Function at 0x14007c690
Capabilities:
Initialize winhttp library
Make an http request with a cookie
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1180]
mov eax, 0x1280
call fcn.1401e6fb0
sub rsp, rax
mov qword [rbp - 0x68], 0xfffffffffffffffe
mov qword [rsp + 0x12b0], rbx
mov qword [rsp + 0x12c0], rsi
mov qword [rsp + 0x12c8], rdi
movaps xmmword [rsp + 0x1270], xmm6
mov rax, qword [0x14029e908]
xor rax, rsp
mov qword [rbp + 0x1160], rax
mov rdi, qword [0x1405d3e90]
cmp qword [rdi + 0x20], 0
ja 0x14007c707
mov dword [rdi + 0x160], 3
xor al, al
jmp 0x14007d96c
lea rcx, [rbp + 0xe0]
call fcn.140086120
nop
lea rcx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae rcx, qword [rbp + 0xe0]
lea rdx, [0x140282a98]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea rcx, [rbp + 0xe0]
test eax, eax
jne 0x14007c74c
lea rdx, [0x140282a98]
jmp 0x14007c77f
cmp qword [rbp + 0xf8], 8
cmovae rcx, qword [rbp + 0xe0]
lea rdx, str.POST
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007d912
lea rdx, str.POST
lea rcx, [rbp + 0xe0]
call fcn.140085fc0
mov sil, 1
mov byte [rsp + 0x40], sil
mov rcx, qword [rdi]
xor r13d, r13d
test rcx, rcx
jne 0x14007c7d7
lea rcx, [rdi + 0x188]
cmp qword [rcx + 0x18], 8
jb 0x14007c7a8
mov rcx, qword [rcx]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rcx, rax
mov qword [rdi], rax
test rax, rax
jne 0x14007c7d7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
jmp 0x14007d91c
mov eax, dword [rdi + 0x21c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rdi + 0x218]
mov r8d, dword [rdi + 0x214]
mov edx, dword [rdi + 0x210]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xa28
lea rcx, [rbp + 0x730]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x30]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x30], 0x68
lea rax, [rbp + 0x310]
mov qword [rbp + 0x48], rax
mov dword [rbp + 0x50], 0x104
lea rax, [rbp + 0x730]
mov qword [rbp + 0x78], rax
mov dword [rbp + 0x80], 0x514
mov eax, 1
mov dword [rbp + 0x40], eax
lea r15, [rdi + 0x10]
mov rcx, r15
cmp qword [r15 + 0x18], 8
jb 0x14007c879
mov rcx, qword [r15]
lea r9, [rbp + 0x30]
xor r8d, r8d
mov edx, dword [rdi + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x14007d91f
lea rcx, [rdi + 0x30]
lea rdx, [rbp + 0x310]
call fcn.140085fc0
xor r9d, r9d
movzx r8d, word [rbp + 0x54]
lea rdx, [rbp + 0x310]
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r12, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14007d91f
mov ecx, r13d
mov eax, 0x800000
cmp dword [rbp + 0x44], 2
cmove ecx, eax
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae rdx, qword [rbp + 0xe0]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
mov r8, qword [rbp + 0x78]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rbx, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14007d907
cmp byte [rdi + 8], r13b
jne 0x14007c94f
cmp dword [rbp + 0x44], 2
jne 0x14007c94f
mov dword [rbp + 0xbc], 0x3100
mov r9d, 4
lea r8, [rbp + 0xbc]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
xor r14b, r14b
mov byte [rsp + 0x41], r14b
mov ecx, r13d
movsd xmm6, qword [0x140283f88]
mov r12, 0xffffffffffffffff
nop dword [rax]
mov eax, ecx
inc ecx
mov dword [rbp + 0xbc], ecx
cmp eax, 3
jae 0x14007d8e3
mov rax, qword [rdi + 0x130]
test rax, rax
je 0x14007c9c2
lea rdx, [rdi + 0x120]
cmp qword [rdx + 0x18], 8
jb 0x14007c9a0
mov rdx, qword [rdx]
mov r9d, 0x1000000
mov r8d, eax
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x14007c9c2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
cmp qword [rdi + 0x100], 0
jbe 0x14007caac
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r13w
lea rdx, str.Cookie:
lea rcx, [rbp + 0xc0]
call fcn.140085fc0
nop
lea rdx, [rdi + 0xf0]
cmp qword [rdi + 0x108], 8
jb 0x14007ca16
mov rdx, qword [rdi + 0xf0]
mov r8, qword [rdi + 0x100]
lea rcx, [rbp + 0xc0]
call fcn.140087700
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae rdx, qword [rbp + 0xc0]
mov r9d, 0x1000000
mov r8d, dword [rbp + 0xd0]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x14007ca66
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x14007caac
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007caa7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d8ad
call fcn.1401e65d4
cmp qword [rdi + 0x150], 0
jbe 0x14007cbb6
xor eax, eax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov dword [rbp - 8], 3
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x100]
call sub.VCRUNTIME140.dll_memset
lea r8, [rdi + 0x140]
cmp qword [r8 + 0x18], 8
jb 0x14007caf4
mov r8, qword [r8]
mov edx, 0x104
lea rcx, [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x100]
mov qword [rbp], rax
mov r9d, 0x18
lea r8, [rbp - 8]
lea edx, [r9 + 0xe]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14007cb38
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
mov rax, qword [rdi + 0x1c0]
test rax, rax
je 0x14007cbb6
lea r8, [rdi + 0x1b0]
cmp qword [r8 + 0x18], 8
jb 0x14007cb55
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1002
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14007cb77
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
mov rax, qword [rdi + 0x1e0]
test rax, rax
je 0x14007cbb6
lea r8, [rdi + 0x1d0]
cmp qword [r8 + 0x18], 8
jb 0x14007cb94
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1003
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14007cbb6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
xor sil, sil
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x14007cd12
xor eax, eax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x58]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x14007d546
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x14007d481
mov dword [rbp + 0x10], 3
mov r12d, 1
mov dword [rbp + 0x14], r12d
mov qword [rbp + 0x18], rax
mov dword [rbp + 0x2c], r12d
mov dword [rbp + 0x28], r13d
mov qword [rbp + 0x20], r13
xor eax, eax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov rdx, r15
cmp qword [r15 + 0x18], 8
jb 0x14007cc4e
mov rdx, qword [r15]
lea r9, [rbp - 0x38]
lea r8, [rbp + 0x10]
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x14007d470
mov r9d, 0x18
lea r8, [rbp - 0x38]
lea edx, [r9 + 0xe]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x14007ccac
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
movzx esi, sil
test eax, eax
cmovne esi, r12d
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x14007ccbb
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x14007ccca
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov r12, 0xffffffffffffffff
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x14007cce0
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14007ccef
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14007ccfe
call qword [sym.imp.KERNEL32.dll_GlobalFree]
test sil, sil
mov rbx, qword [rsp + 0x48]
mov ecx, dword [rbp + 0xbc]
je 0x14007c970
mov rdx, qword [rdi + 0x110]
test rdx, rdx
je 0x14007cd4c
mov dword [rbp + 0xb8], r13d
lea r9, [rbp + 0xb8]
mov r8d, dword [rdi + 0x118]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
jne 0x14007cd4c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x14007d546
mov dword [rbp - 0x60], r13d
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x16]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14007cd97
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14007d250
mov ecx, dword [rbp - 0x60]
mov eax, 2
mul rcx
cmovo rax, r12
mov rcx, rax
call fcn.1401e6cf0
mov r15, rax
test rax, rax
je 0x14007d250
mov r8d, dword [rbp - 0x60]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov r9, r15
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x14007d248
mov rdx, r15
lea rcx, [rdi + 0x50]
call fcn.140085fc0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r13w
lea rdx, [0x140282a8c]
lea rcx, [rbp + 0xc0]
call fcn.140085fc0
nop
cmp byte [rdi + 0x1a8], 0
jne 0x14007ceb8
lea rdx, str.charset_A_Za_z0_9___
lea rcx, [rbp + 0xc0]
call fcn.140085fc0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x50]
lea rcx, [rbp + 0xc0]
call fcn.14007bd70
test al, al
je 0x14007ceb8
mov rax, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xa0]
sub rax, r8
sar rax, 5
test rax, rax
je 0x14007ceb8
lea rcx, [rdi + 0x90]
cmp rcx, r8
je 0x14007ceb8
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14007ceaf
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.140086be0
lea rdx, str.Content_Length:__0_9_
lea rcx, [rbp + 0xc0]
call fcn.140085fc0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x50]
lea rcx, [rbp + 0xc0]
call fcn.14007bd70
test al, al
je 0x14007cf1b
mov rax, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0xa0]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x14007cf1b
cmp qword [rcx + 0x18], 8
jb 0x14007cf0f
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov dword [rdi + 0xc8], eax
lea rdx, str.Location:__0_9_
lea rcx, [rbp + 0xc0]
call fcn.140085fc0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x50]
lea rcx, [rbp + 0xc0]
call fcn.14007bd70
test al, al
je 0x14007cf8a
mov rax, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xa0]
sub rax, r8
sar rax, 5
test rax, rax
je 0x14007cf8a
lea rcx, [rdi + 0x1f0]
cmp rcx, r8
je 0x14007cf8a
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14007cf81
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.140086be0
lea rdx, str.Set_Cookie:_b.__n
lea rcx, [rbp + 0xc0]
call fcn.140085fc0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x50]
lea rcx, [rbp + 0xc0]
call fcn.14007bd70
test al, al
je 0x14007d17c
mov rax, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xa0]
sub rax, r8
sar rax, 5
test rax, rax
je 0x14007d183
mov rbx, r13
lea r14, [rdi + 0xd0]
mov rsi, r13
nop dword [rax]
add r8, rsi
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14007d000
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
mov rcx, r14
call fcn.140087700
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
mov r8, qword [rbp + 0xa0]
sub rax, r8
sar rax, 5
dec rax
cmp rbx, rax
je 0x14007d04f
mov r8d, 2
lea rdx, [0x140282b8c]
mov rcx, r14
call fcn.140087700
mov rcx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xa0]
inc rbx
add rsi, 0x20
sub rcx, r8
sar rcx, 5
cmp rbx, rcx
jb 0x14007cff0
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r13w
lea rdx, [0x140282a90]
lea rcx, [rsp + 0x58]
call fcn.140085fc0
nop
lea r8, [rsp + 0x58]
lea rdx, [rdi + 0xd0]
lea rcx, [rsp + 0x78]
call fcn.14007c250
mov rdx, rax
lea rcx, [rdi + 0xd0]
call fcn.140086070
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x14007d0ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d0e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d8b4
call fcn.1401e65d4
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], 7
mov word [rsp + 0x78], r13w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x14007d142
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d13d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d8bb
call fcn.1401e65d4
mov rdx, qword [rdi + 0xe0]
test rdx, rdx
je 0x14007d17c
lea rcx, [rdi + 0xd0]
mov rax, rcx
cmp qword [rcx + 0x18], 8
jb 0x14007d162
mov rax, qword [rcx]
cmp word [rax + rdx*2 - 2], 0x3b
je 0x14007d17c
mov r8d, 1
lea rdx, [0x140282b94]
call fcn.140087700
mov r8, qword [rbp + 0xa0]
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x14007d1d0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d1c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d8c2
call fcn.1401e65d4
mov r8, qword [rbp + 0xa0]
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r13w
test r8, r8
je 0x14007d23d
mov rdx, qword [rbp + 0xa8]
mov rcx, r8
call fcn.140089b40
mov rdx, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xa0]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d238
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d8c9
call fcn.1401e65d4
mov rbx, qword [rsp + 0x48]
movzx r14d, byte [rsp + 0x41]
mov rcx, r15
call fcn.1401e65d4
mov dword [rbp - 0x60], r13d
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x13]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14007d284
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14007d2f7
mov ecx, dword [rbp - 0x60]
mov eax, 2
mul rcx
cmovo rax, r12
mov rcx, rax
call fcn.1401e6cf0
mov rbx, rax
test rax, rax
je 0x14007d2f2
mov r8d, dword [rbp - 0x60]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x60]
mov qword [rsp + 0x20], rax
mov r9, rbx
xor r8d, r8d
lea edx, [r8 + 0x13]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x14007d2ea
lea rcx, [rdi + 0x168]
mov rdx, rbx
call fcn.140085fc0
mov rcx, rbx
call fcn.1401e65d4
mov rbx, qword [rsp + 0x48]
mov r12d, 0x2800
mov r15d, r13d
mov rcx, qword [rdi + 0xb0]
test rcx, rcx
je 0x14007d318
call fcn.1401e65d4
mov qword [rdi + 0xb0], r13
mov rcx, r12
call fcn.1401e6cf0
mov qword [rdi + 0xb0], rax
test rax, rax
je 0x14007d8de
xor edx, edx
mov r8, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
nop dword [rax]
mov dword [rbp - 0x60], r13d
lea rdx, [rbp - 0x60]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x14007d55d
mov rdx, qword [rdi + 0xc0]
test rdx, rdx
je 0x14007d38c
mov ecx, dword [rdi + 0xc8]
test ecx, ecx
je 0x14007d38c
mov eax, r15d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov ecx, dword [rbp - 0x60]
inc ecx
call fcn.1401e6cf0
mov rbx, rax
test rax, rax
je 0x14007d45c
mov r8d, dword [rbp - 0x60]
inc r8d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0xb8], r13d
lea r9, [rbp + 0xb8]
mov r8d, dword [rbp - 0x60]
mov rdx, rbx
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x14007d454
mov ecx, dword [rbp + 0xb8]
lea eax, [rcx + r15]
cmp eax, r12d
jbe 0x14007d438
mov r14, qword [rdi + 0xb0]
add r12d, r12d
mov esi, r12d
mov ecx, r12d
call fcn.1401e6cf0
mov qword [rdi + 0xb0], rax
test rax, rax
je 0x14007d56e
mov r8d, esi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8d, r15d
mov rdx, r14
mov rcx, qword [rdi + 0xb0]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, r14
call fcn.1401e65d4
mov ecx, dword [rbp + 0xb8]
mov r8d, ecx
mov ecx, r15d
add rcx, qword [rdi + 0xb0]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
add r15d, dword [rbp + 0xb8]
mov rcx, rbx
call fcn.1401e65d4
mov rbx, qword [rsp + 0x48]
cmp dword [rbp - 0x60], 0
jbe 0x14007d57a
jmp 0x14007d340
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
jmp 0x14007ccca
mov rbx, qword [rbp - 0x48]
test rbx, rbx
je 0x14007ccef
xor eax, eax
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x20], 3
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x100]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x100]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x100]
mov qword [rbp - 0x18], rax
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x14007d514
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x520]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x520]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x520]
mov qword [rbp - 0x10], rax
mov r9d, 0x18
lea r8, [rbp - 0x20]
lea edx, [r9 + 0xe]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14007ccd1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
jmp 0x14007ccd1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
mov ecx, dword [rbp + 0xbc]
jmp 0x14007c970
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
jmp 0x14007d461
mov qword [rdi + 0xb0], r14
mov byte [rsp + 0x40], 0
mov rdx, qword [rdi + 0xc0]
test rdx, rdx
je 0x14007d5ad
mov ecx, dword [rdi + 0xc8]
test ecx, ecx
je 0x14007d5ad
mov eax, r15d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov dword [rdi + 0xb8], r15d
mov r14d, r13d
mov ebx, 1
mov r15d, ebx
lea rcx, [rdi + 0x90]
cmp qword [rcx + 0x18], 8
jb 0x14007d5d0
mov rcx, qword [rcx]
mov r8d, 5
lea rdx, [0x140282b98]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14007d5f0
mov r14d, 0xfde9
mov r15d, r13d
mov r9d, dword [rdi + 0xb8]
inc r9d
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r8, qword [rdi + 0xb0]
mov edx, r15d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test eax, eax
jg 0x14007d64e
mov r14d, r13d
mov r15d, ebx
mov r9d, dword [rdi + 0xb8]
inc r9d
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r8, qword [rdi + 0xb0]
mov edx, ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test eax, eax
jle 0x14007d6c0
movsxd r12, esi
mov eax, 2
mul r12
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1401e6cf0
mov rbx, rax
test rax, rax
je 0x14007d6c0
lea r8, [r12 + r12]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r9d, dword [rdi + 0xb8]
inc r9d
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rbx
mov r8, qword [rdi + 0xb0]
mov edx, r15d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x14007d6b8
lea rcx, [rdi + 0x70]
mov rdx, rbx
call fcn.140085fc0
mov rcx, rbx
call fcn.1401e65d4
mov r14b, 1
mov byte [rsp + 0x41], r14b
lea r8, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae r8, qword [rbp + 0xe0]
cmp qword [rbp + 0xf0], 3
jne 0x14007d8e3
mov edx, 3
lea rax, [0x140282a98]
mov rcx, rax
sub r8, rax
nop
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x14007d8e3
add rcx, 2
sub rdx, 1
jne 0x14007d700
mov qword [rbp + 0xd0], r13
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r13w
lea rdx, str._html_
lea rcx, [rbp + 0xc0]
call fcn.140085fc0
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x70]
lea rcx, [rbp + 0xc0]
call fcn.14007bd70
mov rdx, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0xa0]
test al, al
je 0x14007d7f7
mov rax, rdx
sub rax, rcx
sar rax, 5
test rax, rax
je 0x14007d7f7
lea rdx, str.__html_
lea rcx, [rbp + 0xc0]
call fcn.140085fc0
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x70]
lea rcx, [rbp + 0xc0]
call fcn.14007bd70
mov rdx, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0xa0]
test al, al
je 0x14007d7e5
mov rax, rdx
sub rax, rcx
sar rax, 5
test rax, rax
jne 0x14007d7f7
mov dword [rdi + 0x160], setsockopt
xor r14b, r14b
mov byte [rsp + 0x41], r14b
test rcx, rcx
je 0x14007d852
call fcn.140089b40
mov rdx, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xa0]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d83b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d8d0
call fcn.1401e65d4
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x14007d894
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d88f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007d8d7
call fcn.1401e65d4
test r14b, r14b
jne 0x14007d8e3
mov rbx, qword [rsp + 0x48]
lea r15, [rdi + 0x10]
mov ecx, dword [rbp + 0xbc]
jmp 0x14007c962
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor sil, sil
jmp 0x14007d8e8
movzx esi, byte [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
movzx eax, sil
test r14b, r14b
cmovne r13d, eax
movzx esi, r13b
mov r12, qword [rsp + 0x50]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x14007d91f
mov dword [rdi + 0x160], 0x57
xor sil, sil
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x14007d968
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d963
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007d963
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401e65d4
movzx eax, sil
mov rcx, qword [rbp + 0x1160]
xor rcx, rsp
call fcn.1401e65b0
lea r11, [rsp + 0x1280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret