Function at 0x140003510
Capabilities:
Initialize winhttp library
Make an http request with a cookie
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], r8b
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x11f0]
mov eax, 0x12f0
call fcn.14003cf20
sub rsp, rax
movaps xmmword [rsp + 0x12e0], xmm6
mov r13, rcx
cmp qword [rcx + 0x20], 0
ja 0x140003562
mov dword [rcx + 0x160], 3
xor al, al
jmp 0x1400059d9
lea rcx, [rbp + 0x88]
call fcn.14000bd70
nop
lea rcx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 8
cmovae rcx, qword [rbp + 0x88]
lea rdx, [0x140079b30]
call fcn.140047b20
lea rcx, [rbp + 0x88]
test eax, eax
jne 0x1400035a6
lea rbx, [0x140079b30]
jmp 0x1400035d4
cmp qword [rbp + 0xa0], 8
cmovae rcx, qword [rbp + 0x88]
lea rbx, str.POST
mov rdx, rbx
call fcn.140047b20
test eax, eax
jne 0x140005982
lea rcx, [rbp + 0x88]
mov rdx, rbx
call fcn.14000bbe0
mov dil, 1
mov rcx, qword [r13]
xor r15d, r15d
test rcx, rcx
jne 0x140003626
lea rcx, [r13 + 0x188]
cmp qword [rcx + 0x18], 8
jb 0x1400035fc
mov rcx, qword [rcx]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rcx, rax
mov qword [r13], rax
test rax, rax
jne 0x140003626
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140005987
mov eax, dword [r13 + 0x21c]
mov dword [rsp + 0x20], eax
mov r9d, dword [r13 + 0x218]
mov r8d, dword [r13 + 0x214]
mov edx, dword [r13 + 0x210]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
mov word [rbp + 0x390], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x392]
call fcn.14003ec50
mov word [rbp + 0x7b0], r15w
xor edx, edx
mov r8d, 0xa26
lea rcx, [rbp + 0x7b2]
call fcn.14003ec50
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], rax
mov dword [rbp + 0x110], 0x68
lea rax, [rbp + 0x390]
mov qword [rbp + 0x128], rax
mov dword [rbp + 0x130], 0x104
lea rax, [rbp + 0x7b0]
mov qword [rbp + 0x158], rax
mov dword [rbp + 0x160], 0x514
mov eax, 1
mov dword [rbp + 0x120], eax
lea rbx, [r13 + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x140003710
mov rcx, qword [rbx]
lea r9, [rbp + 0x110]
xor r8d, r8d
mov edx, dword [r13 + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x140005993
lea rcx, [r13 + 0x30]
lea rdx, [rbp + 0x390]
call fcn.14000bbe0
xor r9d, r9d
movzx r8d, word [rbp + 0x134]
lea rdx, [rbp + 0x390]
mov rcx, qword [r13]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rsi, rax
mov qword [rbp + 0x100], rax
test rax, rax
je 0x140005993
mov ecx, r15d
mov eax, 0x800000
cmp dword [rbp + 0x124], 2
cmove ecx, eax
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 8
cmovae rdx, qword [rbp + 0x88]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8, qword [rbp + 0x158]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r12, rax
mov qword [rbp + 0xb0], rax
test rax, rax
je 0x140005977
cmp byte [r13 + 8], r15b
jne 0x1400037fb
cmp dword [rbp + 0x124], 2
jne 0x1400037fb
mov dword [rbp + 0x1240], 0x3100
mov r9d, 4
lea r8, [rbp + 0x1240]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
xor r14b, r14b
mov ecx, r15d
movsd xmm6, qword [0x14007a660]
mov rsi, 0xffffffffffffffff
mov eax, ecx
inc ecx
mov dword [rbp + 0xa8], ecx
cmp eax, 3
jae 0x140005959
mov r8, qword [r13 + 0x130]
test r8, r8
je 0x140003860
lea rdx, [r13 + 0x120]
cmp qword [rdx + 0x18], 8
jb 0x140003840
mov rdx, qword [rdx]
mov r9d, 0x1000000
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x140003860
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
cmp qword [r13 + 0x100], 0
jbe 0x140003916
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
mov r8d, 8
lea rdx, str.Cookie:
lea rcx, [rbp - 0x80]
call fcn.140010020
nop
lea rdx, [r13 + 0xf0]
lea rcx, [rbp - 0x80]
call fcn.14000d340
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
mov r9d, 0x1000000
mov r8d, dword [rbp - 0x70]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x1400038d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140003916
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003911
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a02
call fcn.14003c958
cmp qword [r13 + 0x150], 0
jbe 0x140003a23
mov qword [rsp + 0x48], 3
mov qword [rsp + 0x58], r15
mov word [rbp + 0x180], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x182]
call fcn.14003ec50
lea r8, [r13 + 0x140]
cmp qword [r8 + 0x18], 8
jb 0x14000395f
mov r8, qword [r8]
mov edx, 0x104
lea rcx, [rbp + 0x180]
call fcn.140048304
lea rax, [rbp + 0x180]
mov qword [rsp + 0x50], rax
mov r9d, 0x18
lea r8, [rsp + 0x48]
lea edx, [r9 + 0xe]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x1400039a5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
mov r9, qword [r13 + 0x1c0]
test r9, r9
je 0x140003a23
lea r8, [r13 + 0x1b0]
cmp qword [r8 + 0x18], 8
jb 0x1400039c2
mov r8, qword [r8]
add r9d, r9d
mov edx, 0x1002
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x1400039e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
mov r9, qword [r13 + 0x1e0]
test r9, r9
je 0x140003a23
lea r8, [r13 + 0x1d0]
cmp qword [r8 + 0x18], 8
jb 0x140003a01
mov r8, qword [r8]
add r9d, r9d
mov edx, 0x1003
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x140003a23
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
xor dil, dil
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x140003b6f
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x80]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x140005938
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140003cc6
mov dword [rbp - 0x60], 3
mov esi, 1
mov dword [rbp - 0x5c], esi
mov qword [rbp - 0x58], rax
mov dword [rbp - 0x44], esi
mov dword [rbp - 0x48], r15d
mov qword [rbp - 0x50], r15
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rax
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x140003ab2
mov rdx, qword [rbx]
lea r9, [rsp + 0x48]
lea r8, [rbp - 0x60]
mov rcx, qword [r13]
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x140003cb4
mov r9d, 0x18
lea r8, [rsp + 0x48]
lea edx, [r9 + 0xe]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x140003b12
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
movzx edi, dil
test eax, eax
cmovne edi, esi
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140003b22
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140003b32
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rsi, 0xffffffffffffffff
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x140003b48
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x140003b57
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x140003b66
call qword [sym.imp.KERNEL32.dll_GlobalFree]
test dil, dil
je 0x140005945
mov rdx, qword [r13 + 0x110]
test rdx, rdx
je 0x140003baa
mov dword [rbp + 0x1240], r15d
lea r9, [rbp + 0x1240]
mov r8d, dword [r13 + 0x118]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
jne 0x140003baa
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x140005938
mov dword [rbp + 0x1248], r15d
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x1248]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x16]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x140003bfb
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x1400049fc
mov ecx, dword [rbp + 0x1248]
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.14003cbec
mov r14, rax
mov qword [rbp + 0xd0], rax
mov r8d, dword [rbp + 0x1248]
add r8, r8
xor edx, edx
mov rcx, rax
call fcn.14003ec50
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x1248]
mov qword [rsp + 0x20], rax
mov r9, r14
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x1400049f4
lea rsi, [r13 + 0x50]
mov qword [rbp - 0x40], rsi
mov rdx, 0xffffffffffffffff
nop
inc rdx
cmp word [r14 + rdx*2], 0
jne 0x140003c70
mov rax, qword [rsi + 0x18]
cmp rdx, rax
ja 0x140003d9d
mov rdi, rsi
cmp rax, 8
jb 0x140003c94
mov rdi, qword [rsi]
mov qword [rsi + 0x10], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call fcn.14003e5b0
mov word [rdi + rbx], r15w
jmp 0x140003da8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
jmp 0x140003b32
mov rbx, qword [rbp - 0x70]
test rbx, rbx
je 0x140003b57
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rax
mov dword [rsp + 0x48], 3
mov word [rbp + 0x180], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x182]
call fcn.14003ec50
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x180]
call fcn.140048304
lea rax, [rbp + 0x180]
mov qword [rsp + 0x50], rax
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x140003d6b
mov word [rbp + 0x5a0], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x5a2]
call fcn.14003ec50
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x5a0]
call fcn.140048304
lea rax, [rbp + 0x5a0]
mov qword [rsp + 0x58], rax
mov r9d, 0x18
lea r8, [rsp + 0x48]
lea edx, [r9 + 0xe]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x140003b39
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
jmp 0x140003b39
mov r9, r14
mov rcx, rsi
call fcn.140010550
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov qword [rsp + 0x78], r15
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
xor r8d, r8d
lea rdx, [0x1400799f0]
lea rcx, [rbp - 0x80]
call fcn.140010020
nop
cmp byte [r13 + 0x1a8], 0
jne 0x140003e39
lea rdx, str.charset_A_Za_z0_9___
lea rcx, [rbp - 0x80]
call fcn.14000bbe0
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, rsi
lea rcx, [rbp - 0x80]
call fcn.140002640
mov r15, qword [rsp + 0x70]
mov r14, qword [rsp + 0x68]
mov qword [rsp + 0x40], r14
test al, al
je 0x140003e48
mov rax, r15
sub rax, r14
sar rax, 5
test rax, rax
je 0x140003e48
lea rcx, [r13 + 0x90]
mov rdx, r14
call fcn.14000bc80
jmp 0x140003e48
mov r14, qword [rsp + 0x68]
mov qword [rsp + 0x40], r14
mov r15, qword [rsp + 0x70]
lea rdx, str.Content_Length:__0_9_
lea rcx, [rbp - 0x80]
call fcn.14000bbe0
xor r13d, r13d
cmp r14, r15
je 0x140003ec8
lea rbx, [r14 + 0x18]
mov rdx, qword [rbx]
cmp rdx, 8
jb 0x140003ea3
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140003e9e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a08
mov rcx, r8
call fcn.14003c958
mov qword [rbx - 8], r13
mov qword [rbx], 7
mov word [rbx - 0x18], r13w
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, r15
jne 0x140003e64
mov r15, r14
mov qword [rsp + 0x70], r14
cmp qword [rbp - 0x70], 0
jbe 0x140004351
mov r12d, 1
cmp qword [rsi + 0x10], 0
jbe 0x140004357
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], r13
mov dword [rbp + 0x50], r13d
mov qword [rbp + 0x58], 0
mov dword [rbp + 0x60], r12d
mov dword [rbp + 0x30], r13d
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x30]
call fcn.14000b7f0
test eax, eax
je 0x140003f36
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140004357
call fcn.1400496e8
jmp 0x140004357
mov rcx, qword [rsi + 0x10]
inc rcx
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14003cbec
mov rbx, rax
mov qword [rbp + 0x28], rax
mov rdx, qword [rsi + 0x10]
lea rax, [rax + rdx*2]
mov qword [rbp + 0x20], rax
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x140003f78
mov r8, qword [rsi]
inc rdx
mov rcx, rbx
call fcn.140048304
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
mov qword [rbp], r13
mov qword [rbp + 8], r13
mov dword [rbp + 0x10], r13d
mov dword [rbp - 0x30], r13d
mov qword [rbp + 0x18], r13
mov edx, 8
mov ecx, pe_nt_image_headers64
call fcn.140042dd8
mov qword [rbp - 8], rax
test rax, rax
je 0x140003fd0
mov qword [rbp + 8], pe_nt_image_headers64
call fcn.14000a7e0
mov qword [rbp], pe_nt_image_headers64
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], r13
mov qword [rbp + 0xb8], r13
jmp 0x140003fe4
xor r13d, r13d
lea r9, [rbp + 0xb8]
lea r8, [rbp - 0x30]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14000adc0
test eax, eax
je 0x1400042d9
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov r12, r13
mov qword [rsp + 0x58], r13
mov esi, r13d
mov rbx, r13
mov rdi, qword [rsp + 0x50]
nop
cmp esi, dword [rbp - 0x30]
jae 0x140005a1a
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax + rbx]
mov r8, qword [rax + rbx + 8]
test rdx, rdx
je 0x1400040ee
test r8, r8
je 0x1400040ee
sub r8, rdx
sar r8, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
call fcn.140010020
nop
cmp rdi, r12
je 0x140004083
lea rdx, [rbp - 0x60]
mov rcx, rdi
call fcn.14000bd70
add rdi, 0x20
mov qword [rsp + 0x50], rdi
jmp 0x14000409e
lea r8, [rbp - 0x60]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140011c70
mov r12, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400040de
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400040d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a0e
call fcn.14003c958
inc esi
add rbx, 0x10
cmp rbx, 0x10
jl 0x140004020
mov rbx, r14
mov r13, qword [rsp + 0x48]
mov qword [rbp + 0x80], r13
cmp r14, r15
je 0x140004175
mov r15b, 1
cmp r13, rdi
je 0x1400041c7
lea r14, [r13 + 0x18]
mov rsi, r13
sub rsi, rbx
xor r13d, r13d
nop dword [rax + rax]
lea rdx, [rbx + rsi]
cmp qword [r14], 8
jb 0x14000412d
mov rdx, qword [rdx]
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14000413a
mov rcx, qword [rbx]
call fcn.140047b20
movzx r15d, r15b
test eax, eax
cmovne r15d, r13d
add r14, 0x20
add rbx, 0x20
lea rax, [rbx + rsi]
cmp rax, rdi
jne 0x140004120
mov r13, qword [rbp + 0x80]
test r15b, r15b
jne 0x1400041c7
mov r15, qword [rsp + 0x70]
cmp rbx, r15
jne 0x140004102
mov r14, qword [rsp + 0x40]
mov rbx, r13
cmp r13, rdi
je 0x1400041cc
nop dword [rax]
cmp r15, qword [rsp + 0x78]
je 0x14000419d
mov rdx, rbx
mov rcx, r15
call fcn.14000bd70
add r15, 0x20
mov qword [rsp + 0x70], r15
jmp 0x1400041b2
mov r8, rbx
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.140011c70
mov r15, qword [rsp + 0x70]
add rbx, 0x20
cmp rbx, rdi
jne 0x140004180
mov r14, qword [rsp + 0x68]
mov qword [rsp + 0x40], r14
jmp 0x1400041cc
mov r14, qword [rsp + 0x40]
mov rbx, qword [rbp + 0xb8]
cmp rbx, qword [rbp + 0x20]
jae 0x140004233
test r13, r13
mov r15, qword [rsp + 0x70]
je 0x140003fe1
mov rdx, rdi
mov rcx, r13
call fcn.14000ff90
sub r12, r13
and r12, 0xffffffffffffffe0
mov rax, r13
cmp r12, 0x1000
jb 0x14000421e
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a14
mov rdx, r12
mov rcx, r13
call fcn.14003c958
mov r15, qword [rsp + 0x70]
jmp 0x140003fe1
test r13, r13
je 0x1400042d9
cmp r13, rdi
je 0x1400042a2
lea rbx, [r13 + 0x18]
mov rdx, qword [rbx]
cmp rdx, 8
jb 0x140004284
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000427f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a14
mov rcx, r8
call fcn.14003c958
xor eax, eax
mov qword [rbx - 8], rax
mov qword [rbx], 7
mov word [rbx - 0x18], ax
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, rdi
jne 0x140004245
sub r12, r13
and r12, 0xffffffffffffffe0
mov rax, r13
cmp r12, 0x1000
jb 0x1400042ce
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a14
mov rdx, r12
mov rcx, r13
call fcn.14003c958
mov rcx, qword [rbp + 0x28]
call fcn.14003c958
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x1400042f1
call fcn.1400496e8
mov rcx, qword [rbp - 0x10]
call fcn.14003c958
xor r13d, r13d
mov qword [rbp - 0x10], r13
mov rcx, qword [rbp - 0x18]
call fcn.14003c958
mov qword [rbp - 0x18], r13
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x14000431c
call fcn.1400496e8
mov r15, qword [rsp + 0x70]
mov rax, r15
sub rax, r14
sar rax, 5
test rax, rax
je 0x14000434d
mov rcx, r14
call fcn.14000bbb0
mov rcx, rax
call fcn.140048248
mov rcx, qword [rbp + 0x1230]
mov dword [rcx + 0xc8], eax
mov rsi, qword [rbp - 0x40]
mov r12d, 1
lea rdx, str.Location:__0_9_
lea rcx, [rbp - 0x80]
call fcn.14000bbe0
cmp r14, r15
je 0x1400043d4
lea rbx, [r14 + 0x18]
mov rdx, qword [rbx]
cmp rdx, 8
jb 0x1400043af
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400043aa
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a25
mov rcx, r8
call fcn.14003c958
mov qword [rbx - 8], r13
mov qword [rbx], 7
mov word [rbx - 0x18], r13w
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, r15
jne 0x140004370
mov r15, r14
mov qword [rsp + 0x70], r14
cmp qword [rbp - 0x70], 0
jbe 0x14000485d
cmp qword [rsi + 0x10], 0
jbe 0x14000485d
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], r13
mov dword [rbp + 0x50], r13d
mov qword [rbp + 0x58], 0
mov dword [rbp + 0x60], r12d
mov dword [rbp + 0x30], r13d
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x30]
call fcn.14000b7f0
test eax, eax
je 0x14000443c
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x14000485d
call fcn.1400496e8
jmp 0x14000485d
mov rcx, qword [rsi + 0x10]
inc rcx
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14003cbec
mov rbx, rax
mov qword [rbp + 0x80], rax
mov rdx, qword [rsi + 0x10]
lea rax, [rax + rdx*2]
mov qword [rbp + 0x20], rax
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x140004481
mov r8, qword [rsi]
inc rdx
mov rcx, rbx
call fcn.140048304
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
mov qword [rbp], r13
mov qword [rbp + 8], r13
mov dword [rbp + 0x10], r13d
mov dword [rbp - 0x30], r13d
mov qword [rbp + 0x18], r13
mov edx, 8
mov ecx, pe_nt_image_headers64
call fcn.140042dd8
mov qword [rbp - 8], rax
test rax, rax
je 0x1400044d9
mov qword [rbp + 8], pe_nt_image_headers64
call fcn.14000a7e0
mov qword [rbp], pe_nt_image_headers64
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], r13
mov qword [rbp + 0xc0], r13
jmp 0x1400044f3
xor r13d, r13d
lea r9, [rbp + 0xc0]
lea r8, [rbp - 0x30]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14000adc0
test eax, eax
je 0x1400047e9
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov r12, r13
mov qword [rsp + 0x58], r13
mov esi, r13d
mov rbx, r13
mov rdi, qword [rsp + 0x50]
nop
cmp esi, dword [rbp - 0x30]
jae 0x140005a37
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax + rbx]
mov r8, qword [rax + rbx + 8]
test rdx, rdx
je 0x1400045fe
test r8, r8
je 0x1400045fe
sub r8, rdx
sar r8, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
call fcn.140010020
nop
cmp rdi, r12
je 0x140004593
lea rdx, [rbp - 0x60]
mov rcx, rdi
call fcn.14000bd70
add rdi, 0x20
mov qword [rsp + 0x50], rdi
jmp 0x1400045ae
lea r8, [rbp - 0x60]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140011c70
mov r12, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x1400045ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a2b
call fcn.14003c958
inc esi
add rbx, 0x10
cmp rbx, 0x10
jl 0x140004530
mov rbx, r14
mov r13, qword [rsp + 0x48]
mov qword [rbp + 0x28], r13
cmp r14, r15
je 0x140004682
nop
mov r15b, 1
cmp r13, rdi
je 0x1400046d7
lea r14, [r13 + 0x18]
mov rsi, r13
sub rsi, rbx
xor r13d, r13d
nop dword [rax]
lea rdx, [rbx + rsi]
cmp qword [r14], 8
jb 0x14000463d
mov rdx, qword [rdx]
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14000464a
mov rcx, qword [rbx]
call fcn.140047b20
movzx r15d, r15b
test eax, eax
cmovne r15d, r13d
add r14, 0x20
add rbx, 0x20
lea rax, [rbx + rsi]
cmp rax, rdi
jne 0x140004630
mov r13, qword [rbp + 0x28]
test r15b, r15b
jne 0x1400046d7
mov r15, qword [rsp + 0x70]
cmp rbx, r15
jne 0x140004610
mov r14, qword [rsp + 0x40]
mov rbx, r13
cmp r13, rdi
je 0x1400046dc
nop word [rax + rax]
cmp r15, qword [rsp + 0x78]
je 0x1400046ad
mov rdx, rbx
mov rcx, r15
call fcn.14000bd70
add r15, 0x20
mov qword [rsp + 0x70], r15
jmp 0x1400046c2
mov r8, rbx
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.140011c70
mov r15, qword [rsp + 0x70]
add rbx, 0x20
cmp rbx, rdi
jne 0x140004690
mov r14, qword [rsp + 0x68]
mov qword [rsp + 0x40], r14
jmp 0x1400046dc
mov r14, qword [rsp + 0x40]
mov rbx, qword [rbp + 0xc0]
cmp rbx, qword [rbp + 0x20]
jae 0x140004743
test r13, r13
mov r15, qword [rsp + 0x70]
je 0x1400044f0
mov rdx, rdi
mov rcx, r13
call fcn.14000ff90
sub r12, r13
and r12, 0xffffffffffffffe0
mov rax, r13
cmp r12, 0x1000
jb 0x14000472e
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a31
mov rdx, r12
mov rcx, r13
call fcn.14003c958
mov r15, qword [rsp + 0x70]
jmp 0x1400044f0
test r13, r13
je 0x1400047e9
cmp r13, rdi
je 0x1400047b2
lea rbx, [r13 + 0x18]
mov rdx, qword [rbx]
cmp rdx, 8
jb 0x140004794
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000478f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a31
mov rcx, r8
call fcn.14003c958
xor eax, eax
mov qword [rbx - 8], rax
mov qword [rbx], 7
mov word [rbx - 0x18], ax
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, rdi
jne 0x140004755
sub r12, r13
and r12, 0xffffffffffffffe0
mov rax, r13
cmp r12, 0x1000
jb 0x1400047de
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a31
mov rdx, r12
mov rcx, r13
call fcn.14003c958
mov rcx, qword [rbp + 0x80]
call fcn.14003c958
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140004804
call fcn.1400496e8
mov rcx, qword [rbp - 0x10]
call fcn.14003c958
xor r13d, r13d
mov qword [rbp - 0x10], r13
mov rcx, qword [rbp - 0x18]
call fcn.14003c958
mov qword [rbp - 0x18], r13
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x14000482f
call fcn.1400496e8
mov r15, qword [rsp + 0x70]
mov rax, r15
sub rax, r14
sar rax, 5
test rax, rax
je 0x140004859
mov rcx, qword [rbp + 0x1230]
add rcx, 0x1f0
mov rdx, r14
call fcn.14000bc80
mov rsi, qword [rbp - 0x40]
lea rdx, str.Set_Cookie:_b.__n
lea rcx, [rbp - 0x80]
call fcn.14000bbe0
cmp r14, r15
je 0x1400048da
lea rbx, [r14 + 0x18]
mov rdx, qword [rbx]
cmp rdx, 8
jb 0x1400048b5
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400048b0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a42
mov rcx, r8
call fcn.14003c958
mov qword [rbx - 8], r13
mov qword [rbx], 7
mov word [rbx - 0x18], r13w
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, r15
jne 0x140004876
mov r15, r14
mov qword [rsp + 0x70], r14
cmp qword [rbp - 0x70], 0
jbe 0x140004938
cmp qword [rsi + 0x10], 0
jbe 0x140004938
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x48], r13
mov dword [rbp + 0x50], r13d
mov qword [rbp + 0x58], 0
mov dword [rbp + 0x60], 1
mov dword [rbp + 0x30], r13d
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 8
cmovae rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x30]
call fcn.14000b7f0
test eax, eax
je 0x140004bec
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140004938
call fcn.1400496e8
xor r12d, r12d
mov r13, qword [rbp + 0x1230]
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x140004982
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000497d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a6b
call fcn.14003c958
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r12w
test r14, r14
je 0x1400049dc
mov rdx, r15
mov rcx, r14
call fcn.14000ff90
mov rdx, qword [rsp + 0x78]
sub rdx, r14
and rdx, 0xffffffffffffffe0
mov rax, r14
cmp rdx, 0x1000
jb 0x1400049d4
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a71
mov rcx, r14
call fcn.14003c958
mov rsi, 0xffffffffffffffff
xor r15d, r15d
mov r12, qword [rbp + 0xb0]
mov r14, qword [rbp + 0xd0]
mov rcx, r14
call fcn.14003c958
mov dword [rbp + 0x1248], r15d
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x1248]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x13]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x140004a36
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140004aa6
mov ecx, dword [rbp + 0x1248]
mov eax, 2
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.14003cbec
mov rbx, rax
mov r8d, dword [rbp + 0x1248]
add r8, r8
xor edx, edx
mov rcx, rax
call fcn.14003ec50
mov qword [rsp + 0x28], r15
lea rax, [rbp + 0x1248]
mov qword [rsp + 0x20], rax
mov r9, rbx
xor r8d, r8d
lea edx, [r8 + 0x13]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x140004a9e
lea rcx, [r13 + 0x168]
mov rdx, rbx
call fcn.14000bbe0
mov rcx, rbx
call fcn.14003c958
xor ebx, ebx
mov r15d, 0x2800
mov esi, ebx
mov rcx, qword [r13 + 0xb0]
test rcx, rcx
je 0x140004ac8
call fcn.14003c958
mov qword [r13 + 0xb0], rbx
mov rcx, r15
call fcn.14003cbec
mov qword [r13 + 0xb0], rax
xor edx, edx
mov r8, r15
mov rcx, rax
call fcn.14003ec50
nop dword [rax]
nop dword [rax + rax]
mov dword [rbp + 0x1248], ebx
lea rdx, [rbp + 0x1248]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x1400051e0
mov rdx, qword [r13 + 0xc0]
test rdx, rdx
je 0x140004b41
mov ecx, dword [r13 + 0xc8]
test ecx, ecx
je 0x140004b41
mov eax, esi
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov ecx, dword [rbp + 0x1248]
inc ecx
call fcn.14003cbec
mov r14, rax
mov r8d, dword [rbp + 0x1248]
inc r8d
xor edx, edx
mov rcx, rax
call fcn.14003ec50
mov dword [rbp + 0x1240], ebx
lea r9, [rbp + 0x1240]
mov r8d, dword [rbp + 0x1248]
mov rdx, r14
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x1400051d6
mov ecx, dword [rbp + 0x1240]
lea eax, [rcx + rsi]
cmp eax, r15d
jbe 0x1400051b7
mov rdi, qword [r13 + 0xb0]
add r15d, r15d
mov ecx, r15d
call fcn.14003cbec
mov qword [r13 + 0xb0], rax
mov r8d, r15d
xor edx, edx
mov rcx, rax
call fcn.14003ec50
mov ebx, esi
mov r8d, esi
mov rdx, rdi
mov rcx, qword [r13 + 0xb0]
call fcn.14003e5b0
mov rcx, rdi
call fcn.14003c958
mov ecx, dword [rbp + 0x1240]
jmp 0x1400051b9
mov rcx, qword [rsi + 0x10]
inc rcx
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14003cbec
mov rbx, rax
mov qword [rbp + 0x80], rax
mov rdx, qword [rsi + 0x10]
lea rax, [rax + rdx*2]
mov qword [rbp + 0x20], rax
cmp qword [rsi + 0x18], 8
jb 0x140004c2e
mov rsi, qword [rsi]
inc rdx
mov r8, rsi
mov rcx, rbx
call fcn.140048304
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r13
mov qword [rbp], r13
mov qword [rbp + 8], r13
mov dword [rbp + 0x10], r13d
mov dword [rbp - 0x30], r13d
mov qword [rbp + 0x18], r13
mov edx, 8
mov ecx, pe_nt_image_headers64
call fcn.140042dd8
mov qword [rbp - 8], rax
test rax, rax
je 0x140004c89
mov qword [rbp + 8], pe_nt_image_headers64
call fcn.14000a7e0
mov qword [rbp], pe_nt_image_headers64
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x20], r13
mov qword [rbp + 0xc8], r13
jmp 0x140004ca3
xor r13d, r13d
lea r9, [rbp + 0xc8]
lea r8, [rbp - 0x30]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14000adc0
test eax, eax
je 0x140004f99
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov r12, r13
mov qword [rsp + 0x58], r13
mov esi, r13d
mov rbx, r13
mov rdi, qword [rsp + 0x50]
nop
cmp esi, dword [rbp - 0x30]
jae 0x140005a54
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax + rbx]
mov r8, qword [rax + rbx + 8]
test rdx, rdx
je 0x140004dae
test r8, r8
je 0x140004dae
sub r8, rdx
sar r8, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
call fcn.140010020
nop
cmp rdi, r12
je 0x140004d43
lea rdx, [rbp - 0x60]
mov rcx, rdi
call fcn.14000bd70
add rdi, 0x20
mov qword [rsp + 0x50], rdi
jmp 0x140004d5e
lea r8, [rbp - 0x60]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140011c70
mov r12, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x50]
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140004d9e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a48
call fcn.14003c958
inc esi
add rbx, 0x10
cmp rbx, 0x10
jl 0x140004ce0
mov rbx, r14
mov r13, qword [rsp + 0x48]
mov qword [rbp + 0x28], r13
cmp r14, r15
je 0x140004e32
nop
mov r15b, 1
cmp r13, rdi
je 0x140004e87
lea r14, [r13 + 0x18]
mov rsi, r13
sub rsi, rbx
xor r13d, r13d
nop dword [rax]
lea rdx, [rsi + rbx]
cmp qword [r14], 8
jb 0x140004ded
mov rdx, qword [rdx]
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x140004dfa
mov rcx, qword [rbx]
call fcn.140047b20
movzx r15d, r15b
test eax, eax
cmovne r15d, r13d
add r14, 0x20
add rbx, 0x20
lea rax, [rsi + rbx]
cmp rax, rdi
jne 0x140004de0
mov r13, qword [rbp + 0x28]
test r15b, r15b
jne 0x140004e87
mov r15, qword [rsp + 0x70]
cmp rbx, r15
jne 0x140004dc0
mov r14, qword [rsp + 0x40]
mov rbx, r13
cmp r13, rdi
je 0x140004e8c
nop word [rax + rax]
cmp r15, qword [rsp + 0x78]
je 0x140004e5d
mov rdx, rbx
mov rcx, r15
call fcn.14000bd70
add r15, 0x20
mov qword [rsp + 0x70], r15
jmp 0x140004e72
mov r8, rbx
mov rdx, r15
lea rcx, [rsp + 0x68]
call fcn.140011c70
mov r15, qword [rsp + 0x70]
add rbx, 0x20
cmp rbx, rdi
jne 0x140004e40
mov r14, qword [rsp + 0x68]
mov qword [rsp + 0x40], r14
jmp 0x140004e8c
mov r14, qword [rsp + 0x40]
mov rbx, qword [rbp + 0xc8]
cmp rbx, qword [rbp + 0x20]
jae 0x140004ef3
test r13, r13
mov r15, qword [rsp + 0x70]
je 0x140004ca0
mov rdx, rdi
mov rcx, r13
call fcn.14000ff90
sub r12, r13
and r12, 0xffffffffffffffe0
mov rax, r13
cmp r12, 0x1000
jb 0x140004ede
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a4e
mov rdx, r12
mov rcx, r13
call fcn.14003c958
mov r15, qword [rsp + 0x70]
jmp 0x140004ca0
test r13, r13
je 0x140004f99
cmp r13, rdi
je 0x140004f62
lea rbx, [r13 + 0x18]
mov rdx, qword [rbx]
cmp rdx, 8
jb 0x140004f44
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140004f3f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a4e
mov rcx, r8
call fcn.14003c958
xor eax, eax
mov qword [rbx - 8], rax
mov qword [rbx], 7
mov word [rbx - 0x18], ax
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, rdi
jne 0x140004f05
sub r12, r13
and r12, 0xffffffffffffffe0
mov rax, r13
cmp r12, 0x1000
jb 0x140004f8e
add r12, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a4e
mov rdx, r12
mov rcx, r13
call fcn.14003c958
mov rcx, qword [rbp + 0x80]
call fcn.14003c958
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x140004fb4
call fcn.1400496e8
mov rcx, qword [rbp - 0x10]
call fcn.14003c958
xor r12d, r12d
mov qword [rbp - 0x10], r12
mov rcx, qword [rbp - 0x18]
call fcn.14003c958
mov qword [rbp - 0x18], r12
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140004fdf
call fcn.1400496e8
mov r15, qword [rsp + 0x70]
mov rsi, r15
sub rsi, r14
sar rsi, 5
test rsi, rsi
je 0x14000493b
mov rbx, r12
mov r13, qword [rbp + 0x1230]
lea rdi, [r13 + 0xd0]
nop dword [rax + rax]
mov rdx, r14
mov rcx, rdi
call fcn.14000d340
lea rax, [rsi - 1]
cmp rbx, rax
je 0x140005033
lea rdx, [0x140079c24]
mov rcx, rdi
call fcn.14000bc60
inc rbx
add r14, 0x20
cmp rbx, rsi
jb 0x140005010
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r12
mov r8d, 1
lea rdx, [0x140079b04]
lea rcx, [rbp - 0x60]
call fcn.140010020
nop
lea r8, [rbp - 0x60]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140002b30
mov rbx, rax
cmp rdi, rax
je 0x1400050eb
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x1400050bd
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400050b8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a5f
mov rcx, r8
call fcn.14003c958
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 7
mov word [rdi], r12w
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 7
mov word [rbx], r12w
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14000512d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005128
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a5f
call fcn.14003c958
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], r12w
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140005181
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000517c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a65
call fcn.14003c958
mov rdx, qword [r13 + 0xe0]
test rdx, rdx
je 0x1400051ad
dec rdx
mov rcx, rdi
call fcn.14000bbc0
cmp word [rax], 0x3b
je 0x1400051ad
lea rdx, [0x140079c2c]
mov rcx, rdi
call fcn.14000bc60
mov r14, qword [rsp + 0x40]
jmp 0x140004942
mov ebx, esi
mov r8d, ecx
mov rcx, qword [r13 + 0xb0]
add rcx, rbx
mov rdx, r14
call fcn.14003e5b0
add esi, dword [rbp + 0x1240]
xor ebx, ebx
mov rcx, r14
call fcn.14003c958
jmp 0x1400051ed
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
mov ecx, 0xc0
mov rax, r13
cmp dword [rbp + 0x1248], 0
ja 0x140004af0
mov rdx, qword [rcx + rax]
test rdx, rdx
je 0x140005232
mov ecx, dword [r13 + 0xc8]
test ecx, ecx
je 0x140005232
mov eax, esi
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov dword [r13 + 0xb8], esi
lea rcx, [r13 + 0x90]
cmp qword [rcx + 0x18], 8
jb 0x14000524a
mov rcx, qword [rcx]
mov r8d, 5
lea rdx, [0x140079c30]
call fcn.1400498c0
mov r15d, ebx
test eax, eax
setne r15b
mov r14d, 0xfde9
test eax, eax
cmovne r14d, ebx
mov r9d, dword [r13 + 0xb8]
inc r9d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r8, qword [r13 + 0xb0]
mov edx, r15d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test eax, eax
jg 0x1400052d2
mov r14d, ebx
mov edi, 1
mov r15d, edi
mov r9d, dword [r13 + 0xb8]
inc r9d
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r8, qword [r13 + 0xb0]
mov edx, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
test eax, eax
jle 0x140005343
mov ebx, esi
mov eax, 2
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14003cbec
mov rdi, rax
lea r8, [rbx + rbx]
xor edx, edx
mov rcx, rax
call fcn.14003ec50
mov r9d, dword [r13 + 0xb8]
inc r9d
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
mov r8, qword [r13 + 0xb0]
mov edx, r15d
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x140005336
lea rcx, [r13 + 0x70]
mov rdx, rdi
call fcn.14000bbe0
mov rcx, rdi
call fcn.14003c958
mov edi, 1
mov r14b, 1
mov byte [rbp + 0x1240], r14b
lea rcx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 8
cmovae rcx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x98]
cmp r8, 3
jne 0x140005963
lea rdx, [0x140079b30]
test r8, r8
je 0x14000539b
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140005963
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x140005381
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xor r15d, r15d
mov qword [rbp + 0xf0], r15
mov qword [rbp + 0xf8], r15
lea r8d, [r15 + 8]
lea rdx, str._html_
lea rcx, [rbp + 0xe0]
call fcn.140010020
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r15
cmp qword [rbp + 0xf0], r15
jbe 0x140005439
cmp qword [r13 + 0x80], r15
jbe 0x140005439
mov qword [rbp + 0x38], r15
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], r15
mov dword [rbp + 0x50], r15d
mov qword [rbp + 0x58], r15
mov dword [rbp + 0x60], edi
mov dword [rbp + 0x30], r15d
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 8
cmovae rdx, qword [rbp + 0xe0]
lea rcx, [rbp + 0x30]
call fcn.14000b7f0
test eax, eax
je 0x140005442
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140005439
call fcn.1400496e8
mov r12, qword [rbp + 0x70]
jmp 0x14000588e
mov rcx, qword [r13 + 0x80]
inc rcx
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14003cbec
mov rbx, rax
mov qword [rbp + 0x20], rax
mov rdx, qword [r13 + 0x80]
lea rax, [rax + rdx*2]
mov qword [rbp + 0x28], rax
lea r8, [r13 + 0x70]
cmp qword [r13 + 0x88], 8
jb 0x14000548f
mov r8, qword [r13 + 0x70]
inc rdx
mov rcx, rbx
call fcn.140048304
mov qword [rbp - 0x18], r15
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r15
mov qword [rbp], r15
mov qword [rbp + 8], r15
mov dword [rbp + 0x10], r15d
mov dword [rbp - 0x30], r15d
mov qword [rbp + 0x18], r15
mov edx, 8
mov ecx, pe_nt_image_headers64
call fcn.140042dd8
mov qword [rbp - 8], rax
test rax, rax
je 0x1400054e7
mov qword [rbp + 8], pe_nt_image_headers64
call fcn.14000a7e0
mov qword [rbp], pe_nt_image_headers64
mov qword [rbp - 0x28], r15
mov qword [rbp - 0x20], r15
mov qword [rbp + 0xd8], r15
mov r12, qword [rbp + 0x70]
nop word [rax + rax]
lea r9, [rbp + 0xd8]
lea r8, [rbp - 0x30]
mov rdx, rbx
lea rcx, [rbp + 0x30]
call fcn.14000adc0
test eax, eax
je 0x1400057d4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov r14, r15
mov qword [rbp - 0x40], r15
mov qword [rsp + 0x58], r15
mov esi, r15d
mov rbx, r15
mov rdi, qword [rsp + 0x50]
nop
cmp esi, dword [rbp - 0x30]
jae 0x140005a83
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax + rbx]
mov r8, qword [rax + rbx + 8]
test rdx, rdx
je 0x140005612
test r8, r8
je 0x140005612
sub r8, rdx
sar r8, 1
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], r15
lea rcx, [rbp - 0x60]
call fcn.140010020
nop
cmp rdi, r14
je 0x1400055a3
lea rdx, [rbp - 0x60]
mov rcx, rdi
call fcn.14000bd70
add rdi, 0x20
mov qword [rsp + 0x50], rdi
jmp 0x1400055c2
lea r8, [rbp - 0x60]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.140011c70
mov r14, qword [rsp + 0x58]
mov qword [rbp - 0x40], r14
mov rdi, qword [rsp + 0x50]
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140005602
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a77
call fcn.14003c958
inc esi
add rbx, 0x10
cmp rbx, 0x10
jl 0x140005540
mov rbx, qword [rbp + 0x68]
mov r13, qword [rsp + 0x48]
cmp rbx, r12
je 0x140005688
mov r15b, 1
cmp r13, rdi
je 0x1400056c7
lea r14, [r13 + 0x18]
mov rsi, r13
sub rsi, rbx
xor r12d, r12d
nop dword [rax]
lea rdx, [rbx + rsi]
cmp qword [r14], 8
jb 0x14000564d
mov rdx, qword [rdx]
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14000565a
mov rcx, qword [rbx]
call fcn.140047b20
movzx r15d, r15b
test eax, eax
cmovne r15d, r12d
add r14, 0x20
add rbx, 0x20
lea rax, [rbx + rsi]
cmp rax, rdi
jne 0x140005640
mov r12, qword [rbp + 0x70]
test r15b, r15b
jne 0x1400056c7
cmp rbx, r12
jne 0x140005620
mov rbx, r13
cmp r13, rdi
je 0x1400056c7
cmp r12, qword [rbp + 0x78]
je 0x1400056ab
mov rdx, rbx
mov rcx, r12
call fcn.14000bd70
add r12, 0x20
mov qword [rbp + 0x70], r12
jmp 0x1400056be
mov r8, rbx
mov rdx, r12
lea rcx, [rbp + 0x68]
call fcn.140011c70
mov r12, qword [rbp + 0x70]
add rbx, 0x20
cmp rbx, rdi
jne 0x140005690
mov rbx, qword [rbp + 0xd8]
cmp rbx, qword [rbp + 0x28]
jae 0x14000572b
test r13, r13
mov r15d, 0
je 0x140005500
mov rdx, rdi
mov rcx, r13
call fcn.14000ff90
mov rdx, qword [rbp - 0x40]
sub rdx, r13
and rdx, 0xffffffffffffffe0
mov rax, r13
cmp rdx, 0x1000
jb 0x14000571e
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a7d
mov rcx, r13
call fcn.14003c958
jmp 0x140005500
xor r15d, r15d
test r13, r13
je 0x1400057d4
cmp r13, rdi
je 0x14000579c
lea rbx, [r13 + 0x18]
mov rdx, qword [rbx]
cmp rdx, 8
jb 0x14000577f
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x14000577a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a7d
mov rcx, r8
call fcn.14003c958
mov qword [rbx - 8], r15
mov qword [rbx], 7
mov word [rbx - 0x18], r15w
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, rdi
jne 0x140005740
mov rdx, qword [rbp - 0x40]
sub rdx, r13
and rdx, 0xffffffffffffffe0
mov rax, r13
cmp rdx, 0x1000
jb 0x1400057cc
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005a7d
mov rcx, r13
call fcn.14003c958
mov rcx, qword [rbp + 0x20]
call fcn.14003c958
nop
mov rcx, qword [rbp - 8]
test rcx, rcx
je 0x1400057ec
call fcn.1400496e8
mov rcx, qword [rbp - 0x10]
call fcn.14003c958
mov qword [rbp - 0x10], r15
mov rcx, qword [rbp - 0x18]
call fcn.14003c958
mov qword [rbp - 0x18], r15
mov rcx, qword [rbp + 0x38]
test rcx, rcx
je 0x140005814
call fcn.1400496e8
mov rax, r12
sub rax, qword [rbp + 0x68]
sar rax, 5
test rax, rax
je 0x14000587f
lea rdx, str.__html_
lea rcx, [rbp + 0xe0]
call fcn.14000bbe0
lea rax, [rbp + 0x68]
mov qword [rsp + 0x20], rax
mov r13, qword [rbp + 0x1230]
lea r9, [r13 + 0x70]
lea rcx, [rbp + 0xe0]
call fcn.140002640
mov r12, qword [rbp + 0x70]
test al, al
je 0x14000586f
mov rax, r12
sub rax, qword [rbp + 0x68]
sar rax, 5
test rax, rax
jne 0x140005886
mov dword [r13 + 0x160], 0xd
xor r14b, r14b
jmp 0x14000588e
mov r13, qword [rbp + 0x1230]
movzx r14d, byte [rbp + 0x1240]
mov rax, qword [rbp + 0x68]
test rax, rax
je 0x140005923
cmp rax, r12
je 0x140005904
lea rbx, [rax + 0x18]
mov rdx, qword [rbx]
cmp rdx, 8
jb 0x1400058e3
mov rcx, qword [rbx - 0x18]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400058de
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005a8e
mov rcx, r8
call fcn.14003c958
mov qword [rbx - 8], r15
mov qword [rbx], 7
mov word [rbx - 0x18], r15w
add rbx, 0x20
lea rax, [rbx - 0x18]
cmp rax, r12
jne 0x1400058a4
mov rax, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
sub r8, rax
sar r8, 5
mov rdx, rax
call fcn.14000dcf0
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], r15
lea rcx, [rbp + 0xe0]
call fcn.14000bd00
mov r12, qword [rbp + 0xb0]
jmp 0x140005945
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [r13 + 0x160], eax
test r14b, r14b
jne 0x14000595e
lea rbx, [r13 + 0x10]
mov ecx, dword [rbp + 0xa8]
jmp 0x140003809
xor dil, dil
jmp 0x140005967
mov dil, 1
jmp 0x140005967
movzx edi, r14b
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rsi, qword [rbp + 0x100]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x140005993
mov eax, 0x57
mov ecx, 0x160
mov dword [rcx + r13], eax
xor dil, dil
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x1400059d5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400059fc
call fcn.14003c958
movzx eax, dil
mov rbx, qword [rsp + 0x1338]
movaps xmm6, xmmword [rsp + 0x12e0]
add rsp, 0x12f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
mov ecx, 0x80004005
call fcn.140002600
nop
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
mov ecx, 0x80004005
call fcn.140002600
nop
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
mov ecx, 0x80004005
call fcn.140002600
nop
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
call fcn.140048870
nop
mov ecx, 0x80004005
call fcn.140002600
nop
call fcn.140048870
int3