Function at 0x1400cee90
Capabilities:
Create http request

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f60]
mov eax, 0x2060
call fcn.1400ff8d0
sub rsp, rax
mov rax, qword [0x140173040]
xor rax, rsp
mov qword [rbp + 0x1f50], rax
mov rdi, rcx
call fcn.1400cea40
xor ebx, ebx
mov qword [rsp + 0x48], rbx
lea rdx, str.Process_Lasso_12.4.3.14
lea rcx, [rsp + 0x48]
call fcn.14003f460
nop
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r14, rax
mov qword [rsp + 0x40], rax
xor r8d, r8d
mov rdx, rdi
test rax, rax
jne 0x1400cef58
lea ecx, [rbx + 5]
call fcn.140071870
mov dword [rdi + 0x10], 5
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov rbx, 0xffffffffffffffff
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400cf2a7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea eax, [r14 + 5]
jmp 0x1400cf2f4
mov ecx, 6
call fcn.140071870
test al, al
jne 0x1400cefad
xor r8d, r8d
mov rdx, rdi
lea ecx, [r8 + 4]
call fcn.140071870
mov dword [rdi + 0x10], 4
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov rbx, 0xffffffffffffffff
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400cf040
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, 4
jmp 0x1400cf2f4
mov qword [rsp + 0x38], rbx
lea r8, [rdi + 0x2c2]
lea rax, [fcn.140071870]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x38]
mov rdx, r14
mov rcx, rdi
call fcn.1400cec80
test eax, eax
jne 0x1400cf2ae
mov r13, qword [rsp + 0x38]
test r13, r13
je 0x1400cf2c2
xor r8d, r8d
mov rdx, rdi
lea ecx, [rax + 0xa]
call fcn.140071870
test al, al
jne 0x1400cf04a
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor r8d, r8d
mov rdx, rdi
lea ecx, [r8 + 4]
call fcn.140071870
mov dword [rdi + 0x10], 4
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov rbx, 0xffffffffffffffff
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400cf040
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, 4
jmp 0x1400cf2f4
xor edx, edx
mov r8d, 0x2000
lea rcx, [rsp + 0x50]
call fcn.14012ce40
xor r8d, r8d
mov r12d, r8d
mov edx, r8d
mov dword [rsp + 0x30], edx
mov rbx, 0xffffffffffffffff
mov rsi, rbx
inc rsi
cmp byte [rsi + r13], dl
jne 0x1400cf073
mov r15d, r8d
test esi, esi
je 0x1400cf25e
mov r14, r8
nop word [rax + rax]
mov eax, r15d
movsx ecx, byte [rax + r13]
test cl, cl
je 0x1400cf0f2
cmp cl, 0xa
je 0x1400cf1ad
cmp cl, 0xd
je 0x1400cf1ad
cmp cl, 0x7c
je 0x1400cf0f5
cmp r12d, 0x1000
jae 0x1400cf0cd
mov word [rsp + r14*2 + 0x50], cx
inc r12d
inc r14
jmp 0x1400cf1ad
lea rax, [r14*2 - 2]
cmp rax, 0x2000
jae 0x1400cf324
mov word [rsp + rax + 0x50], r8w
mov r12d, r8d
mov r14, r8
jmp 0x1400cf1ad
mov r15d, esi
lea rax, [r14 + r14]
cmp rax, 0x2000
jae 0x1400cf324
mov word [rsp + rax + 0x50], r8w
mov r12d, r8d
mov r14, r8
mov ecx, edx
test edx, edx
je 0x1400cf16d
sub ecx, 1
je 0x1400cf15b
sub ecx, 1
je 0x1400cf152
sub ecx, 1
je 0x1400cf149
cmp ecx, 1
jne 0x1400cf1a5
lea rcx, [rdi + 0x750c]
mov r9, rbx
lea r8, [rsp + 0x50]
mov edx, 0x1000
call fcn.140115f0c
mov r15d, esi
jmp 0x1400cf1a2
lea rcx, [rdi + 0x350c]
jmp 0x1400cf190
lea rcx, [rdi + 0x550c]
jmp 0x1400cf190
lea rcx, [rsp + 0x50]
call fcn.140115e5c
mov dword [rdi + 0x1508], eax
jmp 0x1400cf1a2
lea rdx, [0x1401454c0]
lea rcx, [rsp + 0x50]
call fcn.1401103e4
lea rcx, [rdi + 0x150c]
test eax, eax
lea r8, str.Process_Lasso
je 0x1400cf195
lea r8, [rsp + 0x50]
mov r9, rbx
mov edx, 0x1000
call fcn.140115f0c
xor r8d, r8d
inc dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
inc r15d
cmp r15d, esi
jb 0x1400cf090
mov edx, 1
mov rcx, r13
call fcn.1400ff054
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
cmp word [rdi + 0x150c], 0
je 0x1400cf274
mov eax, dword [rdi]
xor r8d, r8d
mov rdx, rdi
cmp dword [rdi + 0x1508], eax
jbe 0x1400cf226
lea ecx, [r8 + 1]
call fcn.140071870
mov dword [rdi + 0x10], 1
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400cf21c
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, 1
jmp 0x1400cf2f4
mov ecx, 2
call fcn.140071870
mov dword [rdi + 0x10], 2
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400cf254
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, 2
jmp 0x1400cf2f4
mov edx, 1
mov rcx, r13
call fcn.1400ff054
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor r8d, r8d
mov rdx, rdi
lea ecx, [r8 + 5]
call fcn.140071870
mov dword [rdi + 0x10], 5
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400cf2a7
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, 5
jmp 0x1400cf2f4
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400cf2c2
mov edx, 1
call fcn.1400ff054
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov edi, dword [rdi + 0x10]
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov rbx, 0xffffffffffffffff
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x1400cf2f2
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
mov eax, edi
mov rcx, qword [rbp + 0x1f50]
xor rcx, rsp
call fcn.1400ff350
lea r11, [rsp + 0x2060]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400ff478
nop
int3