15, qword [rbp + 0x4b0]
cmp qword [r15 + 0x10], 9
jbe 0x180012014
mov rdx, r15
cmp qword [r15 + 0x18], 8
jb 0x18001200a
mov rdx, qword [r15]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
xor r15d, r15d
mov qword [rbp], r15
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], r15
lea rdx, [rbp + 0x360]
lea rcx, [rbp]
call fcn.180015990
or r14d, 0x10
mov dword [rbp - 0x68], r14d
lea rcx, str._device_based_login
call fcn.1800ba350
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rcx, qword [rbp]
mov qword [rsp + 0x20], rax
lea r9, str._device_based_login
xor r8d, r8d
mov rdx, qword [rbp + 0x10]
call fcn.180015f54
mov rbx, rax
lea rcx, [rbp]
call fcn.180009548
cmp rbx, 0xffffffffffffffff
je 0x18001209b
mov dword [rbp + 0x60], 2
lea r9d, [r15 + 4]
lea r8, [rbp + 0x60]
lea edx, [r15 + 0x3f]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov edi, 7
cmp qword [r13 + 0x10], r15
je 0x18001214e
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], rdi
mov word [rbp + 0x20], r15w
lea rdx, str.ation_x_www_form_urlencoded
lea rcx, [rbp + 0x20]
call fcn.1800095ac
nop
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], rdi
mov word [rbp + 0xb0], r15w
lea rdx, str.Content_Type:_applic
lea rcx, [rbp + 0xb0]
call fcn.1800095ac
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x118]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x18001211e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp + 0x118]
call fcn.180009548
nop
lea rcx, [rbp + 0xb0]
call fcn.180009548
nop
lea rcx, [rbp + 0x20]
call fcn.180009548
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], rdi
mov word [rbp - 0x20], r15w
lea rdx, [0x1800fce3c]
lea rcx, [rbp - 0x20]
call fcn.1800095ac
nop
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], rdi
mov word [rbp + 0x20], r15w
lea rdx, str.cebo
lea rcx, [rbp + 0x20]
call fcn.1800095ac
nop
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], rdi
mov word [rbp + 0xb0], r15w
lea rdx, [0x1800fce54]
lea rcx, [rbp + 0xb0]
call fcn.1800095ac
nop
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xb0]
lea rcx, [rsp + 0x38]
call fcn.180009ae4
nop
lea r8, [rbp - 0x20]
mov rdx, rax
lea rcx, [rbp + 0x118]
call fcn.180009ae4
mov rbx, rax
mov qword [rbp], r15
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], r15
lea rdx, [rbp + 0x360]
lea rcx, [rbp]
call fcn.180015990
or r14d, 0x20
mov dword [rbp - 0x68], r14d
mov r9, rbx
cmp qword [rbx + 0x18], 8
jb 0x180012220
mov r9, qword [rbx]
lea rcx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rcx, qword [rbp]
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov rdx, qword [rbp + 0x10]
call fcn.180015f54
mov rbx, rax
lea rcx, [rbp]
call fcn.180009548
nop
lea rcx, [rbp + 0x118]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rbp + 0xb0]
call fcn.180009548
nop
lea rcx, [rbp + 0x20]
call fcn.180009548
nop
lea rcx, [rbp - 0x20]
call fcn.180009548
cmp rbx, 0xffffffffffffffff
je 0x180013dde
mov qword [rbp + 0x90], r15
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], rdi
mov word [rbp + 0x90], r15w
lea rdx, str.k.com
lea rcx, [rbp + 0x90]
call fcn.1800095ac
nop
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], rdi
mov word [rbp + 0xf0], r15w
lea rdx, str.aceboo
lea rcx, [rbp + 0xf0]
call fcn.1800095ac
nop
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], rdi
mov word [rbp + 0x180], r15w
lea rdx, str.https:__www.f
lea rcx, [rbp + 0x180]
call fcn.1800095ac
nop
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], rdi
mov word [rbp - 0x20], r15w
lea rdx, str.Origin:
lea rcx, [rbp - 0x20]
call fcn.1800095ac
nop
lea r8, [rbp + 0x180]
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x58]
call fcn.180009ae4
nop
lea r8, [rbp + 0xf0]
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.180009ae4
nop
lea r8, [rbp + 0x90]
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.180009ae4
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rbp - 0x20]
call fcn.180009548
nop
lea rcx, [rbp + 0x180]
call fcn.180009548
nop
lea rcx, [rbp + 0xf0]
call fcn.180009548
nop
lea rcx, [rbp + 0x90]
call fcn.180009548
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], rdi
mov word [rbp + 0x40], r15w
lea rdx, str.le_Chrome__v_104_
lea rcx, [rbp + 0x40]
call fcn.1800095ac
nop
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], rdi
mov word [rbp + 0x68], r15w
lea rdx, str.__Not_A__Brand__v_99____Goog
lea rcx, [rbp + 0x68]
call fcn.1800095ac
nop
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x158], rdi
mov word [rbp + 0x140], r15w
lea rdx, str.sec_ch_ua:__Chromium__v_104__
lea rcx, [rbp + 0x140]
call fcn.1800095ac
nop
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x140]
lea rcx, [rsp + 0x78]
call fcn.180009ae4
nop
lea r8, [rbp + 0x40]
mov rdx, rax
lea rcx, [rbp]
call fcn.180009ae4
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp + 0x140]
call fcn.180009548
nop
lea rcx, [rbp + 0x68]
call fcn.180009548
nop
lea rcx, [rbp + 0x40]
call fcn.180009548
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rdi
mov word [rbp - 0x60], r15w
lea rdx, str.gned_exchange_vb3_q0.9
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], rdi
mov word [rbp - 0x20], r15w
lea rdx, str.ng___q0.8_application_si
lea rcx, [rbp - 0x20]
call fcn.1800095ac
nop
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x190], r15
mov qword [rbp + 0x198], rdi
mov word [rbp + 0x180], r15w
lea rdx, str.cation_xml_q0.9_image_webp_image_ap
lea rcx, [rbp + 0x180]
call fcn.1800095ac
nop
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], rdi
mov word [rbp + 0xf0], r15w
lea rdx, str._appli
lea rcx, [rbp + 0xf0]
call fcn.1800095ac
nop
mov qword [rbp + 0x90], r15
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], rdi
mov word [rbp + 0x90], r15w
lea rdx, str.Accept:_text_html_application_xhtmlxml
lea rcx, [rbp + 0x90]
call fcn.1800095ac
nop
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x2a0]
call fcn.180009ae4
nop
lea r8, [rbp + 0x180]
mov rdx, rax
lea rcx, [rbp + 0x338]
call fcn.180009ae4
nop
lea r8, [rbp - 0x20]
mov rdx, rax
lea rcx, [rbp + 0x318]
call fcn.180009ae4
nop
lea r8, [rbp - 0x60]
mov rdx, rax
lea rcx, [rbp + 0x118]
call fcn.180009ae4
nop
lea rcx, [rbp + 0x318]
call fcn.180009548
nop
lea rcx, [rbp + 0x338]
call fcn.180009548
nop
lea rcx, [rbp + 0x2a0]
call fcn.180009548
nop
lea rcx, [rbp + 0x90]
call fcn.180009548
nop
lea rcx, [rbp + 0xf0]
call fcn.180009548
nop
lea rcx, [rbp + 0x180]
call fcn.180009548
nop
lea rcx, [rbp - 0x20]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.q0.1_bn_q0.1_eu_q0.1
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.0.1_ast_q0.1_az_
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.r_q0.3_an_q0.2_hy_q
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
mov qword [rbp + 0x140], r15
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x158], rdi
mov word [rbp + 0x140], r15w
lea rdx, str.q0.6_am_q0.5_sq_q0.4_a
lea rcx, [rbp + 0x140]
call fcn.1800095ac
nop
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], rdi
mov word [rbp + 0x68], r15w
lea rdx, str.a_q0.7_af_
lea rcx, [rbp + 0x68]
call fcn.1800095ac
nop
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], rdi
mov word [rbp + 0x40], r15w
lea rdx, str.Accept_Language:_en_q0.9_q0.8_j
lea rcx, [rbp + 0x40]
call fcn.1800095ac
nop
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
nop
lea r8, [rbp + 0x140]
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp + 0x240]
call fcn.180009ae4
nop
lea r8, [rsp + 0x58]
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x38]
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.180009ae4
nop
lea rcx, [rbp + 0x2c0]
call fcn.180009548
nop
lea rcx, [rbp + 0x240]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0x68]
call fcn.180009548
nop
lea rcx, [rbp + 0x140]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], rdi
mov word [rbp + 0xf0], r15w
lea rdx, str.ep_alive
lea rcx, [rbp + 0xf0]
call fcn.1800095ac
nop
mov qword [rbp + 0x90], r15
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], rdi
mov word [rbp + 0x90], r15w
lea rdx, str.ection:_ke
lea rcx, [rbp + 0x90]
call fcn.1800095ac
nop
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rdi
mov word [rbp - 0x60], r15w
lea rdx, str.Conn
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
lea r8, [rbp + 0x90]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x2a0]
call fcn.180009ae4
nop
lea r8, [rbp + 0xf0]
mov rdx, rax
lea rcx, [rbp + 0x160]
call fcn.180009ae4
nop
lea rcx, [rbp + 0x2a0]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
nop
lea rcx, [rbp + 0x90]
call fcn.180009548
nop
lea rcx, [rbp + 0xf0]
call fcn.180009548
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r15
lea rdx, [rbp + 0x360]
lea rcx, [rbp - 0x20]
call fcn.180015990
or r14d, 0x40
mov dword [rbp - 0x68], r14d
lea rcx, str._ads_manager_account_settings_account_billing
call fcn.1800ba350
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, str._ads_manager_account_settings_account_billing
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
call fcn.180015f54
mov rbx, rax
lea rcx, [rbp - 0x20]
call fcn.180009548
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r15
lea rdx, [rbp + 0x360]
lea rcx, [rbp - 0x20]
call fcn.180015990
cmp rbx, 0xffffffffffffffff
je 0x180013048
bts r14d, 7
mov dword [rbp - 0x68], r14d
lea rcx, str.business.facebook.com
call fcn.1800ba350
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, str.business.facebook.com
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
call fcn.180015f54
mov rbx, rax
lea rcx, [rbp - 0x20]
call fcn.180009548
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
lea rcx, [rsp + 0x78]
mov word [rsp + 0x78], r15w
cmp rbx, 0xffffffffffffffff
je 0x180012a8d
lea rdx, str.acebook.com
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.siness.f
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Host:_bu
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180012a4e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
jmp 0x180012b54
lea rdx, [0x1800fd2c8]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.cebo
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Host:_www.fa
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180012b1a
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
lea rdx, [rbp + 0x160]
cmp qword [rbp + 0x178], 8
cmovae rdx, qword [rbp + 0x160]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.th:_1920
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.viewport_wid
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180012bea
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
lea rdx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rdx, qword [rbp]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rdx, str.sec_ch_ua_mobile:__0
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.tform:__Windows_
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.sec_ch_ua_pla
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180012caa
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.efers_color_scheme:_light
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.sec_ch_pr
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180012d41
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.de_Insecure_Requests:_1
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Upgra
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180012dd8
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
lea rdx, [rbp + 0x118]
cmp qword [rbp + 0x130], 8
cmovae rdx, qword [rbp + 0x118]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.etch_Site:_none
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Sec_F
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180012e90
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
lea rdx, str.Sec_Fetch_Mode:_navigate
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.ch_User:__1
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Sec_Fet
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180012f38
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.ment
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.h_Dest:_docu
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Sec_Fetc
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180013009
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
jmp 0x1800136fa
bts r14d, 8
mov dword [rbp - 0x68], r14d
lea rcx, str._v13.0_
call fcn.1800ba350
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 8
cmovae rcx, qword [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea r9, str._v13.0_
xor r8d, r8d
mov rdx, qword [rbp - 0x10]
call fcn.180015f54
mov rbx, rax
lea rcx, [rbp - 0x20]
call fcn.180009548
cmp rbx, 0xffffffffffffffff
je 0x180013721
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, [0x1800fd520]
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.cebook.c
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Host:_graph.fa
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x18001313e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
lea rdx, [rbp + 0x160]
cmp qword [rbp + 0x178], 8
cmovae rdx, qword [rbp + 0x160]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rdx, [rbp]
cmp qword [rbp + 0x18], 8
cmovae rdx, qword [rbp]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.a_mobile:__0
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.sec_ch_u
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x180013226
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.dows_
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.sec_ch_ua_platform:__Win
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x1800132bd
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.w_form_urlencoded
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.plication_x_ww
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Content_type:_ap
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x18001338e
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, [0x1800fd64c]
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Accept:_
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x18001343d
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rdx, qword [rbp + 0xb0]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.ame_site
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.ch_Site:_s
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Sec_Fet
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x18001352f
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
lea rdx, str.Sec_Fetch_Mode:_cors
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.:_empty
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Sec_Fetch_Dest
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x1800135ef
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.ook.com_
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.r:_https:__www.faceb
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Refere
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], 8
jb 0x1800136c0
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 8
cmovae rdx, qword [rbp + 0x20]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
jmp 0x180013da4
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], rdi
mov word [rbp + 0x40], r15w
lea rdx, str.k.com
lea rcx, [rbp + 0x40]
call fcn.1800095ac
nop
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, [0x1800fd758]
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.face
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Host:_www.
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x240]
call fcn.180009ae4
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
lea r8, [rbp + 0x40]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
mov ebx, 8
cmp qword [rax + 0x18], rbx
jb 0x180013800
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rbp + 0x240]
call fcn.180009548
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp + 0x40]
call fcn.180009548
lea rdx, [rbp + 0x160]
cmp qword [rbp + 0x178], rbx
cmovae rdx, qword [rbp + 0x160]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov word [rsp + 0x58], r15w
lea rdx, str.t_Length:
lea rcx, [rsp + 0x58]
call fcn.1800095ac
nop
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], rdi
mov word [rsp + 0x38], r15w
lea rdx, str.Conten
lea rcx, [rsp + 0x38]
call fcn.1800095ac
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x68]
call fcn.180009ae4
nop
lea rcx, [rsp + 0x38]
call fcn.180009548
nop
lea rcx, [rsp + 0x58]
call fcn.180009548
mov rdx, qword [r13 + 0x10]
lea rcx, [rbp - 0x40]
call fcn.18001089c
nop
mov rdx, rax
cmp qword [rax + 0x18], rbx
jb 0x18001390c
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x68]
call fcn.1800157dc
nop
lea rcx, [rbp - 0x40]
call fcn.180009548
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], rbx
cmovae rdx, qword [rbp + 0x68]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rdx, [rbp]
cmp qword [rbp + 0x18], rbx
cmovae rdx, qword [rbp]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rdi
mov word [rbp - 0x60], r15w
lea rdx, str.h_ua_mobile:__0
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.sec_c
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], rbx
jb 0x1800139b6
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rdi
mov word [rbp - 0x60], r15w
lea rdx, str.atform:__Windows_
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.sec_ch_ua_pl
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], rbx
jb 0x180013a43
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rdi
mov word [rbp - 0x60], r15w
lea rdx, str.refers_color_scheme:_light
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.sec_ch_p
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], rbx
jb 0x180013ad0
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rdi
mov word [rbp - 0x60], r15w
lea rdx, str.re_Requests:_1
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.Upgrade_Insecu
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
cmp qword [rax + 0x18], rbx
jb 0x180013b5d
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], rbx
cmovae rdx, qword [rbp + 0xb0]
lea rcx, [rsp + 0x30]
call fcn.180015b4c
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], rdi
mov word [rbp - 0x60], r15w
lea rdx, str.ode:_navigate
lea rcx, [rbp - 0x60]
call fcn.1800095ac
nop
mov qword [rsp + 0x78], r15
mov qword [rbp - 0x78], r15
mov qword [rbp - 0x70], rdi
mov word [rsp + 0x78], r15w
lea rdx, str.Sec_Fetch_M
lea rcx, [rsp + 0x78]
call fcn.1800095ac
nop
lea r8, [rbp - 0x60]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x40]
call fcn.180009ae4
mov rcx, rax
call fcn.1800153d8
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rsp + 0x78]
call fcn.180009548
nop
lea rcx, [rbp - 0x60]
call fcn.180009548
lea rdx, str.Sec_Fetch_User:__1
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp + 0x118]
call fcn.1800153d8
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rdx, str.ocument
lea rcx, [rbp + 0x240]
call fcn.180009100
mov rbx, rax
lea rdx, str.Sec_Fetch_Dest:_d
lea rcx, [rbp + 0xd0]
call fcn.180009100
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
mov rcx, rax
call fcn.1800153d8
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rbp + 0x240]
call fcn.180009548
lea rcx, [rbp + 0x20]
call fcn.1800153d8
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rdx, str.e_origin
lea rcx, [rbp + 0x2a0]
call fcn.180009100
mov rdi, rax
lea rdx, str.ite:_sam
lea rcx, [rbp + 0x2c0]
call fcn.180009100
mov rbx, rax
lea rdx, str.Sec_Fetch_S
lea rcx, [rbp + 0x240]
call fcn.180009100
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xd0]
call fcn.180009ae4
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.180009ae4
mov rcx, rax
call fcn.1800153d8
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.180015b4c
lea rcx, [rbp - 0x40]
call fcn.180009548
nop
lea rcx, [rbp + 0xd0]
call fcn.180009548
nop
lea rcx, [rbp + 0x240]
call fcn.180009548
nop
lea rcx, [rbp + 0x2c0]
call fcn.180009548
nop
lea rcx, [rbp + 0x2a0]
call fcn.180009548
nop
lea rcx, [rbp + 0x68]
call fcn.180009548
nop
lea rcx, [rbp + 0x160]
call fcn.180009548
nop
lea rcx, [rbp + 0x20]
call fcn.180009548
nop
lea rcx, [rbp + 0x118]
call fcn.180009548
nop
lea rcx, [rbp]
call fcn.180009548
nop
lea rcx, [rbp + 0xb0]
call fcn.180009548
mov edi, r15d
mov dword [rbp + 0x8c], r15d
mov dword [rbp + 0x88], r15d
mov dword [rbp + 0x4c8], r15d
mov ebx, 7
mov rdx, r13
lea rcx, [rsp + 0x30]
call fcn.1800116b8
test eax, eax
je 0x180013fc3
lea rcx, [rsp + 0x30]
call fcn.180011718
lea rcx, [rbp + 0x118]
call fcn.180015460
nop
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x4c0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x16]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
xor r8d, r8d
mov edx, dword [rbp + 0x4c0]
shr rdx, 1
lea rcx, [rbp + 0x118]
call fcn.1800153b4
xor edx, edx
lea rcx, [rbp + 0x118]
call fcn.1800153e8
mov r9, rax
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x4c0]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
neg eax
sbb ecx, ecx
and ecx, dword [rbp + 0x4c0]
mov dword [rbp + 0x4c0], ecx
xor r8d, r8d
mov edx, ecx
shr rdx, 1
lea rcx, [rbp + 0x118]
call fcn.1800153b4
lea rdx, [rbp + 0x118]
call fcn.180082954
lea rcx, [rsp + 0x30]
call fcn.1800117f0
mov r15d, eax
mov ecx, eax
sub ecx, 0xc8
je 0x180013f99
sub ecx, 0xc9
je 0x180013f52
sub ecx, 3
je 0x180013f4b
cmp ecx, 3
je 0x180013efc
mov ebx, 3
jmp 0x180013f9e
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x2e0]
call fcn.180011830
mov r10, rax
lea r9, [rbp + 0x4c8]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x8c]
lea rcx, [rbp + 0x160]
call fcn.180015b88
mov rcx, rax
mov rdx, r10
call fcn.180015b98
cmp edi, 0x197
jne 0x180013f9e
mov ebx, 1
jmp 0x180013f9e
mov ebx, 9
jmp 0x180013f9e
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x308]
call fcn.180011830
mov r10, rax
lea r9, [rbp + 0x4c8]
lea r8, [rbp + 0x88]
lea rdx, [rbp + 0x8c]
lea rcx, [rbp + 0x160]
call fcn.180015b88
mov rcx, rax
mov rdx, r10
call fcn.180015b98
mov ebx, 5
jmp 0x180013f9e
mov ebx, 2
mov edi, r15d
lea rcx, [rbp + 0x118]
call fcn.180009548
mov eax, 7
cmp bx, ax
jne 0x18001406c
xor r15d, r15d
jmp 0x180013dfb
lea rcx, [rsp + 0x30]
call fcn.1800141b0
nop
lea rcx, [rbp + 0x1b8]
call fcn.180009548
nop
lea rcx, [rbp + 0x138]
call fcn.1800141b0
nop
lea rcx, [rbp + 0x110]
call fcn.1800141b0
nop
lea rcx, [rbp + 0x1f0]
call fcn.180014158
mov esi, 2
inc r12d
mov eax, 5
cmp r12d, eax
jl 0x180011c39
mov rbx, qword [rbp + 0x4a0]
lea rcx, [rbp + 0x360]
call fcn.1800110b8
nop
lea rcx, [rbp + 0x260]
call fcn.180009548
nop
mov rcx, qword [rbp + 0x4a8]
call fcn.180009548
nop
mov rcx, r13
call fcn.180009398
mov rax, rbx
movaps xmm6, xmmword [rsp + 0x540]
add rsp, 0x558
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
lea rcx, [rsp + 0x30]
call fcn.180011738
xor ebx, ebx
jmp 0x1800140d0
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x1d8]
call fcn.180011760
nop
mov rax, qword [rbp + 0x1e0]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x1d8]
mov r8, qword [rbp + 0x1f8]
lea rdx, [rbp + 0x4c0]
lea rcx, [rbp + 0x1f0]
call fcn.180015bb8
nop
lea rcx, [rbp + 0x1d8]
call fcn.180014158
lea rcx, [rsp + 0x30]
call fcn.180011738
mov r8, rbx
test rax, rax
setne r8b
test rax, rax
jne 0x18001407a
mov r8, qword [rbp + 0x1f8]
mov rdx, qword [rbp + 0x1f0]
lea rcx, [rbp - 0x40]
call fcn.180015c08
mov rdx, rax
mov rbx, qword [rbp + 0x4a0]
mov rcx, rbx
call fcn.1800093f4
lea rcx, [rbp - 0x40]
call fcn.180009398
nop
lea rcx, [rsp + 0x30]
call fcn.1800141b0
nop
lea rcx, [rbp + 0x1b8]
call fcn.180009548
nop
lea rcx, [rbp + 0x138]
call fcn.1800141b0
nop
lea rcx, [rbp + 0x110]
call fcn.1800141b0
nop
lea rcx, [rbp + 0x1f0]
call fcn.180014158
jmp 0x18001401e