Function at 0x14002d300
Capabilities:
Initialize winhttp library
Make an http request with a cookie
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1170]
mov eax, 0x1270
call fcn.140093770
sub rsp, rax
movaps xmmword [rsp + 0x1260], xmm6
mov rax, qword [0x1400c1060]
xor rax, rsp
mov qword [rbp + 0x1150], rax
mov r15, qword [0x1401a7e30]
cmp qword [r15 + 0x20], 0
ja 0x14002d366
mov dword [r15 + 0x160], 3
xor al, al
jmp 0x14002e706
lea rcx, [rbp + 0xd0]
call fcn.14003f480
nop
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
lea rdx, [0x1400b0a08]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002d3a8
lea rbx, [0x1400b0a08]
lea r8d, [rax + 3]
jmp 0x14002d3db
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
lea rbx, str.POST
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14002e6aa
lea r8d, [rax + 4]
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.14003fa90
mov dil, 1
xor r14d, r14d
cmp qword [r15], r14
jne 0x14002d42c
lea rcx, [r15 + 0x188]
cmp qword [rcx + 0x18], 8
jb 0x14002d406
mov rcx, qword [rcx]
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [r15], rax
test rax, rax
jne 0x14002d42c
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14002e6af
mov eax, dword [r15 + 0x21c]
mov dword [rsp + 0x20], eax
mov r9d, dword [r15 + 0x218]
mov r8d, dword [r15 + 0x214]
mov edx, dword [r15 + 0x210]
mov rcx, qword [r15]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x300]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xa28
lea rcx, [rbp + 0x720]
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
mov dword [rbp + 0x20], 0x68
lea rax, [rbp + 0x300]
mov qword [rbp + 0x38], rax
mov dword [rbp + 0x40], 0x104
lea rax, [rbp + 0x720]
mov qword [rbp + 0x68], rax
mov dword [rbp + 0x70], 0x514
mov r12d, 1
mov dword [rbp + 0x30], r12d
lea rbx, [r15 + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14002d4e7
mov rcx, qword [rbx]
lea r9, [rbp + 0x20]
xor r8d, r8d
mov edx, dword [r15 + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x14002e6b9
lea rax, [rbp + 0x300]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rax + r8*2], r14w
jne 0x14002d510
lea rcx, [r15 + 0x30]
lea rdx, [rbp + 0x300]
call fcn.14003fa90
xor r9d, r9d
movzx r8d, word [rbp + 0x44]
lea rdx, [rbp + 0x300]
mov rcx, qword [r15]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rsi, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14002e6b9
mov ecx, r14d
mov eax, 0x800000
cmp dword [rbp + 0x34], 2
cmove ecx, eax
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rdx, qword [rbp + 0xd0]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, qword [rbp + 0x68]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14002e69f
cmp byte [r15 + 8], r14b
jne 0x14002d5d8
cmp dword [rbp + 0x34], 2
jne 0x14002d5d8
mov dword [rbp + 0x94], 0x3100
mov r9d, 4
lea r8, [rbp + 0x94]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
xor edi, edi
mov ecx, edi
movsd xmm6, qword [0x1400b1588]
nop dword [rax]
nop dword [rax + rax]
mov eax, ecx
inc ecx
mov dword [rbp + 0x94], ecx
cmp eax, 3
jae 0x14002e689
mov rax, qword [r15 + 0x130]
test rax, rax
je 0x14002d643
lea rdx, [r15 + 0x120]
cmp qword [rdx + 0x18], 8
jb 0x14002d620
mov rdx, qword [rdx]
mov r9d, 0x1000000
mov r8d, eax
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x14002d643
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
cmp qword [r15 + 0x100], 0
jbe 0x14002d794
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], di
mov r8d, 8
lea rdx, str.Cookie:
lea rcx, [rbp + 0xb0]
call fcn.14003fa90
nop
lea r9, [r15 + 0xf0]
cmp qword [r15 + 0x108], 8
jb 0x14002d6a3
mov r9, qword [r15 + 0xf0]
mov rdx, qword [r15 + 0x100]
mov rcx, qword [rbp + 0xc0]
mov r8, qword [rbp + 0xc8]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x14002d6ff
lea rdi, [rdx + rcx]
mov qword [rbp + 0xc0], rdi
lea rbx, [rbp + 0xb0]
cmp r8, 8
cmovae rbx, qword [rbp + 0xb0]
lea rcx, [rbx + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
xor eax, eax
mov word [rbx + rdi*2], ax
lea rbx, [r15 + 0x10]
xor edi, edi
jmp 0x14002d710
mov qword [rsp + 0x20], rdx
lea rcx, [rbp + 0xb0]
call fcn.140043360
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rdx, qword [rbp + 0xb0]
mov r9d, 0x1000000
mov r8d, dword [rbp + 0xc0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x14002d74e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x14002d794
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002d78f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e658
call fcn.1400930d8
cmp qword [r15 + 0x150], 0
jbe 0x14002d898
mov qword [rbp + 8], 3
mov qword [rbp + 0x18], rdi
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
lea r8, [r15 + 0x140]
cmp qword [r8 + 0x18], 8
jb 0x14002d7d3
mov r8, qword [r8]
mov edx, 0x104
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0xf0]
mov qword [rbp + 0x10], rax
mov r9d, Ordinal_27
lea r8, [rbp + 8]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14002d818
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
mov rax, qword [r15 + 0x1c0]
test rax, rax
je 0x14002d898
lea r8, [r15 + 0x1b0]
cmp qword [r8 + 0x18], 8
jb 0x14002d835
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14002d858
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
mov rax, qword [r15 + 0x1e0]
test rax, rax
je 0x14002d898
lea r8, [r15 + 0x1d0]
cmp qword [r8 + 0x18], 8
jb 0x14002d875
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1003
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14002d898
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
xor dil, dil
xor esi, esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x14002daa1
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
movups xmmword [rbp - 0x58], xmm0
lea rcx, [rbp - 0x68]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x14002de0f
mov rax, qword [rbp - 0x60]
test rax, rax
je 0x14002d9a4
mov dword [rbp - 0x18], 3
mov dword [rbp - 0x14], r12d
mov qword [rbp - 0x10], rax
mov dword [rbp + 4], r12d
mov dword [rbp], esi
mov qword [rbp - 8], rsi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rax
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14002d921
mov rdx, qword [rbx]
lea r9, [rbp - 0x48]
lea r8, [rbp - 0x18]
mov rcx, qword [r15]
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x14002da51
mov r9d, Ordinal_27
lea r8, [rbp - 0x48]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x14002d97d
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
movzx edi, dil
test eax, eax
cmovne edi, r12d
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14002d98c
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x14002da5e
call qword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x14002da5e
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x14002da7c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x30], 3
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0xf0]
mov qword [rbp - 0x28], rax
mov rbx, qword [rbp - 0x50]
test rbx, rbx
je 0x14002da36
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x510]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x510]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x510]
mov qword [rbp - 0x20], rax
mov r9d, Ordinal_27
lea r8, [rbp - 0x30]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14002da5e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14002da6d
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x14002da7c
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14002da8b
call qword [sym.imp.KERNEL32.dll_GlobalFree]
test dil, dil
lea rbx, [r15 + 0x10]
mov ecx, dword [rbp + 0x94]
mov rdi, rsi
je 0x14002d5f0
mov rdx, qword [r15 + 0x110]
xor edi, edi
test rdx, rdx
je 0x14002dadd
mov dword [rbp + 0x90], edi
lea r9, [rbp + 0x90]
mov r8d, dword [r15 + 0x118]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
jne 0x14002dadd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x14002e63c
mov dword [rbp - 0x70], edi
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x16]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14002db27
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14002e0e1
mov ecx, dword [rbp - 0x70]
mov eax, 2
mul rcx
mov rbx, 0xffffffffffffffff
cmovo rax, rbx
mov rcx, rax
call fcn.140093430
mov r13, rax
mov r8d, dword [rbp - 0x70]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9, r13
xor r8d, r8d
lea edx, [rbx + 0x17]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x14002e0d4
mov r8, rbx
nop word [rax + rax]
inc r8
cmp word [r13 + r8*2], si
jne 0x14002db90
mov rdx, r13
lea rcx, [r15 + 0x50]
call fcn.14003fa90
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
mov qword [rbp + 0xa8], rdi
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], di
xor r8d, r8d
lea rdx, [0x1400b09fc]
lea rcx, [rbp + 0xb0]
call fcn.14003fa90
nop
cmp byte [r15 + 0x1a8], 0
jne 0x14002dc6f
mov r8d, Ordinal_27
lea rdx, str.charset_A_Za_z0_9___
lea rcx, [rbp + 0xb0]
call fcn.14003fa90
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [r15 + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.14002c9a0
test al, al
je 0x14002dc6f
mov rax, qword [rbp + 0xa0]
mov r8, qword [rbp + 0x98]
sub rax, r8
sar rax, 5
test rax, rax
je 0x14002dc6f
lea rcx, [r15 + 0x90]
cmp rcx, r8
je 0x14002dc6f
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14002dc66
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.14003fa90
mov r8d, Ordinal_27
lea rdx, str.Content_Length:__0_9_
lea rcx, [rbp + 0xb0]
call fcn.14003fa90
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [r15 + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.14002c9a0
test al, al
je 0x14002dcd9
mov rax, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0x98]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x14002dcd9
cmp qword [rcx + 0x18], 8
jb 0x14002dccc
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov dword [r15 + 0xc8], eax
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Location:__0_9_
lea rcx, [rbp + 0xb0]
call fcn.14003fa90
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [r15 + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.14002c9a0
test al, al
je 0x14002dd4e
mov rax, qword [rbp + 0xa0]
mov r8, qword [rbp + 0x98]
sub rax, r8
sar rax, 5
test rax, rax
je 0x14002dd4e
lea rcx, [r15 + 0x1f0]
cmp rcx, r8
je 0x14002dd4e
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14002dd45
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.14003fa90
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Set_Cookie:_b.__n
lea rcx, [rbp + 0xb0]
call fcn.14003fa90
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [r15 + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.14002c9a0
test al, al
je 0x14002e01e
mov rax, qword [rbp + 0xa0]
sub rax, qword [rbp + 0x98]
sar rax, 5
test rax, rax
je 0x14002e01e
mov r14, rdi
lea rbx, [r15 + 0xd0]
mov r12, rdi
mov rcx, qword [rbp + 0x98]
add rcx, r12
mov r9, rcx
cmp qword [rcx + 0x18], 8
jb 0x14002ddca
mov r9, qword [rcx]
mov rdx, qword [rcx + 0x10]
mov rcx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rax, r8
sub rax, rcx
cmp rdx, rax
ja 0x14002de29
lea rsi, [rcx + rdx]
mov qword [rbx + 0x10], rsi
mov rdi, rbx
cmp r8, 8
jb 0x14002ddf5
mov rdi, qword [rbx]
lea rcx, [rdi + rcx*2]
lea r8, [rdx + rdx]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
xor eax, eax
mov word [rdi + rsi*2], ax
xor edi, edi
jmp 0x14002de36
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
mov ecx, dword [rbp + 0x94]
xor edi, edi
jmp 0x14002d5f0
mov qword [rsp + 0x20], rdx
mov rcx, rbx
call fcn.140043360
mov rax, qword [rbp + 0xa0]
sub rax, qword [rbp + 0x98]
sar rax, 5
dec rax
cmp r14, rax
je 0x14002dea2
mov rdx, qword [rbx + 0x10]
mov r8, qword [rbx + 0x18]
mov rax, r8
sub rax, rdx
mov rcx, rbx
cmp rax, 2
jb 0x14002de88
lea r9, [rdx + 2]
mov qword [rbx + 0x10], r9
cmp r8, 8
jb 0x14002de78
mov rcx, qword [rbx]
mov eax, dword [0x1400b0afc]
mov dword [rcx + rdx*2], eax
mov word [rcx + r9*2], di
jmp 0x14002dea2
mov qword [rsp + 0x20], 2
lea r9, [0x1400b0afc]
mov edx, 2
call fcn.140043360
inc r14
add r12, 0x20
mov rax, qword [rbp + 0xa0]
sub rax, qword [rbp + 0x98]
sar rax, 5
cmp r14, rax
jb 0x14002ddb3
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], di
mov r12d, 1
mov r8d, r12d
lea rdx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x50]
call fcn.14003fa90
nop
lea rbx, [r15 + 0xd0]
lea r8, [rsp + 0x50]
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.14002ce50
mov rdx, rax
mov rcx, rbx
call fcn.14003f370
mov rdx, qword [rbp - 0x78]
cmp rdx, 8
jb 0x14002df5c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002df57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e65f
call fcn.1400930d8
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], di
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14002dfaf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002dfaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e666
call fcn.1400930d8
mov rcx, qword [r15 + 0xe0]
test rcx, rcx
je 0x14002e01e
mov rax, rbx
mov rdx, qword [rbx + 0x18]
cmp rdx, 8
jb 0x14002dfcb
mov rax, qword [rbx]
cmp word [rax + rcx*2 - 2], 0x3b
je 0x14002e01e
mov rcx, qword [rbx + 0x10]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14002e006
lea r8, [rcx + 1]
mov qword [rbx + 0x10], r8
cmp rdx, 8
jb 0x14002dff4
mov rbx, qword [rbx]
movzx eax, word [0x1400b0b04]
mov word [rbx + rcx*2], ax
mov word [rbx + r8*2], di
jmp 0x14002e01e
mov qword [rsp + 0x20], r12
lea r9, [0x1400b0b04]
mov rdx, r12
mov rcx, rbx
call fcn.140043360
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x14002e064
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e05f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e66d
call fcn.1400930d8
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], di
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x14002e0d4
mov rdx, qword [rbp + 0xa0]
call fcn.140042c70
mov rdx, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0x98]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e0cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e674
call fcn.1400930d8
mov rcx, r13
call fcn.1400930d8
mov r13, qword [rsp + 0x40]
mov dword [rbp - 0x70], edi
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x13]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14002e114
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14002e192
mov ecx, dword [rbp - 0x70]
mov eax, 2
mul rcx
mov rsi, 0xffffffffffffffff
cmovo rax, rsi
mov rcx, rax
call fcn.140093430
mov rbx, rax
mov r8d, dword [rbp - 0x70]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9, rbx
xor r8d, r8d
lea edx, [rsi + 0x14]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x14002e18a
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x14002e170
lea rcx, [r15 + 0x168]
mov rdx, rbx
call fcn.14003fa90
mov rcx, rbx
call fcn.1400930d8
mov r12d, 0x2800
mov esi, edi
mov rcx, qword [r15 + 0xb0]
test rcx, rcx
je 0x14002e1b2
call fcn.1400930d8
mov qword [r15 + 0xb0], rdi
mov rcx, r12
call fcn.140093430
mov qword [r15 + 0xb0], rax
xor edx, edx
mov r8, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
nop
mov dword [rbp - 0x70], edi
lea rdx, [rbp - 0x70]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x14002e2d4
mov rdx, qword [r15 + 0xc0]
test rdx, rdx
je 0x14002e21b
mov ecx, dword [r15 + 0xc8]
test ecx, ecx
je 0x14002e21b
mov eax, esi
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov ecx, dword [rbp - 0x70]
inc ecx
call fcn.140093430
mov r14, rax
mov r8d, dword [rbp - 0x70]
inc r8d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x90], edi
lea r9, [rbp + 0x90]
mov r8d, dword [rbp - 0x70]
mov rdx, r14
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x14002e2ca
mov ecx, dword [rbp + 0x90]
lea eax, [rcx + rsi]
cmp eax, r12d
jbe 0x14002e2b0
mov rdi, qword [r15 + 0xb0]
add r12d, r12d
mov ecx, r12d
call fcn.140093430
mov qword [r15 + 0xb0], rax
mov r8d, r12d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8d, esi
mov rdx, rdi
mov rcx, qword [r15 + 0xb0]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rdi
call fcn.1400930d8
mov ecx, dword [rbp + 0x90]
xor edi, edi
mov r8d, ecx
mov ecx, esi
add rcx, qword [r15 + 0xb0]
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
add esi, dword [rbp + 0x90]
mov rcx, r14
call fcn.1400930d8
jmp 0x14002e2e1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
cmp dword [rbp - 0x70], 0
ja 0x14002e1d0
mov rdx, qword [r15 + 0xc0]
test rdx, rdx
je 0x14002e31e
mov ecx, dword [r15 + 0xc8]
test ecx, ecx
je 0x14002e31e
mov eax, esi
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov dword [r15 + 0xb8], esi
mov r14d, edi
mov r12d, 1
lea rcx, [r15 + 0x90]
cmp qword [rcx + 0x18], 8
jb 0x14002e33f
mov rcx, qword [rcx]
mov r8d, 5
lea rdx, [0x1400b0b08]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14002e35f
mov r14d, 0xfde9
mov r12d, edi
mov r9d, dword [r15 + 0xb8]
inc r9d
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r8, qword [r15 + 0xb0]
mov edx, r12d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test eax, eax
jg 0x14002e3c3
mov r14d, edi
mov r12d, 1
mov r9d, dword [r15 + 0xb8]
inc r9d
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r8, qword [r15 + 0xb0]
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test eax, eax
jle 0x14002e441
mov ebx, esi
mov eax, 2
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140093430
mov rdi, rax
lea r8, [rbx + rbx]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r9d, dword [r15 + 0xb8]
inc r9d
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
mov r8, qword [r15 + 0xb0]
mov edx, r12d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x14002e439
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], 0
jne 0x14002e422
lea rcx, [r15 + 0x70]
mov rdx, rdi
call fcn.14003fa90
mov rcx, rdi
call fcn.1400930d8
mov dil, 1
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
cmp qword [rbp + 0xe0], 3
jne 0x14002e691
mov r8d, 3
lea rdx, [0x1400b0a08]
nop word [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002e691
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x14002e480
xor esi, esi
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], si
lea r8d, [rsi + 8]
lea rdx, str._html_
lea rcx, [rbp + 0xb0]
call fcn.14003fa90
nop
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
mov qword [rbp + 0xa8], rsi
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [r15 + 0x70]
lea rcx, [rbp + 0xb0]
call fcn.14002c9a0
mov rdx, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0x98]
test al, al
je 0x14002e585
mov rax, rdx
sub rax, rcx
sar rax, 5
test rax, rax
je 0x14002e585
lea r8d, [rsi + 9]
lea rdx, str.__html_
lea rcx, [rbp + 0xb0]
call fcn.14003fa90
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [r15 + 0x70]
lea rcx, [rbp + 0xb0]
call fcn.14002c9a0
mov rdx, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0x98]
test al, al
je 0x14002e577
mov rax, rdx
sub rax, rcx
sar rax, 5
test rax, rax
jne 0x14002e585
mov dword [r15 + 0x160], reloc.WS2_32.dll_listen
xor dil, dil
test rcx, rcx
je 0x14002e5e0
call fcn.140042c70
mov rdx, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0x98]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e5c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e67b
call fcn.1400930d8
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], rsi
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x14002e622
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e61d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002e682
call fcn.1400930d8
test dil, dil
jne 0x14002e68e
lea rbx, [r15 + 0x10]
mov ecx, dword [rbp + 0x94]
xor edi, edi
lea r12d, [rdi + 1]
jmp 0x14002d5f0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x160], eax
lea rbx, [r15 + 0x10]
mov ecx, dword [rbp + 0x94]
jmp 0x14002d5f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor dil, dil
jmp 0x14002e691
mov dil, 1
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rsi, qword [rsp + 0x48]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x14002e6b9
mov eax, 0x57
mov dword [r15 + 0x160], eax
xor dil, dil
mov rdx, qword [rbp + 0xe8]
cmp rdx, 8
jb 0x14002e702
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002e6fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002e6fd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400930d8
movzx eax, dil
mov rcx, qword [rbp + 0x1150]
xor rcx, rsp
call fcn.140092b30
lea r11, [rsp + 0x1270]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret