Function at 0x18003a900
Capabilities:
Initialize winhttp library
Make an http request with a cookie
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1190]
mov eax, 0x1290
call fcn.1801eee00
sub rsp, rax
mov qword [rbp + 0x10], 0xfffffffffffffffe
mov qword [rsp + 0x12e0], rbx
movaps xmmword [rsp + 0x1280], xmm6
mov rax, qword [0x1802a8008]
xor rax, rsp
mov qword [rbp + 0x1170], rax
mov rdi, rcx
mov qword [rbp - 0x18], rcx
cmp qword [rcx + 0x20], 0
ja 0x18003a969
mov dword [rcx + 0x160], 3
xor al, al
jmp 0x18003ba0b
mov qword [rbp + 0xc8], 7
xor r13d, r13d
mov qword [rbp + 0xc0], r13
mov word [rbp + 0xb0], r13w
or rbx, 0xffffffffffffffff
mov r9, rbx
xor r8d, r8d
lea rcx, [rbp + 0xb0]
call fcn.18003bef0
nop
lea rcx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rcx, qword [rbp + 0xb0]
lea rdx, [0x1802042d8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
lea rcx, [rbp + 0xb0]
test eax, eax
jne 0x18003a9d9
lea r8d, [r13 + 3]
lea rdx, [0x1802042d8]
jmp 0x18003aa10
cmp qword [rbp + 0xc8], 8
cmovae rcx, qword [rbp + 0xb0]
lea rdx, str.POST
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x18003b97d
lea r8d, [rax + 4]
lea rdx, str.POST
lea rcx, [rbp + 0xb0]
call fcn.18003ba40
mov sil, 1
mov byte [rsp + 0x41], sil
cmp qword [rdi], 0
jne 0x18003aa60
lea rcx, [rdi + 0x188]
cmp qword [rcx + 0x18], 8
jb 0x18003aa34
mov rcx, qword [rcx]
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rdi], rax
test rax, rax
jne 0x18003aa60
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
jmp 0x18003b987
mov eax, dword [rdi + 0x21c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rdi + 0x218]
mov r8d, dword [rdi + 0x214]
mov edx, dword [rdi + 0x210]
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x110]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xa28
lea rcx, [rbp + 0x740]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x20], 0x68
lea rax, [rbp + 0x110]
mov qword [rbp + 0x38], rax
mov dword [rbp + 0x40], 0x104
lea rax, [rbp + 0x740]
mov qword [rbp + 0x68], rax
mov dword [rbp + 0x70], 0x514
mov eax, 1
mov dword [rbp + 0x30], eax
lea r14, [rdi + 0x10]
cmp qword [r14 + 0x18], 8
jb 0x18003ab01
mov rcx, qword [r14]
jmp 0x18003ab04
mov rcx, r14
lea r9, [rbp + 0x20]
xor r8d, r8d
mov edx, dword [rdi + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x18003b98a
cmp word [rbp + 0x110], 0
jne 0x18003ab2b
mov r8, r13
jmp 0x18003ab40
lea rax, [rbp + 0x110]
mov r8, rbx
inc r8
cmp word [rax + r8*2], 0
jne 0x18003ab35
lea rcx, [rdi + 0x30]
lea rdx, [rbp + 0x110]
call fcn.18003ba40
xor r9d, r9d
movzx r8d, word [rbp + 0x44]
lea rdx, [rbp + 0x110]
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r15, rax
mov qword [rbp - 0x10], rax
test rax, rax
je 0x18003b98a
mov ecx, r13d
mov eax, 0x800000
cmp dword [rbp + 0x34], 2
cmove ecx, eax
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rdx, qword [rbp + 0xb0]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
mov r8, qword [rbp + 0x68]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x18003b972
cmp byte [rdi + 8], 0
jne 0x18003abf9
cmp dword [rbp + 0x34], 2
jne 0x18003abf9
mov dword [rsp + 0x48], 0x3100
mov r9d, 4
lea r8, [rsp + 0x48]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
xor r12b, r12b
mov byte [rsp + 0x40], r12b
mov ecx, r13d
movsd xmm6, qword [0x180269eb8]
nop dword [rax]
mov eax, ecx
inc ecx
mov dword [rsp + 0x70], ecx
cmp eax, 3
jae 0x18003b94f
cmp qword [rdi + 0x130], 0
jbe 0x18003ac62
lea rdx, [rdi + 0x120]
cmp qword [rdx + 0x18], 8
jb 0x18003ac3c
mov rdx, qword [rdx]
mov r9d, 0x1000000
mov r8d, dword [rdi + 0x130]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x18003ac62
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
cmp qword [rdi + 0x100], 0
jbe 0x18003ad0c
mov qword [rbp + 0xa8], 7
mov qword [rbp + 0xa0], r13
mov word [rbp + 0x90], r13w
mov r8d, 8
lea rdx, str.Cookie:
lea rcx, [rbp + 0x90]
call fcn.18003ba40
nop
lea rdx, [rdi + 0xf0]
or r15, 0xffffffffffffffff
mov r9, r15
xor r8d, r8d
lea rcx, [rbp + 0x90]
call fcn.180037130
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 8
cmovae rdx, qword [rbp + 0x90]
mov r9d, 0x1000000
mov r8d, dword [rbp + 0xa0]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x18003acfe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
lea rcx, [rbp + 0x90]
call fcn.18003c150
jmp 0x18003ad10
or r15, 0xffffffffffffffff
cmp qword [rdi + 0x150], 0
jbe 0x18003ae24
xor eax, eax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov dword [rbp - 8], 3
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
lea r8, [rdi + 0x140]
cmp qword [r8 + 0x18], 8
jb 0x18003ad58
mov r8, qword [r8]
mov edx, 0x104
lea rcx, [rbp + 0x320]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x320]
mov qword [rbp], rax
mov r9d, 0x18
lea r8, [rbp - 8]
lea edx, [r9 + 0xe]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x18003ad9c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
cmp qword [rdi + 0x1c0], 0
jbe 0x18003ae24
mov rax, qword [rdi + 0x1c0]
lea r8, [rdi + 0x1b0]
cmp qword [r8 + 0x18], 8
jb 0x18003adbe
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1002
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x18003ade0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
cmp qword [rdi + 0x1e0], 0
jbe 0x18003ae24
mov rax, qword [rdi + 0x1e0]
lea r8, [rdi + 0x1d0]
cmp qword [r8 + 0x18], 8
jb 0x18003ae02
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1003
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x18003ae24
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
xor sil, sil
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x18003b049
xor eax, eax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], rax
lea rcx, [rbp - 0x68]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x18003b930
mov rax, qword [rbp - 0x60]
test rax, rax
je 0x18003af52
xor ecx, ecx
mov qword [rsp + 0x78], rcx
mov qword [rbp - 0x70], rcx
mov dword [rsp + 0x78], 3
mov ecx, 1
mov dword [rsp + 0x7c], ecx
mov qword [rbp - 0x80], rax
mov dword [rbp - 0x6c], ecx
mov dword [rbp - 0x70], r13d
mov qword [rbp - 0x78], r13
xor eax, eax
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
cmp qword [r14 + 0x18], 8
jb 0x18003aec5
mov rdx, qword [r14]
jmp 0x18003aec8
mov rdx, r14
lea r9, [rbp - 0x48]
lea r8, [rsp + 0x78]
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x18003b002
mov r9d, 0x18
lea r8, [rbp - 0x48]
lea edx, [r9 + 0xe]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x18003af2b
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
movzx esi, sil
test eax, eax
mov eax, 1
cmovne esi, eax
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x18003af3a
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x18003b00e
call qword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x18003b00e
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x18003b02c
xor eax, eax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x30], 3
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x320]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x320]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x320]
mov qword [rbp - 0x28], rax
mov rbx, qword [rbp - 0x50]
test rbx, rbx
je 0x18003afe5
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x530]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x530]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x530]
mov qword [rbp - 0x20], rax
mov r9d, 0x18
lea r8, [rbp - 0x30]
lea edx, [r9 + 0xe]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x18003b00e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x18003b01d
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x18003b02c
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x18003b03b
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rbx, qword [rsp + 0x50]
test sil, sil
je 0x18003b93c
mov rdx, qword [rdi + 0x110]
test rdx, rdx
je 0x18003b07f
mov dword [rsp + 0x48], r13d
lea r9, [rsp + 0x48]
mov r8d, dword [rdi + 0x118]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
jne 0x18003b07f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x18003b930
mov dword [rsp + 0x44], r13d
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x16]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x18003b0cc
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x18003b44f
mov ecx, dword [rsp + 0x44]
mov eax, 2
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1801e6560
mov r12, rax
test rax, rax
je 0x18003b449
mov r8d, dword [rsp + 0x44]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9, r12
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x18003b441
cmp word [r12], 0
jne 0x18003b139
mov r8, r13
jmp 0x18003b14b
mov r8, r15
nop dword [rax]
inc r8
cmp word [r12 + r8*2], 0
jne 0x18003b140
mov rdx, r12
lea rcx, [rdi + 0x50]
call fcn.18003ba40
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r13
mov qword [rbp + 0xa8], 7
mov qword [rbp + 0xa0], r13
mov word [rbp + 0x90], r13w
xor r8d, r8d
lea rdx, [0x1802042bc]
lea rcx, [rbp + 0x90]
call fcn.18003ba40
nop
cmp byte [rdi + 0x1a8], 0
jne 0x18003b203
mov r8d, 0x19
lea rdx, str.charset_A_Za_z0_9___
lea rcx, [rbp + 0x90]
call fcn.18003ba40
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x50]
lea rcx, [rbp + 0x90]
call fcn.18003a5c0
test al, al
je 0x18003b203
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18003b203
lea rcx, [rdi + 0x90]
cmp rcx, rdx
je 0x18003b203
mov r9, r15
xor r8d, r8d
call fcn.18003bef0
mov r8d, 0x18
lea rdx, str.Content_Length:__0_9_
lea rcx, [rbp + 0x90]
call fcn.18003ba40
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x50]
lea rcx, [rbp + 0x90]
call fcn.18003a5c0
test al, al
je 0x18003b266
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x18003b266
cmp qword [rcx + 0x18], 8
jb 0x18003b25a
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov dword [rdi + 0xc8], eax
mov r8d, 0x12
lea rdx, str.Location:__0_9_
lea rcx, [rbp + 0x90]
call fcn.18003ba40
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x50]
lea rcx, [rbp + 0x90]
call fcn.18003a5c0
test al, al
je 0x18003b2ca
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
sub rax, rdx
sar rax, 5
test rax, rax
je 0x18003b2ca
lea rcx, [rdi + 0x1f0]
cmp rcx, rdx
je 0x18003b2ca
mov r9, r15
xor r8d, r8d
call fcn.18003bef0
mov r8d, 0x15
lea rdx, str.Set_Cookie:_b.__n
lea rcx, [rbp + 0x90]
call fcn.18003ba40
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x50]
lea rcx, [rbp + 0x90]
call fcn.18003a5c0
test al, al
je 0x18003b425
mov rsi, qword [rsp + 0x60]
mov r14, qword [rsp + 0x58]
sub rsi, r14
sar rsi, 5
test rsi, rsi
je 0x18003b425
mov rbx, r13
lea r15, [rdi + 0xd0]
or rdi, 0xffffffffffffffff
nop dword [rax]
mov r9, rdi
xor r8d, r8d
mov rdx, r14
mov rcx, r15
call fcn.180037130
lea rax, [rsi - 1]
cmp rbx, rax
je 0x18003b35f
mov r8d, 2
lea rdx, [0x1802042b4]
mov rcx, r15
call fcn.180037260
inc rbx
add r14, 0x20
cmp rbx, rsi
jb 0x18003b330
mov rdi, qword [rbp - 0x18]
or r15, 0xffffffffffffffff
mov qword [rbp + 0xe8], 7
mov qword [rbp + 0xe0], r13
mov word [rbp + 0xd0], r13w
mov esi, 1
mov r8d, esi
lea rdx, [0x1802042c0]
lea rcx, [rbp + 0xd0]
call fcn.18003ba40
nop
lea rbx, [rdi + 0xd0]
lea r8, [rbp + 0xd0]
mov rdx, rbx
lea rcx, [rbp + 0xf0]
call fcn.180036f20
mov rdx, rax
mov rcx, rbx
call fcn.180036e90
lea rcx, [rbp + 0xf0]
call fcn.18003c150
nop
lea rcx, [rbp + 0xd0]
call fcn.18003c150
cmp qword [rdi + 0xe0], 0
jbe 0x18003b425
mov rcx, qword [rdi + 0xe0]
cmp qword [rbx + 0x18], 8
jb 0x18003b407
mov rax, qword [rbx]
jmp 0x18003b40a
mov rax, rbx
cmp word [rax + rcx*2 - 2], 0x3b
je 0x18003b425
mov r8, rsi
lea rdx, [0x1802042c4]
mov rcx, rbx
call fcn.180037260
nop
lea rcx, [rbp + 0x90]
call fcn.18003c150
nop
lea rcx, [rsp + 0x58]
call fcn.18003a120
mov rbx, qword [rsp + 0x50]
mov rcx, r12
call fcn.1801e6550
movzx r12d, byte [rsp + 0x40]
mov dword [rsp + 0x44], r13d
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x13]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x18003b489
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x18003b518
mov ecx, dword [rsp + 0x44]
mov eax, 2
mul rcx
cmovo rax, r15
mov rcx, rax
call fcn.1801e6560
mov rbx, rax
test rax, rax
je 0x18003b513
mov r8d, dword [rsp + 0x44]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
mov r9, rbx
xor r8d, r8d
lea edx, [r8 + 0x13]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x18003b50b
cmp word [rbx], 0
jne 0x18003b4ee
mov r8, r13
jmp 0x18003b4fc
mov r8, r15
inc r8
cmp word [rbx + r8*2], 0
jne 0x18003b4f1
lea rcx, [rdi + 0x168]
mov rdx, rbx
call fcn.18003ba40
mov rcx, rbx
call fcn.1801e6550
mov rbx, qword [rsp + 0x50]
mov r15d, 0x2800
mov r14d, r13d
mov rcx, qword [rdi + 0xb0]
test rcx, rcx
je 0x18003b539
call fcn.1801e6550
mov qword [rdi + 0xb0], r13
mov rcx, r15
call fcn.1801e6560
mov qword [rdi + 0xb0], rax
test rax, rax
je 0x18003b94a
xor edx, edx
mov r8, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
nop
mov dword [rsp + 0x44], r13d
lea rdx, [rsp + 0x44]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x18003b672
mov rdx, qword [rdi + 0xc0]
test rdx, rdx
je 0x18003b5ae
mov ecx, dword [rdi + 0xc8]
test ecx, ecx
je 0x18003b5ae
mov eax, r14d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov ecx, dword [rsp + 0x44]
inc ecx
call fcn.1801e6560
mov rbx, rax
test rax, rax
je 0x18003b680
mov r8d, dword [rsp + 0x44]
inc r8d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x48], r13d
lea r9, [rsp + 0x48]
mov r8d, dword [rsp + 0x44]
mov rdx, rbx
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x18003b668
mov ecx, dword [rsp + 0x48]
lea eax, [rcx + r14]
cmp eax, r15d
jbe 0x18003b64e
mov rsi, qword [rdi + 0xb0]
add r15d, r15d
mov ecx, r15d
call fcn.1801e6560
mov qword [rdi + 0xb0], rax
test rax, rax
je 0x18003b691
mov r8d, r15d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8d, r14d
mov rdx, rsi
mov rcx, qword [rdi + 0xb0]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rsi
call fcn.1801e6550
mov ecx, dword [rsp + 0x48]
mov r8d, ecx
mov ecx, r14d
add rcx, qword [rdi + 0xb0]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
add r14d, dword [rsp + 0x48]
mov rcx, rbx
call fcn.1801e6550
jmp 0x18003b680
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
jmp 0x18003b685
mov rbx, qword [rsp + 0x50]
cmp dword [rsp + 0x44], 0
jbe 0x18003b69d
jmp 0x18003b560
mov qword [rdi + 0xb0], rsi
mov byte [rsp + 0x41], 0
mov rdx, qword [rdi + 0xc0]
test rdx, rdx
je 0x18003b6d0
mov ecx, dword [rdi + 0xc8]
test ecx, ecx
je 0x18003b6d0
mov eax, r14d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov dword [rdi + 0xb8], r14d
mov r14d, r13d
mov ebx, 1
mov r15d, ebx
lea rcx, [rdi + 0x90]
cmp qword [rcx + 0x18], 8
jb 0x18003b6f3
mov rcx, qword [rcx]
mov r8d, 5
lea rdx, [0x1802042c8]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x18003b713
mov r14d, 0xfde9
mov r15d, r13d
mov r9d, dword [rdi + 0xb8]
inc r9d
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r8, qword [rdi + 0xb0]
mov edx, r15d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test eax, eax
jg 0x18003b775
mov r14d, r13d
mov r15d, ebx
mov r9d, dword [rdi + 0xb8]
inc r9d
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r8, qword [rdi + 0xb0]
mov edx, ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test eax, eax
jle 0x18003b801
movsxd r12, esi
mov eax, 2
mul r12
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1801e6560
mov rbx, rax
test rax, rax
je 0x18003b801
lea r8, [r12 + r12]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r9d, dword [rdi + 0xb8]
inc r9d
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rbx
mov r8, qword [rdi + 0xb0]
mov edx, r15d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x18003b7f9
cmp word [rbx], 0
jne 0x18003b7de
mov r8, r13
jmp 0x18003b7ed
or r8, 0xffffffffffffffff
inc r8
cmp word [rbx + r8*2], 0
jne 0x18003b7e2
lea rcx, [rdi + 0x70]
mov rdx, rbx
call fcn.18003ba40
mov rcx, rbx
call fcn.1801e6550
mov r12b, 1
mov byte [rsp + 0x40], r12b
lea rcx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rcx, qword [rbp + 0xb0]
mov r9d, 3
lea r8, [0x1802042d8]
mov rdx, qword [rbp + 0xc0]
call fcn.1800373c0
test eax, eax
jne 0x18003b94f
mov qword [rbp + 0xa8], 7
mov qword [rbp + 0xa0], r13
mov word [rbp + 0x90], r13w
lea r8d, [rax + 8]
lea rdx, str._html_
lea rcx, [rbp + 0x90]
call fcn.18003ba40
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x70]
lea rcx, [rbp + 0x90]
call fcn.18003a5c0
test al, al
je 0x18003b90e
mov rax, qword [rsp + 0x60]
sub rax, qword [rsp + 0x58]
sar rax, 5
test rax, rax
je 0x18003b90e
mov r8d, 9
lea rdx, str.__html_
lea rcx, [rbp + 0x90]
call fcn.18003ba40
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rdi + 0x70]
lea rcx, [rbp + 0x90]
call fcn.18003a5c0
test al, al
je 0x18003b8fc
mov rax, qword [rsp + 0x60]
sub rax, qword [rsp + 0x58]
sar rax, 5
test rax, rax
jne 0x18003b90e
mov dword [rdi + 0x160], 0xd
xor r12b, r12b
mov byte [rsp + 0x40], r12b
lea rcx, [rsp + 0x58]
call fcn.18003a120
nop
lea rcx, [rbp + 0x90]
call fcn.18003c150
mov rbx, qword [rsp + 0x50]
lea r14, [rdi + 0x10]
jmp 0x18003b93c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi + 0x160], eax
test r12b, r12b
jne 0x18003b94f
mov ecx, dword [rsp + 0x70]
jmp 0x18003ac10
xor sil, sil
jmp 0x18003b954
movzx esi, byte [rsp + 0x41]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
movzx eax, sil
test r12b, r12b
cmovne r13d, eax
movzx esi, r13b
mov r15, qword [rbp - 0x10]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x18003b98a
mov dword [rdi + 0x160], 0x57
xor sil, sil
mov rax, qword [rbp + 0xc8]
cmp rax, 8
jb 0x18003ba07
inc rax
mov rcx, qword [rbp + 0xb0]
movabs rdx, 0x7fffffffffffffff
cmp rax, rdx
jbe 0x18003b9b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
add rax, rax
cmp rax, 0x1000
jb 0x18003ba02
test byte [rbp + 0xb0], 0x1f
je 0x18003b9d2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18003b9e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x18003b9f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x18003b9ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.1801e6174
movzx eax, sil
mov rcx, qword [rbp + 0x1170]
xor rcx, rsp
call fcn.1801e6190
mov rbx, qword [rsp + 0x12e0]
movaps xmm6, xmmword [rsp + 0x1280]
add rsp, 0x1290
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret