Function at 0x1400b3950
Capabilities:
Check for software breakpoints
Encrypt data using speck
Get local ipv4 addresses
Get socket information
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x898
mov r13, r8
mov rbx, rdx
mov rdi, rcx
movdqu xmm0, xmmword [rdx + 0x90]
movups xmm1, xmmword [rdx + 0xa0]
movaps xmmword [rsp + 0x2a0], xmm1
movdqa xmmword [rsp + 0x290], xmm0
mov rcx, qword [rdx + 0xd8]
mov rax, qword [rdx + 0xe0]
call qword [rax + 0xb8]
test rax, rax
je 0x1400b3a9e
mov rcx, qword [rax]
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x180], xmm0
movdqa xmmword [rsp + 0x170], xmm0
movdqa xmmword [rsp + 0x160], xmm0
movdqa xmmword [rsp + 0x150], xmm0
movdqa xmmword [rsp + 0x140], xmm0
movdqa xmmword [rsp + 0x130], xmm0
movdqa xmmword [rsp + 0x120], xmm0
movdqa xmmword [rsp + 0x110], xmm0
mov dword [rsp + 0x320], pe_nt_image_headers64
lea rdx, [rsp + 0x110]
lea r8, [rsp + 0x320]
call sub.ws2_32.dll_getsockname
cmp eax, 0xffffffff
je 0x1400b3ab0
mov eax, dword [rsp + 0x320]
movzx ecx, word [rsp + 0x110]
cmp ecx, 2
je 0x1400b3ac5
cmp ecx, 0x17
jne 0x1400b3c76
cmp eax, 0x1b
jbe 0x1400b54a9
movdqu xmm0, xmmword [rsp + 0x118]
movzx eax, word [rsp + 0x112]
mov ecx, dword [rsp + 0x114]
mov dword [rsp + 0xa0], ecx
mov ecx, dword [rsp + 0x128]
mov dword [rsp + 0x3c], ecx
movdqu xmmword [rsp + 0x432], xmm0
pextrw ebp, xmm0, 1
rol ax, 8
mov word [rsp + 0x2e], ax
mov ax, 1
mov dword [rsp + 0x54], eax
mov r12d, dword [rsp + 0x430]
jmp 0x1400b3aea
mov r12d, 0x100007f
xor ebp, ebp
mov dword [rsp + 0x54], 0
jmp 0x1400b3b17
call sub.ws2_32.dll_WSAGetLastError
mov r8d, eax
shl r8, 0x20
or r8, 2
jmp 0x1400b3c7d
cmp eax, 0xf
jbe 0x1400b54a9
mov r12d, dword [rsp + 0x114]
movzx ebp, word [rsp + 0x112]
rol bp, 8
mov dword [rsp + 0x54], 0
mov eax, dword [rsp + 0x43e]
mov rcx, qword [rsp + 0x436]
mov qword [rsp + 0x88], rcx
mov dword [rsp + 0x90], eax
mov qword [rsp + 0x100], rcx
mov dword [rsp + 0x108], eax
movabs r15, 0x8000000000000000
lea r14, [rsp + 0x430]
mov r8d, 0xe8
mov rcx, r14
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov rax, qword [r13 + 0x88]
mov ecx, dword [r13 + 0x90]
mov qword [rsp + 0x518], rax
mov dword [rsp + 0x520], ecx
lea r8, str.the_status_linea_headercontent_encodingconnectionmore_than__header_fields_in_response
lea rcx, [rsp + 0x110]
mov r9d, 0xf
mov rdx, r14
call fcn.1400b54b0
mov rsi, qword [rsp + 0x110]
cmp rsi, r15
jne 0x1400b3be3
mov r8, qword [rsp + 0x118]
mov qword [rsp + 0x118], r15
mov qword [rsp + 0x130], r15
mov qword [rsp + 0x188], 0
mov byte [rsp + 0x198], 8
mov qword [rsp + 0x110], r15
lea rbx, [rsp + 0x320]
lea rdx, [rsp + 0x110]
mov rcx, rbx
call fcn.1400ce6a0
mov r8d, 0x110
mov rcx, rdi
mov rdx, rbx
call sub.msvcrt.dll_memcpy
jmp 0x1400b4311
mov rbx, qword [rsp + 0x118]
mov r15, qword [rsp + 0x120]
lea rcx, [rsp + 0x110]
mov rdx, rbx
mov r8, r15
call fcn.140018090
cmp qword [rsp + 0x110], 0
mov dword [rsp + 0xa4], ebp
je 0x1400b3db7
lea rcx, [rsp + 0x110]
mov rdx, rbx
mov r8, r15
call fcn.14000b070
mov r15, qword [rsp + 0x118]
mov r8, qword [rsp + 0x120]
test r8, r8
je 0x1400b3dbf
js 0x1400b54a9
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, r8
mov rbp, r8
call fcn.14008b700
mov r8, rbp
mov rcx, rax
test rax, rax
jne 0x1400b3dc4
jmp 0x1400b54a9
lea r8, [0x1401dba98]
movabs rax, 0x8000000000000000
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x188], 0
mov byte [rsp + 0x198], 8
mov qword [rsp + 0x110], rax
lea rcx, [rsp + 0x320]
lea rdx, [rsp + 0x110]
call fcn.1400ce6a0
mov rsi, qword [rsp + 0x320]
movzx ebp, word [rsp + 0x328]
mov r15d, dword [rsp + 0x32a]
movzx r12d, word [rsp + 0x32e]
mov rax, qword [rsp + 0x330]
mov qword [rsp + 0x228], rax
mov eax, dword [rsp + 0x338]
mov dword [rsp + 0x230], eax
lea rdx, [rsp + 0x348]
lea r14, [rsp + 0x7b0]
mov r8d, 0xe8
mov rcx, r14
call sub.msvcrt.dll_memcpy
mov eax, dword [rsp + 0x344]
mov rcx, qword [rsp + 0x33c]
mov rdx, qword [rsp + 0x228]
mov qword [rsp + 0x88], rdx
mov edx, dword [rsp + 0x230]
mov dword [rsp + 0x90], edx
mov qword [rdi], rsi
mov word [rdi + 8], bp
mov dword [rdi + 0xa], r15d
mov word [rdi + 0xe], r12w
mov rdx, qword [rsp + 0x88]
mov qword [rdi + 0x10], rdx
mov edx, dword [rsp + 0x90]
mov dword [rdi + 0x18], edx
mov qword [rdi + 0x1c], rcx
mov dword [rdi + 0x24], eax
add rdi, 0x28
mov r8d, 0xe8
mov rcx, rdi
mov rdx, r14
call sub.msvcrt.dll_memcpy
mov rcx, r13
call fcn.1400b5aa0
mov rcx, rbx
add rsp, 0x898
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400b3560
mov r14, rbx
mov rbp, r15
jmp 0x1400b3dff
mov ecx, 1
mov r14, rcx
mov rdx, r15
mov rbp, r8
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x110]
shl rax, 1
test rax, rax
jne 0x1400b40ca
test rsi, rsi
je 0x1400b3dfc
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov rsi, rbp
movabs rbx, 0x8000000000000000
cmp rbp, 8
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0xa8], rdi
jae 0x1400b3ede
test rbp, rbp
je 0x1400b3f7d
cmp byte [r14 + rbp - 1], 0
js 0x1400b3f25
mov rax, rbp
dec rax
je 0x1400b3f7d
cmp byte [r14 + rbp - 2], 0
js 0x1400b3f25
mov rax, rbp
add rax, 0xfffffffffffffffe
je 0x1400b3f7d
cmp byte [r14 + rbp - 3], 0
js 0x1400b3f25
mov rax, rbp
add rax, 0xfffffffffffffffd
je 0x1400b3f7d
cmp byte [r14 + rbp - 4], 0
js 0x1400b3f25
mov rax, rbp
add rax, 0xfffffffffffffffc
je 0x1400b3f7d
cmp byte [r14 + rbp - 5], 0
js 0x1400b3f25
mov rax, rbp
add rax, 0xfffffffffffffffb
je 0x1400b3f7d
cmp byte [r14 + rbp - 6], 0
js 0x1400b3f25
mov rax, rbp
add rax, 0xfffffffffffffffa
je 0x1400b3f7d
cmp byte [r14 + rbp - 7], 0
js 0x1400b3f25
mov rax, rbp
add rax, 0xfffffffffffffff9
je 0x1400b3f7d
jmp 0x1400b3f25
movabs rax, 0x8080808080808080
test qword [r14], rax
jne 0x1400b3f25
lea rdx, [r14 + 7]
and rdx, 0xfffffffffffffff8
sub rdx, r14
mov ecx, 8
cmovne rcx, rdx
lea rdx, [rbp - 8]
cmp rcx, rdx
jae 0x1400b3f1f
nop word [rax + rax]
test qword [r14 + rcx], rax
jne 0x1400b3f25
add rcx, 8
cmp rcx, rdx
jb 0x1400b3f10
test qword [r14 + rdx], rax
je 0x1400b3f7d
movzx eax, byte [0x140259141]
mov edx, 0x15
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov rbp, rax
movdqu xmm0, xmmword [str.Status_line_not_ASCIIHTTP_HTTP_version_did_not_start_with_HTTP_HTTP_version_did_not_match_formatStatus_code_was_wrong_lengthHTTP_version_was_wrong_lengthWrong_number_of_tokens_in_status_lineunable_to_parse_status_as_u16__]
movdqu xmmword [rax], xmm0
movabs rax, 0x494943534120746f
mov qword [rbp + 0xd], rax
mov r13w, 0x15
mov sil, 6
xor eax, eax
mov r14, rbx
mov rdx, rbx
xor r15d, r15d
mov bx, 0x15
xor r12d, r12d
jmp 0x1400b41ca
mov qword [rsp + 0x228], 3
mov qword [rsp + 0x230], 0
mov qword [rsp + 0x238], rbp
mov qword [rsp + 0x240], r14
mov qword [rsp + 0x248], rbp
mov qword [rsp + 0x250], 0
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x258], rbp
movabs rax, 0x2000000020
mov qword [rsp + 0x260], rax
mov byte [rsp + 0x268], 1
mov word [rsp + 0x270], 1
lea rcx, [rsp + 0x68]
lea rdx, [rsp + 0x228]
call fcn.1400ae690
mov rax, qword [rsp + 0x78]
cmp rax, 2
jne 0x1400b404b
mov eax, 2
cmp qword [rsp + 0x68], 2
jne 0x1400b4023
lea rcx, [rsp + 0x68]
call fcn.1400cf820
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
mov rdx, rax
shl rdx, 4
lea r8, [0x140216a68]
mov qword [rcx + rdx], r8
mov qword [rcx + rdx + 8], 0
inc rax
mov qword [rsp + 0x78], rax
cmp rax, 3
mov dword [rsp + 0x9c], r12d
jne 0x1400b40e9
mov rbx, qword [rsp + 0x70]
mov rcx, qword [rbx + 8]
cmp rcx, 5
jb 0x1400b4088
mov rax, qword [rbx]
mov edx, 0x50545448
xor edx, dword [rax]
movzx r8d, byte [rax + 4]
xor r8d, 0x2f
or r8d, edx
je 0x1400b4720
movzx eax, byte [0x140259141]
mov edx, 0x25
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov rbp, rax
movups xmm0, xmmword [0x1401ff80a]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [0x1401ff7fa]
movdqu xmmword [rax], xmm0
movabs rax, 0x2f50545448206874
jmp 0x1400b4129
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r15
call sub.KERNEL32.dll_HeapFree
test rsi, rsi
jne 0x1400b3deb
jmp 0x1400b3dfc
movzx eax, byte [0x140259141]
mov edx, 0x25
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov rbp, rax
movups xmm0, xmmword [0x1401ff889]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [0x1401ff879]
movdqu xmmword [rax], xmm0
movabs rax, 0x656e696c20737574
mov qword [rbp + 0x1d], rax
mov sil, 6
mov bx, 0x25
xor r12d, r12d
xor r15d, r15d
mov r13w, 0x25
xor eax, eax
mov qword [rsp + 0x40], rax
movabs r14, 0x8000000000000000
mov rdx, r14
mov rcx, qword [rsp + 0x48]
cmp qword [rsp + 0x68], 0
je 0x1400b417e
mov r8, qword [rsp + 0x70]
mov rcx, qword [0x1402590e0]
mov rdi, rdx
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rdx, rdi
mov rcx, qword [rsp + 0x48]
movabs rax, 0x8000000000000000
inc rax
cmp r14, rax
mov rax, qword [rsp + 0x40]
jne 0x1400b41ca
shl r12, 0x10
movzx eax, bx
or rax, r12
mov rdi, qword [rsp + 0xa8]
je 0x1400b4341
cmp rax, rcx
jae 0x1400b433b
mov rcx, qword [rsp + 0x30]
cmp byte [rcx + rax], 0xbf
jg 0x1400b4341
jmp 0x1400b54a9
shl r12, 0x10
mov rdi, r15
mov r15d, esi
mov rsi, r13
mov r13, rbp
movzx ebp, bx
or rbp, r12
movaps xmm0, xmmword [rsp + 0xf0]
movaps xmmword [rsp + 0x2f0], xmm0
movaps xmm0, xmmword [rsp + 0xb0]
movaps xmm1, xmmword [rsp + 0xc0]
movaps xmm2, xmmword [rsp + 0xd0]
movaps xmm3, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x2e0], xmm3
movaps xmmword [rsp + 0x2d0], xmm2
movaps xmmword [rsp + 0x2c0], xmm1
movaps xmmword [rsp + 0x2b0], xmm0
lea rcx, [rsp + 0x729]
mov r12, rdx
lea rdx, [rsp + 0x320]
mov r8d, 0x87
mov rbx, rax
call sub.msvcrt.dll_memcpy
mov rcx, qword [rsp + 0xa8]
mov qword [rcx], r14
mov qword [rcx + 8], rbp
mov rbp, qword [rsp + 0x30]
mov qword [rcx + 0x10], r13
mov word [rcx + 0x18], si
mov rax, rdi
shr rax, 0x20
mov word [rcx + 0x1e], ax
mov dword [rcx + 0x1a], edi
mov qword [rcx + 0x20], r12
movaps xmm0, xmmword [rsp + 0x2b0]
movaps xmm1, xmmword [rsp + 0x2c0]
movaps xmm2, xmmword [rsp + 0x2d0]
movaps xmm3, xmmword [rsp + 0x2e0]
movups xmmword [rcx + 0x28], xmm0
movups xmmword [rcx + 0x38], xmm1
movups xmmword [rcx + 0x48], xmm2
movups xmmword [rcx + 0x58], xmm3
movdqa xmm0, xmmword [rsp + 0x2f0]
movdqu xmmword [rcx + 0x68], xmm0
mov qword [rcx + 0x78], rbx
mov rax, qword [rsp + 0x60]
mov qword [rcx + 0x80], rax
mov byte [rcx + 0x88], r15b
add rcx, 0x89
mov r8d, 0x87
lea rdx, [rsp + 0x729]
call sub.msvcrt.dll_memcpy
mov r13, qword [rsp + 0x58]
mov rax, qword [rsp + 0x80]
test rax, rax
je 0x1400b4311
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
lea rcx, [rsp + 0x430]
call fcn.1400b3560
mov rcx, r13
call fcn.1400b5aa0
nop
add rsp, 0x898
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jne 0x1400b54a9
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x278], rbp
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 8
mov qword [rsp + 0xc0], 0
xor r13d, r13d
lea r12, [0x1401ff70f]
lea rbx, [rsp + 0x430]
jmp 0x1400b43c7
mov rax, qword [rsp + 0xb8]
mov rcx, r13
shl rcx, 5
mov qword [rax + rcx], rsi
mov qword [rax + rcx + 8], rbp
mov qword [rax + rcx + 0x10], r15
mov qword [rax + rcx + 0x18], r14
inc r13
mov qword [rsp + 0xc0], r13
cmp r13, 0x65
jae 0x1400b4617
mov r9d, 8
lea rcx, [rsp + 0x110]
mov rdx, rbx
mov r8, r12
call fcn.1400b54b0
mov rsi, qword [rsp + 0x110]
mov rbp, qword [rsp + 0x118]
movabs rax, 0x8000000000000000
cmp rsi, rax
je 0x1400b458e
mov r15, qword [rsp + 0x120]
test r15, r15
je 0x1400b45eb
xor r14d, r14d
nop word [rax + rax]
movzx ecx, byte [rbp + r14]
cmp cl, 0x3a
je 0x1400b443f
call fcn.1400c4f20
test al, al
je 0x1400b446a
inc r14
cmp r15, r14
jne 0x1400b4420
mov r14, r15
cmp r13, qword [rsp + 0xb0]
jne 0x1400b4390
lea rcx, [rsp + 0xb0]
mov rdx, r13
call fcn.140045e80
mov r13, qword [rsp + 0xc0]
jmp 0x1400b4390
add r14, rbp
mov qword [rsp + 0x68], r14
lea rax, [0x1400c4f60]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x110], 2
mov qword [rsp + 0x120], 2
mov qword [rsp + 0x130], 0
movabs rax, 0x1800000020
mov qword [rsp + 0x138], rax
mov byte [rsp + 0x140], 3
lea rax, str.Invalid_char____while_looking_for_:
mov qword [rsp + 0x320], rax
mov qword [rsp + 0x328], 2
lea rax, [rsp + 0x110]
mov qword [rsp + 0x340], rax
mov qword [rsp + 0x348], 1
lea rax, [rsp + 0x68]
mov qword [rsp + 0x330], rax
mov qword [rsp + 0x338], 1
lea rcx, [rsp + 0x228]
lea rdx, [rsp + 0x320]
call fcn.14000ba20
mov r14, qword [rsp + 0x228]
mov r13, qword [rsp + 0x230]
test rsi, rsi
je 0x1400b4547
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
shl r14, 1
test r14, r14
jne 0x1400b4566
mov r13, qword [rsp + 0xc0]
cmp r13, 0x65
jb 0x1400b43c7
jmp 0x1400b4617
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, r13
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0xc0]
cmp r13, 0x65
jb 0x1400b43c7
jmp 0x1400b4617
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x188], 0
mov byte [rsp + 0x198], 8
mov qword [rsp + 0x110], rax
lea rbx, [rsp + 0x320]
lea rdx, [rsp + 0x110]
mov rcx, rbx
mov r8, rbp
call fcn.1400ce6a0
mov r8d, 0x110
mov rcx, rdi
mov rdx, rbx
call sub.msvcrt.dll_memcpy
jmp 0x1400b4818
test rsi, rsi
je 0x1400b46d8
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0xc0]
cmp r13, 0x64
jbe 0x1400b46d8
lea rax, [0x1401ff778]
mov qword [rsp + 0x228], rax
lea rax, [0x140018690]
mov qword [rsp + 0x230], rax
lea rax, [0x1401ff758]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], 2
mov qword [rsp + 0x130], 0
lea rax, [rsp + 0x228]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], 1
lea rcx, [rsp + 0x320]
lea rdx, [rsp + 0x110]
call fcn.14000ba20
mov rbx, qword [rsp + 0x328]
mov r14, qword [rsp + 0x330]
test r14, r14
je 0x1400b47b4
movabs rsi, 0x8000000000000000
js 0x1400b54a9
movzx eax, byte [0x140259141]
xor ecx, ecx
mov rdx, r14
call fcn.14008b700
mov r15, rax
test rax, rax
jne 0x1400b47c4
jmp 0x1400b54a9
mov rbp, qword [rsp + 0xb8]
lea r8, [0x1401ff717]
mov r9d, 0x10
mov rcx, rbp
mov rdx, r13
call fcn.1400c51f0
test rax, rax
je 0x1400b487d
cmp rdx, 6
je 0x1400b4923
cmp rdx, 4
jne 0x1400b487d
cmp dword [rax], 0x70697a67
jmp 0x1400b4935
cmp rcx, 8
jne 0x1400b4885
movzx ecx, byte [rax + 5]
add cl, 0xd0
cmp cl, 0xa
jae 0x1400b48d2
movzx eax, byte [rax + 7]
add al, 0xd0
cmp al, 9
ja 0x1400b48d2
mov rcx, qword [rbx + 0x10]
mov rax, qword [rbx + 0x18]
mov qword [rsp + 0x280], rcx
mov qword [rsp + 0x288], rax
cmp rax, 3
jne 0x1400b4e5e
mov edx, 3
call fcn.14000c3e0
mov r13d, eax
test r13b, 1
jne 0x1400b5382
shr r13d, 0x10
cmp qword [rsp + 0x68], 0
je 0x1400b479e
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov bx, 8
mov ebp, 0xb
xor r12d, r12d
mov rcx, qword [rsp + 0x48]
jmp 0x1400b4195
mov r15d, 1
movabs rsi, 0x8000000000000000
mov rcx, r15
mov rdx, rbx
mov r8, r14
call sub.msvcrt.dll_memcpy
mov qword [rdi], rsi
mov qword [rdi + 8], r14
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r14
mov qword [rdi + 0x20], rsi
mov qword [rdi + 0x78], 0
mov byte [rdi + 0x88], 7
cmp qword [rsp + 0x320], 0
je 0x1400b4818
mov rcx, qword [0x1402590e0]
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapFree
mov r13, qword [rsp + 0xc0]
mov rbp, qword [rsp + 0x30]
test r13, r13
je 0x1400b4853
mov rsi, qword [rsp + 0xb8]
add rsi, 8
jmp 0x1400b4839
add rsi, 0x20
dec r13
je 0x1400b4853
cmp qword [rsi - 8], 0
je 0x1400b4830
mov r8, qword [rsi]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400b4830
cmp qword [rsp + 0xb0], 0
je 0x1400b42ee
mov r8, qword [rsp + 0xb8]
mov rcx, qword [0x1402590e0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400b42ee
xor r15d, r15d
jmp 0x1400b4939
movzx eax, byte [0x140259141]
mov edx, 0x1d
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov rbp, rax
movups xmm0, xmmword [0x1401ff869]
movups xmmword [rax + 0xd], xmm0
movdqu xmm0, xmmword [0x1401ff85c]
movdqu xmmword [rax], xmm0
mov sil, 6
mov bx, 0x1d
xor r12d, r12d
xor r15d, r15d
mov r13w, 0x1d
jmp 0x1400b413f
movzx eax, byte [0x140259141]
mov edx, 0x21
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov rbp, rax
movups xmm0, xmmword [0x1401ff82f]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [0x1401ff81f]
movdqu xmmword [rax], xmm0
mov byte [rax + 0x20], 0x74
mov sil, 6
mov bx, 0x21
xor r12d, r12d
xor r15d, r15d
mov r13w, 0x21
jmp 0x1400b413f
mov ecx, 0x7a672d78
xor ecx, dword [rax]
movzx eax, word [rax + 4]
xor eax, 0x7069
or eax, ecx
sete r15b
lea r8, [0x1401ff727]
mov r9d, 0xa
mov rcx, rbp
mov rdx, r13
call fcn.1400c51f0
mov r9, qword [rsp + 0x60]
cmp r9, 8
jne 0x1400b4bac
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rcx]
lea r8d, [rcx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, cl
cmp r8b, 0x68
jne 0x1400b4bac
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rcx + 1]
lea r8d, [rcx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, cl
cmp r8b, 0x74
jne 0x1400b4bac
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rcx + 2]
lea r8d, [rcx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, cl
cmp r8b, 0x74
jne 0x1400b4bac
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rcx + 3]
lea r8d, [rcx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, cl
cmp r8b, 0x70
jne 0x1400b4bac
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rcx + 4]
lea r8d, [rcx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, cl
cmp r8b, 0x2f
jne 0x1400b4bac
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rcx + 5]
lea r8d, [rcx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, cl
cmp r8b, 0x31
jne 0x1400b4bac
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rcx + 6]
lea r8d, [rcx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, cl
cmp r8b, 0x2e
jne 0x1400b4bac
mov rcx, qword [rsp + 0x30]
movzx ecx, byte [rcx + 7]
lea r8d, [rcx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, cl
cmp r8b, 0x30
jne 0x1400b4bac
mov bl, 1
test rax, rax
je 0x1400b4b9a
cmp rdx, 0xa
jne 0x1400b4b9a
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x6b
jne 0x1400b4b9a
movzx ecx, byte [rax + 1]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
jne 0x1400b4b9a
movzx ecx, byte [rax + 2]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
jne 0x1400b4b9a
movzx ecx, byte [rax + 3]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x70
jne 0x1400b4b9a
movzx ecx, byte [rax + 4]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x2d
jne 0x1400b4b9a
movzx ecx, byte [rax + 5]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x61
jne 0x1400b4b9a
movzx ecx, byte [rax + 6]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x6c
jne 0x1400b4b9a
movzx ecx, byte [rax + 7]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x69
jne 0x1400b4b9a
movzx ecx, byte [rax + 8]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x76
jne 0x1400b4b9a
movzx eax, byte [rax + 9]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
setne bl
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + 8]
mov rcx, qword [rcx + 0x10]
jmp 0x1400b4c47
xor ebx, ebx
test rax, rax
je 0x1400b4c30
cmp rdx, 5
jne 0x1400b4c30
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x63
jne 0x1400b4c2e
movzx ecx, byte [rax + 1]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x6c
jne 0x1400b4c2e
movzx ecx, byte [rax + 2]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x6f
jne 0x1400b4c2e
movzx ecx, byte [rax + 3]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x73
jne 0x1400b4c2e
movzx eax, byte [rax + 4]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x65
sete bl
jmp 0x1400b4c30
xor ebx, ebx
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + 8]
mov rcx, qword [rcx + 0x10]
cmp r9, 8
jne 0x1400b4d57
mov r9, qword [rsp + 0x30]
movzx edx, byte [r9]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x68
jne 0x1400b4d57
movzx edx, byte [r9 + 1]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x74
jne 0x1400b4d57
movzx edx, byte [r9 + 2]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x74
jne 0x1400b4d57
movzx edx, byte [r9 + 3]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x70
jne 0x1400b4d57
movzx edx, byte [r9 + 4]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x2f
jne 0x1400b4d57
movzx edx, byte [r9 + 5]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x31
jne 0x1400b4d57
mov rdx, qword [rsp + 0x30]
movzx edx, byte [rdx + 6]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x2e
jne 0x1400b4d57
mov rdx, qword [rsp + 0x30]
movzx edx, byte [rdx + 7]
lea r8d, [rdx - 0x41]
cmp r8b, 0x1a
setb r8b
shl r8b, 5
or r8b, dl
cmp r8b, 0x30
sete sil
jmp 0x1400b4d59
xor esi, esi
cmp rcx, 4
jne 0x1400b4dc2
movzx ecx, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x68
jne 0x1400b4dc2
movzx ecx, byte [rax + 1]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x65
jne 0x1400b4dc2
movzx ecx, byte [rax + 2]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
cmp dl, 0x61
jne 0x1400b4dc2
movzx eax, byte [rax + 3]
lea ecx, [rax - 0x41]
cmp cl, 0x1a
setb cl
shl cl, 5
or cl, al
cmp cl, 0x64
jne 0x1400b4dc2
xor r12d, r12d
jmp 0x1400b4ec2
movzx eax, word [rsp + 0x40]
xor r12d, r12d
cmp eax, 0xcc
je 0x1400b4ec2
mov r14d, 0
cmp eax, 0x130
je 0x1400b4ec5
lea r8, str.transfer_encodingcontent_length
mov r9d, 0x11
mov rcx, rbp
mov rdx, r13
call fcn.1400c51f0
test rax, rax
sete al
or sil, al
jne 0x1400b4e1c
test rdx, rdx
je 0x1400b4e1c
mov r14d, 1
xor r12d, r12d
jmp 0x1400b4ec5
lea r8, [0x1401ff4e1]
mov r9d, 0xe
mov rcx, rbp
mov rdx, r13
call fcn.1400c51f0
mov r14d, 2
test rax, rax
je 0x1400b4e5c
mov r8, rdx
lea rcx, [rsp + 0x110]
mov rdx, rax
call fcn.14000c590
cmp byte [rsp + 0x110], 0
je 0x1400b4eba
jmp 0x1400b4ec5
movzx eax, byte [0x140259141]
mov edx, 0x1c
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov rbp, rax
movups xmm0, xmmword [0x1401ff84c]
movups xmmword [rax + 0xc], xmm0
movdqu xmm0, xmmword [0x1401ff840]
movdqu xmmword [rax], xmm0
mov sil, 6
mov bx, 0x1c
xor r12d, r12d
xor r15d, r15d
mov r13w, 0x1c
xor eax, eax
movabs r14, 0x8000000000000000
mov rdx, r14
jmp 0x1400b5477
mov r12, qword [rsp + 0x118]
xor r14d, r14d
mov dword [rsp + 0x98], r15d
test r15b, r15b
je 0x1400b4edf
lea rcx, [rsp + 0xb0]
call fcn.1400ad920
lea rcx, [rsp + 0x528]
lea rdx, [rsp + 0x430]
mov r8d, 0xf8
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x58]
mov rsi, qword [rax + 0x98]
test bl, bl
mov r15, qword [rsp + 0x30]
je 0x1400b4f2e
lea rcx, [rsp + 0x430]
call fcn.1400b78d0
movabs rax, 0x8000000000000000
mov qword [rsp + 0x530], rax
mov r8, qword [rsi + 0x88]
mov r9d, dword [rsi + 0x90]
mov rcx, qword [rsp + 0x600]
mov rdx, qword [rsp + 0x608]
call fcn.1400b8aa0
test rax, rax
je 0x1400b4fa8
mov rbx, rax
movzx eax, byte [0x140259141]
mov edx, 8
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov r13, rax
mov qword [rax], rbx
lea rcx, [rsp + 0x528]
call fcn.1400b3560
lea rbx, [0x1401ff4f0]
movabs r14, 0x8000000000000000
movzx ebp, word [rsp + 0x2e]
mov r12d, dword [rsp + 0x3c]
jmp 0x1400b5188
test r14, r14
je 0x1400b5017
cmp r14d, 1
jne 0x1400b50a6
movzx eax, byte [0x140259141]
mov edx, 0x108
xor ecx, ecx
call fcn.14008b700
test rax, rax
movabs r14, 0x8000000000000000
movzx ebp, word [rsp + 0x2e]
mov r12d, dword [rsp + 0x3c]
je 0x1400b54a9
mov r13, rax
mov qword [rax], 0
mov rcx, rax
add rcx, 0x10
lea rdx, [rsp + 0x528]
mov r8d, 0xf8
call sub.msvcrt.dll_memcpy
lea rbx, [0x1401ff650]
jmp 0x1400b512f
test r12, r12
je 0x1400b50f8
mov rsi, qword [rsp + 0x5f0]
sub rsi, qword [rsp + 0x5e8]
lea rcx, [rsp + 0x620]
lea rdx, [rsp + 0x528]
mov r8d, 0xf8
call sub.msvcrt.dll_memcpy
mov qword [rsp + 0x718], r12
mov qword [rsp + 0x720], 0
cmp rsi, r12
jae 0x1400b52fa
movzx eax, byte [0x140259141]
mov edx, 0x108
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov r13, rax
lea rdx, [rsp + 0x620]
mov r8d, 0x108
mov rcx, rax
call sub.msvcrt.dll_memcpy
lea rbx, [0x1401ff5a0]
jmp 0x1400b511b
movzx eax, byte [0x140259141]
mov edx, 0xf8
xor ecx, ecx
call fcn.14008b700
test rax, rax
movabs r14, 0x8000000000000000
movzx ebp, word [rsp + 0x2e]
mov r12d, dword [rsp + 0x3c]
je 0x1400b54a9
mov r13, rax
lea rdx, [rsp + 0x528]
mov r8d, 0xf8
mov rcx, rax
call sub.msvcrt.dll_memcpy
lea rbx, [0x1401ff6a8]
jmp 0x1400b512f
lea rcx, [rsp + 0x528]
call fcn.1400b79b0
test rax, rax
jne 0x1400b54a9
mov r13d, 1
lea rbx, [0x1401ff548]
movabs r14, 0x8000000000000000
movzx ebp, word [rsp + 0x2e]
mov r12d, dword [rsp + 0x3c]
cmp byte [rsp + 0x98], 0
je 0x1400b5188
lea rcx, [rsp + 0x110]
mov rdx, r13
mov r8, rbx
call fcn.1400bcda0
movzx eax, byte [0x140259141]
mov edx, 0xd0
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov r13, rax
lea rdx, [rsp + 0x110]
mov r8d, 0xd0
mov rcx, rax
call sub.msvcrt.dll_memcpy
lea rbx, str.P_v_
mov rsi, qword [rsp + 0x58]
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x28]
lea rcx, [rsp + 0x308]
call fcn.14000b530
mov rax, qword [rsp + 0x318]
mov qword [rdi + 0x18], rax
movups xmm0, xmmword [rsi + 0x30]
movups xmm1, xmmword [rsp + 0x308]
movups xmmword [rdi + 8], xmm1
movups xmmword [rdi + 0x20], xmm0
mov eax, dword [rsi + 0x40]
mov dword [rdi + 0x30], eax
movups xmm0, xmmword [rsi + 0x44]
movups xmmword [rdi + 0x34], xmm0
mov eax, dword [rsi + 0x54]
mov dword [rdi + 0x44], eax
movzx eax, byte [rsi + 0x68]
mov byte [rdi + 0x58], al
movups xmm0, xmmword [rsi + 0x58]
movups xmmword [rdi + 0x48], xmm0
mov rax, qword [rsp + 0x80]
mov qword [rdi + 0x60], rax
mov qword [rdi + 0x68], r15
mov rax, qword [rsp + 0x48]
mov qword [rdi + 0x70], rax
mov rax, qword [rsp + 0xc0]
mov qword [rdi + 0x88], rax
movups xmm0, xmmword [rsp + 0xb0]
movups xmmword [rdi + 0x78], xmm0
mov qword [rdi + 0x90], 0
mov qword [rdi + 0x98], 8
mov qword [rdi + 0xa0], 0
movdqa xmm0, xmmword [rsp + 0x290]
movaps xmm1, xmmword [rsp + 0x2a0]
movdqu xmmword [rdi + 0xa8], xmm0
movups xmmword [rdi + 0xb8], xmm1
mov eax, dword [rsp + 0x54]
mov word [rdi + 0xc8], ax
mov eax, dword [rsp + 0x9c]
mov dword [rdi + 0xca], eax
mov eax, dword [rsp + 0xa4]
mov word [rdi + 0xce], ax
mov eax, dword [rsp + 0x108]
mov dword [rdi + 0xd8], eax
mov rax, qword [rsp + 0x100]
mov qword [rdi + 0xd0], rax
mov eax, dword [rsp + 0xa0]
mov dword [rdi + 0xdc], eax
mov dword [rdi + 0xe0], r12d
mov word [rdi + 0xe4], bp
mov qword [rdi + 0xe8], r13
mov qword [rdi + 0xf0], rbx
mov rax, qword [rsp + 0x60]
mov qword [rdi + 0xf8], rax
mov rax, qword [rsp + 0x278]
mov qword [rdi + 0x100], rax
mov rax, qword [rsp + 0x40]
mov word [rdi + 0x108], ax
inc r14
mov qword [rdi], r14
mov rcx, rsi
jmp 0x1400b4321
mov rcx, r12
mov dl, 1
call fcn.14009ad30
mov rbx, rax
mov rbp, rdx
lea rcx, [rsp + 0x620]
mov r8, r12
call case.0x1400ac91f.12
test rax, rax
jne 0x1400b54a9
movzx eax, byte [0x140259141]
mov edx, 0x20
xor ecx, ecx
call fcn.14008b700
test rax, rax
je 0x1400b54a9
mov r13, rax
mov qword [rax], rbx
mov qword [rax + 8], rbp
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0
movabs r14, 0x8000000000000000
lea rax, [r14 + 1]
lea rbx, [0x1401ff5f8]
cmp qword [rsp + 0x628], rax
jne 0x1400b5492
mov r15, qword [rsp + 0x30]
jmp 0x1400b5125
lea rcx, [rsp + 0x110]
lea rdx, [rsp + 0x280]
call fcn.1400b5bb0
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x40], rax
movzx ebx, word [rsp + 0x118]
mov eax, dword [rsp + 0x11a]
movzx r12d, word [rsp + 0x11e]
shl r12, 0x20
or r12, rax
mov rbp, qword [rsp + 0x120]
mov r13, qword [rsp + 0x128]
mov r15, qword [rsp + 0x130]
movups xmm0, xmmword [rsp + 0x138]
movaps xmmword [rsp + 0xb0], xmm0
movups xmm0, xmmword [rsp + 0x148]
movaps xmmword [rsp + 0xc0], xmm0
movups xmm0, xmmword [rsp + 0x158]
movaps xmmword [rsp + 0xd0], xmm0
movups xmm0, xmmword [rsp + 0x168]
movaps xmmword [rsp + 0xe0], xmm0
movdqu xmm0, xmmword [rsp + 0x178]
movdqa xmmword [rsp + 0xf0], xmm0
mov rdi, qword [rsp + 0x188]
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x60], rax
movzx esi, byte [rsp + 0x198]
lea rdx, [rsp + 0x199]
lea rcx, [rsp + 0x320]
mov r8d, 0x87
call sub.msvcrt.dll_memcpy
mov rdx, r15
mov rax, rdi
mov r14, qword [rsp + 0x40]
mov r15, r13
shr r15, 0x10
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x68], 0
jne 0x1400b4160
jmp 0x1400b417e
lea rcx, [rsp + 0x620]
call fcn.1400b3560
mov r15, qword [rsp + 0x30]
jmp 0x1400b5125
ud2