Function at 0x18000ec04
Capabilities:
Send data
Send http request

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], r14
push rbp
lea rbp, [rax - 0x418]
sub rsp, 0x510
and qword [rbp - 0x78], 0
mov rbx, rcx
lea rax, [0x180032700]
lea rcx, [rbp + 0x11]
xor edx, edx
mov r8d, 0x3ff
mov qword [rbp - 0x80], rax
mov byte [rbp + 0x10], 0
call fcn.18001f530
xor edx, edx
lea rcx, [rbp - 0x6f]
mov byte [rbp - 0x70], 0
lea r8d, [rdx + 0x7f]
call fcn.18001f530
and qword [rsp + 0x40], 0
xor edx, edx
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x48]
call fcn.18001f530
mov edx, dword [0x1800494c0]
test edx, edx
je 0x18000eeba
lea rcx, [rsp + 0x40]
call fcn.1800183d0
mov rax, qword [0x1800494c8]
or r14, 0xffffffffffffffff
test rax, rax
je 0x18000ece8
mov rcx, qword [rax + 0x120]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x18000eca5
test rax, rax
je 0x18000ece8
lea rdx, [rbp + 0x10]
call fcn.1800131f4
mov rcx, qword [rsp + 0x50]
mov ebx, 0x400
lea r9, [rbp + 0x10]
lea r8, [0x1800326f4]
mov edx, ebx
call fcn.18001f63c
lea rcx, [rbp + 0x10]
mov r8d, ebx
xor edx, edx
call fcn.18001f530
jmp 0x18000ed03
mov rcx, qword [rsp + 0x50]
mov r9, rbx
mov ebx, 0x400
lea r8, [0x1800326f4]
mov edx, ebx
call fcn.18001f63c
mov r9d, dword [0x180051d20]
lea r8, [0x180032704]
lea rcx, [rbp - 0x70]
mov edx, 0x80
call fcn.18001f63c
lea rax, [rbp - 0x70]
mov rdi, r14
inc rdi
cmp byte [rax + rdi], 0
jne 0x18000ed26
mov ecx, reloc.WS2_32.dll_listen
call fcn.18001b454
lea r8, [rbp - 0x70]
lea rdx, [rsp + 0x40]
mov rcx, rax
mov eax, dword [0x1800494c0]
mov r9d, edi
mov dword [rsp + 0x28], eax
mov rax, qword [0x1800494b8]
mov qword [rsp + 0x20], rax
call fcn.180017b38
mov rax, qword [0x1800494c8]
test rax, rax
je 0x18000eda6
movzx ecx, word [rax + 0x1a8]
lea rdx, [rax + 0x128]
lea r8, [rsp + 0x40]
call fcn.180012d70
mov rax, qword [0x1800494c8]
lea r8, [rsp + 0x40]
movzx ecx, word [rax + 0x230]
lea rdx, [rax + 0x1b0]
call fcn.180012c0c
mov rcx, qword [rsp + 0x48]
mov rax, r14
inc rax
cmp byte [rcx + rax], 0
jne 0x18000edae
mov r9, qword [rsp + 0x50]
mov rdx, rbx
test rax, rax
jne 0x18000edd6
lea r8, [0x1800326f4]
lea rcx, [rbp + 0x10]
call fcn.18001f63c
jmp 0x18000edeb
mov qword [rsp + 0x20], rcx
lea r8, [0x180032708]
lea rcx, [rbp + 0x10]
call fcn.18001f63c
call fcn.18001e0fc
xor ebx, ebx
mov ecx, 0x1b
call fcn.18001b454
mov rcx, qword [0x1800494b0]
lea r8, [rbp + 0x10]
mov rdx, rax
mov rax, qword [0x180042010]
xor r9d, r9d
mov qword [rsp + 0x38], rax
mov eax, dword [0x1800494d0]
mov dword [rsp + 0x30], eax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rcx, rax
mov rdi, rax
call fcn.18000e918
mov rdx, qword [rsp + 0x40]
mov r8, r14
inc r8
cmp byte [rdx + r8], 0
jne 0x18000ee4b
mov eax, dword [rsp + 0x60]
mov r9, qword [rsp + 0x58]
mov rcx, rdi
mov dword [rsp + 0x20], eax
call qword [sym.imp.WININET.dll_HttpSendRequestA]
mov rcx, rdi
call fcn.18000efbc
mov rcx, rdi
test eax, eax
jne 0x18000ee98
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
cmp ebx, 4
jb 0x18000edf2
jmp 0x18000ee9e
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [0x1800494c0]
lea rcx, [rsp + 0x40]
call fcn.1800183c4
and dword [0x1800494c0], 0
call fcn.18001e12c
lea r11, [rsp + 0x510]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov r14, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret