Function at 0x14003f060
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x24f0]
mov eax, 0x25f0
call fcn.14005cc60
sub rsp, rax
mov rax, qword [0x1400c2138]
xor rax, rsp
mov qword [rbp + 0x24e0], rax
mov r15, rdx
mov rbx, rcx
xor r12d, r12d
test rdx, rdx
je 0x14003f0e7
lea rax, [rdx + 0x18]
mov qword [rsp + 0x58], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x80], eax
mov dword [r15 + 0x7c], r12d
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14003f0dd
mov r10, qword [rcx]
mov dword [rsp + 0x20], eax
lea r9d, [r12 + 1]
xor r8d, r8d
mov edx, dword [r15 + 0x10]
call qword [r10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x14003f113
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
lea rdi, [0x1400dc760]
mov qword [rsp + 0x58], rdi
mov eax, dword [rdx + rcx]
cmp dword [0x1400dc750], eax
jg 0x140040680
lea rcx, [rbp + 0x30]
call fcn.14003eee0
mov dword [rbp + 0x2480], 2
mov dword [rbp + 0x2484], 4
mov eax, 0x50
mov word [rbp + 0x247c], ax
lea r9d, [rax - 0x4c]
lea r8, str.http
lea edx, [rax - 0x2f]
lea rcx, [rbp + 0x30]
call fcn.14006f088
test eax, eax
je 0x14003f17b
cmp eax, 0xc
je 0x1400406d5
cmp eax, 0x16
je 0x1400406ca
cmp eax, 0x22
je 0x1400406ca
cmp eax, 0x50
jne 0x1400406bf
cmp qword [rbx + 0x18], 8
jb 0x14003f185
mov rbx, qword [rbx]
lea rcx, [rbp + 0x30]
call fcn.14003eee0
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14003e770
mov ebx, eax
test r15, r15
je 0x14003f1de
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x80], eax
mov dword [r15 + 0x7c], 1
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14003f1d6
mov r10, qword [rcx]
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8d, 1
mov edx, dword [r15 + 0x10]
call qword [r10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
je 0x14003ff67
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x20], r12
mov eax, 7
mov qword [rbp + 0x28], rax
mov word [rbp + 0x10], r12w
lea rax, [rbp + 0x72]
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14003f210
mov edi, 0xa
movabs rax, 0x7fffffffffffffff
movabs r13, 0x7ffffffffffffffe
lea r14, [rdi - 0xc]
cmp rbx, 7
ja 0x14003f25f
mov qword [rbp + 0x20], rbx
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x72]
lea rcx, [rbp + 0x10]
call fcn.140061930
mov word [rbp + rbx + 0x10], r12w
jmp 0x14003f30b
cmp rbx, r13
ja 0x1400406e0
mov rsi, rbx
or rsi, 7
cmp rsi, r13
jbe 0x14003f27c
mov rsi, r13
mov rcx, r14
jmp 0x14003f29c
cmp rsi, rdi
cmovb rsi, rdi
lea rcx, [rsi + 1]
cmp rcx, rax
ja 0x14004067a
add rcx, rcx
cmp rcx, 0x1000
jb 0x14003f2c8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004067a
mov rcx, rax
call fcn.1400679f4
test rax, rax
je 0x1400406e6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14003f2e3
test rcx, rcx
je 0x14003f2e0
call fcn.1400679f4
mov rdi, rax
test rax, rax
je 0x140040644
jmp 0x14003f2e3
mov rdi, r12
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rsi
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x72]
mov rcx, rdi
call fcn.140061930
mov word [rbx + rdi], r12w
mov qword [rbp + 0x10], rdi
mov edi, 0xa
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r12w
lea rax, [rbp + 0x478]
mov rsi, 0xffffffffffffffff
nop
inc rsi
cmp word [rax + rsi*2], 0
jne 0x14003f330
cmp rsi, 7
ja 0x14003f372
mov qword [rbp - 0x20], rsi
lea rbx, [rsi + rsi]
mov r8, rbx
lea rdx, [rbp + 0x478]
lea rcx, [rbp - 0x30]
call fcn.140061930
mov word [rbp + rbx - 0x30], r12w
mov r13, qword [rbp - 0x18]
mov rsi, qword [rbp - 0x20]
mov r14, qword [rbp - 0x30]
jmp 0x14003f423
cmp rsi, r13
ja 0x1400406f8
mov rax, rsi
or rax, 7
cmp rax, r13
ja 0x14003f3b5
mov r13, rax
cmp rax, 0xa
cmovb r13, rdi
lea r14, [r13 + 1]
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x14004063e
add r14, r14
cmp r14, 0x1000
jb 0x14003f3de
lea rcx, [r14 + 0x27]
cmp rcx, r14
jbe 0x14004063e
call fcn.1400679f4
test rax, rax
je 0x1400406fe
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14003f3fc
test r14, r14
je 0x14003f3f9
mov rcx, r14
call fcn.1400679f4
mov r14, rax
test rax, rax
je 0x140040656
jmp 0x14003f3fc
mov r14, r12
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x18], r13
lea rbx, [rsi + rsi]
mov r8, rbx
lea rdx, [rbp + 0x478]
mov rcx, r14
call fcn.140061930
mov word [rbx + r14], r12w
mov qword [rbp - 0x30], r14
lea rax, [rbp + 0x147a]
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14003f431
mov rax, r13
sub rax, rsi
cmp rdx, rax
ja 0x14003f475
lea rdi, [rsi + rdx]
mov qword [rbp - 0x20], rdi
lea rbx, [rbp - 0x30]
cmp r13, 8
cmovae rbx, r14
lea rcx, [rbx + rsi*2]
lea r8, [rdx + rdx]
lea rdx, [rbp + 0x147a]
call fcn.140061930
mov word [rbx + rdi*2], r12w
jmp 0x14003f48d
mov qword [rsp + 0x20], rdx
lea r9, [rbp + 0x147a]
xor r8d, r8d
lea rcx, [rbp - 0x30]
call fcn.1400099b8
movzx edi, word [rbp + 0x247c]
mov eax, 0x800100
mov r12d, 0x100
cmp dword [rbp + 0x2480], 3
cmove r12d, eax
xor r14d, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.QQBrowser
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rsi, rax
mov qword [rbp - 0x48], rax
mov ebx, r14d
test rax, rax
setne bl
test r15, r15
je 0x14003f517
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x80], eax
mov dword [r15 + 0x7c], 2
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14003f50f
mov r10, qword [rcx]
mov dword [rsp + 0x20], eax
mov r9d, ebx
lea r8d, [r14 + 2]
mov edx, dword [r15 + 0x10]
call qword [r10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x14003f5c9
test rsi, rsi
je 0x14003f52e
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003f56e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f569
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040710
call fcn.14005cb40
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r14w
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14003f5c2
lea rdx, [rdx*2 + 2]
mov r8, qword [rbp + 0x10]
mov rcx, r8
cmp rdx, 0x1000
jb 0x14003f5ba
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x140040668
mov rcx, r8
call fcn.14005cb40
mov eax, ebx
jmp 0x14003ff69
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rdx, qword [rbp + 0x10]
xor r9d, r9d
movzx r8d, di
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r14, rax
mov qword [rbp - 0x40], rax
xor edi, edi
mov ebx, edi
test rax, rax
setne bl
test r15, r15
je 0x14003f638
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x80], eax
mov dword [r15 + 0x7c], 3
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x14003f630
mov r10, qword [rcx]
mov dword [rsp + 0x20], eax
mov r9d, ebx
lea r8d, [rdi + 3]
mov edx, dword [r15 + 0x10]
call qword [r10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
jne 0x14003f6f6
test r14, r14
je 0x14003f64f
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test rsi, rsi
je 0x14003f65e
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003f69e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f699
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040710
call fcn.14005cb40
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], di
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14003f5c2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f5bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040668
jmp 0x14003f5bd
mov qword [rbp - 0x10], rdi
mov r9d, 7
mov qword [rbp + 8], r9
mov r13, qword [rsp + 0x58]
mov ecx, dword [r13 + 0x60]
test ecx, ecx
je 0x14003f755
sub ecx, 1
je 0x14003f739
mov qword [rbp], 3
mov word [rbp - 0xa], di
cmp ecx, 1
jne 0x14003f761
mov eax, dword [0x1400b16d8]
mov dword [rbp - 0x10], eax
movzx eax, word [0x1400b16dc]
jmp 0x14003f771
mov qword [rbp], 4
movabs rax, 0x540053004f0050
mov qword [rbp - 0x10], rax
mov word [rbp - 8], di
jmp 0x14003f775
mov qword [rbp], 3
mov word [rbp - 0xa], di
mov eax, dword [0x1400b16d0]
mov dword [rbp - 0x10], eax
movzx eax, word [0x1400b16d4]
mov word [rbp - 0xc], ax
lea r8, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae r8, qword [rbp - 0x30]
lea rdx, [rbp - 0x10]
mov dword [rsp + 0x30], r12d
xor r12d, r12d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
lea r9, str.HTTP_1.1
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rdi, rax
mov qword [rbp - 0x38], rax
mov ebx, r12d
test rax, rax
setne bl
test r15, r15
je 0x14003f7d7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, ebx
lea edx, [r12 + 4]
mov rcx, r15
call fcn.14003f010
test ebx, ebx
jne 0x14003f8f9
test rdi, rdi
je 0x14003f7ee
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14003f82e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f829
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040722
call fcn.14005cb40
mov qword [rbp], r12
mov edi, 7
mov qword [rbp + 8], rdi
mov word [rbp - 0x10], r12w
test r14, r14
je 0x14003f84f
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test rsi, rsi
je 0x14003f85e
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003f89e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003f899
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040728
call fcn.14005cb40
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], rdi
mov word [rbp - 0x30], r12w
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14003f5c2
lea rdx, [rdx*2 + 2]
mov r8, qword [rbp + 0x10]
mov rcx, r8
cmp rdx, 0x1000
jb 0x14003f8ea
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x140040674
mov rcx, r8
call fcn.14005cb40
mov eax, ebx
jmp 0x14003ff69
cmp qword [r13 + 0x20], 0
je 0x14003fa20
lea rdx, [r13 + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x14003f912
mov rdx, qword [rdx]
mov r9d, 0x20000000
mov r8d, 0xffffffff
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov ebx, eax
test r15, r15
je 0x14003f947
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, ebx
mov edx, 5
mov rcx, r15
call fcn.14003f010
test ebx, ebx
jne 0x14003fa20
test rdi, rdi
je 0x14003f95e
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14003f99e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14003f999
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040722
call fcn.14005cb40
mov ebx, 7
mov word [rbp - 0x10], r12w
mov qword [rbp + 8], rbx
mov qword [rbp], r12
test r14, r14
je 0x14003f9bf
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test rsi, rsi
je 0x14003f9ce
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003fa0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14003fa09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040728
call fcn.14005cb40
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], rbx
mov word [rbp - 0x30], r12w
jmp 0x14003ff27
mov ebx, r12d
cmp dword [r13 + 0x60], 1
jne 0x14003fa2e
mov ebx, dword [r13 + 0x40]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov r12d, eax
test r15, r15
je 0x14003fa6e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, r12d
mov edx, 6
mov rcx, r15
call fcn.14003f010
test r12d, r12d
je 0x14003fe5b
xor r12d, r12d
cmp dword [r13 + 0x60], 1
jne 0x14003fbef
cmp qword [r13 + 0x40], r12
je 0x14003fbef
mov dword [rsp + 0x60], r12d
lea rdx, [r13 + 0x30]
cmp qword [rdx + 0x18], 0x10
jb 0x14003faa2
mov rdx, qword [rdx]
lea r9, [rsp + 0x60]
mov r8d, ebx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
mov ebx, eax
test r15, r15
je 0x14003fad3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, ebx
mov edx, 7
mov rcx, r15
call fcn.14003f010
test ebx, ebx
jne 0x14003fbef
test rdi, rdi
je 0x14003faea
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14003fb2a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fb25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040716
call fcn.14005cb40
mov qword [rbp], r12
mov ebx, 7
mov qword [rbp + 8], rbx
mov word [rbp - 0x10], r12w
test r14, r14
je 0x14003fb4b
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test rsi, rsi
je 0x14003fb5a
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003fb9a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003fb95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004071c
call fcn.14005cb40
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x18], rbx
mov word [rbp - 0x30], r12w
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14003ff67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004066e
jmp 0x14003ff62
xor edx, edx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov ebx, eax
test r15, r15
je 0x14003fc1a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, ebx
mov edx, 8
mov rcx, r15
call fcn.14003f010
test ebx, ebx
je 0x14003f94f
mov dword [rsp + 0x48], r12d
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x78], xmm0
mov qword [rsp + 0x68], r12
mov qword [rbp - 0x68], r12
mov rbx, qword [r13 + 0x50]
mov rbx, qword [rbx]
mov r13, qword [rbp - 0x78]
cmp byte [rbx + 0x19], 0
jne 0x14003fdbb
mov rsi, r12
mov r14, qword [rbp - 0x70]
mov dword [rsp + 0x48], 0x64
lea r8, [rbx + 0x20]
cmp qword [rbx + 0x38], 8
jb 0x14003fc6b
mov r8, qword [rbx + 0x20]
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov edx, 0xffff
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x14003fd4c
mov byte [rsp + 0x40], 0
add eax, 2
mov r12d, eax
mov rcx, r14
sub rcx, r13
cmp r12, rcx
jae 0x14003fcb7
lea r14, [rax + r13]
jmp 0x14003fcf6
jbe 0x14003fcfa
mov rax, rsi
sub rax, r13
cmp r12, rax
jbe 0x14003fce3
lea r8, [rsp + 0x40]
mov rdx, r12
lea rcx, [rbp - 0x78]
call fcn.140017b4c
mov rsi, qword [rbp - 0x68]
mov r13, qword [rbp - 0x78]
mov r14, qword [rbp - 0x70]
jmp 0x14003fcfa
sub r12, rcx
mov r8, r12
xor edx, edx
mov rcx, r14
call fcn.140061fe0
add r14, r12
mov qword [rbp - 0x70], r14
lea r8, [rbx + 0x20]
cmp qword [rbx + 0x38], 8
jb 0x14003fd09
mov r8, qword [rbx + 0x20]
mov qword [rsp + 0x28], 0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9, r13
mov edx, 0xffff
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov r8, 0xffffffffffffffff
inc r8
cmp word [r13 + r8*2], 0
jne 0x14003fd34
lea rcx, [rbx + 0x40]
mov rdx, r13
call fcn.140006170
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14003fd78
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14003fd73
cmp rbx, qword [rax + 0x10]
jne 0x14003fd73
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14003fd60
mov rbx, rax
jmp 0x14003fd9f
mov rbx, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x14003fd9f
nop dword [rax]
nop dword [rax + rax]
mov rbx, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x14003fd90
cmp byte [rbx + 0x19], 0
je 0x14003fc54
mov qword [rsp + 0x68], rsi
mov rsi, qword [rbp - 0x48]
mov r14, qword [rbp - 0x40]
mov r12, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
xor ecx, ecx
mov dword [rax + 4], ecx
mov dword [rsp + 0x78], ecx
mov dword [rsp + 0x7c], 4
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x7c]
mov qword [rsp + 0x20], rcx
lea r9, [rax + 4]
xor r8d, r8d
mov edx, 0x20000005
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov ebx, eax
test r15, r15
je 0x14003fe1a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, ebx
mov edx, 9
mov rcx, r15
call fcn.14003f010
test ebx, ebx
jne 0x14003ff93
test r13, r13
je 0x14003fe5b
sub r12, r13
mov rax, r13
cmp r12, 0x1000
jb 0x14003fe4f
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040734
mov rdx, r12
mov rcx, r13
call fcn.14005cb40
nop
test rdi, rdi
je 0x14003fe6a
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x14003feaa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14003fea5
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040722
call fcn.14005cb40
xor ebx, ebx
mov edi, 7
mov word [rbp - 0x10], bx
mov qword [rbp + 8], rdi
mov qword [rbp], rbx
test r14, r14
je 0x14003fecc
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test rsi, rsi
je 0x14003fedb
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x14003ff1b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14003ff16
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040728
call fcn.14005cb40
mov word [rbp - 0x30], bx
mov qword [rbp - 0x18], rdi
mov qword [rbp - 0x20], rbx
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14003ff67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14003ff62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040674
call fcn.14005cb40
xor eax, eax
mov rcx, qword [rbp + 0x24e0]
xor rcx, rsp
call fcn.14005ccc0
mov rbx, qword [rsp + 0x2640]
add rsp, 0x25f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xorps xmm0, xmm0
movups xmmword [rbp + 0x24a0], xmm0
movups xmmword [rbp + 0x24b0], xmm0
movups xmmword [rbp + 0x24c0], xmm0
movups xmmword [rbp + 0x24d0], xmm0
mov dword [rbp - 0x80], 0x40
xor eax, eax
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x24a0]
xor r8d, r8d
lea edx, [r8 + 0x13]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov ebx, eax
test r15, r15
je 0x140040000
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, ebx
mov edx, 9
mov rcx, r15
call fcn.14003f010
test ebx, ebx
jne 0x140040155
test r13, r13
je 0x140040041
sub r12, r13
mov rax, r13
cmp r12, 0x1000
jb 0x140040035
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040734
mov rdx, r12
mov rcx, r13
call fcn.14005cb40
nop
test rdi, rdi
je 0x140040050
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x140040090
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004008b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040722
call fcn.14005cb40
xor ebx, ebx
mov qword [rbp], rbx
mov edi, 7
mov qword [rbp + 8], rdi
mov word [rbp - 0x10], bx
test r14, r14
je 0x1400400b2
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test rsi, rsi
je 0x1400400c1
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x140040101
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400400fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040728
call fcn.14005cb40
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rdi
mov word [rbp - 0x30], bx
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14003ff67
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ff62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040674
jmp 0x14003ff62
lea rcx, [rbp + 0x24a0]
call fcn.140069020
mov rcx, qword [rsp + 0x58]
mov dword [rcx + 8], eax
cmp dword [rcx], 0
je 0x140040251
test r13, r13
je 0x1400401ab
sub r12, r13
mov rax, r13
cmp r12, 0x1000
jb 0x14004019f
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040734
mov rdx, r12
mov rcx, r13
call fcn.14005cb40
nop
test rdi, rdi
je 0x1400401ba
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov r8, qword [rbp + 8]
cmp r8, 8
jb 0x1400401d4
inc r8
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x10]
call fcn.14000629c
xor edi, edi
mov r15d, 7
mov word [rbp - 0x10], di
mov qword [rbp + 8], r15
mov qword [rbp], rdi
test r14, r14
je 0x1400401f7
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test rsi, rsi
je 0x140040206
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov r8, qword [rbp - 0x18]
cmp r8, 8
jb 0x140040220
inc r8
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.14000629c
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x18], r15
mov word [rbp - 0x30], di
mov r8, qword [rbp + 0x28]
cmp r8, 8
jb 0x14003f5c2
inc r8
mov rdx, qword [rbp + 0x10]
lea rcx, [rbp + 0x10]
call fcn.14000629c
mov eax, ebx
jmp 0x14003ff69
test r15, r15
je 0x140040261
mov rax, qword [r15]
mov edx, dword [rcx + 4]
mov rcx, r15
call qword [rax]
xor ecx, ecx
mov dword [rsp + 0x50], ecx
mov r12d, ecx
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x58], rcx
mov qword [rsp + 0x70], rcx
mov qword [rbp - 0x50], rcx
nop dword [rax + rax]
mov dword [rsp + 0x44], ecx
lea rdx, [rsp + 0x44]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov ebx, eax
test r15, r15
je 0x1400402d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x80], eax
mov dword [r15 + 0x7c], 9
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x1400402ce
mov r10, qword [rcx]
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8d, 9
mov edx, dword [r15 + 0x10]
call qword [r10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
je 0x140040468
xor eax, eax
mov ebx, eax
cmp dword [rsp + 0x44], eax
seta bl
mov dword [rbp - 0x7c], ebx
test r15, r15
je 0x14004032e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x80], eax
mov dword [r15 + 0x7c], 0xb
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x140040326
mov r10, qword [rcx]
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8d, 0xb
mov edx, dword [r15 + 0x10]
call qword [r10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
je 0x140040468
mov byte [rsp + 0x40], 0
mov eax, dword [rsp + 0x44]
inc eax
mov ebx, eax
mov r9, qword [rbp - 0x58]
mov rcx, r9
sub rcx, r12
cmp rbx, rcx
jae 0x140040358
lea r9, [r12 + rax]
jmp 0x1400403a2
jbe 0x1400403a6
mov rax, qword [rsp + 0x70]
sub rax, r12
cmp rbx, rax
jbe 0x14004038b
lea r8, [rsp + 0x40]
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.140017b4c
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x70], rax
mov r12, qword [rbp - 0x60]
mov r9, qword [rbp - 0x58]
jmp 0x1400403a6
sub rbx, rcx
mov r8, rbx
xor edx, edx
mov rcx, r9
call fcn.140061fe0
mov r9, qword [rbp - 0x58]
add r9, rbx
mov qword [rbp - 0x58], r9
cmp r9, r12
je 0x140040465
xor eax, eax
mov dword [rsp + 0x60], eax
lea r9, [rsp + 0x60]
mov r8d, dword [rsp + 0x44]
mov rdx, r12
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov ebx, eax
test r15, r15
je 0x14004040f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r15 + 0x80], eax
mov dword [r15 + 0x7c], 0xc
mov rcx, qword [r15 + 8]
test rcx, rcx
je 0x140040407
mov r10, qword [rcx]
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8d, 0xc
mov edx, dword [r15 + 0x10]
call qword [r10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
test ebx, ebx
je 0x140040468
test r15, r15
je 0x14004043b
mov r10, qword [r15]
mov rax, qword [rsp + 0x58]
mov eax, dword [rax + 4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x60]
mov r8d, dword [rsp + 0x50]
mov rdx, r12
mov rcx, r15
call qword [r10 + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x50]
add ecx, eax
mov dword [rsp + 0x50], ecx
mov rdx, qword [rsp + 0x58]
cmp dword [rdx + 4], ecx
je 0x14004045e
test eax, eax
je 0x140040468
xor ecx, ecx
jmp 0x140040280
mov ebx, 1
jmp 0x140040468
mov ebx, dword [rbp - 0x7c]
mov rax, qword [r15]
test ebx, ebx
setne dl
mov rcx, qword [rsp + 0x58]
mov r8d, dword [rcx + 4]
mov rcx, r15
call qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
mov r8d, ebx
mov edx, 0xd
mov rcx, r15
call fcn.14003f010
nop
test ebx, ebx
jne 0x1400405c1
test r12, r12
je 0x1400404e0
mov rcx, qword [rsp + 0x70]
sub rcx, r12
mov rax, r12
cmp rcx, 0x1000
jb 0x1400404d4
add rcx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004072e
mov rdx, rcx
mov rcx, r12
call fcn.14005cb40
nop
test r13, r13
je 0x14004051e
mov rcx, qword [rsp + 0x68]
sub rcx, r13
mov rax, r13
cmp rcx, 0x1000
jb 0x140040512
add rcx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040734
mov rdx, rcx
mov rcx, r13
call fcn.14005cb40
nop
test rdi, rdi
je 0x14004052d
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov r8, qword [rbp + 8]
cmp r8, 8
jb 0x140040547
inc r8
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x10]
call fcn.14000629c
xor ebx, ebx
mov qword [rbp], rbx
mov edi, 7
mov qword [rbp + 8], rdi
mov word [rbp - 0x10], bx
test r14, r14
je 0x140040569
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test rsi, rsi
je 0x140040578
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov r8, qword [rbp - 0x18]
cmp r8, 8
jb 0x140040592
inc r8
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.14000629c
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rdi
mov word [rbp - 0x30], bx
mov r8, qword [rbp + 0x28]
cmp r8, 8
jb 0x14003ff67
inc r8
mov rdx, qword [rbp + 0x10]
lea rcx, [rbp + 0x10]
call fcn.14000629c
jmp 0x14003ff67
test r12, r12
je 0x140040600
mov rcx, qword [rsp + 0x70]
sub rcx, r12
mov rax, r12
cmp rcx, 0x1000
jb 0x1400405f4
add rcx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004072e
mov rdx, rcx
mov rcx, r12
call fcn.14005cb40
nop
test r13, r13
je 0x1400401ab
mov rcx, qword [rsp + 0x68]
sub rcx, r13
mov rax, r13
cmp rcx, 0x1000
jb 0x140040636
add rcx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140040734
mov rdx, rcx
jmp 0x1400401a2
call fcn.140005fc4
nop
lea rdx, [0x1400beb80]
lea rcx, [rsp + 0x4c]
call fcn.140062228
nop
lea rdx, [0x1400beb80]
lea rcx, [rsp + 0x4e]
call fcn.140062228
nop
call fcn.140067514
int3
call fcn.140067514
int3
call fcn.140067514
int3
call fcn.140005fc4
int3
lea rcx, [0x1400dc750]
call fcn.14005d734
cmp dword [0x1400dc750], 0xffffffff
jne 0x14003f113
mov rcx, rdi
call fcn.14003aba0
lea rcx, [0x140095e80]
call fcn.14005cf44
nop
lea rcx, [0x1400dc750]
call fcn.14005d6d4
jmp 0x14003f113
mov ecx, 0x80004005
call fcn.14000d0c0
int3
mov ecx, 0x80070057
call fcn.14000d0c0
int3
mov ecx, 0x8007000e
call fcn.14000d0c0
int3
call fcn.140005da8
int3
lea rdx, [0x1400beb80]
lea rcx, [rsp + 0x40]
call fcn.140062228
nop
call fcn.140005da8
int3
lea rdx, [0x1400beb80]
lea rcx, [rsp + 0x4d]
call fcn.140062228
int3
call fcn.140067514
nop
call fcn.140067514
nop
call fcn.140067514
nop
call fcn.140067514
nop
call fcn.140067514
nop
call fcn.140067514
nop
call fcn.140067514
int3