Function at 0x14001155f
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Set http header

Disassembly:
jmp 0x14001efe0
push rbp
push rdi
sub rsp, 0x5b8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0xfe
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140029018]
xor rax, rbp
mov qword [rbp + 0x568], rax
lea rcx, [0x14002f0f8]
call fcn.1400117d5
lea rax, str.pastebin.com
mov qword [rbp + 8], rax
lea rax, str._api_api_post.php
mov qword [rbp + 0x28], rax
lea rcx, [rbp + 0x48]
call fcn.1400117c6
nop
lea rax, str.api_dev_keyszS7aFdE4TNr_a_j354WiV9bmD_ljaYpapi_paste_code123api_optionpasteapi_user_key299033eaad6f3d95a9bc36de59eaea89api_paste_private2
mov qword [rbp + 0x88], rax
lea rcx, [rbp + 0xa8]
call fcn.1400110b4
nop
lea rax, [rbp + 0x3a8]
mov qword [rbp + 0x3e8], rax
lea rdx, [rbp + 0xa8]
mov rcx, qword [rbp + 0x3e8]
call fcn.14001112c
mov qword [rbp + 0x558], rax
mov r8, qword [rbp + 0x558]
mov rdx, qword [rbp + 0x88]
lea rcx, [rbp + 0x408]
call fcn.140011208
mov qword [rbp + 0x560], rax
mov rdx, qword [rbp + 0x560]
lea rcx, [rbp + 0x48]
call fcn.14001122b
lea rcx, [rbp + 0x408]
call fcn.140011190
lea rcx, [rbp + 0x48]
call fcn.1400110cd
mov qword [rbp + 0xe8], rax
mov rcx, qword [rbp + 0xe8]
call fcn.14001136b
mov dword [rbp + 0x104], eax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.WinHTTP_1.1
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rbp + 0x128], rax
cmp qword [rbp + 0x128], 0
jne 0x14001f138
mov dword [rbp + 0x444], 1
lea rcx, [rbp + 0xa8]
call fcn.140011190
nop
lea rcx, [rbp + 0x48]
call fcn.140011190
mov eax, dword [rbp + 0x444]
jmp 0x14001f581
xor r9d, r9d
mov r8w, 0x1bb
mov rdx, qword [rbp + 8]
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov qword [rbp + 0x148], rax
cmp qword [rbp + 0x148], 0
jne 0x14001f19a
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [rbp + 0x464], 1
lea rcx, [rbp + 0xa8]
call fcn.140011190
nop
lea rcx, [rbp + 0x48]
call fcn.140011190
mov eax, dword [rbp + 0x464]
jmp 0x14001f581
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x28]
lea rdx, str.POST
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov qword [rbp + 0x168], rax
cmp qword [rbp + 0x168], 0
jne 0x14001f225
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [rbp + 0x484], 1
lea rcx, [rbp + 0xa8]
call fcn.140011190
nop
lea rcx, [rbp + 0x48]
call fcn.140011190
mov eax, dword [rbp + 0x484]
jmp 0x14001f581
lea rax, str.Content_Type:_application_x_www_form_urlencoded_r_n
mov qword [rbp + 0x188], rax
mov r9d, 0x20000000
mov r8d, 0xffffffff
mov rdx, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x14001f2a9
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [rbp + 0x4a4], 1
lea rcx, [rbp + 0xa8]
call fcn.140011190
nop
lea rcx, [rbp + 0x48]
call fcn.140011190
mov eax, dword [rbp + 0x4a4]
jmp 0x14001f581
mov qword [rsp + 0x30], 0
mov eax, dword [rbp + 0x104]
mov dword [rsp + 0x28], eax
mov eax, dword [rbp + 0x104]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp + 0xe8]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x14001f335
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [rbp + 0x4c4], 1
lea rcx, [rbp + 0xa8]
call fcn.140011190
nop
lea rcx, [rbp + 0x48]
call fcn.140011190
mov eax, dword [rbp + 0x4c4]
jmp 0x14001f581
xor edx, edx
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x14001f39a
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [rbp + 0x4e4], 1
lea rcx, [rbp + 0xa8]
call fcn.140011190
nop
lea rcx, [rbp + 0x48]
call fcn.140011190
mov eax, dword [rbp + 0x4e4]
jmp 0x14001f581
mov dword [rbp + 0x1a4], 0
mov dword [rbp + 0x1c4], 0
mov dword [rbp + 0x204], 0
mov dword [rbp + 0x1a4], 0
lea rdx, [rbp + 0x1a4]
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
jne 0x14001f402
lea rdx, str.WinHttpQueryDataAvailable_failed.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110fa
lea rdx, [0x140011055]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14001f534
mov eax, dword [rbp + 0x1a4]
inc eax
mov eax, eax
mov ecx, eax
call fcn.14001135c
mov qword [rbp + 0x508], rax
mov rax, qword [rbp + 0x508]
mov qword [rbp + 0x1e8], rax
cmp qword [rbp + 0x1e8], 0
jne 0x14001f464
lea rdx, str.Out_of_memory
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110fa
lea rdx, [0x140011055]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x1a4], 0
jmp 0x14001f527
mov eax, dword [rbp + 0x1a4]
inc eax
mov eax, eax
mov r8d, eax
xor edx, edx
mov rcx, qword [rbp + 0x1e8]
call fcn.1400115fa
lea r9, [rbp + 0x1c4]
mov r8d, dword [rbp + 0x1a4]
mov rdx, qword [rbp + 0x1e8]
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x14001f4ca
lea rdx, str.WinHttpReadData_failed.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400110fa
lea rdx, [0x140011055]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14001f4dd
mov rdx, qword [rbp + 0x1e8]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400110fa
mov rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x528], rax
mov rcx, qword [rbp + 0x528]
call fcn.1400113b6
cmp qword [rbp + 0x528], 0
jne 0x14001f50e
mov qword [rbp + 0x558], 0
jmp 0x14001f527
mov qword [rbp + 0x1e8], 0x8123
mov rax, qword [rbp + 0x1e8]
mov qword [rbp + 0x558], rax
cmp dword [rbp + 0x1a4], 0
ja 0x14001f3b8
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x148]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov dword [rbp + 0x544], 0
lea rcx, [rbp + 0xa8]
call fcn.140011190
nop
lea rcx, [rbp + 0x48]
call fcn.140011190
mov eax, dword [rbp + 0x544]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x1400241e0]
call fcn.140011690
mov rax, rdi
mov rcx, qword [rbp + 0x568]
xor rcx, rbp
call fcn.1400113ca
lea rsp, [rbp + 0x578]
pop rdi
pop rbp
ret