Function at 0x140002ad0
Capabilities:
Reference http user-agent string

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb0
mov rsi, r9
mov rdi, r8
mov qword [rbp + 0xf], r8
mov r14, rdx
mov rbx, rcx
mov qword [rbp - 0x41], rcx
xor r12d, r12d
call fcn.1400092d0
nop
lea rax, [rbx + 0x20]
mov qword [rbp + 7], rax
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov qword [rbx + 0x50], r12
mov qword [rbx + 0x58], 0xf
mov byte [rbx + 0x40], r12b
mov qword [rbx + 0x70], r12
mov qword [rbx + 0x78], 0xf
mov byte [rbx + 0x60], r12b
mov qword [rbx + 0x98], r12
mov qword [rbx + 0xa0], 0xf
mov byte [rbx + 0x88], r12b
lea r15, [rbx + 0xa8]
mov qword [rbp - 0x39], r15
mov qword [r15], r12
mov qword [r15 + 8], r12
lea ecx, [r12 + 0x60]
call fcn.14001232c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [r15], rax
lea r13, [rbx + 0xb8]
mov qword [rbp - 0x39], r13
mov qword [r13], r12
mov qword [r13 + 8], r12
lea ecx, [r12 + 0x60]
call fcn.14001232c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [r13], rax
add rbx, 0xd0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r12b
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], r12b
lea r8d, [r12 + 0xa]
lea rdx, str.User_Agent
lea rcx, [rbp - 0x61]
call fcn.140009920
nop
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x39]
mov rcx, r15
call fcn.14000a500
mov rcx, qword [rax]
add rcx, 0x40
lea r8d, [r12 + 0x78]
lea rdx, str.Mozilla_5.0__Macintosh__Intel_Mac_OS_X_10_15_2__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_79.0.3945.88_Safari_537.36
call fcn.140009920
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140002c6d
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140012368
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
mov r8d, 0xa
lea rdx, str.Connection
lea rcx, [rbp - 0x61]
call fcn.140009920
nop
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x39]
mov rcx, r15
call fcn.14000a500
mov rcx, qword [rax]
add rcx, 0x40
mov r8d, 0xa
lea rdx, str.Keep_Alive
call fcn.140009920
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140002cfc
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002cf7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002cf7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140012368
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
mov r8d, 7
lea rdx, str.timeout
lea rcx, [rbp - 0x61]
call fcn.140009920
nop
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x39]
mov rcx, r13
call fcn.14000a500
mov rcx, qword [rax]
add rcx, 0x40
mov r8d, 4
lea rdx, str.3000
call fcn.140009920
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140002d8b
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002d86
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140012368
mov qword [rbp - 0x51], r12
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
mov r12d, 5
mov r8d, r12d
lea rdx, str.proxy
lea rcx, [rbp - 0x61]
call fcn.140009920
nop
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x39]
mov rcx, r13
call fcn.14000a500
mov rcx, qword [rax]
add rcx, 0x40
xor r8d, r8d
lea rdx, [0x1400162c9]
call fcn.140009920
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140002e1a
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e15
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140012368
cmp rbx, rdi
je 0x140002e38
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140002e2c
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rbx
call fcn.140009920
cmp qword [rsi + 8], 0
jbe 0x140002ef8
mov rax, qword [rsi]
mov rbx, qword [rax]
cmp rbx, rax
je 0x140002ef8
nop dword [rax]
nop word [rax + rax]
lea r8, [rbx + 0x20]
lea rdi, [rbx + 0x40]
lea rdx, [rbp - 0x39]
mov rcx, r15
call fcn.14000a300
mov rcx, qword [rax]
add rcx, 0x40
cmp rcx, rdi
je 0x140002e96
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140002e8d
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
call fcn.140009920
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140002ec8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140002ec3
nop word [rax + rax]
cmp rbx, qword [rax + 0x10]
jne 0x140002ec3
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140002eb0
mov rbx, rax
jmp 0x140002eef
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140002eef
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140002ee0
cmp rbx, qword [rsi]
jne 0x140002e60
mov rdi, qword [rbp + 0x7f]
cmp qword [rdi + 8], 0
jbe 0x140002fb8
mov rax, qword [rdi]
mov rbx, qword [rax]
cmp rbx, rax
je 0x140002fb8
nop word [rax + rax]
lea r8, [rbx + 0x20]
lea rdx, [rbp - 0x39]
mov rcx, r13
call fcn.14000a300
mov rcx, qword [rax]
add rcx, 0x40
lea r8, [rbx + 0x40]
cmp rcx, r8
je 0x140002f56
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140002f4d
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.140009920
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x140002f88
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x140002f83
nop word [rax + rax]
cmp rbx, qword [rax + 0x10]
jne 0x140002f83
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140002f70
mov rbx, rax
jmp 0x140002faf
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140002faf
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140002fa0
cmp rbx, qword [rdi]
jne 0x140002f20
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
mov qword [rbp - 0x51], 7
mov eax, dword [str.timeout]
mov dword [rbp - 0x61], eax
movzx eax, word [0x1400163b4]
mov word [rbp - 0x5d], ax
movzx eax, byte [0x1400163b6]
mov byte [rbp - 0x5b], al
mov byte [rbp - 0x5a], 0
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x39]
mov rcx, r13
call fcn.14000a500
mov rcx, qword [rax]
add rcx, 0x40
cmp qword [rcx + 0x18], 0x10
jb 0x14000300f
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov rcx, qword [rbp - 0x41]
mov dword [rcx + 0x80], eax
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x14000305d
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003058
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003058
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140012368
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
mov qword [rbp - 0x51], r12
mov eax, dword [str.proxy]
mov dword [rbp - 0x61], eax
movzx eax, byte [0x1400163c4]
mov byte [rbp - 0x5d], al
mov byte [rbp - 0x5c], 0
lea r8, [rbp - 0x61]
lea rdx, [rbp - 0x39]
mov rcx, r13
call fcn.14000a500
mov r8, qword [rax]
add r8, 0x40
mov r12, qword [rbp - 0x41]
lea rcx, [r12 + 0x88]
cmp rcx, r8
je 0x1400030c3
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400030b9
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.140009920
nop
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140003101
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400030fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140012368
mov rsi, r14
mov r13, qword [r14 + 0x18]
cmp r13, 0x10
jb 0x140003111
mov rsi, qword [r14]
mov r15, qword [r14 + 0x10]
mov rdi, 0xffffffffffffffff
cmp r15, 3
jb 0x140003183
lea r12, [r15 + rsi]
lea r8, [r12 - 2]
sub r8, rsi
lea edx, [rdi + 0x3b]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14000317f
cmp byte [rbx], 0x3a
jne 0x140003156
cmp byte [rbx + 1], 0x2f
jne 0x140003156
cmp byte [rbx + 2], 0x2f
jne 0x140003156
xor eax, eax
jmp 0x14000315b
sbb eax, eax
or eax, 1
test eax, eax
je 0x1400031d7
inc rbx
lea r8, [r12 - 2]
sub r8, rbx
mov edx, 0x3a
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140003141
mov r12, qword [rbp - 0x41]
mov rbx, rdi
cmp ebx, edi
jne 0x1400032df
mov rax, r13
sub rax, r15
lea rcx, str.http:__
cmp rax, 7
jb 0x14000322d
lea rax, [r15 + 7]
mov qword [r14 + 0x10], rax
mov rbx, r14
cmp r13, 0x10
jb 0x1400031b9
mov rbx, qword [r14]
lea rax, [0x1400163cf]
cmp rax, rbx
jbe 0x1400031e8
lea rax, [rbx + r15]
cmp rcx, rax
ja 0x1400031e8
cmp rbx, rcx
ja 0x1400031e0
xor esi, esi
jmp 0x1400031ed
sub rbx, rsi
mov r12, qword [rbp - 0x41]
jmp 0x140003186
mov rsi, rbx
sub rsi, rcx
jmp 0x1400031ed
mov esi, 7
lea r8, [r15 + 1]
lea rcx, [rbx + 7]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rsi
lea r15, str.http:__
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 7
sub r8, rsi
lea rdx, [r15 + 7]
add rdx, rsi
lea rcx, [rbx + rsi]
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14000324a
mov qword [rsp + 0x28], 7
mov edx, 7
mov rcx, r14
call fcn.14000ab50
lea r15, str.http:__
mov r8d, 7
mov rdx, r15
lea rcx, [r12 + 0x60]
call fcn.140009920
mov rbx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x14000326a
mov rbx, qword [r14]
mov rax, qword [r14 + 0x10]
cmp rax, 3
jb 0x1400032cb
lea rsi, [rax + rbx]
lea r8, [rsi - 2]
sub r8, rbx
mov edx, 0x3a
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x1400032cb
cmp byte [rax], 0x3a
jne 0x1400032a6
cmp byte [rax + 1], 0x2f
jne 0x1400032a6
cmp byte [rax + 2], 0x2f
jne 0x1400032a6
xor ecx, ecx
jmp 0x1400032ab
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x1400032d5
inc rax
lea r8, [rsi - 2]
sub r8, rax
mov edx, 0x3a
mov rcx, rax
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x140003291
mov rax, rdi
mov ebx, eax
jmp 0x14000335e
sub rax, rbx
mov ebx, eax
jmp 0x14000335e
mov qword [rbp - 0x51], 0
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
lea eax, [rbx + 3]
movsxd r8, eax
cmp r15, r8
cmovb r8, r15
mov rdx, r14
cmp r13, 0x10
jb 0x14000330c
mov rdx, qword [r14]
lea rcx, [rbp - 0x61]
call fcn.140009920
lea rdx, [rbp - 0x61]
lea rcx, [r12 + 0x60]
call fcn.140009240
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x14000335e
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003359
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000362e
call fcn.140012368
lea eax, [rbx + 3]
movsxd r15, eax
mov r13, r14
cmp qword [r14 + 0x18], 0x10
jb 0x140003371
mov r13, qword [r14]
mov rsi, qword [r14 + 0x10]
cmp r15, rsi
jae 0x14000339b
mov r8, rsi
sub r8, r15
lea rcx, [r15 + r13]
mov edx, 0x2f
call sub.VCRUNTIME140.dll_memchr
mov r12, rax
test rax, rax
je 0x14000339b
sub r12, r13
jmp 0x14000339e
mov r12, rdi
cmp r12d, edi
jne 0x140003672
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
cmp rsi, r15
jb 0x140003bb1
sub rsi, r15
cmp rsi, rdi
cmovb rdi, rsi
mov rcx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x1400033d3
mov rcx, qword [r14]
add rcx, r15
mov qword [rbp - 0x39], rcx
movabs rbx, 0x7fffffffffffffff
movabs r13, 0x8000000000000000
mov r12d, 0x16
cmp rdi, 0xf
ja 0x140003417
mov qword [rbp - 0x51], rdi
mov r8, rdi
mov rdx, rcx
lea rcx, [rbp - 0x61]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rdi - 0x61], 0
jmp 0x1400034a7
cmp rdi, rbx
ja 0x140003bb7
mov rsi, rdi
or rsi, 0xf
cmp rsi, rbx
jbe 0x140003435
mov rsi, rbx
lea rax, [r13 + 0x27]
jmp 0x140003456
cmp rsi, r12
cmovb rsi, r12
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140003475
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003ba5
mov rcx, rax
call fcn.14001232c
test rax, rax
je 0x14000362e
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x140003487
test rcx, rcx
je 0x140003484
call fcn.14001232c
mov r15, rax
jmp 0x140003487
xor r15d, r15d
mov qword [rbp - 0x51], rdi
mov qword [rbp - 0x49], rsi
mov r8, rdi
mov rdx, qword [rbp - 0x39]
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rdi], 0
mov qword [rbp - 0x61], r15
lea rdx, [rbp - 0x61]
mov rcx, qword [rbp + 7]
call fcn.140009240
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x1400034ef
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000362e
call fcn.140012368
mov qword [rbp - 0x21], 0xf
mov byte [rbp - 0x39], 0
cmp qword [r14 + 0x10], 5
mov r15d, 5
cmovb r15, qword [r14 + 0x10]
mov rsi, r14
cmp qword [r14 + 0x18], 0x10
jb 0x140003518
mov rsi, qword [r14]
cmp r15, 0xf
ja 0x140003548
mov qword [rbp - 0x29], r15
mov r8, r15
mov rdx, rsi
lea rcx, [rbp - 0x39]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + r15 - 0x39], 0
mov rbx, qword [rbp - 0x21]
mov r15, qword [rbp - 0x29]
mov rdi, qword [rbp - 0x39]
jmp 0x1400035d6
cmp r15, rbx
ja 0x140003bb7
mov rax, r15
or rax, 0xf
cmp rax, rbx
jbe 0x140003580
lea rax, [r13 + 0x27]
mov rcx, rax
call fcn.14001232c
test rax, rax
je 0x14000362e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400035b7
mov rbx, rax
cmp rax, r12
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400035a6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003ba5
jmp 0x140003561
test rcx, rcx
je 0x1400035b5
call fcn.14001232c
mov rdi, rax
jmp 0x1400035b7
xor edi, edi
mov qword [rbp - 0x29], r15
mov qword [rbp - 0x21], rbx
mov r8, r15
mov rdx, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r15], 0
mov qword [rbp - 0x39], rdi
lea rcx, [rbp - 0x39]
cmp rbx, 0x10
cmovae rcx, rdi
cmp r15, 5
jne 0x140003600
mov r8, r15
lea rdx, str.http:
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140003600
mov sil, 1
jmp 0x140003603
xor sil, sil
cmp rbx, 0x10
jb 0x14000363d
lea rdx, [rbx + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140003635
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003635
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140012368
mov eax, 0x50
mov ecx, 0x1bb
test sil, sil
cmove eax, ecx
mov rdi, qword [rbp - 0x41]
mov dword [rdi + 0xc8], eax
lea rcx, [rdi + 0x40]
mov r8d, 1
lea rdx, [0x1400163d8]
call fcn.140009920
jmp 0x140003adf
xor r13d, r13d
mov qword [rbp - 9], r13
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], r13b
cmp rsi, r15
jb 0x140003bbd
mov eax, r12d
sub eax, ebx
sub eax, 3
movsxd r8, eax
sub rsi, r15
cmp rsi, r8
cmovb r8, rsi
mov rcx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x1400036b0
mov rcx, qword [r14]
lea rdx, [rcx + r15]
lea rcx, [rbp - 0x19]
call fcn.140009920
nop
lea rsi, [rbp - 0x19]
mov rax, qword [rbp - 0x19]
mov rcx, qword [rbp - 1]
cmp rcx, 0x10
cmovae rsi, rax
mov r15, qword [rbp - 9]
cmp r15, 1
jb 0x140003737
lea r13, [r15 + rsi]
mov r8, r15
mov edx, 0x3a
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14000372c
cmp byte [rbx], 0x3a
jne 0x140003701
xor eax, eax
jmp 0x140003706
sbb eax, eax
or eax, 1
test eax, eax
je 0x14000385f
inc rbx
mov r8, r13
sub r8, rbx
mov edx, 0x3a
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x1400036f8
mov rax, qword [rbp - 0x19]
mov rcx, qword [rbp - 1]
xor r13d, r13d
mov rbx, rdi
mov qword [rbp - 0x51], r13
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
cmp ebx, 0xffffffff
je 0x14000387c
movsxd r8, ebx
cmp r15, r8
cmovb r8, r15
lea rdx, [rbp - 0x19]
cmp rcx, 0x10
cmovae rdx, rax
lea rcx, [rbp - 0x61]
call fcn.140009920
lea rdx, [rbp - 0x61]
mov rcx, qword [rbp + 7]
call fcn.140009240
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x1400037ba
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a93
call fcn.140012368
lea eax, [rbx + 1]
movsxd rcx, eax
mov qword [rbp - 0x51], r13
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
mov rax, qword [rbp - 9]
cmp rax, rcx
jb 0x140003bc3
sub rax, rcx
mov r8, rdi
cmp rax, rdi
cmovb r8, rax
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 0x10
cmovae rdx, qword [rbp - 0x19]
add rdx, rcx
lea rcx, [rbp - 0x61]
call fcn.140009920
lea rcx, [rbp - 0x61]
cmp qword [rbp - 0x49], 0x10
cmovae rcx, qword [rbp - 0x61]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov rcx, qword [rbp - 0x41]
mov dword [rcx + 0xc8], eax
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x14000394d
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003872
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003872
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, rsi
mov rax, qword [rbp - 0x19]
mov rcx, qword [rbp - 1]
xor r13d, r13d
jmp 0x14000373a
call fcn.140012368
jmp 0x14000394d
cmp qword [r14 + 0x10], 5
mov r8d, 5
cmovb r8, qword [r14 + 0x10]
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x140003899
mov rdx, qword [r14]
lea rcx, [rbp - 0x61]
call fcn.140009920
lea rcx, [rbp - 0x61]
mov rbx, qword [rbp - 0x61]
mov rsi, qword [rbp - 0x49]
cmp rsi, 0x10
cmovae rcx, rbx
mov r8, qword [rbp - 0x51]
cmp r8, 5
jne 0x1400038d5
lea rdx, str.http:
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400038d5
mov r15b, 1
jmp 0x1400038d8
xor r15b, r15b
cmp rsi, 0x10
jb 0x14000390f
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140003907
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a93
mov rcx, rbx
call fcn.140012368
mov eax, 0x50
mov ecx, 0x1bb
test r15b, r15b
cmove eax, ecx
mov rcx, qword [rbp - 0x41]
mov dword [rcx + 0xc8], eax
add rcx, 0x20
lea rax, [rbp - 0x19]
cmp rcx, rax
je 0x14000394d
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 0x10
cmovae rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
call fcn.140009920
movsxd rcx, r12d
mov qword [rbp - 0x49], 0xf
mov byte [rbp - 0x61], 0
mov rax, qword [r14 + 0x10]
cmp rax, rcx
jb 0x140003bc9
sub rax, rcx
cmp rax, 0xffffffffffffffff
cmovb rdi, rax
mov rax, r14
cmp qword [r14 + 0x18], 0x10
jb 0x140003981
mov rax, qword [r14]
lea r15, [rax + rcx]
cmp rdi, 0xf
ja 0x1400039a8
mov qword [rbp - 0x51], rdi
mov r8, rdi
mov rdx, r15
lea rcx, [rbp - 0x61]
call sub.VCRUNTIME140.dll_memmove
mov byte [rbp + rdi - 0x61], 0
jmp 0x140003a50
movabs rbx, 0x7fffffffffffffff
cmp rdi, rbx
ja 0x140003b9f
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x1400039f4
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001232c
test rax, rax
je 0x140003a93
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140003a32
mov rbx, rax
mov r12d, 0x16
cmp rax, r12
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003a20
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003bab
jmp 0x1400039d5
test rcx, rcx
je 0x140003a2f
call fcn.14001232c
mov rsi, rax
jmp 0x140003a32
mov rsi, r13
mov qword [rbp - 0x51], rdi
mov qword [rbp - 0x49], rbx
mov r8, rdi
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + rdi], 0
mov qword [rbp - 0x61], rsi
mov rdi, qword [rbp - 0x41]
lea rcx, [rdi + 0x40]
lea rdx, [rbp - 0x61]
call fcn.140009240
mov rdx, qword [rbp - 0x49]
cmp rdx, 0x10
jb 0x140003aa0
inc rdx
mov rcx, qword [rbp - 0x61]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a9a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140012368
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x140003adf
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003ad9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003ad9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140012368
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140003b19
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x140003b14
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140003b91
mov rcx, r8
call fcn.140012368
xor esi, esi
mov qword [r14 + 0x10], rsi
mov qword [r14 + 0x18], 0xf
mov byte [r14], sil
mov rbx, qword [rbp + 0xf]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140003b64
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140003b5f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140003b98
mov rcx, r8
call fcn.140012368
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rax, rdi
mov rbx, qword [rsp + 0x108]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400012a0
nop
call fcn.140001200
nop
call fcn.140001200
nop
call fcn.140009da0
int3
call fcn.1400012a0
int3
call fcn.140009da0
nop
call fcn.140009da0
int3
call fcn.140009da0
int3