Function at 0x14002fb20
Capabilities:
Check http status code

Disassembly:
mov rax, rsp
mov dword [rax + 0x20], r9d
mov qword [rax + 0x18], r8
mov dword [rax + 0x10], edx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x78
mov rdi, qword [rcx]
mov r13, rcx
add rcx, 0x4c0
movsxd r14, edx
xor r12d, r12d
mov r15d, r9d
mov rsi, r8
mov dword [rax + 8], r12d
mov rbx, qword [r13 + 0xb08]
mov rbp, qword [r13 + r14*8 + 0x4c0]
lea rcx, [rcx + r14*8]
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x50], rbp
test rbx, rbx
je 0x1400305c7
cmp dword [rbx + 0x4020], 2
je 0x1400305c7
mov byte [r13 + 0x66b], r12b
nop word [rax + rax]
cmp dword [rbx + 0x4020], 0
jne 0x14002fe3b
mov r9d, r15d
lea rdx, str.Establish_HTTP_proxy_tunnel_to__s:_d_n
mov r8, rsi
mov rcx, rdi
call fcn.14002c130
mov rcx, qword [rdi + 0x1c8]
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rdi + 0x1c8], r12
call fcn.1400367a0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140030471
mov r8d, r15d
lea rcx, str._s:_d
mov rdx, rsi
call fcn.14003c870
mov rbp, rax
test rax, rax
je 0x140030467
mov r9b, 1
lea rdx, str.CONNECT
mov r8, rax
mov rcx, r13
call fcn.140037800
mov rcx, rbp
mov esi, eax
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_free]
test esi, esi
jne 0x14002fe13
cmp dword [r13 + 0x3dc], 1
lea rax, [0x14006c950]
mov rsi, qword [rsp + 0xd0]
lea r15, [0x14006c954]
cmove r15, rax
lea rbp, [0x140077d79]
mov r14, r12
movzx eax, byte [r13 + 0x65e]
mov r12, rbp
cmp rsi, qword [r13 + 0x340]
je 0x14002fc82
mov edx, Ordinal_60
mov rcx, rsi
call sub.VCRUNTIME140.dll_strchr
test rax, rax
setne al
test al, al
lea rcx, [0x14006c120]
lea rax, [0x14006c124]
mov r9, rbp
cmovne r9, rcx
mov rdx, rbp
cmovne rdx, rax
lea rcx, str._s_s_s:_d
mov eax, dword [rsp + 0xd8]
mov r8, rsi
mov dword [rsp + 0x20], eax
call fcn.14003c870
mov rbp, rax
test rax, rax
je 0x140030467
lea rdx, str.Host
mov rcx, r13
call fcn.140036f90
test rax, rax
jne 0x14002fcf5
mov rdx, rbp
lea rcx, str.Host:__s_r_n
call fcn.14003c870
mov r14, rax
test rax, rax
je 0x14003045e
lea rdx, str.Proxy_Connection
mov rcx, r13
call fcn.140036f90
test rax, rax
lea rsi, str.Proxy_Connection:_Keep_Alive_r_n
lea rax, [0x140077d79]
mov rcx, r13
lea rdx, str.User_Agent
cmovne rsi, rax
call fcn.140036f90
test rax, rax
jne 0x14002fd3d
cmp qword [rdi + 0xd08], rax
je 0x14002fd3d
mov r12, qword [r13 + 0x6e0]
mov rax, qword [r13 + 0x6d8]
lea rdx, [0x140077d79]
test rax, rax
mov qword [rsp + 0x38], rsi
mov rcx, rdx
mov qword [rsp + 0x30], r12
cmovne rcx, rax
mov r9, r15
mov rax, rdx
mov qword [rsp + 0x28], rcx
test r14, r14
lea rdx, str.CONNECT__s_HTTP__s_r_n_s_s_s_s
mov r8, rbp
lea rcx, [rsp + 0x48]
cmovne rax, r14
mov qword [rsp + 0x20], rax
call fcn.140036a00
mov esi, eax
test r14, r14
je 0x14002fd9a
mov rcx, r14
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbp
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_free]
test esi, esi
jne 0x14002fdfb
mov r8, qword [rsp + 0x48]
mov dl, 1
mov rcx, r13
call fcn.140036aa0
mov esi, eax
test eax, eax
jne 0x14002fdfb
lea rdx, [0x1400781d0]
lea rcx, [rsp + 0x48]
call fcn.140036a00
mov r14d, dword [rsp + 0xc8]
mov esi, eax
test eax, eax
jne 0x14002fe03
lea r8, [rdi + 0x1618]
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea rcx, [rsp + 0x48]
mov rdx, r13
call fcn.1400367b0
mov esi, eax
jmp 0x14002fe03
mov r14d, dword [rsp + 0xc8]
xor r12d, r12d
mov qword [rsp + 0x48], r12
test esi, esi
jne 0x14003047b
lea rcx, [rsp + 0x48]
call fcn.140036760
test esi, esi
jne 0x140030494
mov rbp, qword [rsp + 0x50]
mov dword [rbx + 0x4020], 1
mov dword [rbx + 0x4000], r12d
mov r8b, 1
xor edx, edx
mov rcx, rdi
call fcn.14002d830
test rax, rax
jle 0x1400305e1
mov edx, r14d
mov rcx, r13
call fcn.14002ccb0
test al, al
je 0x1400305c7
cmp dword [rbx + 0x4004], 0
mov r15d, r12d
je 0x140030364
lea r14, [rbx + 0x4000]
nop dword [rax + rax]
mov r8, qword [rbx + 0x4010]
cmp r8, r14
jae 0x14003049b
lea rax, [rsp + 0x58]
mov r9d, 1
mov rdx, rbp
mov qword [rsp + 0x20], rax
mov rcx, r13
call fcn.14002c2a0
mov esi, eax
cmp eax, 0x51
je 0x1400305c7
mov rcx, r13
call fcn.14003a280
test eax, eax
jne 0x1400305da
test esi, esi
jne 0x140030355
cmp qword [rsp + 0x58], 0
jle 0x140030315
cmp dword [rbx + 0x4004], 1
jle 0x14002ff61
mov rax, qword [rbx + 0x4018]
mov qword [rbx + 0x4010], rbx
test rax, rax
je 0x14002ff18
dec rax
mov qword [rbx + 0x4018], rax
test rax, rax
jg 0x140030306
mov dword [rbx + 0x4020], 2
jmp 0x140030355
lea rax, [rsp + 0x40]
mov qword [rsp + 0x68], r12
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r8d, 1
mov rdx, rbx
mov rcx, r13
call fcn.140059e90
cmp eax, 0xffffffff
jne 0x140030306
lea rdx, str.chunk_reading_DONE_n
mov rcx, rdi
call fcn.14002c130
mov dword [rbx + 0x4004], r12d
jmp 0x1400302fc
mov ecx, dword [r14]
mov rax, qword [rbx + 0x4010]
inc ecx
mov dword [r14], ecx
cmp byte [rax], 0xa
je 0x14002ff84
inc rax
mov qword [rbx + 0x4010], rax
jmp 0x140030306
cmp byte [rdi + 0xf1e], 0
je 0x14002ffa4
mov r8, qword [rbx + 0x4008]
mov edx, 1
movsxd r9, ecx
mov rcx, rdi
call fcn.14002bef0
cmp byte [rdi + 0xf32], 0
jne 0x14002ffd7
cmp byte [rdi + 0xf19], 0
mov edx, r12d
movsxd r9, dword [r14]
mov rcx, r13
mov r8, qword [rbx + 0x4008]
setne dl
add edx, 2
call fcn.14002bed0
test eax, eax
jne 0x1400305c9
movsxd rax, dword [r14]
add qword [rdi + 0x1610], rax
movsxd rax, dword [r14]
add qword [rdi + 0x108], rax
mov rcx, qword [rbx + 0x4008]
movzx eax, byte [rcx]
cmp al, 0xd
je 0x140030225
cmp al, 0xa
je 0x140030225
movsxd rax, dword [r14]
mov r8d, reloc.WS2_32.dll_recvfrom
mov byte [rax + rcx], 0
lea rcx, str.WWW_Authenticate:
mov rdx, qword [rbx + 0x4008]
call fcn.14002f4b0
test eax, eax
je 0x140030037
mov esi, dword [rdi + 0x178]
cmp esi, 0x191
je 0x140030062
mov rdx, qword [rbx + 0x4008]
lea rcx, str.Proxy_authenticate:
mov r8d, reloc.WS2_32.dll_send
call fcn.14002f4b0
test eax, eax
je 0x1400300ab
mov esi, dword [rdi + 0x178]
cmp esi, 0x197
jne 0x1400300ab
mov rcx, qword [rbx + 0x4008]
call fcn.140037130
mov rbp, rax
test rax, rax
je 0x140030471
cmp esi, 0x197
mov r8, rax
mov rcx, r13
sete dl
call fcn.140037550
mov rcx, rbp
mov esi, eax
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_free]
test esi, esi
jne 0x140030494
mov rbp, qword [rsp + 0x50]
jmp 0x14003020f
mov rdx, qword [rbx + 0x4008]
lea rcx, str.Content_Length:
mov r8d, reloc.WS2_32.dll_ntohs
call fcn.14002f4b0
test eax, eax
je 0x140030111
mov r8d, dword [rdi + 0x178]
lea eax, [r8 - 0xc8]
cmp eax, 0x64
jae 0x1400300ef
lea rdx, str.Ignoring_Content_Length_in_CONNECT__03d_response_n
mov rcx, rdi
call fcn.14002c130
jmp 0x14003020f
mov rcx, qword [rbx + 0x4008]
lea r9, [rbx + 0x4018]
xor edx, edx
add rcx, 0xf
lea r8d, [rdx + 0xa]
call fcn.14003dd80
jmp 0x14003020f
mov rcx, qword [rbx + 0x4008]
lea r8, str.close
lea rdx, str.Connection:
call fcn.140037040
test al, al
jne 0x140030208
mov rdx, qword [rbx + 0x4008]
lea rcx, str.Transfer_Encoding:
mov r8d, reloc.WS2_32.dll_select
call fcn.14002f4b0
test eax, eax
je 0x1400301b5
mov r8d, dword [rdi + 0x178]
lea eax, [r8 - 0xc8]
cmp eax, 0x64
jae 0x140030177
lea rdx, str.Ignoring_Transfer_Encoding_in_CONNECT__03d_response_n
mov rcx, rdi
call fcn.14002c130
jmp 0x14003020f
mov rcx, qword [rbx + 0x4008]
lea r8, str.chunked
lea rdx, str.Transfer_Encoding:
call fcn.140037040
test al, al
je 0x14003020f
lea rdx, str.CONNECT_responded_chunked_n
mov rcx, rdi
call fcn.14002c130
mov rcx, r13
mov byte [rbx + 0x4024], 1
call fcn.140059e70
jmp 0x14003020f
mov rcx, qword [rbx + 0x4008]
lea r8, str.close
lea rdx, str.Proxy_Connection:
call fcn.140037040
test al, al
jne 0x140030208
mov rcx, qword [rbx + 0x4008]
lea r9, [rdi + 0x178]
lea r8, [rsp + 0xc0]
lea rdx, str.HTTP_1._d__d
call fcn.140021160
cmp eax, 2
jne 0x14003020f
mov eax, dword [rdi + 0x178]
mov dword [rdi + 0x15fc], eax
jmp 0x14003020f
mov byte [rbx + 0x4025], 1
mov dword [r14], r12d
mov qword [rbx + 0x4010], rbx
mov qword [rbx + 0x4008], rbx
jmp 0x140030306
mov qword [rbx + 0x4010], rbx
cmp dword [rdi + 0x178], 0x197
jne 0x1400302eb
cmp byte [rdi + 0x1599], 0
jne 0x1400302eb
mov r8, qword [rbx + 0x4018]
mov dword [rbx + 0x4004], 2
test r8, r8
je 0x140030273
lea rdx, str.Ignore__I64d_bytes_of_response_body_n
mov rcx, rdi
call fcn.14002c130
jmp 0x1400302f2
cmp byte [rbx + 0x4024], 0
je 0x1400302eb
lea rdx, str.Ignore_chunked_response_body_n
mov rcx, rdi
call fcn.14002c130
mov byte [rdi + 0x65b], 1
mov rdx, qword [rbx + 0x4008]
cmp byte [rdx + 1], 0xa
lea rax, [rdx + 1]
jne 0x1400302ad
mov qword [rbx + 0x4008], rax
mov rdx, rax
lea rax, [rsp + 0x44]
inc rdx
lea r9, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r8d, 1
mov rcx, r13
call fcn.140059e90
cmp eax, 0xffffffff
jne 0x1400302f2
lea rdx, str.chunk_reading_DONE_n
mov rcx, rdi
call fcn.14002c130
mov dword [rbx + 0x4020], 2
mov dword [rbx + 0x4004], r12d
cmp qword [rbx + 0x4018], 0
jne 0x140030306
mov dword [rbx + 0x4020], 2
cmp dword [rbx + 0x4004], 0
jne 0x14002fe80
jmp 0x14003035c
cmp dword [rdi + 0x6b0], 0
je 0x140030340
cmp dword [rdi + 0x1220], 0
je 0x140030340
lea rdx, str.Proxy_CONNECT_connection_closed_n
mov byte [r13 + 0x66b], 1
mov rcx, rdi
call fcn.14002c130
jmp 0x140030355
lea rdx, str.Proxy_CONNECT_aborted
mov rcx, rdi
mov r15d, 1
call fcn.14002bfb0
mov dword [rbx + 0x4004], r12d
mov r14d, dword [rsp + 0xc8]
mov rcx, r13
call fcn.14003a280
test eax, eax
jne 0x1400305da
test r15d, r15d
jne 0x1400304aa
mov eax, dword [rdi + 0x15fc]
sub eax, 0xc8
cmp eax, 0x64
jb 0x1400303ad
mov rcx, r13
call fcn.140037240
test eax, eax
jne 0x1400305c9
cmp byte [r13 + 0x654], al
je 0x1400303ad
mov byte [rbx + 0x4025], 1
cmp byte [rbx + 0x4025], 0
je 0x1400303dc
cmp qword [rdi + 0x1c8], 0
je 0x14003043d
mov rsi, qword [rsp + 0x60]
mov rcx, r13
mov rdx, qword [rsi]
call fcn.14002cc10
mov qword [rsi], 0xffffffffffffffff
jmp 0x1400304b9
mov rax, qword [rdi + 0x1c8]
test rax, rax
je 0x1400304b4
cmp dword [rbx + 0x4020], 2
mov rsi, qword [rsp + 0xd0]
mov r15d, dword [rsp + 0xd8]
jne 0x14002fba0
mov rax, qword [r13 + 0xb08]
mov dword [rax + 0x4020], r12d
mov dword [rax + 0x4004], 1
mov qword [rax + 0x4008], rax
mov qword [rax + 0x4010], rax
mov qword [rax + 0x4018], r12
mov byte [rax + 0x4025], 0
mov rax, qword [rdi + 0x1c8]
test rax, rax
je 0x1400304b4
mov rsi, qword [rsp + 0xd0]
mov r15d, dword [rsp + 0xd8]
jmp 0x14002fba0
mov rcx, rbp
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rcx, [rsp + 0x48]
call fcn.140036760
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1400305c9
lea rdx, str.Failed_sending_CONNECT_to_proxy
mov rcx, rdi
call fcn.14002bfb0
lea rcx, [rsp + 0x48]
call fcn.140036760
mov eax, esi
jmp 0x1400305c9
lea rdx, str.CONNECT_response_too_large_
mov rcx, rdi
call fcn.14002bfb0
mov eax, Ordinal_60
jmp 0x1400305c9
mov rsi, qword [rsp + 0x60]
mov eax, dword [rdi + 0x15fc]
sub eax, 0xc8
cmp eax, 0x64
jb 0x14003057b
cmp byte [rbx + 0x4025], 0
je 0x14003051a
cmp qword [rdi + 0x1c8], 0
je 0x14003051a
lea rdx, str.Connect_me_again_please_n
mov byte [r13 + 0x66b], 1
mov rcx, rdi
call fcn.14002c130
mov rax, qword [r13 + 0xb08]
lea rdx, str.CONNECT_phase_completed__n
mov dword [rax + 0x4020], 2
mov rcx, qword [r13]
call fcn.14002c130
jmp 0x14003054d
mov rcx, qword [rdi + 0x1c8]
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edx, 2
mov qword [rdi + 0x1c8], r12
mov rcx, r13
call fcn.14002cd70
mov rdx, qword [rsi]
mov rcx, r13
call fcn.14002cc10
mov qword [rsi], 0xffffffffffffffff
mov dword [rbx + 0x4020], r12d
cmp byte [r13 + 0x66b], 0
jne 0x1400305c7
mov r8d, dword [rdi + 0x178]
lea rdx, str.Received_HTTP_code__d_from_proxy_after_CONNECT
mov rcx, rdi
call fcn.14002bfb0
mov eax, Ordinal_60
jmp 0x1400305c9
mov dword [rbx + 0x4020], 2
mov rcx, qword [r13 + 0x6d8]
call qword [sub.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r13 + 0x6d8], r12
lea rdx, str.Proxy_replied__d_to_CONNECT_request_n
mov r8d, dword [rdi + 0x15fc]
mov rcx, rdi
mov word [rdi + 0x1224], 1
call fcn.14002c130
mov byte [rdi + 0x65b], 0
mov byte [r13 + 0x665], 0
xor eax, eax
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov eax, Ordinal_45
jmp 0x1400305c9
lea rdx, str.Proxy_CONNECT_aborted_due_to_timeout
mov rcx, rdi
call fcn.14002bfb0
mov eax, Ordinal_32
jmp 0x1400305c9