Function at 0x140003d70
Capabilities:
Create http request

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f0]
sub rsp, 0x2f0
mov rax, qword [0x14004a100]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov rsi, rdx
mov rdi, rcx
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 0xa
lea rdx, [0x1400425f8]
lea rcx, [rsp + 0x78]
call fcn.14000cb20
nop
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x48]
call fcn.140003b40
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 7
jbe 0x140003e29
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000476d
call fcn.140011680
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x1400046ef
cmp dword [0x14004d440], 1
jne 0x140003e97
lea rdx, str.Cesta_ke_spustenemu_gta_sa.exe:
lea rcx, [0x14004b7b0]
call fcn.14000c2a0
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova rdx, qword [rbp - 0x48]
mov r8, qword [rbp - 0x38]
mov rcx, rax
call fcn.14000dda0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000d980
movzx edx, ax
mov rcx, rbx
call fcn.14000d7d0
mov rcx, rbx
call fcn.14000d670
mov rcx, qword [rbp - 0x38]
mov rax, rdi
cmp qword [rdi + 0x18], 7
jbe 0x140003ea4
mov rax, qword [rdi]
lea r9, [rbp - 0x48]
cmp qword [rbp - 0x30], 7
cmova r9, qword [rbp - 0x48]
cmp rcx, qword [rdi + 0x10]
jne 0x140004198
test rcx, rcx
je 0x140003ef3
sub r9, rax
nop dword [rax]
nop dword [rax + rax]
movzx edx, word [r9 + rax]
cmp dx, word [rax]
jne 0x140004042
add rax, 2
sub rcx, 1
jne 0x140003ed0
mov eax, r13d
test eax, eax
jne 0x140004198
lea rcx, [rsp + 0x78]
call fcn.140002fe0
nop
cmp dword [0x14004d440], 1
jne 0x140003f41
lea rdx, str.Proces_gta_sa.exe_je_spusten_ze_spravne_slozky.
lea rcx, [0x14004b7b0]
call fcn.14000c2a0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000d980
movzx edx, ax
mov rcx, rbx
call fcn.14000d7d0
mov rcx, rbx
call fcn.14000d670
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
mov r8d, 0x10
lea rdx, str.ProcesPathDetect
lea rcx, [rbp - 0x68]
call fcn.14000cc50
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 5
lea rdx, str.VseOk
lea rcx, [rsp + 0x30]
call fcn.14000cc50
nop
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rcx, qword [rbp - 0x68]
lea rax, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rax, qword [rsp + 0x78]
lea r9, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r9, qword [rsp + 0x30]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, str.https:__zoofxpawn.hys.cz_AC_SCAN_Detections_detekce.php_text_sip_styp_s
mov edx, 0x200
lea rcx, [rbp - 0x20]
call fcn.1400016f0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.DataSender
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rdi, rax
test rax, rax
jne 0x140004054
lea rdx, str.Chyba_pri_inicializaci_WinINet.
lea rcx, [0x14004b8e0]
call fcn.14000bfb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000be00
movzx edx, al
mov rcx, rbx
call fcn.14000db10
mov rcx, rbx
call fcn.14000d670
jmp 0x1400040c8
mov eax, 1
mov ecx, 0xffffffff
cmovb eax, ecx
jmp 0x140003eeb
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x20]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
test rax, rax
jne 0x1400040b5
lea rdx, str.Chyba_pri_pripojeni_k_serveru.
lea rcx, [0x14004b8e0]
call fcn.14000bfb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000be00
movzx edx, al
mov rcx, rbx
call fcn.14000db10
mov rcx, rbx
call fcn.14000d670
jmp 0x1400040be
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140004105
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004100
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004773
call fcn.140011680
movdqa xmm0, xmmword [0x1400433e0]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140004154
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000414e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004779
call fcn.140011680
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1400046ef
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004761
jmp 0x1400046e9
lea rcx, [rbp - 0x68]
call fcn.140002fe0
nop
mov r15, qword [rbp - 0x58]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 0x4a
jb 0x14000477f
lea r12, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova r12, qword [rbp - 0x68]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
lea r14, [r15 + 0x4a]
mov edi, 0xf
lea rbx, [rsp + 0x58]
cmp r14, rdi
jbe 0x14000426e
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x14000422f
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140011928
test rax, rax
je 0x140004797
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140004269
mov eax, 0x16
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140004249
mov rbx, r13
jmp 0x140004269
cmp rcx, 0x1000
jb 0x140004261
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004767
jmp 0x140004210
call fcn.140011928
mov rbx, rax
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], rdi
movaps xmm0, xmmword [str.Varovani:_Proces_gta_sa.exe_byl_spusten_z_jine_slozky__Verejna_IP_adresa:]
movups xmmword [rbx], xmm0
movaps xmm1, xmmword [0x1400426f0]
movups xmmword [rbx + 0x10], xmm1
movaps xmm0, xmmword [0x140042700]
movups xmmword [rbx + 0x20], xmm0
movaps xmm1, xmmword [0x140042710]
movups xmmword [rbx + 0x30], xmm1
movsd xmm0, qword [0x140042720]
movsd qword [rbx + 0x40], xmm0
movzx eax, word [0x140042728]
mov word [rbx + 0x48], ax
lea rcx, [rbx + 0x4a]
mov r8, r15
mov rdx, r12
call fcn.1400340f0
mov byte [rbx + r14], 0
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1400042dc
mov rdx, qword [rsi]
lea rcx, [rsp + 0x58]
mov rbx, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x70]
cmp rdi, 0xf
cmova rcx, rbx
mov r8, qword [rsp + 0x68]
cmp r8, qword [rsi + 0x10]
jne 0x140004314
test r8, r8
je 0x140004669
call fcn.140034bd0
test eax, eax
je 0x140004669
cmp dword [0x14004d440], 1
jne 0x140004437
lea r8, [rsp + 0x58]
cmp rdi, 0xf
cmova r8, rbx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, dword [rsp + 0x68]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.14000c9f0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rdx, qword [rsp + 0x30]
lea r8, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova r8, qword [rsp + 0x58]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdx
mov r9d, dword [rsp + 0x68]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
lea rcx, [0x14004ba70]
call fcn.14000dda0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000d980
movzx edx, ax
mov rcx, rbx
call fcn.14000d7d0
mov rcx, rbx
call fcn.14000d670
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x140004437
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004432
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004785
call fcn.140011680
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
mov r8d, 0x10
lea rdx, str.ProcesPathDetect
lea rcx, [rsp + 0x78]
call fcn.14000cc50
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 8
lea rdx, str.GTASABAD
lea rcx, [rsp + 0x30]
call fcn.14000cc50
nop
lea rcx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rcx, qword [rsp + 0x78]
lea rax, [rbp - 0x68]
cmp qword [rbp - 0x50], 0xf
cmova rax, qword [rbp - 0x68]
lea r9, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r9, qword [rsp + 0x30]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, str.https:__zoofxpawn.hys.cz_AC_SCAN_Detections_detekce.php_text_sip_styp_s
mov edx, 0x200
lea rcx, [rbp - 0x20]
call fcn.1400016f0
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.DataSender
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rdi, rax
test rax, rax
jne 0x140004537
lea rdx, str.Chyba_pri_inicializaci_WinINet.
lea rcx, [0x14004b8e0]
call fcn.14000bfb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000be00
movzx edx, al
mov rcx, rbx
call fcn.14000db10
mov rcx, rbx
call fcn.14000d670
jmp 0x1400045ab
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x20]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
test rax, rax
jne 0x140004598
lea rdx, str.Chyba_pri_pripojeni_k_serveru.
lea rcx, [0x14004b8e0]
call fcn.14000bfb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000be00
movzx edx, al
mov rcx, rbx
call fcn.14000db10
mov rcx, rbx
call fcn.14000d670
jmp 0x1400045a1
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400045e8
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000478b
call fcn.140011680
movdqa xmm0, xmmword [0x1400433e0]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140004637
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004632
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004791
call fcn.140011680
lea rax, [rsp + 0x58]
cmp rsi, rax
je 0x14000465f
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
mov rcx, rsi
call fcn.14000baa0
mov rbx, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x70]
cmp rdi, 0xf
jbe 0x1400046a0
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140004698
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004797
mov rcx, rbx
call fcn.140011680
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x1400046ef
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000479d
call fcn.140011680
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 7
jbe 0x14000472b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004726
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000475b
call fcn.140011680
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.140011660
lea r11, [rsp + 0x2f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.140001850
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.1400018f0
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
int3