Function at 0x140003bdc
Capabilities:
Initialize winhttp library
Make an http request with a cookie
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10f0]
mov eax, 0x11f0
call fcn.1400257b0
sub rsp, rax
movaps xmmword [rsp + 0x11e0], xmm6
mov rax, qword [0x140036040]
xor rax, rsp
mov qword [rbp + 0x10d0], rax
mov byte [rsp + 0x44], r8b
mov rsi, rcx
xor r12d, r12d
cmp qword [rcx + 0x40], r12
ja 0x140003c3c
mov dword [rcx + 0x1a0], 3
xor al, al
jmp 0x140004cd4
lea rcx, [rbp + 0x30]
call fcn.140002808
nop
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rcx, qword [rbp + 0x30]
lea rdx, [0x140030fa8]
call fcn.14001779c
mov r14d, 3
lea rcx, [rbp + 0x30]
test eax, eax
jne 0x140003c7a
lea rbx, [0x140030fa8]
mov r8d, r14d
jmp 0x140003ca3
cmp qword [rbp + 0x48], 7
cmova rcx, qword [rbp + 0x30]
lea rbx, str.POST
mov rdx, rbx
call fcn.14001779c
test eax, eax
jne 0x140004cb8
lea rcx, [rbp + 0x30]
lea r8d, [rax + 4]
mov rdx, rbx
call fcn.1400028cc
mov r13d, 1
mov rcx, qword [rsi + 0x20]
test rcx, rcx
jne 0x140003cf5
lea rcx, [rsi + 0x1a8]
cmp qword [rcx + 0x18], 7
jbe 0x140003ccb
mov rcx, qword [rcx]
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rcx, rax
mov qword [rsi + 0x20], rax
test rax, rax
jne 0x140003cf5
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140004cbd
mov eax, dword [rsi + 0x23c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsi + 0x238]
mov r8d, dword [rsi + 0x234]
mov edx, dword [rsi + 0x230]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
mov word [rbp + 0x280], r12w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x282]
call fcn.140025b00
mov word [rbp + 0x6a0], r12w
xor edx, edx
mov r8d, 0xa26
lea rcx, [rbp + 0x6a2]
call fcn.140025b00
mov ebx, 0x68
mov r8d, ebx
xor edx, edx
lea rcx, [rbp - 0x80]
call fcn.140025b00
mov dword [rbp - 0x80], ebx
lea rax, [rbp + 0x280]
mov qword [rbp - 0x68], rax
mov dword [rbp - 0x60], 0x104
lea rax, [rbp + 0x6a0]
mov qword [rbp - 0x38], rax
mov dword [rbp - 0x30], 0x514
mov dword [rbp - 0x70], r13d
lea rbx, [rsi + 0x30]
mov rcx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140003da0
mov rcx, qword [rbx]
lea r9, [rbp - 0x80]
xor r8d, r8d
mov edx, dword [rsi + 0x40]
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x140004cc8
lea rax, [rbp + 0x280]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], r12w
jne 0x140003dc3
lea rcx, [rsi + 0x50]
lea rdx, [rbp + 0x280]
call fcn.1400028cc
xor r9d, r9d
movzx r8d, word [rbp - 0x5c]
lea rdx, [rbp + 0x280]
mov rcx, qword [rsi + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rdi, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140004cc8
mov ecx, r12d
mov eax, 0x800000
cmp dword [rbp - 0x6c], 2
cmove ecx, eax
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rdx, qword [rbp + 0x30]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8, qword [rbp - 0x38]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r15, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140004cad
xor edi, edi
cmp byte [rsi + 0x28], dil
jne 0x140003e7e
cmp dword [rbp - 0x6c], 2
jne 0x140003e7e
mov dword [rsp + 0x48], 0x3100
lea r9d, [rdi + 4]
lea r8, [rsp + 0x48]
lea edx, [rdi + 0x1f]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov dword [rsp + 0x70], r13d
mov r9d, 4
lea r8, [rsp + 0x70]
lea edx, [r9 + 0x49]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r12b, dil
mov ecx, edi
movsd xmm6, qword [0x140031410]
mov eax, ecx
add ecx, r13d
mov dword [rsp + 0x74], ecx
cmp eax, r14d
jae 0x140004c9a
cmp qword [rsi + 0x150], rdi
jbe 0x140003efa
lea rdx, [rsi + 0x140]
cmp qword [rdx + 0x18], 7
jbe 0x140003ed4
mov rdx, qword [rdx]
mov r9d, 0x1000000
mov r8d, dword [rsi + 0x150]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x140003efa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
cmp qword [rsi + 0x120], rdi
jbe 0x140003fbf
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
mov r8d, 8
lea rdx, str.Cookie:
lea rcx, [rbp - 0x10]
call fcn.140002b6c
nop
lea r8, [rsi + 0x110]
mov rdx, r8
cmp qword [r8 + 0x18], 7
jbe 0x140003f41
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rbp - 0x10]
call fcn.1400029ec
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova rdx, qword [rbp - 0x10]
mov r9d, 0x1000000
mov r8d, dword [rbp]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x140003f7f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x140003fbf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003fba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d09
call fcn.14000d128
cmp qword [rsi + 0x190], rdi
jbe 0x1400040c3
mov qword [rsp + 0x50], 3
mov qword [rsp + 0x60], rdi
mov word [rbp + 0x70], di
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x72]
call fcn.140025b00
lea r8, [rsi + 0x180]
cmp qword [r8 + 0x18], 7
jbe 0x140004000
mov r8, qword [r8]
mov edx, 0x104
lea rcx, [rbp + 0x70]
call fcn.1400171ec
lea rax, [rbp + 0x70]
mov qword [rsp + 0x58], rax
mov r9d, 0x18
lea r8, [rsp + 0x50]
lea edx, [r9 + 0xe]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14000403f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
cmp qword [rsi + 0x1e0], rdi
jbe 0x1400040c3
lea r8, [rsi + 0x1d0]
cmp qword [r8 + 0x18], 7
jbe 0x140004059
mov r8, qword [r8]
mov r9d, dword [rsi + 0x1e0]
add r9d, r9d
mov edx, 0x1002
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x140004081
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
cmp qword [rsi + 0x200], rdi
jbe 0x1400040c3
lea r8, [rsi + 0x1f0]
cmp qword [r8 + 0x18], 7
jbe 0x14000409b
mov r8, qword [r8]
mov r9d, dword [rsi + 0x200]
add r9d, r9d
mov edx, 0x1003
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x1400040c3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
cmp byte [rsp + 0x44], dil
je 0x1400040fa
mov dword [rsp + 0x48], 2
mov r9d, 4
lea r8, [rsp + 0x48]
lea edx, [r9 + 0x3b]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x1400040fa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
cmp qword [rsi + 0x170], r13
jae 0x140004130
xor edi, edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x140004c88
jmp 0x1400043c5
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
lea rcx, [rbp - 0x10]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
xor ecx, ecx
test eax, eax
je 0x140004c7a
cmp qword [rsi + 0x170], rcx
jbe 0x140004208
mov qword [rbp + 0x20], rcx
mov dword [rbp + 0x10], r14d
mov dword [rbp + 0x14], r14d
lea rax, [rsi + 0x160]
cmp qword [rax + 0x18], 7
jbe 0x140004179
mov rax, qword [rax]
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x2c], r13d
mov dword [rbp + 0x28], ecx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x1400041a0
mov rdx, qword [rbx]
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x10]
mov rcx, qword [rsi + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
xor ebx, ebx
test eax, eax
je 0x14000438d
lea r9d, [rbx + 0x18]
lea r8, [rsp + 0x50]
lea edx, [rbx + 0x26]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x14000438d
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x14000438d
mov dil, r13b
jmp 0x14000438d
mov rax, qword [rbp - 8]
test rax, rax
je 0x1400042cf
mov dword [rbp + 0x10], r14d
mov dword [rbp + 0x14], r14d
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x2c], r13d
mov dword [rbp + 0x28], ecx
mov qword [rbp + 0x20], rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140004248
mov rdx, qword [rbx]
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x10]
mov rcx, qword [rsi + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
xor ebx, ebx
test eax, eax
je 0x140004381
lea r9d, [rbx + 0x18]
lea r8, [rsp + 0x50]
lea edx, [rbx + 0x26]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x1400042a6
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
movzx edi, dil
test eax, eax
cmovne edi, r13d
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400042b6
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14000438d
call qword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x14000438d
mov rbx, qword [rbp]
test rbx, rbx
je 0x1400043ab
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x50], r14d
mov word [rbp + 0x70], cx
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x72]
call fcn.140025b00
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x70]
call fcn.1400171ec
lea rax, [rbp + 0x70]
mov qword [rsp + 0x58], rax
mov rbx, qword [rbp + 8]
xor ecx, ecx
test rbx, rbx
je 0x140004365
mov word [rbp + 0x490], cx
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x492]
call fcn.140025b00
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x490]
call fcn.1400171ec
lea rax, [rbp + 0x490]
mov qword [rsp + 0x60], rax
mov r9d, 0x18
lea r8, [rsp + 0x50]
lea edx, [r9 + 0xe]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14000438d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x14000439c
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400043ab
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x1400043ba
call qword [sym.imp.KERNEL32.dll_GlobalFree]
test dil, dil
je 0x140004c86
xor edi, edi
mov rdx, qword [rsi + 0x130]
test rdx, rdx
je 0x1400043fa
mov dword [rsp + 0x48], edi
lea r9, [rsp + 0x48]
mov r8d, dword [rsi + 0x138]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
jne 0x1400043fa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
xor edx, edx
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x140004c6c
mov dword [rsp + 0x40], edi
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea r14d, [r9 + 0x16]
mov edx, r14d
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x140004449
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14000477f
mov ecx, dword [rsp + 0x40]
mov eax, 2
mul rcx
mov rbx, 0xffffffffffffffff
cmovo rax, rbx
mov rcx, rax
call fcn.14000d3d8
mov r13, rax
mov r8d, dword [rsp + 0x40]
add r8, r8
xor edx, edx
mov rcx, rax
call fcn.140025b00
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, r13
xor r8d, r8d
mov edx, r14d
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x140004771
mov r8, rbx
inc r8
cmp word [r13 + r8*2], di
jne 0x1400044a9
mov rdx, r13
lea rcx, [rsi + 0x70]
call fcn.1400028cc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
xor r8d, r8d
lea rdx, [0x140030b18]
lea rcx, [rbp - 0x10]
call fcn.140002b6c
nop
cmp byte [rsi + 0x1c8], dil
jne 0x140004560
mov r8d, 0x19
lea rdx, str.charset_A_Za_z0_9___
lea rcx, [rbp - 0x10]
call fcn.1400028cc
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x70]
lea rcx, [rbp - 0x10]
call fcn.140003144
test al, al
je 0x140004560
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140004560
lea rcx, [rsi + 0xb0]
cmp rcx, rdx
je 0x140004560
mov r8, rdx
cmp qword [rdx + 0x18], 7
jbe 0x140004557
mov rdx, qword [rdx]
mov r8, qword [r8 + 0x10]
call fcn.1400028cc
mov r8d, 0x18
lea rdx, str.Content_Length:__0_9_
lea rcx, [rbp - 0x10]
call fcn.1400028cc
lea r9, [rsi + 0x70]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x10]
call fcn.140003144
test al, al
je 0x1400045bc
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x1400045bc
cmp qword [rcx + 0x18], 7
jbe 0x1400045b1
mov rcx, qword [rcx]
call fcn.140017918
mov dword [rsi + 0xe8], eax
mov r8d, 0x12
lea rdx, str.Location:__0_9_
lea rcx, [rbp - 0x10]
call fcn.1400028cc
lea r9, [rsi + 0x70]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x10]
call fcn.140003144
test al, al
je 0x140004625
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x140004625
lea rcx, [rsi + 0x210]
cmp rcx, rdx
je 0x140004625
mov r8, rdx
cmp qword [rdx + 0x18], 7
jbe 0x14000461c
mov rdx, qword [rdx]
mov r8, qword [r8 + 0x10]
call fcn.1400028cc
mov r8d, 0x15
lea rdx, str.Set_Cookie:_b.__n
lea rcx, [rbp - 0x10]
call fcn.1400028cc
lea r9, [rsi + 0x70]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x10]
call fcn.140003144
test al, al
je 0x14000475d
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
sub rdi, rbx
sar rdi, 5
xor ecx, ecx
test rdi, rdi
je 0x14000475d
mov r14d, ecx
lea r15, [rsi + 0xf0]
lea r12, [rdi - 1]
mov rdx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x140004691
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, r15
call fcn.1400029ec
cmp r14, r12
je 0x1400046b7
mov r8d, 2
lea rdx, [0x14003109c]
mov rcx, r15
call fcn.1400029ec
mov eax, 1
add r14, rax
add rbx, 0x20
cmp r14, rdi
jb 0x140004684
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
xor edi, edi
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x28], rdi
mov r8d, eax
lea rdx, str._0__
lea rcx, [rbp + 0x10]
call fcn.140002b6c
nop
lea rbx, [rsi + 0xf0]
lea r8, [rbp + 0x10]
mov rdx, rbx
lea rcx, [rbp + 0x50]
call fcn.140003650
mov rdx, rax
mov rcx, rbx
call fcn.14000b4c4
lea rcx, [rbp + 0x50]
call fcn.14000276c
nop
lea rcx, [rbp + 0x10]
call fcn.14000276c
mov rcx, qword [rsi + 0x100]
test rcx, rcx
je 0x140004758
mov rax, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14000473b
mov rax, qword [rbx]
cmp word [rax + rcx*2 - 2], 0x3b
je 0x140004758
mov r8d, 1
lea rdx, [0x1400310a4]
mov rcx, rbx
call fcn.1400029ec
mov r15, qword [rsp + 0x68]
lea rcx, [rbp - 0x10]
call fcn.14000276c
nop
lea rcx, [rsp + 0x50]
call fcn.14000b438
mov rcx, r13
call fcn.14000d128
mov r13d, 1
mov dword [rsp + 0x40], edi
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea r12d, [r9 + 0x13]
mov edx, r12d
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x1400047b7
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140004830
mov ecx, dword [rsp + 0x40]
mov eax, 2
mul rcx
mov r14, 0xffffffffffffffff
cmovo rax, r14
mov rcx, rax
call fcn.14000d3d8
mov rbx, rax
mov r8d, dword [rsp + 0x40]
add r8, r8
xor edx, edx
mov rcx, rax
call fcn.140025b00
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbx
xor r8d, r8d
mov edx, r12d
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x140004828
mov r8, r14
inc r8
cmp word [rbx + r8*2], di
jne 0x140004813
mov rdx, rbx
mov rcx, rsi
call fcn.1400028cc
mov rcx, rbx
call fcn.14000d128
mov ebx, 0x2800
mov r12d, ebx
mov r14d, edi
mov rcx, qword [rsi + 0xd0]
test rcx, rcx
je 0x140004853
call fcn.14000d128
mov qword [rsi + 0xd0], rdi
mov rcx, rbx
call fcn.14000d3d8
mov qword [rsi + 0xd0], rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call fcn.140025b00
mov dword [rsp + 0x40], edi
lea rdx, [rsp + 0x40]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x140004978
mov rdx, qword [rsi + 0xe0]
test rdx, rdx
je 0x1400048bc
mov ecx, dword [rsi + 0xe8]
test ecx, ecx
je 0x1400048bc
mov eax, r14d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov ecx, dword [rsp + 0x40]
inc ecx
call fcn.14000d3d8
mov r15, rax
mov r8d, dword [rsp + 0x40]
inc r8d
xor edx, edx
mov rcx, rax
call fcn.140025b00
mov dword [rsp + 0x48], edi
lea r9, [rsp + 0x48]
mov r8d, dword [rsp + 0x40]
mov rdx, r15
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x140004969
mov ecx, dword [rsp + 0x48]
lea eax, [rcx + r14]
cmp eax, r12d
jbe 0x14000494f
mov rdi, qword [rsi + 0xd0]
add r12d, r12d
mov ecx, r12d
call fcn.14000d3d8
mov qword [rsi + 0xd0], rax
mov r8d, r12d
xor edx, edx
mov rcx, rax
call fcn.140025b00
mov r8d, r14d
mov rdx, rdi
mov rcx, qword [rsi + 0xd0]
call fcn.140025ec0
mov rcx, rdi
call fcn.14000d128
mov ecx, dword [rsp + 0x48]
xor edi, edi
mov r8d, ecx
mov ecx, r14d
add rcx, qword [rsi + 0xd0]
mov rdx, r15
call fcn.140025ec0
add r14d, dword [rsp + 0x48]
mov rcx, r15
call fcn.14000d128
mov r15, qword [rsp + 0x68]
jmp 0x140004984
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
cmp dword [rsp + 0x40], edi
ja 0x14000486f
mov rdx, qword [rsi + 0xe0]
test rdx, rdx
je 0x1400049c1
mov ecx, dword [rsi + 0xe8]
test ecx, ecx
je 0x1400049c1
mov eax, r14d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov dword [rsi + 0xd8], r14d
lea rcx, [rsi + 0xb0]
cmp qword [rcx + 0x18], 7
jbe 0x1400049d9
mov rcx, qword [rcx]
mov r8d, 5
lea rdx, [0x1400310a8]
call fcn.1400175b4
mov r12d, edi
test eax, eax
setne r12b
neg eax
sbb r14d, r14d
not r14d
and r14d, 0xfde9
mov r9d, dword [rsi + 0xd8]
add r9d, r13d
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r8, qword [rsi + 0xd0]
mov edx, r12d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r15d, eax
test eax, eax
jg 0x140004a66
mov r14d, edi
mov r12d, r13d
mov r9d, dword [rsi + 0xd8]
add r9d, r13d
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r8, qword [rsi + 0xd0]
mov edx, r13d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r15d, eax
test eax, eax
jle 0x140004ae9
mov ebx, r15d
mov eax, 2
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14000d3d8
mov rdi, rax
lea r8, [rbx + rbx]
xor edx, edx
mov rcx, rax
call fcn.140025b00
mov r9d, dword [rsi + 0xd8]
add r9d, r13d
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], rdi
mov r8, qword [rsi + 0xd0]
mov edx, r12d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ecx, ecx
test eax, eax
jle 0x140004adf
or r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], cx
jne 0x140004ac6
lea rcx, [rsi + 0x90]
mov rdx, rdi
call fcn.1400028cc
mov rcx, rdi
call fcn.14000d128
xor edi, edi
mov r12b, r13b
lea rcx, [rbp + 0x30]
cmp qword [rbp + 0x48], 7
cmova rcx, qword [rbp + 0x30]
mov rdx, qword [rbp + 0x40]
cmp rdx, 3
jne 0x140004c9d
lea r8, [0x140030fa8]
test rdx, rdx
je 0x140004b2e
movzx eax, word [r8]
cmp word [rcx], ax
jne 0x140004c9d
add rcx, 2
add r8, 2
sub rdx, r13
jne 0x140004b14
cmp byte [rsp + 0x44], dil
jne 0x140004c9d
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
mov r8d, 8
lea rdx, str._html_
lea rcx, [rbp - 0x10]
call fcn.140002b6c
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rdi
lea r14, [rsi + 0x90]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9, r14
lea rcx, [rbp - 0x10]
call fcn.140003144
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
test al, al
je 0x140004bfe
mov rax, rdi
sub rax, rbx
sar rax, 5
xor r15d, r15d
test rax, rax
je 0x140004bfe
lea r8d, [r15 + 9]
lea rdx, str.__html_
lea rcx, [rbp - 0x10]
call fcn.1400028cc
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9, r14
lea rcx, [rbp - 0x10]
call fcn.140003144
mov rdi, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x50]
test al, al
je 0x140004bf1
mov rax, rdi
sub rax, rbx
sar rax, 5
test rax, rax
jne 0x140004bfe
mov dword [rsi + 0x1a0], 0xd
mov r12b, r15b
test rbx, rbx
je 0x140004c56
mov r14, rbx
cmp rbx, rdi
je 0x140004c1c
mov rcx, r14
call fcn.14000276c
add r14, 0x20
cmp r14, rdi
jne 0x140004c0b
mov rdx, qword [rsp + 0x60]
sub rdx, rbx
and rdx, 0xffffffffffffffe0
mov rax, rbx
cmp rdx, 0x1000
jb 0x140004c4d
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d03
mov rcx, rbx
call fcn.14000d128
nop
lea rcx, [rbp - 0x10]
call fcn.14000276c
mov r15, qword [rsp + 0x68]
mov r14d, 3
jmp 0x140004c86
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
jmp 0x140004c88
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x1a0], eax
xor edi, edi
test r12b, r12b
jne 0x140004c9d
lea rbx, [rsi + 0x30]
mov ecx, dword [rsp + 0x74]
jmp 0x140003ea8
mov r13b, dil
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rdi, qword [rsp + 0x78]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x140004cc8
mov eax, 0x57
mov ecx, 0x1a0
mov dword [rsi + rcx], eax
mov r13b, r12b
lea rcx, [rbp + 0x30]
call fcn.14000276c
mov al, r13b
mov rcx, qword [rbp + 0x10d0]
xor rcx, rsp
call fcn.14000d100
lea r11, [rsp + 0x11f0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140013dec
nop
call fcn.140013dec
int3