Function at 0x180039dc0
Capabilities:
Initialize winhttp library
Make an http request with a cookie
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1170]
mov eax, 0x1270
call fcn.1801eeca0
sub rsp, rax
movaps xmmword [rsp + 0x1260], xmm6
mov rax, qword [0x1802943b0]
xor rax, rsp
mov qword [rbp + 0x1150], rax
mov rdi, rdx
mov rsi, rcx
cmp qword [rcx + 0x20], 0
ja 0x180039e1c
mov dword [rcx + 0x160], 3
xor al, al
jmp 0x18003aee1
xor r15d, r15d
mov qword [rbp + 0x90], r15
mov qword [rbp + 0xa0], r15
mov qword [rbp + 0xa8], r15
mov r14, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 8
jb 0x180039e42
mov rdi, qword [rdx]
cmp r14, 8
jae 0x180039e59
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x90], xmm0
mov ebx, 7
jmp 0x180039e94
mov rbx, r14
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
call fcn.18003b050
mov qword [rbp + 0x90], rax
lea r8, [r14*2 + 2]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0xa8], rbx
mov qword [rbp + 0xa0], r14
lea rcx, [rbp + 0x90]
cmp rbx, 8
cmovae rcx, qword [rbp + 0x90]
lea rdx, [0x180207350]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x180039ed3
lea rbx, [0x180207350]
lea r8d, [rax + 3]
jmp 0x180039f06
lea rcx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae rcx, qword [rbp + 0x90]
lea rbx, str.POST
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x18003aec3
lea r8d, [rax + 4]
mov rdx, rbx
lea rcx, [rbp + 0x90]
call fcn.18003af20
mov dil, 1
cmp qword [rsi], 0
jne 0x180039f55
lea rcx, [rsi + 0x188]
cmp qword [rcx + 0x18], 8
jb 0x180039f2f
mov rcx, qword [rcx]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rsi], rax
test rax, rax
jne 0x180039f55
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x18003aec8
mov eax, dword [rsi + 0x21c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsi + 0x218]
mov r8d, dword [rsi + 0x214]
mov edx, dword [rsi + 0x210]
mov rcx, qword [rsi]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x300]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xa28
lea rcx, [rbp + 0x720]
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
mov dword [rbp], 0x68
lea rax, [rbp + 0x300]
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x20], 0x104
lea rax, [rbp + 0x720]
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x50], 0x514
mov r12d, 1
mov dword [rbp + 0x10], r12d
lea rbx, [rsi + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x18003a00b
mov rcx, qword [rbx]
lea r9, [rbp]
xor r8d, r8d
mov edx, dword [rsi + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x18003aed1
lea rax, [rbp + 0x300]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18003a031
lea rcx, [rsi + 0x30]
lea rdx, [rbp + 0x300]
call fcn.18003af20
xor r9d, r9d
movzx r8d, word [rbp + 0x24]
lea rdx, [rbp + 0x300]
mov rcx, qword [rsi]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r14, rax
mov qword [rbp - 0x70], rax
test rax, rax
je 0x18003aed1
mov ecx, r15d
mov eax, 0x800000
cmp dword [rbp + 0x14], 2
cmove ecx, eax
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae rdx, qword [rbp + 0x90]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8, qword [rbp + 0x48]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
mov qword [rsp + 0x68], rax
test rax, rax
je 0x18003aeb8
cmp byte [rsi + 8], 0
jne 0x18003a0f5
cmp dword [rbp + 0x14], 2
jne 0x18003a0f5
mov dword [rsp + 0x44], 0x3100
mov r9d, 4
lea r8, [rsp + 0x44]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov ecx, r15d
movsd xmm6, qword [0x18026c310]
mov eax, ecx
inc ecx
mov dword [rsp + 0x44], ecx
cmp eax, 3
jae 0x18003ae9d
mov rax, qword [rsi + 0x130]
test rax, rax
je 0x18003a150
lea rdx, [rsi + 0x120]
cmp qword [rdx + 0x18], 8
jb 0x18003a12e
mov rdx, qword [rdx]
mov r9d, 0x1000000
mov r8d, eax
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x18003a150
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
cmp qword [rsi + 0x100], 0
jbe 0x18003a1f8
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], 7
mov word [rbp + 0x70], r15w
mov r8d, 8
lea rdx, str.Cookie:
lea rcx, [rbp + 0x70]
call fcn.18003af20
nop
lea rdx, [rsi + 0xf0]
cmp qword [rsi + 0x108], 8
jb 0x18003a1a8
mov rdx, qword [rsi + 0xf0]
mov r8, qword [rsi + 0x100]
lea rcx, [rbp + 0x70]
call fcn.1800368d0
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rdx, qword [rbp + 0x70]
mov r9d, 0x1000000
mov r8d, dword [rbp + 0x80]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x18003a1ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
lea rcx, [rbp + 0x70]
call fcn.18003b160
cmp qword [rsi + 0x150], 0
jbe 0x18003a2f9
mov qword [rbp - 0x18], 3
mov qword [rbp - 8], r15
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
lea r8, [rsi + 0x140]
cmp qword [r8 + 0x18], 8
jb 0x18003a237
mov r8, qword [r8]
mov edx, 0x104
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0xf0]
mov qword [rbp - 0x10], rax
mov r9d, 0x18
lea r8, [rbp - 0x18]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x18003a27b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov rax, qword [rsi + 0x1c0]
test rax, rax
je 0x18003a2f9
lea r8, [rsi + 0x1b0]
cmp qword [r8 + 0x18], 8
jb 0x18003a298
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x18003a2ba
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov rax, qword [rsi + 0x1e0]
test rax, rax
je 0x18003a2f9
lea r8, [rsi + 0x1d0]
cmp qword [r8 + 0x18], 8
jb 0x18003a2d7
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1003
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x18003a2f9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
xor dil, dil
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x18003a507
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
lea rcx, [rsp + 0x70]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x18003ae7a
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x18003a40b
mov dword [rbp - 0x38], 3
mov dword [rbp - 0x34], r12d
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x1c], r12d
mov dword [rbp - 0x20], r15d
mov qword [rbp - 0x28], r15
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rax
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x18003a386
mov rdx, qword [rbx]
lea r9, [rbp - 0x68]
lea r8, [rbp - 0x38]
mov rcx, qword [rsi]
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x18003a4b8
mov r9d, 0x18
lea r8, [rbp - 0x68]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x18003a3e4
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
movzx edi, dil
test eax, eax
cmovne edi, r12d
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x18003a3f3
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x18003a4c4
call qword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x18003a4c4
mov rbx, qword [rbp - 0x80]
test rbx, rbx
je 0x18003a4e3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rax
mov dword [rbp - 0x50], 3
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0xf0]
mov qword [rbp - 0x48], rax
mov rbx, qword [rbp - 0x78]
test rbx, rbx
je 0x18003a49d
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x510]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x510]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x510]
mov qword [rbp - 0x40], rax
mov r9d, 0x18
lea r8, [rbp - 0x50]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x18003a4c4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x18003a4d4
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x18003a4e3
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x18003a4f2
call qword [sym.imp.KERNEL32.dll_GlobalFree]
test dil, dil
lea rbx, [rsi + 0x10]
mov ecx, dword [rsp + 0x44]
je 0x18003a100
lea rbx, [rsi + 0x10]
mov rdx, qword [rsi + 0x110]
test rdx, rdx
je 0x18003a53d
mov dword [rsp + 0x48], r15d
lea r9, [rsp + 0x48]
mov r8d, dword [rsi + 0x118]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
jne 0x18003a53d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x18003ae7a
mov dword [rsp + 0x40], r15d
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x16]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x18003a58a
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x18003a968
mov ecx, dword [rsp + 0x40]
mov eax, 2
mul rcx
mov rbx, 0xffffffffffffffff
cmovo rax, rbx
mov rcx, rax
call fcn.1801e65f0
mov rdi, rax
mov qword [rsp + 0x48], rax
mov r8d, dword [rsp + 0x40]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rdi
xor r8d, r8d
lea edx, [rbx + 0x17]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x18003a960
mov r8, rbx
nop
inc r8
cmp word [rdi + r8*2], 0
jne 0x18003a5f0
mov rdx, rdi
lea rcx, [rsi + 0x50]
call fcn.18003af20
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x80], r15
mov qword [rbp + 0x88], 7
mov word [rbp + 0x70], r15w
xor r8d, r8d
lea rdx, [0x18020731c]
lea rcx, [rbp + 0x70]
call fcn.18003af20
nop
cmp byte [rsi + 0x1a8], 0
jne 0x18003a6b6
mov r8d, 0x19
lea rdx, str.charset_A_Za_z0_9___
lea rcx, [rbp + 0x70]
call fcn.18003af20
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x50]
lea rcx, [rbp + 0x70]
call fcn.1800399a0
test al, al
je 0x18003a6b6
mov rax, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
sub rax, r8
sar rax, 5
test rax, rax
je 0x18003a6b6
lea rcx, [rsi + 0x90]
cmp rcx, r8
je 0x18003a6b6
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x18003a6ad
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.18003af20
mov r8d, 0x18
lea rdx, str.Content_Length:__0_9_
lea rcx, [rbp + 0x70]
call fcn.18003af20
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x50]
lea rcx, [rbp + 0x70]
call fcn.1800399a0
test al, al
je 0x18003a713
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x18003a713
cmp qword [rcx + 0x18], 8
jb 0x18003a707
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov dword [rsi + 0xc8], eax
mov r8d, 0x12
lea rdx, str.Location:__0_9_
lea rcx, [rbp + 0x70]
call fcn.18003af20
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x50]
lea rcx, [rbp + 0x70]
call fcn.1800399a0
test al, al
je 0x18003a77c
mov rax, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
sub rax, r8
sar rax, 5
test rax, rax
je 0x18003a77c
lea rcx, [rsi + 0x1f0]
cmp rcx, r8
je 0x18003a77c
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x18003a773
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.18003af20
mov r8d, 0x15
lea rdx, str.Set_Cookie:_b.__n
lea rcx, [rbp + 0x70]
call fcn.18003af20
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x50]
lea rcx, [rbp + 0x70]
call fcn.1800399a0
mov r12, qword [rsp + 0x58]
mov r13, qword [rsp + 0x50]
test al, al
je 0x18003a8fa
mov r14, r12
sub r14, r13
sar r14, 5
test r14, r14
je 0x18003a8fa
mov rdi, r15
mov rbx, r13
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x18003a7e1
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rsi + 0xd0]
call fcn.1800368d0
lea rax, [r14 - 1]
cmp rdi, rax
je 0x18003a813
mov r8d, 2
lea rdx, [0x180207314]
lea rcx, [rsi + 0xd0]
call fcn.1800368d0
inc rdi
add rbx, 0x20
cmp rdi, r14
jb 0x18003a7d4
xor r15d, r15d
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], r15w
lea r8d, [r15 + 1]
lea rdx, [0x180207338]
lea rcx, [rbp + 0xb0]
call fcn.18003af20
nop
lea rbx, [rsi + 0xd0]
lea r8, [rbp + 0xb0]
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.180036710
mov rdi, rax
cmp rbx, rax
je 0x18003a8a6
mov rcx, rbx
call fcn.18003b160
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 7
mov word [rdi], r15w
lea rcx, [rbp + 0xd0]
call fcn.18003b160
nop
lea rcx, [rbp + 0xb0]
call fcn.18003b160
mov rcx, qword [rsi + 0xe0]
test rcx, rcx
je 0x18003a8f5
mov rax, rbx
cmp qword [rbx + 0x18], 8
jb 0x18003a8d8
mov rax, qword [rbx]
cmp word [rax + rcx*2 - 2], 0x3b
je 0x18003a8f5
mov r8d, 1
lea rdx, [0x18020733c]
mov rcx, rbx
call fcn.1800368d0
mov rdi, qword [rsp + 0x48]
lea rcx, [rbp + 0x70]
call fcn.18003b160
nop
test r13, r13
je 0x18003a95b
mov rbx, r13
cmp r13, r12
je 0x18003a922
mov rcx, rbx
call fcn.18003b160
add rbx, 0x20
cmp rbx, r12
jne 0x18003a911
mov rdx, qword [rsp + 0x60]
sub rdx, r13
and rdx, 0xffffffffffffffe0
mov rax, r13
cmp rdx, 0x1000
jb 0x18003a953
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ae8f
mov rcx, r13
call fcn.1801e62e0
mov r13, qword [rsp + 0x68]
mov rcx, rdi
call fcn.1801e62e0
mov dword [rsp + 0x40], r15d
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x13]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x18003a9a2
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x18003aa22
mov ecx, dword [rsp + 0x40]
mov eax, 2
mul rcx
mov rdi, 0xffffffffffffffff
cmovo rax, rdi
mov rcx, rax
call fcn.1801e65f0
mov rbx, rax
mov r8d, dword [rsp + 0x40]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, rbx
xor r8d, r8d
lea edx, [rdi + 0x14]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x18003aa1a
mov r8, rdi
nop
inc r8
cmp word [rbx + r8*2], 0
jne 0x18003aa00
lea rcx, [rsi + 0x168]
mov rdx, rbx
call fcn.18003af20
mov rcx, rbx
call fcn.1801e62e0
mov r12d, 0x2800
mov r14d, r15d
mov rcx, qword [rsi + 0xb0]
test rcx, rcx
je 0x18003aa43
call fcn.1801e62e0
mov qword [rsi + 0xb0], r15
mov rcx, r12
call fcn.1801e65f0
mov qword [rsi + 0xb0], rax
xor edx, edx
mov r8, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
nop
mov dword [rsp + 0x40], r15d
lea rdx, [rsp + 0x40]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x18003ab68
mov rdx, qword [rsi + 0xc0]
test rdx, rdx
je 0x18003aaae
mov ecx, dword [rsi + 0xc8]
test ecx, ecx
je 0x18003aaae
mov eax, r14d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov ecx, dword [rsp + 0x40]
inc ecx
call fcn.1801e65f0
mov r15, rax
mov r8d, dword [rsp + 0x40]
inc r8d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x48], 0
lea r9, [rsp + 0x48]
mov r8d, dword [rsp + 0x40]
mov rdx, r15
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x18003ab5b
mov ecx, dword [rsp + 0x48]
lea eax, [rcx + r14]
cmp eax, r12d
jbe 0x18003ab41
mov rdi, qword [rsi + 0xb0]
add r12d, r12d
mov ecx, r12d
call fcn.1801e65f0
mov qword [rsi + 0xb0], rax
mov r8d, r12d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8d, r14d
mov rdx, rdi
mov rcx, qword [rsi + 0xb0]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rdi
call fcn.1801e62e0
mov ecx, dword [rsp + 0x48]
mov r8d, ecx
mov ecx, r14d
add rcx, qword [rsi + 0xb0]
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
add r14d, dword [rsp + 0x48]
mov rcx, r15
call fcn.1801e62e0
xor r15d, r15d
jmp 0x18003ab74
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
cmp dword [rsp + 0x40], 0
ja 0x18003aa60
mov rdx, qword [rsi + 0xc0]
test rdx, rdx
je 0x18003abb2
mov ecx, dword [rsi + 0xc8]
test ecx, ecx
je 0x18003abb2
mov eax, r14d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov dword [rsi + 0xb8], r14d
mov r12d, 1
lea rcx, [rsi + 0x90]
cmp qword [rcx + 0x18], 8
jb 0x18003abd0
mov rcx, qword [rcx]
mov r8d, 5
lea rdx, [0x180207340]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
xor ebx, ebx
test eax, eax
jne 0x18003abf2
mov r15d, 0xfde9
mov r12d, ebx
mov r9d, dword [rsi + 0xb8]
inc r9d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r8, qword [rsi + 0xb0]
mov edx, r12d
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r14d, eax
test eax, eax
jg 0x18003ac58
mov r15d, ebx
mov r12d, 1
mov r9d, dword [rsi + 0xb8]
inc r9d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r8, qword [rsi + 0xb0]
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r14d, eax
test eax, eax
jle 0x18003ace1
mov ebx, r14d
mov eax, 2
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1801e65f0
mov rdi, rax
lea r8, [rbx + rbx]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r9d, dword [rsi + 0xb8]
inc r9d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rdi
mov r8, qword [rsi + 0xb0]
mov edx, r12d
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x18003acd7
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x18003acc0
lea rcx, [rsi + 0x70]
mov rdx, rdi
call fcn.18003af20
mov rcx, rdi
call fcn.1801e62e0
xor ebx, ebx
mov r15b, 1
lea rcx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae rcx, qword [rbp + 0x90]
cmp qword [rbp + 0xa0], 3
jne 0x18003aea7
mov r8d, 3
lea rdx, [0x180207350]
nop word [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x18003aea7
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x18003ad20
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], 7
mov word [rbp + 0x70], bx
mov r8d, 8
lea rdx, str._html_
lea rcx, [rbp + 0x70]
call fcn.18003af20
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rbx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x70]
lea rcx, [rbp + 0x70]
call fcn.1800399a0
mov r14, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
test al, al
je 0x18003ae04
mov rax, r14
sub rax, rdi
sar rax, 5
test rax, rax
je 0x18003ae04
mov r8d, 9
lea rdx, str.__html_
lea rcx, [rbp + 0x70]
call fcn.18003af20
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x70]
lea rcx, [rbp + 0x70]
call fcn.1800399a0
mov r14, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
test al, al
je 0x18003adf7
mov rax, r14
sub rax, rdi
sar rax, 5
test rax, rax
jne 0x18003ae04
mov dword [rsi + 0x160], 0xd
xor r15b, r15b
test rdi, rdi
je 0x18003ae58
mov rbx, rdi
cmp rdi, r14
je 0x18003ae22
mov rcx, rbx
call fcn.18003b160
add rbx, 0x20
cmp rbx, r14
jne 0x18003ae11
mov rdx, qword [rsp + 0x60]
sub rdx, rdi
and rdx, 0xffffffffffffffe0
mov rax, rdi
cmp rdx, 0x1000
jb 0x18003ae4f
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ae96
mov rcx, rdi
call fcn.1801e62e0
nop
lea rcx, [rbp + 0x70]
call fcn.18003b160
test r15b, r15b
jne 0x18003aea2
lea rbx, [rsi + 0x10]
mov ecx, dword [rsp + 0x44]
xor r15d, r15d
lea r12d, [r15 + 1]
jmp 0x18003a100
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov ecx, dword [rsp + 0x44]
jmp 0x18003a100
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor dil, dil
jmp 0x18003aeab
mov dil, 1
jmp 0x18003aeab
movzx edi, r15b
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r14, qword [rbp - 0x70]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x18003aed1
mov eax, 0x57
mov dword [rsi + 0x160], eax
xor dil, dil
lea rcx, [rbp + 0x90]
call fcn.18003b160
movzx eax, dil
mov rcx, qword [rbp + 0x1150]
xor rcx, rsp
call fcn.1801e62c0
mov rbx, qword [rsp + 0x12c0]
movaps xmm6, xmmword [rsp + 0x1260]
add rsp, 0x1270
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret