Function at 0x140085990
Capabilities:
Prepare http request
Receive http response
Set http header

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov rax, qword [0x140214ba0]
xor rax, rsp
mov qword [rbp + 0x240], rax
mov rsi, rdx
mov rdi, rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rax
lea rcx, [rbp + 0xa8]
call fcn.14010df50
nop
mov dword [rbp + 0x80], 1
mov r9d, 0x20119
lea r8, str.SOFTWAREMcAfeeWebAdvisor
mov rdx, 0xffffffff80000002
lea rcx, [rbp + 0xa8]
call fcn.14010e140
lea r15, str.EventSender.cpp
lea r12, vtable.std::ios_base.0
test eax, eax
jne 0x140085ad8
lea r8, [rbp + 0x80]
lea rdx, str.AdhocTelemetryAWS
lea rcx, [rbp + 0xa8]
call fcn.14010e160
mov dword [rsp + 0x40], eax
test eax, 0xfffffffd
je 0x140085ad8
call fcn.1400553d0
mov r8d, 2
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rbp + 0x50], r15
mov dword [rbp + 0x58], 0x49
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.Querying_AdhocTelemetryAWS_value_failed:
lea rcx, [rsp + 0x50]
call fcn.1400244e0
lea rdx, [fcn.1400429c0]
lea rcx, [rsp + 0x50]
call fcn.14003b990
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400424b0
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
mov eax, 1
mov dword [rbp + 0x80], eax
jmp 0x140085ade
mov eax, dword [rbp + 0x80]
cmp eax, 1
sete bl
lea rcx, [rbp + 0xa8]
call fcn.14010dfe0
test bl, bl
jne 0x140085b55
call fcn.1400553d0
mov r8d, 3
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rbp + 0x50], r15
mov dword [rbp + 0x58], 0x15f
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.Not_sending_to_AWS_as_AdhocTelemetryAWS_registry_key_is_set_to_false
lea rcx, [rsp + 0x50]
call fcn.1400244e0
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
mov al, 1
jmp 0x14008607e
cmp byte [rdi + 0x570], 0
jne 0x140085bbd
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rbp + 0x50], r15
mov dword [rbp + 0x58], 0x165
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.Failed_to_send_event_to_AWS__event_sender_not_initialized_for_AWS.
lea rcx, [rsp + 0x50]
call fcn.1400244e0
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
jmp 0x14008607c
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
movups xmmword [rbp + 0x1f0], xmm0
movups xmmword [rbp + 0x1a0], xmm0
xor r14d, r14d
mov word [rbp + 0x1ae], r14w
movdqa xmmword [rbp + 0x1b0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1c0], xmm1
movdqa xmmword [rbp + 0x1d0], xmm0
mov qword [rbp + 0x1e0], r14
mov qword [rbp + 0x1e8], 0x400
mov dword [rbp + 0x1f0], r14d
mov qword [rbp + 0x1f8], r14
lea ecx, [r14 + 1]
call fcn.14014f910
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1b8], rax
cmp qword [rsi + 0x18], 0x10
jb 0x140085c3c
mov rsi, qword [rsi]
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x1a0]
call fcn.140087630
xorps xmm0, xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x11e], r14w
movdqa xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x130], xmm1
movdqa xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], 0x400
mov dword [rbp + 0x160], r14d
mov qword [rbp + 0x168], r14
mov ecx, 1
call fcn.14014f910
mov qword [rbp + 0x120], rax
mov qword [rbp + 0x128], rax
lea rcx, [rbp + 0x110]
call fcn.14002b1a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov ecx, 3
mov word [rbp + 0x11e], cx
movups xmmword [rbp + 0x50], xmm0
mov eax, 0x405
mov word [rbp + 0x5e], ax
mov rax, qword [rbp + 0x58]
movabs rbx, 0xffff000000000000
and rax, rbx
lea rcx, [0x1401ef3c4]
or rax, rcx
mov qword [rbp + 0x58], rax
mov dword [rbp + 0x50], 4
movabs rsi, 0xffffffffffff
mov ecx, dword [rbp + 0x114]
cmp dword [rbp + 0x110], ecx
jb 0x140085d93
test ecx, ecx
jne 0x140085d62
mov dword [rbp + 0x114], 0x10
mov ecx, 0x200
call fcn.1401568a0
mov rcx, qword [rbp + 0x118]
and rcx, rbx
or rcx, rax
mov qword [rbp + 0x118], rcx
jmp 0x140085d9a
lea edx, [rcx + 1]
shr edx, 1
add edx, ecx
mov dword [rbp + 0x114], edx
shl rdx, 5
mov rcx, qword [rbp + 0x118]
and rcx, rsi
test rdx, rdx
jne 0x140085d8c
call fcn.1401568b0
mov rax, r14
jmp 0x140085d4c
call fcn.1401568c4
jmp 0x140085d4c
mov rcx, qword [rbp + 0x118]
and rcx, rsi
mov eax, dword [rbp + 0x110]
shl rax, 5
movups xmm0, xmmword [rbp + 0x50]
movups xmmword [rax + rcx], xmm0
mov word [rbp + 0x5e], r14w
mov eax, dword [rbp + 0x110]
shl rax, 5
movaps xmm0, xmmword [rbp + 0x1a0]
movups xmmword [rax + rcx + 0x10], xmm0
mov word [rbp + 0x1ae], r14w
inc dword [rbp + 0x110]
lea rcx, [rbp + 0x50]
call fcn.14002b1a0
mov qword [rbp + 0xc8], r14
mov qword [rbp + 0xd8], r14
mov qword [rbp + 0xe0], 0xf
mov byte [rbp + 0xc8], 0
lea rdx, [rbp + 0xc8]
call fcn.1400818d0
test al, al
je 0x140085e45
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rcx, qword [rbp + 0xc8]
lea rdx, str.NO_REGVALUE
call fcn.1401708e0
test eax, eax
je 0x140085e45
cmp qword [rbp + 0xd8], 0x100
jbe 0x140085e5e
mov r8d, 0x5f
lea rdx, str.0Ywx4MUvRidmWf74nsIlBPIxJYIG9Nf0lSnge8SvgvY3RVy4E6gFLp3VDBcDO830QhXvfpgCb55sRtnVqKb2zUO3Vq7ko1b
lea rcx, [rbp + 0xc8]
call fcn.140020ae0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0xa8]
call fcn.1400268b0
lea rcx, str.PartitionKey
mov qword [rbp + 0x50], rcx
mov dword [rbp + 0x58], 0xc
mov r8, rax
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x110]
call fcn.1400872e0
xorps xmm0, xmm0
movups xmmword [rbp + 0x190], xmm0
movdqu xmmword [rbp + 0x170], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x180], xmm1
mov qword [rbp + 0x190], r14
mov qword [rbp + 0x198], 0x100
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x230], xmm0
lea rax, [rbp + 0x170]
mov qword [rbp + 0x200], rax
mov qword [rbp + 0x208], r14
movdqa xmmword [rbp + 0x210], xmm0
movdqa xmmword [rbp + 0x220], xmm1
mov qword [rbp + 0x230], 0x200
mov dword [rbp + 0x238], GetAltMonthNames
mov byte [rbp + 0x23c], 0
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x110]
call fcn.14001f580
test al, al
jne 0x1400860a9
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rbp + 0x50], r15
mov dword [rbp + 0x58], 0x189
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.Failed_to_initialize_buffer_for_AWS
lea rcx, [rsp + 0x50]
call fcn.1400244e0
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
mov rcx, qword [rbp + 0x218]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x210]
call fcn.14014f900
nop
mov rcx, qword [rbp + 0x180]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x178]
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140086007
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086001
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871a8
call fcn.14014f900
nop
mov edx, 1
mov rcx, qword [rbp + 0x128]
call fcn.14014f900
mov rcx, qword [rbp + 0x140]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x138]
call fcn.14014f900
lea rcx, [rbp + 0x110]
call fcn.14002b1a0
nop
mov edx, 1
mov rcx, qword [rbp + 0x1b8]
call fcn.14014f900
mov rcx, qword [rbp + 0x1d0]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x1c8]
call fcn.14014f900
lea rcx, [rbp + 0x1a0]
call fcn.14002b1a0
xor al, al
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.14014f8e0
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov rcx, qword [rbp + 0x188]
lea rax, [rcx + 1]
cmp rax, qword [rbp + 0x190]
jbe 0x1400860d5
mov edx, 1
lea rcx, [rbp + 0x170]
call fcn.140020540
mov rcx, qword [rbp + 0x188]
lea rax, [rcx + 1]
mov qword [rbp + 0x188], rax
mov byte [rcx], 0
dec qword [rbp + 0x188]
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x180]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140086110
lea rcx, [rbp + 0x60]
call fcn.140020ae0
nop
call fcn.1400553d0
mov r8d, 4
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rbp + 0x50], r15
mov dword [rbp + 0x58], 0x18f
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.AWS_Adhoc_Telemetry_Payload_
lea rcx, [rsp + 0x50]
call fcn.1400244e0
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae rax, qword [rbp + 0x60]
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140027ba0
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
lea rbx, [rdi + 0x578]
cmp qword [rbx], 0
je 0x140087057
cmp qword [rbx + 8], 0
jne 0x140087057
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rax
lea r9, [rbp + 0xa8]
movzx r8d, word [rdi + 0x5d4]
mov rdx, qword [rdi + 0x5c8]
mov rcx, rbx
call fcn.14008d5c0
test al, al
je 0x140087057
mov qword [rbp + 0x48], rdi
mov eax, r14d
mov ecx, 0x800000
cmp dword [rdi + 0x5c4], 2
cmove eax, ecx
lea r8, [rdi + 0x618]
cmp qword [r8 + 0x18], 8
jb 0x14008621c
mov r8, qword [r8]
mov rcx, qword [rdi + 0x580]
test rcx, rcx
je 0x140086fdf
cmp qword [rdi + 0x588], 0
jne 0x140086fdf
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov rdx, qword [rdi + 0x658]
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov qword [rdi + 0x588], rax
test rax, rax
je 0x140086fdf
mov qword [rbp + 0x50], rdi
lea rdx, [rdi + 0x660]
cmp qword [rdx + 0x18], 8
jb 0x14008627d
mov rdx, qword [rdx]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140086f64
mov r9d, 0x40000000
mov r8d, dword [rdi + 0x670]
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
cmp eax, 1
jne 0x140086f64
mov qword [rbp + 0x88], r14
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
lea rdx, [rbp + 0x88]
call fcn.140085740
mov qword [rbp + 0xa8], r14
mov qword [rbp + 0xb8], r14
mov qword [rbp + 0xc0], 7
mov word [rbp + 0xa8], r14w
lea rax, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae rax, qword [rbp + 0x88]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rbp + 0xa8]
lea rcx, [rsp + 0x40]
call fcn.140026e60
test al, al
jne 0x1400864b3
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x48], 0x1ae
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.Failed_to_convert_the__x_api_key_string_to_wide
lea rcx, [rsp + 0x50]
call fcn.1400244e0
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x1400863e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400863dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871d2
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x140086424
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008641f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871a2
call fcn.14014f900
mov byte [rbp + 0x88], 0
mov qword [rbp + 0xa0], 0xf
mov qword [rbp + 0x98], r14
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140086450
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbx + 0x10], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140086463
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbx + 8], r14
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x14008649e
inc rdx
mov rcx, qword [rbp + 0x60]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140086499
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140087196
call fcn.14014f900
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
jmp 0x140085f89
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp + 0xb8]
sub rax, rcx
cmp rax, 0xb
jb 0x1400871ae
lea rax, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rax, qword [rbp + 0xa8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xb
lea r9, str.X_Api_Key:
lea rcx, [rbp + 0xe8]
call fcn.140024370
nop
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 8
cmovae rdx, qword [rbp + 0xe8]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140086dfe
mov r9d, 0x40000000
mov r8d, dword [rbp + 0xf8]
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
cmp eax, 1
jne 0x140086dfe
lea r9, [rbp + 0x60]
cmp qword [rbp + 0x78], 0x10
cmovae r9, qword [rbp + 0x60]
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140086b91
mov qword [rsp + 0x30], r14
mov eax, dword [rbp + 0x70]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor edx, edx
mov r8d, 0xffffffff
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
cmp eax, 1
jne 0x140086b91
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140086b16
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
cmp eax, 1
jne 0x140086b16
mov rcx, rbx
call fcn.14008d6f0
mov esi, eax
mov dword [rbp + 0x80], eax
call fcn.1400553d0
mov r8d, 4
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x48], 0x1c9
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.AWS_Response_Code_received
lea rcx, [rsp + 0x50]
call fcn.1400244e0
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x50]
call fcn.140030600
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
cmp dword [rdi + 0x680], esi
je 0x1400868aa
cmp dword [rdi + 0x684], esi
je 0x1400868aa
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x48], 0x1cd
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.HTTP_status_error_for_AWS:
lea rcx, [rsp + 0x50]
call fcn.1400244e0
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x50]
call fcn.140030600
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 8
jb 0x1400866f9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400866f4
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871b4
call fcn.14014f900
mov word [rbp + 0xe8], r14w
mov qword [rbp + 0x100], 7
mov qword [rbp + 0xf8], r14
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x14008675a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140086754
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871ba
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x14008679b
inc rdx
mov rcx, qword [rbp + 0x88]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140086796
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871c0
call fcn.14014f900
mov byte [rbp + 0x88], 0
mov qword [rbp + 0xa0], 0xf
mov qword [rbp + 0x98], r14
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400867c7
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbx + 0x10], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400867da
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbx + 8], r14
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140086815
inc rdx
mov rcx, qword [rbp + 0x60]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140086810
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871c6
call fcn.14014f900
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rcx, qword [rbp + 0x218]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x210]
call fcn.14014f900
nop
mov rcx, qword [rbp + 0x180]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x178]
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140086007
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086001
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008719c
jmp 0x140086001
mov rdx, qword [rbp + 0x100]
cmp rdx, 8
jb 0x1400868f0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400868eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871b4
call fcn.14014f900
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0x100], 7
mov word [rbp + 0xe8], r14w
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x140086951
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008694b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871ba
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x140086992
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008698d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871c0
call fcn.14014f900
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1400869be
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbx + 0x10], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400869d1
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbx + 8], r14
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140086a0c
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086a07
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871c6
call fcn.14014f900
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rcx, qword [rbp + 0x218]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x210]
call fcn.14014f900
nop
mov rcx, qword [rbp + 0x180]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x178]
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140086a9a
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086a94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008719c
call fcn.14014f900
nop
mov edx, 1
mov rcx, qword [rbp + 0x128]
call fcn.14014f900
mov rcx, qword [rbp + 0x140]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x138]
call fcn.14014f900
lea rcx, [rbp + 0x110]
call fcn.14002b1a0
nop
mov edx, 1
mov rcx, qword [rbp + 0x1b8]
call fcn.14014f900
mov rcx, qword [rbp + 0x1d0]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x1c8]
call fcn.14014f900
lea rcx, [rbp + 0x1a0]
call fcn.14002b1a0
mov al, 1
jmp 0x14008607e
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x48], 0x1c3
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.HTTP_receive_response_failed_for_AWS:
lea rcx, [rsp + 0x50]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140030540
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
jmp 0x1400866b3
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x48], 0x1bd
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.HTTP_send_request_failed_for_AWS:
lea rcx, [rsp + 0x50]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140030540
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 8
jb 0x140086c4d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086c48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871b4
call fcn.14014f900
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0x100], 7
mov word [rbp + 0xe8], r14w
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x140086cae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086ca8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871ba
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x140086cef
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086cea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871c0
call fcn.14014f900
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xa0], 0xf
mov byte [rbp + 0x88], 0
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140086d1b
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbx + 0x10], r14
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140086d2e
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbx + 8], r14
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140086d69
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086d64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871c6
call fcn.14014f900
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rcx, qword [rbp + 0x218]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x210]
call fcn.14014f900
nop
mov rcx, qword [rbp + 0x180]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x178]
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140086007
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086001
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008719c
jmp 0x140086001
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x48], 0x1b7
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.HTTP_add_request_header_failed_for_AWS_x_api_key:
lea rcx, [rsp + 0x50]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140030540
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 8
jb 0x140086eba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086eb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871cc
call fcn.14014f900
mov qword [rbp + 0xf8], r14
mov qword [rbp + 0x100], 7
mov word [rbp + 0xe8], r14w
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x140086f1b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086f15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871d2
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 0x10
jb 0x140086424
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008641f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871a2
jmp 0x14008641f
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x48], 0x1a4
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.HTTP_add_request_header_failed_for_AWS_CONTENT_TYPE:
lea rcx, [rsp + 0x50]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140030540
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
jmp 0x14008643d
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rbp + 0x50], r15
mov dword [rbp + 0x58], 0x19c
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.HTTP_open_request_failed_for_AWS:
lea rcx, [rsp + 0x50]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140030540
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
jmp 0x140086450
call fcn.1400553d0
mov r8d, 1
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.140055290
mov qword [rbp + 0x50], r15
mov dword [rbp + 0x58], 0x193
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.1400244b0
lea rdx, str.HTTP_connection_failed_for_AWS:
lea rcx, [rsp + 0x50]
call fcn.1400244e0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x40], eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x50]
call fcn.140030540
lea rcx, [rbp - 0x18]
call fcn.140058d50
nop
mov qword [rbp - 0x18], r12
lea rcx, [rbp - 0x18]
call fcn.140128970
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140087105
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140087100
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140087196
call fcn.14014f900
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
mov rcx, qword [rbp + 0x218]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x210]
call fcn.14014f900
nop
mov rcx, qword [rbp + 0x180]
call fcn.1401568b0
mov edx, 1
mov rcx, qword [rbp + 0x178]
call fcn.14014f900
nop
mov rdx, qword [rbp + 0xe0]
cmp rdx, 0x10
jb 0x140086007
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140086001
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400871a8
jmp 0x140086001
call fcn.140156b00
nop
call fcn.140156b00
nop
call fcn.140156b00
nop
call fcn.140156b00
nop
call fcn.140020840
int3
call fcn.140156b00
nop
call fcn.140156b00
nop
call fcn.140156b00
nop
call fcn.140156b00
nop
call fcn.140156b00
nop
call fcn.140156b00
int3