Function at 0x1400e9780
Capabilities:
Get file size
Initialize winhttp library
Prepare http request
Read file on windows
Receive http response
Reference http user-agent string
Set http header

Disassembly:
push rbp
push rbx
push rsi
push r13
push r15
lea rbp, [rsp - 0x3f0]
sub rsp, 0x4f0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x3d0], rax
mov r13, r8
lea rcx, str.Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_128.0.0.0_Safari_537.36
mov rbx, rdx
xor r15d, r15d
xor r8d, r8d
mov dword [rsp + 0x20], r15d
xor edx, edx
xor r9d, r9d
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rsi, rax
test rax, rax
jne 0x1400e97e6
lea rcx, str.Erreur_lors_de_louverture_de_la_session_WinHTTP_n
call fcn.1400e9460
xor eax, eax
jmp 0x1400e9ab9
xorps xmm0, xmm0
mov qword [rsp + 0x4e0], r14
xor eax, eax
lea r9, [rsp + 0x50]
mov qword [rbp - 0x50], rax
lea rcx, str.https:__filebin.net_
lea rax, [rbp - 0x30]
xor r8d, r8d
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x68], rax
xor edx, edx
lea rax, [rbp + 0x1d0]
movups xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x50], 0x68
movups xmmword [rsp + 0x70], xmm0
mov dword [rsp + 0x70], 0x100
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x68], rax
movups xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x60], 0x100
movups xmmword [rbp - 0x80], xmm0
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x1400e9bc9
movzx r8d, word [rsp + 0x74]
xor r9d, r9d
mov rdx, qword [rsp + 0x68]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r14, rax
test rax, rax
je 0x1400e9bc9
mov r8, qword [rbp - 0x68]
mov edx, 0x1bb
cmp word [rsp + 0x74], dx
mov ecx, r15d
mov eax, 0x800000
mov qword [rsp + 0x520], rdi
cmove ecx, eax
lea rdx, str.POST
mov dword [rsp + 0x30], ecx
xor r9d, r9d
mov qword [rsp + 0x28], r15
mov rcx, r14
mov qword [rsp + 0x20], r15
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rdi, rax
test rax, rax
je 0x1400e9904
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x1400e991d
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor eax, eax
jmp 0x1400e9aa9
xor edx, edx
mov qword [rsp + 0x4e8], r12
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, eax
mov r15d, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r12, rax
mov rcx, rbx
test rax, rax
je 0x1400e9970
xor eax, eax
lea r9, [rbp - 0x40]
mov r8d, r15d
mov dword [rbp - 0x40], eax
mov rdx, r12
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1400e997b
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400e9a84
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x20000000
lea rdx, str.Content_Type:_application_octet_stream
mov r8d, 0xffffffff
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x1400e99b0
lea rcx, str.Erreur_lors_de_lajout_du_header_Content_Type_n
call fcn.1400e9460
mov r9d, 0x20000000
lea rdx, str.accept:__
mov r8d, 0xffffffff
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x1400e99dc
lea rcx, str.Erreur_lors_de_lajout_du_header_accept_n
call fcn.1400e9460
mov r9d, 0x20000000
lea rdx, str.bin:_ofsukfdfkjfijid
mov r8d, 0xffffffff
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x1400e9a08
lea rcx, str.Erreur_lors_de_lajout_du_header_bin_n
call fcn.1400e9460
mov r9d, 0x20000000
mov r8d, 0xffffffff
mov rdx, r13
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x1400e9a30
lea rcx, str.Erreur_lors_de_lajout_du_header_filename_n
call fcn.1400e9460
xor r13d, r13d
mov r9, r12
mov qword [rsp + 0x30], r13
xor r8d, r8d
mov dword [rsp + 0x28], r15d
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x20], r15d
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x1400e9a60
lea rcx, str.Erreur_lors_de_lenvoi_de_la_requ
jmp 0x1400e9a76
xor edx, edx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x1400e9ad7
lea rcx, str.Erreur_lors_de_la_r
call fcn.1400e9460
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor eax, eax
mov r12, qword [rsp + 0x4e8]
mov rdi, qword [rsp + 0x520]
mov r14, qword [rsp + 0x4e0]
mov rcx, qword [rbp + 0x3d0]
xor rcx, rsp
call fcn.1400ea480
add rsp, 0x4f0
pop r15
pop r13
pop rsi
pop rbx
pop rbp
ret
lea rcx, str.Fichier_upload
call fcn.1400e9460
mov dword [rbp - 0x3c], r13d
mov r15, 0xffffffffffffffff
nop
lea rdx, [rsp + 0x40]
mov dword [rsp + 0x40], r13d
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
jne 0x1400e9b13
lea rcx, str.Erreur_lors_de_la_v
call fcn.1400e9460
mov ecx, dword [rsp + 0x40]
add ecx, 1
cmovb rcx, r15
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbx, rax
test rax, rax
je 0x1400e9b8a
mov r8d, dword [rsp + 0x40]
xor edx, edx
inc r8d
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8d, dword [rsp + 0x40]
lea r9, [rbp - 0x3c]
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x1400e9b65
lea rcx, str.Erreur_lors_de_la_lecture_des_donn
call fcn.1400e9460
jmp 0x1400e9b74
mov rdx, rbx
lea rcx, [0x1400fb710]
call fcn.1400e94c0
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp dword [rsp + 0x40], r13d
ja 0x1400e9af0
jmp 0x1400e9b9b
lea rcx, str.Erreur_dallocation_m
call fcn.1400e9460
mov dword [rsp + 0x40], r13d
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov eax, 1
jmp 0x1400e9aa1
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor eax, eax
jmp 0x1400e9ab1