Function at 0x14003d0a0
Capabilities:
Write file on windows

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x70
mov rbx, rdx
mov rsi, rcx
lea rdx, str.http_payload
mov r12, r8
mov rcx, rbx
mov rbp, r9
call dbg.name_equals
test eax, eax
jne 0x14003d200
lea rdx, str.http_user_agent
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d1c0
lea rdx, str.http_host
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d2c0
lea rdx, str.http_method
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d288
lea rdx, str.http_url
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d300
lea rdx, str.http_version
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d3a8
lea rdx, str.timeout
mov rcx, rbx
call dbg.name_equals
test eax, eax
je 0x14003d318
test r12, r12
je 0x14003d4e0
mov r9, rbp
add r12, rbp
xor r8d, r8d
nop word cs:[rax + rax]
nop dword [rax + rax]
movsx eax, byte [r9]
lea rdx, [r8 + r8*4]
add r9, 1
sub eax, 0x30
cdqe
lea r8, [rax + rdx*2]
cmp r12, r9
jne 0x14003d180
mov dword [rsi + 0x18], r8d
lea rdx, str.TCP_connection_timeout___u_n
mov ecx, 1
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp dbg.LOG
mov rbx, qword [0x140073570]
mov r9, rbp
lea r8, str.User_Agent:
mov rdx, qword [rbx + 0x18]
mov dword [rsp + 0x28], 0
lea rcx, [rbx + 0x10]
mov qword [rsp + 0x20], r12
call dbg.http_change_field
mov qword [rbx + 0x18], rax
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
lea r13, [rsp + 0x30]
mov r9d, r12d
mov edx, 0x40
mov rcx, r13
lea r8, [0x1400709de]
call sym.snprintf
mov rbx, qword [0x140073570]
mov r8, rbp
mov r9, r12
mov rdx, qword [rbx + 0x18]
mov dword [rsp + 0x20], 3
lea rbp, [rbx + 0x10]
mov rcx, rbp
call dbg.http_change_requestline
mov rcx, r13
mov rsi, rax
mov qword [rbx + 0x18], rax
call sym.strlen
mov r9, r13
mov rdx, rsi
mov rcx, rbp
mov dword [rsp + 0x28], 0
lea r8, str.Content_Length:
mov qword [rsp + 0x20], rax
call dbg.http_change_field
mov qword [rbx + 0x18], rax
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov rbx, qword [0x140073570]
mov rdx, qword [rbx + 0x18]
mov dword [rsp + 0x20], 0
mov r9, r12
mov r8, rbp
lea rcx, [rbx + 0x10]
call dbg.http_change_requestline
mov qword [rbx + 0x18], rax
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov rbx, qword [0x140073570]
mov r9, rbp
lea r8, str.Host:
mov rdx, qword [rbx + 0x18]
mov dword [rsp + 0x28], 0
lea rcx, [rbx + 0x10]
mov qword [rsp + 0x20], r12
call dbg.http_change_field
mov qword [rbx + 0x18], rax
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
mov rbx, qword [0x140073570]
mov rdx, qword [rbx + 0x18]
mov dword [rsp + 0x20], 1
jmp 0x14003d29b
lea rdx, str.connection_timeout
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d15b
lea rdx, str.hello_timeout
mov rcx, rbx
call dbg.name_equals
test eax, eax
je 0x14003d3c0
test r12, r12
je 0x14003d699
mov rdx, rbp
lea r8, [r12 + rbp]
xor eax, eax
nop word cs:[rax + rax]
nop
lea rcx, [rax + rax*4]
movsx eax, byte [rdx]
add rdx, 1
sub eax, 0x30
cdqe
lea rax, [rax + rcx*2]
cmp r8, rdx
jne 0x14003d360
mov dword [rsi + 0x1c], eax
mov r8d, r12d
lea rdx, str.TCP_hello_timeout____.s__n
mov r9, rbp
mov ecx, 1
call dbg.LOG
mov r8d, dword [rsi + 0x1c]
lea rdx, str.TCP_hello_timeout___u_n
jmp 0x14003d1a5
mov rbx, qword [0x140073570]
mov rdx, qword [rbx + 0x18]
mov dword [rsp + 0x20], 2
jmp 0x14003d29b
lea rdx, str.hello
mov rcx, rbx
mov r13, qword [rsi + 0x48]
call dbg.name_equals
test eax, eax
jne 0x14003d4e8
lea rdx, str.heartbleed
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d547
lea rdx, str.ticketbleed
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d639
lea rdx, str.poodle
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d5b9
lea rdx, str.sslv3
mov rcx, rbx
call dbg.name_equals
test eax, eax
jne 0x14003d5b9
lea rdx, str.hello_string
mov rcx, rbx
call dbg.name_equals
test eax, eax
je 0x14003d1ef
mov edx, 0x5b
mov rcx, rbx
call sym.strchr
test rax, rax
je 0x14003d739
lea rcx, [rax + 1]
xor r8d, r8d
xor edx, edx
call sym.strtoul
mov edx, 0x58
mov ecx, 1
mov r14d, eax
call dbg.CALLOC
mov rsi, qword [r13 + r14*8 + 0x38]
mov rbx, rax
test rsi, rsi
je 0x14003d4a3
lea rax, [rax + 8]
add rsi, 8
mov ecx, 0x14
mov rdi, rax
rep movsd dword [rdi], dword [rsi]
lea rax, str._allocated_
mov rcx, r12
mov qword [rbx], rax
call dbg.MALLOC
mov r9, r12
mov r8, rbp
mov rdx, r12
mov qword [rbx + 0x10], rax
mov rcx, rax
call dbg.base64_decode
mov qword [rbx + 0x18], rax
mov qword [r13 + r14*8 + 0x38], rbx
jmp 0x14003d1ef
xor r8d, r8d
jmp 0x14003d19a
lea rdx, [0x140070abf]
mov rcx, rbp
call dbg.name_equals
test eax, eax
jne 0x14003d6f9
lea rdx, str.http
mov rcx, rbp
call dbg.name_equals
test eax, eax
jne 0x14003d6a0
lea rdx, str.smbv1
mov rcx, rbp
call dbg.name_equals
test eax, eax
je 0x14003d3db
mov rcx, qword [0x1400735f0]
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp dbg.smb_set_hello_v1
mov rax, qword [0x1400738e0]
mov rcx, qword [rax]
call dbg.ssl_hello
mov rbx, qword [0x140073620]
mov rcx, rax
mov qword [rbx + 0x10], rax
call sym.ssl_hello_size
mov eax, eax
mov qword [rbx + 0x18], rax
mov rax, qword [rsi + 0x48]
or byte [rax + 0x30], 0x20
lea rax, [r13 + 0x38]
add r13, 0x80030
nop word cs:[rax + rax]
nop word cs:[rax + rax]
nop dword [rax + rax]
mov qword [rax], rbx
add rax, 0x18
mov qword [rax - 0x10], rbx
mov qword [rax - 8], rbx
cmp rax, r13
jne 0x14003d5a0
jmp 0x14003d1ef
mov rax, qword [0x1400738f0]
mov rcx, qword [rax]
call dbg.ssl_hello
mov r8d, 1
mov edx, 0x5600
mov rcx, rax
call dbg.ssl_add_cipherspec
mov rbx, qword [0x140073620]
mov rcx, rax
mov qword [rbx + 0x10], rax
call sym.ssl_hello_size
mov eax, eax
mov qword [rbx + 0x18], rax
mov rax, qword [rsi + 0x48]
or byte [rax + 0x30], 0x80
lea rax, [r13 + 0x38]
add r13, 0x80030
nop word cs:[rax + rax]
nop word cs:[rax + rax]
nop dword [rax]
mov qword [rax], rbx
add rax, 0x18
mov qword [rax - 0x10], rbx
mov qword [rax - 8], rbx
cmp rax, r13
jne 0x14003d620
jmp 0x14003d1ef
mov rax, qword [0x140073900]
mov rcx, qword [rax]
call dbg.ssl_hello
mov rbx, qword [0x140073620]
mov rcx, rax
mov qword [rbx + 0x10], rax
call sym.ssl_hello_size
mov eax, eax
mov qword [rbx + 0x18], rax
mov rax, qword [rsi + 0x48]
or byte [rax + 0x30], 0x40
lea rax, [r13 + 0x38]
add r13, 0x80030
nop word cs:[rax + rax]
nop
mov qword [rax], rbx
add rax, 0x18
mov qword [rax - 0x10], rbx
mov qword [rax - 8], rbx
cmp rax, r13
jne 0x14003d680
jmp 0x14003d1ef
xor eax, eax
jmp 0x14003d379
lea rdx, str.HELLO:_setting_HTTP_hello_message_n
mov ecx, 2
call dbg.LOG
mov rdx, qword [0x140073570]
lea rax, [r13 + 0x38]
add r13, 0x80030
nop word cs:[rax + rax]
nop word cs:[rax + rax]
nop dword [rax]
mov qword [rax], rdx
add rax, 0x18
mov qword [rax - 0x10], rdx
mov qword [rax - 8], rdx
cmp r13, rax
jne 0x14003d6e0
jmp 0x14003d1ef
lea rdx, str.HELLO:_setting_SSL_hello_message_n
mov ecx, 2
call dbg.LOG
mov rbx, qword [0x140073620]
lea rax, [r13 + 0x38]
add r13, 0x80030
nop dword [rax]
mov qword [rax], rbx
add rax, 0x18
mov qword [rax - 0x10], rbx
mov qword [rax - 8], rbx
cmp r13, rax
jne 0x14003d720
jmp 0x14003d1ef
mov rdx, rbx
lea rcx, str.tcpcon:_parameter:_expected_array___:__s_n
add rsp, 0x70
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp dbg.ERRMSG