Function at 0x14011e0a4
Capabilities:
Read http header

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
mov rax, qword [0x1402338a8]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rsi, r8
mov r14, rdx
mov rdi, rcx
xor r15d, r15d
mov dword [rsp + 0x38], r15d
mov rcx, qword [r8]
add rcx, 0x28
call fcn.1400bb5c0
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea ebx, [r15 + 0x13]
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x41], 7
mov word [rbp - 0x59], r15w
mov edx, dword [rsp + 0x30]
test rdx, rdx
jne 0x14011e140
mov qword [rbp - 0x49], rdx
mov word [rbp + rdx*2 - 0x59], r15w
jmp 0x14011e14f
lfence
xor r8d, r8d
lea rcx, [rbp - 0x59]
call fcn.14003abd4
lea r9, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae r9, qword [rbp - 0x59]
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 8
cmovae rcx, qword [rbp - 0x59]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov ebx, eax
lea rcx, [rbp - 0x59]
call fcn.14000f680
mov rcx, qword [rsi]
mov word [rcx + 0x58], bx
mov qword [rbp - 0x69], r15
mov qword [rbp - 0x61], 7
mov word [rbp - 0x79], r15w
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x34], r15d
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea ebx, [r9 + 0x14]
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov edx, dword [rsp + 0x34]
cmp rdx, qword [rbp - 0x69]
ja 0x14011e205
lea rax, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rax, qword [rbp - 0x79]
mov qword [rbp - 0x69], rdx
mov word [rax + rdx*2], r15w
jmp 0x14011e218
lfence
xor r8d, r8d
sub rdx, qword [rbp - 0x69]
lea rcx, [rbp - 0x79]
call fcn.14003abd4
lea r9, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae r9, qword [rbp - 0x79]
mov qword [rsp + 0x28], r15
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov edx, ebx
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov rdx, r15
mov r8, qword [rbp - 0x69]
test r8, r8
je 0x14011e26c
lea rax, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rax, qword [rbp - 0x79]
cmp word [rax + rdx*2], r15w
jne 0x14011e26c
inc rdx
cmp rdx, r8
jb 0x14011e24f
cmp r8, rdx
cmovb rdx, r8
lea rcx, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rcx, qword [rbp - 0x79]
sub r8, rdx
mov qword [rbp - 0x69], r8
lea r8, [r8*2 + 2]
lea rdx, [rcx + rdx*2]
call fcn.1401572b0
mov rcx, qword [rbp - 0x69]
test rcx, rcx
je 0x14011e2c8
lea rax, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rax, qword [rbp - 0x79]
cmp word [rax + rcx*2 - 2], r15w
jne 0x14011e2be
sub rcx, 1
jne 0x14011e2a2
cmp qword [rbp - 0x69], rcx
jb 0x14011e3fb
lea rax, [rbp - 0x79]
cmp qword [rbp - 0x61], 8
cmovae rax, qword [rbp - 0x79]
mov qword [rbp - 0x69], rcx
mov word [rax + rcx*2], r15w
mov rcx, qword [rsi]
add rcx, 0x60
lea rdx, [rbp - 0x79]
call fcn.14004c750
nop
lea rcx, [rbp - 0x79]
call fcn.14000f680
mov rdi, qword [rsi]
mov qword [rsp + 0x40], r15
lea r8, [rsp + 0x40]
lea rdx, [0x1401cdc44]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcstok_s]
mov rbx, rax
test rax, rax
je 0x14011e3d8
mov rdx, rbx
lea rcx, [rbp - 0x39]
call fcn.14000ec4c
nop
lea rdx, [0x1401ce6f8]
lea rcx, [rbp - 0x39]
call fcn.140122ea8
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14011e3af
mov r9, rax
xor r8d, r8d
lea rdx, [rbp + 7]
lea rcx, [rbp - 0x39]
call fcn.14010b598
nop
mov r9, qword [rbp - 0x29]
sub r9, rbx
dec r9
lea r8, [rbx + 1]
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x39]
call fcn.14010b598
nop
lea rcx, [rbp + 7]
call fcn.1401294ec
lea rcx, [rbp - 0x19]
call fcn.1401294ec
lea rcx, [rdi + 0x28]
lea r8, [rbp - 0x19]
lea rdx, [rbp + 7]
call fcn.1400bf920
nop
lea rcx, [rbp - 0x19]
call fcn.14000f680
nop
lea rcx, [rbp + 7]
call fcn.14000f680
lea r8, [rsp + 0x40]
lea rdx, [0x1401cdc44]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcstok_s]
mov rbx, rax
lea rcx, [rbp - 0x39]
call fcn.14000f680
test rbx, rbx
jne 0x14011e322
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140154030
mov rbx, qword [rsp + 0x148]
add rsp, 0x100
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.14001c120
nop
int3