Function at 0x140001140
Capabilities:
Check http status code
Connect to http server
Create http request
Delete file
Parse url
Send data
Send http request

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1428
call fcn.14000a4d0
sub rsp, rax
movaps xmmword [rsp + 0x1410], xmm7
movaps xmmword [rsp + 0x1400], xmm6
mov rax, qword [0x140010010]
xor rax, rsp
mov qword [rsp + 0x13f8], rax
movaps xmm6, xmmword [0x14000b150]
movups xmmword [rsp + 0x130], xmm6
mov byte [rsp + 0x120], 0
movups xmmword [rsp + 0x110], xmm6
mov byte [rsp + 0x100], 0
mov esi, 1
cmp ecx, 3
je 0x140001210
mov rax, qword [rsp + 0x138]
cmp rax, 0x10
jae 0x1400011f0
mov rcx, qword [rsp + 0x13f8]
xor rcx, rsp
call fcn.14000a540
mov eax, esi
movaps xmm6, xmmword [rsp + 0x1400]
movaps xmm7, xmmword [rsp + 0x1410]
add rsp, 0x1428
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x120]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x1400018e5
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x1400011ba
mov rdi, rdx
mov rdx, qword [rdx + 8]
lea r15, [rsp + 0x120]
mov rcx, r15
call fcn.1400035c0
mov rdx, qword [rdi + 0x10]
lea rsi, [rsp + 0x100]
mov rcx, rsi
call fcn.1400035c0
lea rbp, [rsp + 0x140]
mov r8d, 0x105
mov rcx, rbp
xor edx, edx
call sub.VCRUNTIME140.dll_memset
cmp qword [rsp + 0x118], 0xf
jbe 0x140001266
mov rsi, qword [rsp + 0x100]
mov r8d, 0x105
mov rcx, rbp
mov rdx, rsi
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__fullpath]
test rax, rax
je 0x14000139e
mov byte [rsp + 0x1372], 0
mov word [rsp + 0x1370], 0
xorps xmm7, xmm7
movaps xmmword [rsp + 0x1340], xmm7
movaps xmmword [rsp + 0x1330], xmm7
movaps xmmword [rsp + 0x1320], xmm7
movaps xmmword [rsp + 0x1310], xmm7
movaps xmmword [rsp + 0x1300], xmm7
movaps xmmword [rsp + 0x12f0], xmm7
movaps xmmword [rsp + 0x12e0], xmm7
movaps xmmword [rsp + 0x12d0], xmm7
movaps xmmword [rsp + 0x12c0], xmm7
movaps xmmword [rsp + 0x12b0], xmm7
movaps xmmword [rsp + 0x12a0], xmm7
movaps xmmword [rsp + 0x1290], xmm7
movaps xmmword [rsp + 0x1280], xmm7
movaps xmmword [rsp + 0x1270], xmm7
movaps xmmword [rsp + 0x1260], xmm7
movaps xmmword [rsp + 0x1250], xmm7
movups xmmword [rsp + 0x38], xmm7
movups xmmword [rsp + 0x28], xmm7
mov qword [rsp + 0x20], 0x100
lea rcx, [rsp + 0x140]
lea rdx, [rsp + 0x1370]
lea r9, [rsp + 0x1250]
mov r8d, 3
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath_s]
test eax, eax
jne 0x14000139e
lea rsi, [rsp + 0x1140]
mov r8d, 0x105
mov rcx, rsi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
movups xmmword [rsp + 0x20], xmm7
lea r8, [rsp + 0x1370]
lea r9, [rsp + 0x1250]
mov edx, 0x105
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__makepath_s]
test eax, eax
jne 0x14000139e
lea rcx, [rsp + 0x1140]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__chdir]
movups xmmword [rsp + 0x1260], xmm6
mov byte [rsp + 0x1250], 0
lea rax, [0x14000b160]
mov qword [rsp + 0x1140], rax
lea r14, [rsp + 0x11f0]
mov rcx, r14
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::ios_base::constructor_void____ptr64]
lea rax, [0x14000b170]
mov qword [rsp + 0x11f0], rax
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea rdi, [0x14000b168]
mov qword [rsp + rax + 0x1140], rdi
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0xb0]
mov dword [rsp + rax + 0x113c], ecx
lea rsi, [rsp + 0x1150]
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea rcx, [0x14000b178]
mov qword [rsp + rax + 0x1140], rcx
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0x18]
mov dword [rsp + rax + 0x113c], ecx
mov qword [rsp + 0x1148], 0
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1140
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::init_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
mov qword [rsp + rax + 0x1140], rdi
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0xb0]
mov dword [rsp + rax + 0x113c], ecx
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, [0x14000b180]
mov qword [rsp + 0x1150], rax
mov byte [rsp + 0x11cc], 0
mov byte [rsp + 0x11c1], 0
lea rax, [rsp + 0x1158]
mov qword [rsp + 0x1168], rax
lea rax, [rsp + 0x1160]
mov qword [rsp + 0x1170], rax
lea rax, [rsp + 0x1178]
mov qword [rsp + 0x1188], rax
lea rax, [rsp + 0x1180]
mov qword [rsp + 0x1190], rax
lea rax, [rsp + 0x1198]
mov qword [rsp + 0x11a0], rax
lea rax, [rsp + 0x119c]
mov qword [rsp + 0x11a8], rax
mov qword [rsp + 0x1198], 0
mov qword [rsp + 0x11d0], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x1158], xmm0
movups xmmword [rsp + 0x1178], xmm0
mov rax, qword [0x140010164]
mov qword [rsp + 0x11c4], rax
mov qword [rsp + 0x11b8], 0
cmp qword [rsp + 0x118], 0xf
jbe 0x140001589
mov rdx, qword [rsp + 0x100]
jmp 0x140001591
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x1140]
call fcn.1400022c0
cmp qword [rsp + 0x11d0], 0
jne 0x1400015d2
movaps xmmword [rsp + 0xf0], xmm6
mov byte [rsp + 0xe0], 0
lea rdx, [0x14000df23]
lea rcx, [rsp + 0xe0]
call fcn.1400035c0
jmp 0x1400016c2
lea rsi, [rsp + 0x1140]
lea rbx, [rsp + 0x140]
mov rbp, qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
mov r15, qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::bad_void_const___ptr64]
lea r13, [rsp + 0x1250]
mov r12, qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::eof_void_const___ptr64]
mov r8d, 0x1000
mov rcx, rsi
mov rdx, rbx
call rbp
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1140
call r15
test al, al
jne 0x14000168e
mov r8, qword [rsp + 0x1148]
mov rcx, r13
mov rdx, rbx
call fcn.1400010d0
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1140
call r12
test al, al
je 0x1400015ff
movups xmm0, xmmword [rsp + 0x1250]
movups xmm1, xmmword [rsp + 0x1260]
movaps xmmword [rsp + 0xf0], xmm1
movaps xmmword [rsp + 0xe0], xmm0
movups xmmword [rsp + 0x1260], xmm6
mov byte [rsp + 0x1250], 0
jmp 0x1400016b2
movaps xmmword [rsp + 0xf0], xmm6
mov byte [rsp + 0xe0], 0
lea rdx, [0x14000df23]
lea rcx, [rsp + 0xe0]
call fcn.1400035c0
lea r15, [rsp + 0x120]
lea rbp, [rsp + 0x140]
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
mov qword [rsp + rax + 0x1140], rdi
mov rax, qword [rsp + 0x1140]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0xb0]
mov dword [rsp + rax + 0x113c], ecx
lea rcx, [rsp + 0x1150]
call fcn.140003040
mov rcx, r14
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
mov rax, qword [rsp + 0x1268]
cmp rax, 0x10
jae 0x140001889
cmp qword [rsp + 0xf0], 0
je 0x1400018b2
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1180], xmm0
movaps xmmword [rsp + 0x1170], xmm0
movaps xmmword [rsp + 0x1160], xmm0
movaps xmmword [rsp + 0x1150], xmm0
movaps xmmword [rsp + 0x1140], xmm0
mov qword [rsp + 0x1190], 0
lea rax, str.1.2.11
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x38], 0x58
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 8
lea r14, [rsp + 0x1140]
mov rcx, r14
mov edx, 0xffffffff
mov r8d, 8
mov r9d, 0x1f
call fcn.140003f80
test eax, eax
jne 0x1400018bc
mov qword [rsp + 0x1150], rbp
mov dword [rsp + 0x1158], 0xfff
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x1148], eax
cmp qword [rsp + 0xf8], 0xf
jbe 0x1400017e0
mov rcx, qword [rsp + 0xe0]
jmp 0x1400017e8
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x1140], rcx
movups xmmword [rsp + 0x1260], xmm6
mov byte [rsp + 0x1250], 0
test eax, eax
je 0x140001937
lea rdi, [rsp + 0x1140]
lea rbx, [rsp + 0x1250]
nop dword [rax + rax]
mov rcx, rdi
xor edx, edx
call fcn.140004c10
cmp dword [rsp + 0x1158], 0
je 0x14000184d
mov esi, eax
test esi, esi
jne 0x140001933
cmp dword [rsp + 0x1148], 0
jne 0x140001820
jmp 0x140001933
mov r8d, 0xfff
mov rcx, rbx
mov rdx, rbp
call fcn.1400010d0
mov qword [rsp + 0x1150], rbp
mov dword [rsp + 0x1158], 0xfff
mov rcx, rdi
xor edx, edx
call fcn.140004c10
mov esi, eax
cmp dword [rsp + 0x1158], 0
jne 0x140001836
jmp 0x14000184d
mov rcx, qword [rsp + 0x1250]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x140001909
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp qword [rsp + 0xf0], 0
jne 0x140001726
mov esi, 1
jmp 0x140001a76
movups xmmword [rsp + 0xd0], xmm6
mov byte [rsp + 0xc0], 0
lea rdx, [0x14000df23]
lea rcx, [rsp + 0xc0]
call fcn.1400035c0
jmp 0x1400019ae
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, rbp
jmp 0x140001209
mov rdi, rbp
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, rbp
mov rbp, rdi
jmp 0x14000189e
test esi, esi
jne 0x14000195d
lea rcx, [rsp + 0x1140]
mov edx, 4
call fcn.140004c10
mov esi, eax
mov eax, 0xfff
sub eax, dword [rsp + 0x1158]
jne 0x140001beb
lea rcx, [rsp + 0x1140]
call fcn.140004260
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
cmp esi, 1
jne 0x140001afc
movups xmm0, xmmword [rsp + 0x1250]
movups xmm1, xmmword [rsp + 0x1260]
movaps xmmword [rsp + 0xd0], xmm1
movaps xmmword [rsp + 0xc0], xmm0
movups xmmword [rsp + 0x1260], xmm6
mov byte [rsp + 0x1250], 0
mov esi, 1
cmp qword [rsp + 0xd0], 0
je 0x140001a68
xorps xmm0, xmm0
movaps xmmword [rsp + 0x50], xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0xb0], 0
mov dword [rsp + 0x50], 0x68
lea rax, [rsp + 0x1250]
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x60], 0x100
mov qword [rsp + 0x68], rbp
mov dword [rsp + 0x70], 0x100
mov qword [rsp + 0x98], r14
mov dword [rsp + 0xa0], 0x100
mov edx, dword [rsp + 0x130]
cmp qword [rsp + 0x138], 0xf
jbe 0x140001a4f
mov r15, qword [rsp + 0x120]
lea r9, [rsp + 0x50]
mov rcx, r15
xor r8d, r8d
call qword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
jne 0x140001b55
mov rax, qword [rsp + 0xd8]
cmp rax, 0x10
jae 0x140001ad9
mov rax, qword [rsp + 0xf8]
cmp rax, 0x10
jae 0x140001ab9
mov rax, qword [rsp + 0x118]
cmp rax, 0x10
jb 0x1400011ac
mov rcx, qword [rsp + 0x100]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x14000217b
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x1400011ac
mov rcx, qword [rsp + 0xe0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x14000219f
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x140001a84
mov rcx, qword [rsp + 0xc0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x1400021c3
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x140001a76
movups xmmword [rsp + 0xd0], xmm6
mov byte [rsp + 0xc0], 0
lea rdx, [0x14000df23]
lea rcx, [rsp + 0xc0]
call fcn.1400035c0
mov rax, qword [rsp + 0x1268]
cmp rax, 0x10
jb 0x1400019ae
mov rcx, qword [rsp + 0x1250]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x1400021e7
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x1400019ae
movups xmmword [rsp + 0x1360], xmm6
mov byte [rsp + 0x1350], 0
lea r14, [rsp + 0x1350]
lea rdx, [rsp + 0x140]
mov rcx, r14
call fcn.1400035c0
mov eax, dword [0x140010160]
mov ecx, dword [0x1400100e4]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400020ea
xorps xmm0, xmm0
movups xmmword [rsp + 0x1380], xmm0
lea rdx, [0x140010120]
lea rbx, [rsp + 0x1370]
mov rcx, rbx
call fcn.140003710
mov r8, qword [rsp + 0x1380]
cmp qword [rsp + 0x1360], r8
jne 0x140001c16
cmp qword [rsp + 0x1368], 0xf
jbe 0x140001c28
mov rcx, qword [rsp + 0x1350]
jmp 0x140001c30
mov r8d, eax
lea rcx, [rsp + 0x1250]
mov rdx, rbp
call fcn.1400010d0
mov qword [rsp + 0x1150], rbp
mov dword [rsp + 0x1158], 0xfff
jmp 0x140001933
mov rbp, qword [rsp + 0x1388]
xor edi, edi
cmp rbp, 0x10
jb 0x140001c78
jmp 0x140001c5a
lea rcx, [rsp + 0x1350]
mov rbp, qword [rsp + 0x1388]
cmp rbp, 0xf
jbe 0x140001c46
mov rbx, qword [rsp + 0x1370]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete dil
cmp rbp, 0x10
jb 0x140001c78
mov rcx, qword [rsp + 0x1370]
lea rdx, [rbp + 1]
cmp rdx, 0x1000
jae 0x140002211
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov bl, 1
test dil, dil
je 0x140001de2
mov rax, qword [rsp + 0x1368]
cmp rax, 0x10
jae 0x140001db7
test bl, bl
je 0x140001a68
mov dword [rsp + 0x20], 0
lea rcx, str.pingsender_1.0
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetOpenA]
test rax, rax
je 0x140001a68
mov rdi, rax
mov dword [rsp + 0x4c], 0x7530
lea r8, [rsp + 0x4c]
mov rcx, rax
mov edx, 2
mov r9d, 4
call qword [sym.imp.WININET.dll_InternetSetOptionA]
test eax, eax
je 0x140001da9
movzx r8d, word [rsp + 0x74]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x140]
mov rcx, rdi
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetConnectA]
test rax, rax
je 0x140001da9
mov rbx, rax
mov eax, 0x70747468
xor eax, dword [rsp + 0x1250]
movzx ecx, word [rsp + 0x1254]
xor ecx, 0x73
xor edx, edx
or ecx, eax
sete dl
shl edx, 0x17
or edx, 0x80000
xorps xmm7, xmm7
movups xmmword [rsp + 0x20], xmm7
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x38], 0
lea rdx, str.POST
lea r8, [rsp + 0x1140]
mov rcx, rbx
xor r9d, r9d
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
test rax, rax
jne 0x140001e95
mov rbp, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call rbp
mov rcx, rdi
call rbp
jmp 0x140001a68
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140001a68
mov rcx, qword [rsp + 0x1350]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x140002235
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
test bl, bl
je 0x140001a68
jmp 0x140001c9d
lea rax, [rsp + 0x1380]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rdx, [0x140010140]
lea rbx, [rsp + 0x1370]
mov rcx, rbx
call fcn.140003710
mov r8, qword [rsp + 0x1380]
cmp qword [rsp + 0x1360], r8
jne 0x140001e5e
cmp qword [rsp + 0x1368], 0xf
jbe 0x140001e2c
mov r14, qword [rsp + 0x1350]
mov rbp, qword [rsp + 0x1388]
cmp rbp, 0xf
jbe 0x140001e42
mov rbx, qword [rsp + 0x1370]
mov rcx, r14
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete bl
cmp rbp, 0x10
jb 0x140001c83
jmp 0x140001e72
mov rbp, qword [rsp + 0x1388]
xor ebx, ebx
cmp rbp, 0x10
jb 0x140001c83
mov rcx, qword [rsp + 0x1370]
lea rdx, [rbp + 1]
cmp rdx, 0x1000
jae 0x140002255
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x140001c83
mov r14, rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rsp + 0xb8], rax
lea rcx, [rsp + 0xb8]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__gmtime64]
lea r8, str.Date:__a___d__b__Y__H:_M:_S_GMT
lea r15, [rsp + 0x1370]
mov edx, 0x80
mov rcx, r15
mov r9, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
movups xmmword [rsp + 0x1360], xmm6
mov byte [rsp + 0x1350], 0
lea r12, [rsp + 0x1350]
mov rcx, r12
mov rdx, r15
call fcn.1400035c0
lea rdx, [0x14000df21]
mov r8d, 2
mov rcx, r12
call fcn.1400010d0
movaps xmmword [rsp + 0x1380], xmm7
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x1380], xmm1
movaps xmmword [rsp + 0x1370], xmm0
movups xmmword [rax + 0x10], xmm6
mov byte [rax], 0
mov rax, qword [rsp + 0x1368]
cmp rax, 0x10
jae 0x140002087
lea rdx, str.X_PingSender_Version:_1.0
mov r8d, 0x19
mov rcx, r15
call fcn.1400010d0
lea rdx, [0x14000df21]
mov r8d, 2
mov rcx, r15
call fcn.1400010d0
lea rdx, str.Content_Encoding:_gzip
mov r8d, 0x16
mov rcx, r15
call fcn.1400010d0
mov eax, dword [rsp + 0xd0]
cmp qword [rsp + 0xd8], 0xf
jbe 0x140001fac
mov r9, qword [rsp + 0xc0]
cmp qword [rsp + 0x1388], 0xf
ja 0x140001fbf
jmp 0x140001fc7
lea r9, [rsp + 0xc0]
cmp qword [rsp + 0x1388], 0xf
jbe 0x140001fc7
mov r15, qword [rsp + 0x1370]
mov dword [rsp + 0x20], eax
mov rcx, r14
mov rdx, r15
mov r8d, 0xffffffff
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x140002037
mov dword [rsp + 0x1350], 0
mov dword [rsp + 0xb8], 4
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x1350]
lea r9, [rsp + 0xb8]
mov rcx, r14
mov edx, 0x20000013
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
setne al
cmp dword [rsp + 0x1350], 0xc8
sete r15b
and r15b, al
jmp 0x14000203a
xor r15d, r15d
mov rax, qword [rsp + 0x1388]
cmp rax, 0x10
jae 0x1400020aa
mov rbp, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call rbp
mov rcx, rbx
call rbp
mov rcx, rdi
call rbp
test r15b, r15b
je 0x140001a68
cmp qword [rsp + 0x110], 0
je 0x1400020e3
cmp qword [rsp + 0x118], 0xf
jbe 0x1400020cd
mov rcx, qword [rsp + 0x100]
jmp 0x1400020d5
mov rcx, qword [rsp + 0x1350]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x140002275
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x140001f46
mov rcx, qword [rsp + 0x1370]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jae 0x140002295
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
jmp 0x140002048
lea rcx, [rsp + 0x100]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
jne 0x140001a68
xor esi, esi
jmp 0x140001a68
lea rcx, [0x140010160]
call fcn.1400097b0
cmp dword [0x140010160], 0xffffffff
jne 0x140001ba2
xorps xmm7, xmm7
movaps xmmword [0x140010130], xmm7
lea rcx, [0x140010120]
mov qword [0x140010138], 0xf
mov byte [0x140010120], 0
lea rdx, str.localhost
call fcn.1400035c0
movaps xmmword [0x140010150], xmm7
lea rcx, [0x140010140]
mov qword [0x140010158], 0xf
mov byte [0x140010140], 0
lea rdx, str.incoming.telemetry.mozilla.org
call fcn.1400035c0
lea rcx, section..text
call fcn.140009968
lea rcx, [0x140010160]
call fcn.140009818
jmp 0x140001ba2
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, rbp
jmp 0x140001aaf
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, rbp
jmp 0x140001ad2
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, rbp
jmp 0x140001af2
mov rdi, rbp
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, rbp
mov rbp, rdi
jmp 0x140001b4b
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400022b5
add rbp, 0x28
mov rdx, rbp
mov rcx, rax
jmp 0x140001c73
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, rbp
jmp 0x140001dd0
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x1f
ja 0x1400022b5
add rbp, 0x28
mov rdx, rbp
mov rcx, rax
jmp 0x140001e8b
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, rbp
jmp 0x1400020a0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400022b5
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x1400020c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
ud2