Function at 0x14000216a
Capabilities:
Connect to http server
Create http request
Parse url
Read data from internet
Receive data
Send data
Send http request

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xa08
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x9b0], rcx
mov qword [rbp + 0x9b8], rdx
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 1
lea rax, str.UserAgent
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetOpenA]
call rax
mov qword [rbp + 0x978], rax
cmp qword [rbp + 0x978], 0
jne 0x1400021d2
mov ebx, 0
jmp 0x140002522
lea rdx, [rbp + 0x8f0]
mov eax, 0
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov dword [rbp + 0x8f0], 0x68
mov dword [rbp + 0x940], 0xffffffff
mov eax, dword [rbp + 0x940]
mov dword [rbp + 0x910], eax
mov eax, dword [rbp + 0x910]
mov dword [rbp + 0x900], eax
lea rax, [rbp + 0x7f0]
mov qword [rbp + 0x908], rax
mov dword [rbp + 0x910], 0x100
lea rax, [rbp + 0x3f0]
mov qword [rbp + 0x938], rax
mov dword [rbp + 0x940], 0x400
mov rax, qword [rbp + 0x9b0]
mov rcx, rax
call fcn.1400302c0
lea rdx, [rbp + 0x8f0]
mov r9, rdx
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCrackUrlA]
call rax
test eax, eax
sete al
test al, al
je 0x14000229b
mov rax, qword [rbp + 0x978]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov ebx, 0
jmp 0x140002522
movzx eax, word [rbp + 0x914]
movzx ecx, ax
mov rdx, qword [rbp + 0x908]
mov rax, qword [rbp + 0x978]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetConnectA]
call rax
mov qword [rbp + 0x970], rax
cmp qword [rbp + 0x970], 0
jne 0x140002318
mov rax, qword [rbp + 0x978]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov ebx, 0
jmp 0x140002522
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.140001ad5
mov rdx, qword [rbp + 0x938]
mov rax, qword [rbp + 0x970]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8, rdx
lea rdx, str.POST
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_HttpOpenRequestA]
call rax
mov qword [rbp + 0x968], rax
cmp qword [rbp + 0x968], 0
jne 0x1400023b5
mov rax, qword [rbp + 0x970]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x978]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov ebx, 0
jmp 0x140002513
lea rax, str.Content_Type:_application_x_www_form_urlencoded__charsetutf_8_r_nAccept:_application_json__text_plain____r_nAccept_Language:_en_US_en_q0.9_r_nOrigin:_https:__www.kenesrakishevinfo.com_r_nReferer:_https:__www.kenesrakishevinfo.com__r_n
mov qword [rbp + 0x960], rax
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1400304a0
mov esi, eax
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1400302c0
mov rbx, rax
mov rax, qword [rbp + 0x960]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov ecx, eax
mov rdx, qword [rbp + 0x960]
mov rax, qword [rbp + 0x968]
mov dword [rsp + 0x20], esi
mov r9, rbx
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_HttpSendRequestA]
call rax
mov dword [rbp + 0x95c], eax
cmp dword [rbp + 0x95c], 0
je 0x1400024d0
jmp 0x14000244e
mov eax, dword [rbp + 0x3cc]
mov ecx, eax
lea rdx, [rbp - 0x40]
mov rax, qword [rbp + 0x9b8]
mov r8, rcx
mov rcx, rax
call fcn.1400af0a0
lea rcx, [rbp + 0x3cc]
lea rdx, [rbp - 0x40]
mov rax, qword [rbp + 0x968]
mov r9, rcx
mov r8d, 0x400
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetReadFile]
call rax
test eax, eax
je 0x14000248a
mov eax, dword [rbp + 0x3cc]
test eax, eax
je 0x14000248a
mov eax, 1
jmp 0x14000248f
mov eax, 0
test al, al
jne 0x140002430
lea rax, str.Server_response:
mov rdx, rax
mov rax, qword [0x1400df350]
mov rcx, rax
call fcn.1400cf0c0
mov rcx, rax
mov rax, qword [rbp + 0x9b8]
mov rdx, rax
call fcn.1400cf400
mov rcx, rax
mov rax, qword [0x1400df360]
mov rdx, rax
call fcn.1400815b0
mov rax, qword [rbp + 0x968]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x970]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x978]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
cmp dword [rbp + 0x95c], 1
sete bl
lea rax, [rbp + 0x3d0]
mov rcx, rax
call fcn.1400b17f0
mov eax, ebx
jmp 0x140002543
add rsp, 0xa08
pop rbx
pop rsi
pop rdi
pop rbp
ret