Function at 0x1401c4dc0
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Send data
Send http request

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3930]
mov eax, 0x3a30
call fcn.1402cec90
sub rsp, rax
mov qword [rbp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3a80], rbx
movaps xmmword [rsp + 0x3a20], xmm6
movaps xmmword [rsp + 0x3a10], xmm7
movaps xmmword [rsp + 0x3a00], xmm8
mov rax, qword [0x14041da10]
xor rax, rsp
mov qword [rbp + 0x38f0], rax
mov qword [rbp + 0x68], rdx
mov r14, rcx
mov qword [rsp + 0x60], rcx
xor ebx, ebx
mov qword [rbp - 0x10], rbx
mov r13d, ebx
mov qword [rbp - 0x80], rbx
mov rax, qword [rcx + 0x40]
mov dword [rbp - 0x70], ebx
mov dword [rbp - 0x60], ebx
mov qword [rbp - 0x40], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp - 0x58], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp - 0x50], rax
xor al, al
mov byte [rsp + 0x40], al
mov dword [rbp - 0x78], ebx
mov qword [rsp + 0x78], rbx
mov edi, ebx
mov dword [rsp + 0x4c], ebx
mov rdx, qword [r14 + 0x18]
add rdx, 8
mov rcx, qword [r14 + 8]
call fcn.1400fb230
mov rsi, rax
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x1401c4ecb
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [r14 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x1401c5fcb
mov rbx, qword [r14 + 0x18]
mov eax, dword [rbx + 0x38]
mov dword [rsp + 0x48], eax
or r15, 0xffffffffffffffff
movss xmm8, dword [0x140379568]
cmp byte [r14 + 0x30], dil
je 0x1401c537b
cmp eax, 0x10000
jb 0x1401c537b
mov rcx, rbx
call fcn.1400d9300
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movsd xmm1, qword [0x1403793f0]
comisd xmm1, xmm2
jb 0x1401c537b
lea rdx, [rbx + 8]
mov rax, qword [rsi]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x30]
mov r12, rax
test rax, rax
je 0x1401c537b
mov ecx, dword [rsp + 0x48]
call fcn.1402bd120
mov rsi, rax
mov qword [rsp + 0x68], rax
xor r14d, r14d
mov bl, 1
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
je 0x1401c4fd0
mov edi, 0x5a4d
mov r13d, 0x5253
test bl, bl
je 0x1401c4f8d
xor bl, bl
cmp word [rbp + 0xf0], r13w
jne 0x1401c4f8d
mov word [rbp + 0xf0], di
mov r8d, dword [rsp + 0x44]
mov ecx, r14d
add rcx, rsi
lea rdx, [rbp + 0xf0]
call fcn.1402bd1f0
add r14d, dword [rsp + 0x44]
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
jne 0x1401c4f76
mov edi, dword [rsp + 0x4c]
mov r13d, edi
mov ebx, dword [rsp + 0x48]
cmp r14d, ebx
je 0x1401c4fef
mov r8d, r14d
mov edx, ebx
lea rcx, str._tFailed_to_read__u_bytes_from_stream__read__u_bytes__r_n
call fcn.1402bd818
jmp 0x1401c5313
mov rax, qword [rsp + 0x60]
mov rsi, qword [rax + 8]
mov rbx, qword [rax + 0x18]
cmp dword [rbx + 0x48], 2
je 0x1401c5047
mov dword [rbx + 0x48], 2
movzx eax, byte [rbx + 0x40]
shr al, 4
test al, 1
jne 0x1401c5026
mov rcx, rbx
call fcn.1400daa90
mov dl, 1
mov rcx, rax
call fcn.1400e4c90
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x58], 4
lea rcx, [rsi + 0x390]
lea r8, [rsp + 0x50]
mov rdx, rsi
call fcn.14011b550
xor eax, eax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
lea eax, [r14 + 9]
mov r13d, eax
mov ecx, eax
call fcn.1402bd120
mov qword [rsp + 0x78], rax
mov dword [rax], r14d
xor eax, eax
mov qword [rbp + 0x1c], rax
mov dword [rbp + 0x24], r15d
mov dword [rbp + 0x18], r15d
mov dword [rbp + 0x14], r15d
mov dword [rbp + 0x10], r15d
mov dword [rbp + 0xc], r15d
mov dword [rbp + 8], r15d
mov dword [rbp + 4], r15d
mov dword [rbp], r15d
mov dword [rbp - 8], 9
mov dword [rbp - 4], 0x200000
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rbx, rax
mov qword [rbp + 0x48], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [rsp + 0x4c], eax
mov edx, r15d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, 0x46a88
lea rcx, [0x14041f490]
call qword [0x14041f490]
mov rsi, rax
test rax, rax
je 0x1401c5246
mov rcx, rax
call fcn.1402aec00
lea rdx, [rbp - 8]
mov rcx, rsi
call fcn.1402abfe0
mov ebx, eax
test eax, eax
jne 0x1401c522c
mov edx, dword [rsi + 0x3d350]
movzx ecx, byte [rsi + 0x33bd4]
movzx eax, cl
shl al, 2
add cl, al
add cl, byte [rsi + 0x33bd0]
movzx eax, cl
shl al, 3
add cl, al
add cl, byte [rsi + 0x33bcc]
mov r8, qword [rsp + 0x78]
mov byte [r8 + 4], cl
mov ecx, 0xb
mov eax, 2
shl eax, cl
cmp edx, eax
jbe 0x1401c516a
mov eax, 3
shl eax, cl
cmp edx, eax
jbe 0x1401c5163
inc ecx
cmp ecx, 0x1e
jle 0x1401c5144
jmp 0x1401c5171
mov edx, 3
jmp 0x1401c516f
mov edx, 2
shl edx, cl
mov byte [r8 + 5], dl
mov eax, edx
shr eax, 8
mov byte [r8 + 6], al
mov eax, edx
shr eax, 0x10
mov byte [r8 + 7], al
shr edx, 0x18
mov byte [r8 + 8], dl
lea rcx, [rsi + 0x3d360]
lea rax, [0x1402abf90]
mov qword [rcx], rax
mov rax, qword [rsp + 0x68]
mov qword [rsi + 0x3d368], rax
mov eax, r14d
mov qword [rsi + 0x3d370], rax
lea rax, [0x1402afb40]
mov qword [rbp - 8], rax
lea rax, [r8 + 9]
mov qword [rbp], rax
mov qword [rbp + 8], r13
xor eax, eax
mov dword [rbp + 0x10], eax
mov dword [rsi + 0x3d330], eax
mov qword [rsi + 0x3d358], rcx
lea rax, [rbp - 8]
mov qword [rsi + 0x3d318], rax
mov rcx, rsi
call fcn.1402afad0
mov ebx, eax
test eax, eax
jne 0x1401c521c
mov rcx, rsi
call fcn.1402aedf0
mov ebx, eax
test eax, eax
jne 0x1401c521c
cmp dword [rsi + 0x3d344], 0
jne 0x1401c521c
mov rcx, rsi
call fcn.1402aedf0
mov ebx, eax
test eax, eax
je 0x1401c5205
sub r13, qword [rbp + 8]
mov eax, 7
cmp dword [rbp + 0x10], 0
cmovne ebx, eax
mov rcx, rsi
call fcn.1402aed50
mov rdx, rsi
lea rcx, [0x14041f490]
call qword [0x14041f498]
jmp 0x1401c524b
mov ebx, 2
mov edx, dword [rsp + 0x4c]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test ebx, ebx
je 0x1401c5283
mov edx, ebx
lea rcx, str.Compression_failed__LzmaEncode___failed__returned__d__r_n
call fcn.1402bd818
mov rcx, qword [rsp + 0x78]
call fcn.1402bd0e0
mov qword [rsp + 0x78], 0
jmp 0x1401c5306
cmp r13, 0x1900000
jbe 0x1401c529a
lea rcx, str.File_still_too_large_after_compression_r_n
call fcn.1402bd818
jmp 0x1401c526b
lea esi, [r13 + 9]
mov dword [rsp + 0x48], esi
mov eax, esi
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mulss xmm1, xmm8
mov eax, r14d
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm1, xmm0
movaps xmm6, xmm8
subss xmm6, xmm1
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbx + 0x18]
call fcn.1400d9f70
movss dword [rax + 0x14], xmm6
mov rax, qword [rbx + 0x18]
mov rcx, qword [rax + 8]
xorps xmm1, xmm1
cvtss2sd xmm1, xmm6
mov qword [rsp + 0x20], rcx
mov r9d, esi
mov r8d, r14d
movq rdx, xmm1
lea rcx, str.Compressed__3.1f_____u____u_bytes__r_n_t_s_r_n
call fcn.1402bf424
mov rsi, qword [rsp + 0x68]
mov r13, qword [rbp - 0x80]
mov ebx, dword [rsp + 0x48]
mov rcx, rsi
call fcn.1402bd0e0
mov rax, qword [r12]
mov edx, 1
mov rcx, r12
call qword [rax]
mov rsi, qword [rsp + 0x78]
test rsi, rsi
je 0x1401c5372
mov ecx, 0x18
call fcn.1402bcb4c
mov r12, rax
test rax, rax
je 0x1401c5365
lea rax, vtable.HitmanPro35::MemoryFileDataStream.0
mov qword [r12], rax
mov qword [r12 + 8], rsi
mov dword [r12 + 0x10], ebx
mov dword [r12 + 0x14], 0
jmp 0x1401c5368
xor r12d, r12d
mov r14, qword [rsp + 0x60]
jmp 0x1401c5406
mov rsi, qword [rbp - 0x18]
mov r14, qword [rsp + 0x60]
mov rcx, qword [r14 + 0x18]
cmp dword [rcx + 0x38], 0x1900000
jae 0x1401c4e9e
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1401c53ef
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rbx, rax
test rax, rax
je 0x1401c4e9e
mov ecx, 0x18
call fcn.1402bcb4c
mov r12, rax
test rax, rax
je 0x1401c53ea
mov rax, qword [rbx + 8]
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
lea rax, vtable.HitmanPro35::MemoryFileDataStream.0
mov qword [r12], rax
mov qword [r12 + 8], rcx
mov dword [r12 + 0x10], edx
mov dword [r12 + 0x14], 0
jmp 0x1401c5406
xor r12d, r12d
jmp 0x1401c5406
mov rdx, qword [r14 + 0x18]
add rdx, 8
mov rax, qword [rsi]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x30]
mov r12, rax
test r12, r12
je 0x1401c4e9e
mov rsi, qword [r14 + 8]
mov rbx, qword [r14 + 0x18]
cmp dword [rbx + 0x48], 3
je 0x1401c5462
mov dword [rbx + 0x48], 3
movzx eax, byte [rbx + 0x40]
shr al, 4
test al, 1
jne 0x1401c5441
mov rcx, rbx
call fcn.1400daa90
mov dl, 1
mov rcx, rax
call fcn.1400e4c90
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x58], 4
lea rcx, [rsi + 0x390]
lea r8, [rsp + 0x50]
mov rdx, rsi
call fcn.14011b550
lea rsi, [0x14034d1a0]
mov qword [rbp - 0x28], rsi
xor eax, eax
mov qword [rbp - 0x20], rax
mov rbx, qword [r14 + 0x18]
lea rdx, [rbp - 8]
mov rcx, rbx
call fcn.1400d8ed0
cmp qword [rax + 8], 0
setne al
test al, al
je 0x1401c54dc
lea rdx, [rbp + 0x50]
mov rcx, rbx
call fcn.1400d8ed0
nop
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.1400cb0d0
nop
lea rax, vtable.Core::DateTime.0
mov qword [rbp + 0x50], rax
mov r8, qword [rsp + 0x50]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_DateCreated__r_n_r_n_s_r_n
lea rcx, [rbp - 0x28]
call fcn.140201170
nop
cmp dword [rsp + 0x58], 0
jle 0x1401c54dc
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
mov rcx, qword [r14 + 8]
call fcn.1401129f0
mov r8, qword [rax]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_Guid__r_n_r_n_s_r_n
lea rcx, [rbp - 0x28]
call fcn.140201170
mov rax, qword [r14 + 0x18]
lea rcx, str.x_7z_compressed
lea r9, str.octet_stream
cmp qword [rsp + 0x78], 0
cmovne r9, rcx
mov r8, qword [rax + 8]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_Upload___filename__s__r_nContent_Type:_application__s_r_n_r_n
lea rcx, [rbp - 0x28]
call fcn.140201170
lea rax, vtable.Core::Text::ASCIIEncoding.0
mov qword [rbp + 0x48], rax
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x1800
lea rax, [rbp + 0x20f0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x1c]
mov r8, qword [rbp - 0x28]
xor edx, edx
mov ecx, 0x4e4
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rcx, eax
mov dword [rsp + 0x4c], ecx
cmp ecx, 0x1800
jge 0x1401c557e
mov byte [rbp + rcx + 0x20f0], bl
cmp rcx, 0x1800
jae 0x1401c5fc5
mov byte [rbp + rcx + 0x20f0], bl
mov eax, dword [rsp + 0x48]
add eax, ecx
add rax, 0x13
mov qword [rbp - 0x18], rax
call fcn.140207fa0
mov r14, rax
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], rbx
test rax, rax
je 0x1401c5613
mov rax, qword [rax]
mov rbx, qword [rsp + 0x60]
mov r8, qword [rbx + 0x20]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rax + 0x10]
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rbp - 0x38]
call fcn.1402028a0
movsxd r9, dword [rbx + 0xc]
mov eax, dword [rbp - 0x30]
inc eax
movsxd rdx, eax
mov r8, qword [rbx]
mov rcx, qword [rbp - 0x38]
call fcn.1402c06dc
mov edx, dword [rbx + 0xc]
lea rcx, [rbp - 0x38]
call fcn.140203bb0
nop
cmp dword [rsp + 0x58], 0
jle 0x1401c5623
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
jmp 0x1401c5623
mov rdx, qword [0x14041eee8]
lea rcx, [rbp - 0x38]
call fcn.140200d00
mov r8, qword [rbp - 0x38]
test r8, r8
je 0x1401c564c
nop dword [rax]
inc r15
cmp word [r8 + r15*2], 0
jne 0x1401c5630
test r15, r15
sete al
test al, al
jne 0x1401c564c
mov edx, 3
jmp 0x1401c5651
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0x10000000
xor r9d, r9d
lea rcx, str.Mozilla_4.0__compatible__Win32_
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rsi, rax
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x1401c568c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov r15, qword [rsp + 0x60]
test eax, eax
jne 0x1401c59fc
jmp 0x1401c56d5
mov r15, qword [rsp + 0x60]
lea r8, [r15 + 0x28]
mov edx, 3
lea r9d, [rdx + 1]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, 4
lea r8, [r15 + 0x2c]
lea edx, [r9 + 1]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, 4
lea r8, [r15 + 0x2c]
lea edx, [r9 + 2]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
lea rdx, [rbp + 0xb0]
mov rcx, qword [r15 + 0x20]
call fcn.140205b90
mov rdx, qword [rax]
mov rax, qword [r15 + 0x20]
xor r9d, r9d
movzx r8d, word [rax + 0x40]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rbx, rax
mov qword [rbp - 0x10], rax
cmp dword [rbp + 0xb8], 0
jle 0x1401c5719
mov rcx, qword [rbp + 0xb0]
call fcn.1402bd0e0
test rbx, rbx
jne 0x1401c5768
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rbp - 0x40]
mov qword [rsp + 0x58], rcx
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c575e
mov edi, dword [rbp - 0x70]
test edi, edi
jne 0x1401c59fc
mov r13, qword [rbp - 0x68]
mov qword [rbp - 0x10], r13
jmp 0x1401c576b
mov edi, 0x2ef1
jmp 0x1401c59fc
mov r13, rbx
mov esi, 0x100
xor eax, eax
mov qword [rsp + 0x70], rax
lea edx, [rax + 5]
lea rcx, [rsp + 0x68]
call fcn.1402028a0
mov eax, dword [rsp + 0x70]
inc eax
movsxd rdx, eax
mov r9d, 5
lea r8, str.https
mov rcx, qword [rsp + 0x68]
call fcn.1402c06dc
mov edx, 5
lea rcx, [rsp + 0x68]
call fcn.140203bb0
nop
lea rdx, [rsp + 0x50]
mov rcx, qword [r15 + 0x20]
call fcn.140205d90
mov r8, rax
mov r9, qword [rsp + 0x68]
mov ecx, dword [rax + 0xc]
cmp dword [rsp + 0x74], ecx
je 0x1401c57d7
xor bl, bl
jmp 0x1401c57f9
mov rax, r9
mov r8, qword [r8]
sub r8, r9
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1401c57f4
add rax, 2
test ecx, ecx
jne 0x1401c57e0
test edx, edx
sete bl
cmp dword [rsp + 0x58], 0
jle 0x1401c580f
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
mov r9, qword [rsp + 0x68]
cmp dword [rsp + 0x70], 0
jle 0x1401c581e
mov rcx, r9
call fcn.1402bd0e0
mov eax, 0x800100
test bl, bl
cmovne esi, eax
lea rax, [0x140360a60]
mov qword [rbp + 0x80], rax
xor ebx, ebx
mov qword [rbp + 0x88], rbx
lea rdx, [rbp + 0x90]
mov rcx, qword [r15 + 0x20]
call fcn.140205bc0
mov dword [rsp + 0x30], esi
lea rcx, [rbp + 0x80]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
lea r9, str.HTTP_1.1
mov r8, qword [rax]
lea rdx, str.POST
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
cmp dword [rbp + 0x98], ebx
jle 0x1401c5895
mov rcx, qword [rbp + 0x90]
call fcn.1402bd0e0
test r13, r13
jne 0x1401c58d9
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rbp - 0x40]
mov qword [rsp + 0x58], rcx
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [r13 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c575e
mov edi, dword [rbp - 0x70]
test edi, edi
jne 0x1401c59fc
mov r13, qword [rbp - 0x68]
xor r9d, r9d
mov r8d, 0x7e4c00
lea rdx, [0x140181ef0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetStatusCallback]
cmp rax, 0xffffffffffffffff
jne 0x1401c5908
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jne 0x1401c59fc
test r14, r14
je 0x1401c59fc
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x28]
mov rbx, rax
test rax, rax
je 0x1401c59fc
xor r14d, r14d
mov qword [rsp + 0x70], r14
lea rax, [0x14034d1a0]
mov qword [rsp + 0x68], rax
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.140203bb0
nop
mov r9, qword [rbx]
lea r8, [rsp + 0x68]
mov rdx, qword [r15 + 0x20]
mov rcx, rbx
call qword [r9 + 8]
mov rbx, rax
cmp dword [rsp + 0x70], r14d
jle 0x1401c596e
mov rcx, qword [rsp + 0x68]
call fcn.1402bd0e0
test rbx, rbx
je 0x1401c59ff
cmp dword [rbx + 0x14], 0
jle 0x1401c59c1
lea r9, [rbx + 0x18]
lea rdx, [rbx + 8]
lea r8, [0x14034c088]
lea rcx, [rsp + 0x50]
call fcn.140201960
mov r9d, dword [rsp + 0x5c]
mov r8, qword [rsp + 0x50]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
cmp dword [rsp + 0x58], 0
jle 0x1401c59d7
mov rcx, qword [rsp + 0x50]
call fcn.1402bd0e0
jmp 0x1401c59d7
mov r9d, dword [rbx + 0x24]
mov r8, qword [rbx + 0x18]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, dword [rbx + 0x34]
mov r8, qword [rbx + 0x28]
mov edx, 0x1003
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
jmp 0x1401c59ff
xor r14d, r14d
movsd xmm6, qword [0x140379500]
movsd xmm7, qword [0x1403793a8]
nop
cmp edi, 0x2f00
je 0x1401c5a20
test edi, edi
jne 0x1401c5d90
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 0x18]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8d, [r9 + 0x39]
lea rdx, str.content_type:_multipart_form_data__boundary__Strider35_r_n
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x1401c5a86
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c5a8e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c5a20
test edi, edi
jne 0x1401c5d90
xor r9d, r9d
mov r8d, dword [rsp + 0x4c]
lea rdx, [rbp + 0x20f0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c5aee
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x68], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x70], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c5af6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c5a20
mov dword [rbp - 0x60], r14d
test edi, edi
jne 0x1401c5d90
mov rcx, qword [r15 + 0x18]
call fcn.1400d9f70
mov rbx, rax
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0x50]
call fcn.1400ec3f0
nop
mov r15d, r14d
cmp qword [rsp + 0x78], 0
sete sil
mov r10, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [r10 + 8]
test al, al
je 0x1401c5d10
nop dword [rax + rax]
test sil, sil
je 0x1401c5b82
xor sil, sil
mov eax, 0x5253
cmp word [rbp + 0xf0], ax
jne 0x1401c5b82
mov eax, 0x5a4d
mov word [rbp + 0xf0], ax
xor r9d, r9d
mov r8d, dword [rsp + 0x44]
lea rdx, [rbp + 0xf0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c5bd9
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0xa8], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0xa0]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c5be1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c5d03
test edi, edi
jne 0x1401c5d10
mov eax, dword [rbp - 0x60]
mov dword [rbp - 0x60], edi
add r14d, eax
add r15d, eax
lea rcx, [rbp + 0xd8]
call fcn.1400ec3f0
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0xc0]
mov rcx, rax
call fcn.1400cb050
xorps xmm1, xmm1
cvtsi2sd xmm1, qword [rax + 8]
divsd xmm1, xmm6
lea rax, vtable.Core::TimeSpan.0
mov qword [rbp + 0xc0], rax
lea rax, vtable.Core::DateTime.0
mov qword [rbp + 0xd8], rax
comisd xmm1, xmm7
jb 0x1401c5c88
movd xmm0, r15d
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [rbx + 0x10], eax
lea rcx, [rbp - 8]
call fcn.1400ec3f0
mov rcx, qword [rax + 8]
mov qword [rbp + 0x58], rcx
mov eax, dword [rax + 0x10]
mov dword [rbp + 0x60], eax
lea rax, vtable.Core::DateTime.0
mov qword [rbp - 8], rax
xor r15d, r15d
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm8
mov eax, dword [rsp + 0x48]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm1, xmm0
ucomiss xmm1, dword [rbx + 0xc]
jp 0x1401c5cad
je 0x1401c5cdd
movss dword [rbx + 0xc], xmm1
cmp byte [rbx + 8], 0
je 0x1401c5cdd
mov rax, qword [rbx]
mov rdx, qword [0x140430c10]
mov qword [rbp + 0x70], rax
mov dword [rbp + 0x78], 3
lea rcx, [rdx + 0x390]
lea r8, [rbp + 0x70]
call fcn.14011b550
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
jne 0x1401c5b60
jmp 0x1401c5d10
mov r15, qword [rsp + 0x60]
xor r14d, r14d
jmp 0x1401c5a10
test edi, edi
jne 0x1401c5d8d
xor r9d, r9d
lea r8d, [rdi + 0x13]
lea rdx, str._r_n____Strider35___r_n
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c5d60
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x30], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x28]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c5d68
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
mov r15, qword [rsp + 0x60]
mov r14d, 0
je 0x1401c5a20
mov eax, dword [rbp - 0x60]
test edi, edi
cmove eax, r14d
mov dword [rbp - 0x60], eax
jmp 0x1401c5d90
xor r14d, r14d
mov r15, qword [rsp + 0x60]
cmp byte [rsp + 0x40], 0
jne 0x1401c5db6
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [r15 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
setne al
mov byte [rsp + 0x40], al
test edi, edi
jne 0x1401c5f12
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x1401c5dfe
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x40], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c5e06
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c5a20
test edi, edi
jne 0x1401c5f12
mov dword [rsp + 0x4c], 4
mov dword [rsp + 0x44], r14d
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
xor r8d, r8d
mov edx, 0x20000013
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov ebx, dword [rbp - 0x78]
test eax, eax
cmovne ebx, dword [rsp + 0x44]
lea rax, vtable.Core::Text::ASCIIEncoding.0
mov qword [rbp - 0x18], rax
mov rsi, qword [rbp + 0x68]
nop word [rax + rax]
xor r9d, r9d
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x1401c5ebb
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x40], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c5f10
mov eax, dword [rbp - 0x70]
jmp 0x1401c5ec1
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1401c5f10
mov eax, dword [rbp - 0x60]
mov dword [rbp - 0x60], r14d
test eax, eax
je 0x1401c5f10
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x28]
lea rcx, [rbp - 0x18]
call fcn.140207990
nop
mov rdx, rax
mov rcx, rsi
call fcn.140200e80
nop
cmp dword [rbp + 0x30], 0
jle 0x1401c5e70
mov rcx, qword [rbp + 0x28]
call fcn.1402bd0e0
jmp 0x1401c5e70
jmp 0x1401c5f15
mov ebx, dword [rbp - 0x78]
test r13, r13
je 0x1401c5f30
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
or edx, 0xffffffff
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x1401c5f42
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1401c5f52
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test ebx, ebx
jne 0x1401c5f8d
cmp dword [rbp - 0x30], ebx
jle 0x1401c5f65
mov rcx, qword [rbp - 0x38]
call fcn.1402bd0e0
nop
cmp dword [rbp - 0x20], 0
jle 0x1401c5f75
mov rcx, qword [rbp - 0x28]
call fcn.1402bd0e0
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
jmp 0x1401c5fcb
cmp dword [rbp - 0x30], 0
jle 0x1401c5f9d
mov rcx, qword [rbp - 0x38]
call fcn.1402bd0e0
nop
cmp dword [rbp - 0x20], 0
jle 0x1401c5fad
mov rcx, qword [rbp - 0x28]
call fcn.1402bd0e0
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
jmp 0x1401c5fcb
call fcn.1402beab0
nop
mov rcx, qword [rbp + 0x38f0]
xor rcx, rsp
call fcn.1402bcad0
lea r11, [rsp + 0x3a30]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret