Function at 0x18004ffa0
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa20
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov rax, qword [0x1800ec7a0]
xor rax, rsp
mov qword [rsp + 0xa18], rax
mov r14, r9
mov rsi, r8
mov rdi, rdx
mov qword [rsp + 0x68], rcx
mov r13, qword [rsp + 0xa88]
xor ebx, ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
test rdx, rdx
je 0x180050628
cmp byte [rdx], bl
je 0x180050628
test r8, r8
je 0x180050010
mov qword [r8], rbx
test r14, r14
je 0x180050019
mov byte [r9], 0
test r13, r13
je 0x180050023
mov byte [r13], 0
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, str.Dev_Client
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r15, rax
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x180050077
lea r8d, [rax + 0x7f]
lea rdx, str.Could_not_open_internet_handle
lea rcx, [rsp + 0x90]
call fcn.180079980
lea rdx, [0x1800ea630]
lea rcx, [rsp + 0x90]
call fcn.18006cde8
mov dword [rsp + 0x38], 0x1388
mov r9d, 4
lea r8, [rsp + 0x38]
lea edx, [r9 + 2]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov dword [rsp + 0x38], 0x1388
mov r9d, 4
lea r8, [rsp + 0x38]
lea edx, [r9 - 2]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov r8d, 0x100
mov rdx, rdi
lea rcx, [0x1800edf50]
call fcn.180060160
lea rdx, [0x180051080]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetStatusCallback]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x40200
xor r9d, r9d
xor r8d, r8d
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rdi, rax
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x180050134
lea r8d, [rax + 0x7f]
lea rdx, str.Could_not_open_URL
lea rcx, [rsp + 0x110]
call fcn.180079980
lea rdx, [0x1800ea630]
lea rcx, [rsp + 0x110]
call fcn.18006cde8
lea rdx, str._login.php
lea rcx, [0x1800edf50]
call fcn.18005d8d0
test rax, rax
je 0x18005017a
mov r8d, 0x7f
lea rdx, str.Could_not_open_redirectURL
lea rcx, [rsp + 0x190]
call fcn.180079980
lea rdx, [0x1800ea630]
lea rcx, [rsp + 0x190]
call fcn.18006cde8
test rsi, rsi
je 0x1800501ec
lea rdx, str._id
lea rcx, [0x1800edf50]
call fcn.18005d8d0
test rax, rax
jne 0x1800501e0
lea rdx, str.id
lea rcx, [0x1800edf50]
call fcn.18005d8d0
test rax, rax
jne 0x1800501e0
lea rdx, str._people_
lea rcx, [0x1800edf50]
call fcn.18005d8d0
test rax, rax
je 0x1800501ec
lea rcx, [rax + 8]
mov edx, gethostbyaddr
call fcn.18006d08c
test rax, rax
je 0x1800501ec
lea rcx, [rax + 1]
jmp 0x1800501e4
lea rcx, [rax + 4]
call fcn.1800706b8
mov qword [rsi], rax
test r14, r14
je 0x180050271
mov r12d, dword [rsp + 0xa80]
test r12d, r12d
je 0x180050279
lea rdx, str._people_
lea rcx, [0x1800edf50]
call fcn.18005d8d0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180050279
add rax, 8
mov qword [rsp + 0x48], rax
mov r8d, r12d
mov rdx, rax
mov rcx, r14
call fcn.180060160
mov edx, gethostbyaddr
mov rcx, r14
call fcn.18006d4dc
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180050250
mov byte [rax], 0
mov rax, r14
mov qword [rsp + 0x48], rax
movzx ecx, byte [rax]
test cl, cl
je 0x180050279
cmp cl, 0x2d
jne 0x180050267
mov byte [rax], 0x20
inc rax
mov qword [rsp + 0x48], rax
jmp 0x180050258
mov r12d, dword [rsp + 0xa80]
test r13, r13
je 0x1800502f2
mov r15d, dword [rsp + 0xa90]
test r15d, r15d
je 0x1800502fa
lea rdx, str._id
lea rcx, [0x1800edf50]
call fcn.18005d8d0
test rax, rax
jne 0x1800502fa
lea rdx, str.id
lea rcx, [0x1800edf50]
call fcn.18005d8d0
test rax, rax
jne 0x1800502fa
lea rdx, str._people_
lea rcx, [0x1800edf50]
call fcn.18005d8d0
test rax, rax
jne 0x1800502fa
lea edx, [rax + 0x2f]
lea rcx, [0x1800edf50]
call fcn.18006d4dc
mov r8d, r15d
mov rdx, rax
mov rcx, r13
call fcn.180060160
jmp 0x1800502fa
mov r15d, dword [rsp + 0xa90]
test rsi, rsi
je 0x180050305
cmp qword [rsi], 0
je 0x180050321
test r14, r14
je 0x1800505d7
test r12d, r12d
je 0x1800505d7
cmp byte [r14], 0
jne 0x1800505d7
mov dword [rsp + 0x50], ebx
mov rax, qword [0x1800ec760]
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x210]
call fcn.18006ced0
mov rax, qword [0x1800ec760]
mov qword [rsp + 0x78], rax
mov rax, qword [0x1800ec760]
mov qword [rsp + 0x70], rax
nop
lea r9, [rsp + 0x3c]
mov r8d, 0x7ff
lea rdx, [rsp + 0x210]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1800503c8
mov ecx, dword [rsp + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0x7fe
ja 0x1800503c8
cmp ebx, 0x100000
jae 0x1800503c8
cmp rcx, 0x800
jae 0x1800503c3
mov byte [rsp + rcx + 0x210], 0
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x30]
call fcn.1800667e0
add ebx, dword [rsp + 0x3c]
mov dword [rsp + 0x50], ebx
jmp 0x180050360
call fcn.1800690dc
lea rdx, str.window.location.replace__http:__www.facebook.com_
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
mov rbx, rax
test rax, rax
je 0x180050431
add rbx, 0x34
mov edx, 0x22
mov rcx, rbx
call fcn.18006d08c
mov rdi, rax
test rax, rax
je 0x180050431
mov byte [rax], 0
test r13, r13
je 0x180050415
test r15d, r15d
je 0x180050415
mov r8d, r15d
mov rdx, rbx
mov rcx, r13
call fcn.180060160
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
mov dword [rsp + 0x20], r12d
mov r9, r14
mov r8, rsi
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
mov byte [rdi], 0x22
test rsi, rsi
je 0x1800504ac
cmp qword [rsi], 0
jne 0x1800504ac
lea rdx, str._profile_id_:
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
test rax, rax
je 0x180050458
lea rcx, [rax + 0x10]
jmp 0x1800504a4
lea rdx, str.amp_profile_id
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
test rax, rax
je 0x180050474
lea rcx, [rax + 0x10]
jmp 0x1800504a4
lea rdx, str.amp_fid
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
test rax, rax
jne 0x1800504a0
lea rdx, str.amp_cid
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
test rax, rax
je 0x1800504ac
lea rcx, [rax + 9]
call fcn.1800706b8
mov qword [rsi], rax
test r14, r14
je 0x1800505b7
test r12d, r12d
je 0x1800505b7
lea rdx, str._H1_id_profile_name_
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
test rax, rax
jne 0x180050500
lea rdx, str._h2_class_public_
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
test rax, rax
jne 0x180050500
lea rdx, str._title
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
test rax, rax
je 0x180050536
mov edx, 0x3e
mov rcx, rax
call fcn.18006d08c
test rax, rax
je 0x180050536
mov r8d, r12d
lea rdx, [rax + 1]
mov rcx, r14
call fcn.180060160
mov edx, 0x3c
mov rcx, r14
call fcn.18006d08c
test rax, rax
je 0x180050536
mov byte [rax], 0
test rsi, rsi
je 0x1800505b7
cmp qword [rsi], 0
jne 0x1800505b7
cmp byte [r14], 0
je 0x1800505b7
lea rdx, str.href_http:__www.facebook.com_profile.php_id
mov rcx, qword [rsp + 0x30]
call fcn.18005d8d0
mov rbx, rax
nop dword [rax + rax]
test rbx, rbx
je 0x1800505b7
add rbx, 0x2d
lea rdx, [0x1800a9518]
mov rcx, rbx
call fcn.18005d8d0
mov rdi, rax
test rax, rax
je 0x1800505a3
mov byte [rax], 0
mov rdx, r14
mov rcx, rbx
call fcn.18005d8d0
mov byte [rdi], 0x3e
test rax, rax
je 0x1800505a3
mov rcx, rbx
call fcn.1800706b8
mov qword [rsi], rax
jmp 0x1800505b7
lea rdx, str.href_http:__www.facebook.com_profile.php_id
mov rcx, rbx
call fcn.18005d8d0
mov rbx, rax
jmp 0x180050560
lea rcx, [rsp + 0x70]
call fcn.180066560
nop
lea rcx, [rsp + 0x78]
call fcn.180066560
nop
lea rcx, [rsp + 0x30]
call fcn.180066560
test rsi, rsi
je 0x1800505e2
cmp qword [rsi], 0
je 0x180050601
test r14, r14
je 0x1800505ed
cmp byte [r14], 0
je 0x180050601
test r13, r13
je 0x1800505f9
cmp byte [r13], 0
je 0x180050601
mov dword [rsp + 0x40], 1
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x180050611
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180050622
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov eax, dword [rsp + 0x40]
jmp 0x18005062a
xor eax, eax
mov rcx, qword [rsp + 0xa18]
xor rcx, rsp
call fcn.180068b60
add rsp, 0xa20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret