Function at 0x14001dd50
Capabilities:
Read http header
Receive http response

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x1401198e8]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov r12, rdx
mov r15, rcx
xor edi, edi
mov esi, edi
mov dword [rsp + 0x38], edi
call fcn.140008180
mov rcx, rax
test rax, rax
je 0x14001e049
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x40], rbx
mov ebp, edi
mov dword [rsp + 0x34], edi
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [rdi + 0x13]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
lea r13, [rdi - 1]
test eax, eax
jne 0x14001ddf9
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
je 0x14001ddf9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
test eax, eax
jle 0x14001de77
movzx ebp, ax
or ebp, 0x80070000
jmp 0x14001de77
mov ecx, dword [rsp + 0x34]
call fcn.1400b16a8
mov r14, rax
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
mov r9, r14
xor r8d, r8d
lea edx, [r8 + 0x13]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14001de42
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
test eax, eax
jle 0x14001de6f
movzx ebp, ax
or ebp, 0x80070000
jmp 0x14001de6f
test r14, r14
jne 0x14001de4b
mov eax, edi
jmp 0x14001de5a
mov rax, r13
nop
inc rax
cmp word [r14 + rax*2], bp
jne 0x14001de50
mov r8d, eax
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.1400068f0
mov rbx, qword [rsp + 0x40]
mov rcx, r14
call fcn.1400a3768
lea r8, [0x1400f45b8]
test ebp, ebp
js 0x14001df37
mov rcx, rdi
nop dword [rax]
movzx eax, word [rbx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14001df37
cmp rcx, 4
jne 0x14001de90
nop dword [rax]
mov dword [rsp + 0x30], edi
lea rdx, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x14001df2a
mov ecx, dword [rsp + 0x30]
inc ecx
call fcn.14009c638
mov rbp, rax
mov r8d, dword [rsp + 0x30]
inc r8d
xor edx, edx
mov rcx, rax
call fcn.14009e880
lea r9, [rsp + 0x38]
mov r8d, dword [rsp + 0x30]
mov rdx, rbp
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x14001df0a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x14001df15
mov rdx, rbp
mov rcx, r12
call fcn.140022e20
mov rcx, rbp
call fcn.14009bfe4
cmp dword [rsp + 0x30], 0
jbe 0x14001e008
jmp 0x14001deb0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
jmp 0x14001e008
mov rcx, rdi
lea rdx, [0x1400f45c0]
movzx eax, word [rbx + rcx*2]
inc rcx
cmp ax, word [rdx + rcx*2 - 2]
jne 0x14001df5f
cmp rcx, 4
jne 0x14001df41
mov esi, 0xe8
jmp 0x14001e008
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14001df89
cmp rcx, 4
jne 0x14001df70
mov esi, edi
jmp 0x14001e008
mov rcx, rdi
lea r8, [0x1400f4f08]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x14001dfba
cmp rcx, 4
jne 0x14001dfa0
lea esi, [rcx + 1]
jmp 0x14001e008
mov rcx, rdi
nop dword [rax]
movzx eax, word [rbx + rcx*2]
inc rcx
cmp ax, word [rdx + rcx*2 - 2]
jne 0x14001dfdb
cmp rcx, 4
jne 0x14001dfc0
mov esi, 0x5b4
jmp 0x14001e008
lea rdx, [0x1400f4f10]
movzx eax, word [rbx + rdi*2]
inc rdi
cmp ax, word [rdx + rdi*2 - 2]
jne 0x14001dffb
cmp rdi, 4
jne 0x14001dfe2
cmp ax, word [rdx + rdi*2 - 2]
mov esi, 0x1f
mov eax, 0xb
cmove esi, eax
lea rdx, [rbx - 0x18]
lock xadd dword [rdx + 0x10], r13d
sub r13d, 1
jg 0x14001e022
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rVariantCopy + 8]
mov eax, esi
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.14009c570
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x80004005
call fcn.140007f00
int3