Function at 0x1401c15a0
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Send data
Send http request

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3930]
mov eax, 0x3a30
call fcn.1402c8f60
sub rsp, rax
mov qword [rbp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3a80], rbx
movaps xmmword [rsp + 0x3a20], xmm6
movaps xmmword [rsp + 0x3a10], xmm7
movaps xmmword [rsp + 0x3a00], xmm8
mov rax, qword [0x140415a10]
xor rax, rsp
mov qword [rbp + 0x38f0], rax
mov qword [rbp + 0x68], rdx
mov r14, rcx
mov qword [rsp + 0x60], rcx
xor ebx, ebx
mov qword [rbp - 0x10], rbx
mov r13d, ebx
mov qword [rbp - 0x80], rbx
mov rax, qword [rcx + 0x40]
mov dword [rbp - 0x70], ebx
mov dword [rbp - 0x60], ebx
mov qword [rbp - 0x40], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp - 0x58], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp - 0x50], rax
xor al, al
mov byte [rsp + 0x40], al
mov dword [rbp - 0x78], ebx
mov qword [rsp + 0x78], rbx
mov edi, ebx
mov dword [rsp + 0x4c], ebx
mov rdx, qword [r14 + 0x18]
add rdx, 8
mov rcx, qword [r14 + 8]
call fcn.1400f8ca0
mov rsi, rax
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x1401c16ab
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [r14 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x1401c27ab
mov rbx, qword [r14 + 0x18]
mov eax, dword [rbx + 0x38]
mov dword [rsp + 0x48], eax
or r15, 0xffffffffffffffff
movss xmm8, dword [0x140372188]
cmp byte [r14 + 0x30], dil
je 0x1401c1b5b
cmp eax, 0x10000
jb 0x1401c1b5b
mov rcx, rbx
call fcn.1400d7e10
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movsd xmm1, qword [0x140372010]
comisd xmm1, xmm2
jb 0x1401c1b5b
lea rdx, [rbx + 8]
mov rax, qword [rsi]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x30]
mov r12, rax
test rax, rax
je 0x1401c1b5b
mov ecx, dword [rsp + 0x48]
call fcn.1402b7390
mov rsi, rax
mov qword [rsp + 0x68], rax
xor r14d, r14d
mov bl, 1
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
je 0x1401c17b0
mov edi, 0x5a4d
mov r13d, 0x5253
test bl, bl
je 0x1401c176d
xor bl, bl
cmp word [rbp + 0xf0], r13w
jne 0x1401c176d
mov word [rbp + 0xf0], di
mov r8d, dword [rsp + 0x44]
mov ecx, r14d
add rcx, rsi
lea rdx, [rbp + 0xf0]
call fcn.1402b7460
add r14d, dword [rsp + 0x44]
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
jne 0x1401c1756
mov edi, dword [rsp + 0x4c]
mov r13d, edi
mov ebx, dword [rsp + 0x48]
cmp r14d, ebx
je 0x1401c17cf
mov r8d, r14d
mov edx, ebx
lea rcx, str._tFailed_to_read__u_bytes_from_stream__read__u_bytes__r_n
call fcn.1402b7a88
jmp 0x1401c1af3
mov rax, qword [rsp + 0x60]
mov rsi, qword [rax + 8]
mov rbx, qword [rax + 0x18]
cmp dword [rbx + 0x48], 2
je 0x1401c1827
mov dword [rbx + 0x48], 2
movzx eax, byte [rbx + 0x40]
shr al, 4
test al, 1
jne 0x1401c1806
mov rcx, rbx
call fcn.1400d95a0
mov dl, 1
mov rcx, rax
call fcn.1400e37a0
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x58], 4
lea rcx, [rsi + 0x388]
lea r8, [rsp + 0x50]
mov rdx, rsi
call fcn.1401188e0
xor eax, eax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
lea eax, [r14 + 9]
mov r13d, eax
mov ecx, eax
call fcn.1402b7390
mov qword [rsp + 0x78], rax
mov dword [rax], r14d
xor eax, eax
mov qword [rbp + 0x1c], rax
mov dword [rbp + 0x24], r15d
mov dword [rbp + 0x18], r15d
mov dword [rbp + 0x14], r15d
mov dword [rbp + 0x10], r15d
mov dword [rbp + 0xc], r15d
mov dword [rbp + 8], r15d
mov dword [rbp + 4], r15d
mov dword [rbp], r15d
mov dword [rbp - 8], 9
mov dword [rbp - 4], 0x200000
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rbx, rax
mov qword [rbp + 0x48], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [rsp + 0x4c], eax
mov edx, r15d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, 0x46a88
lea rcx, [0x140417490]
call qword [0x140417490]
mov rsi, rax
test rax, rax
je 0x1401c1a26
mov rcx, rax
call fcn.1402a65d0
lea rdx, [rbp - 8]
mov rcx, rsi
call fcn.1402a39b0
mov ebx, eax
test eax, eax
jne 0x1401c1a0c
mov edx, dword [rsi + 0x3d350]
movzx ecx, byte [rsi + 0x33bd4]
movzx eax, cl
shl al, 2
add cl, al
add cl, byte [rsi + 0x33bd0]
movzx eax, cl
shl al, 3
add cl, al
add cl, byte [rsi + 0x33bcc]
mov r8, qword [rsp + 0x78]
mov byte [r8 + 4], cl
mov ecx, 0xb
mov eax, 2
shl eax, cl
cmp edx, eax
jbe 0x1401c194a
mov eax, 3
shl eax, cl
cmp edx, eax
jbe 0x1401c1943
inc ecx
cmp ecx, 0x1e
jle 0x1401c1924
jmp 0x1401c1951
mov edx, 3
jmp 0x1401c194f
mov edx, 2
shl edx, cl
mov byte [r8 + 5], dl
mov eax, edx
shr eax, 8
mov byte [r8 + 6], al
mov eax, edx
shr eax, 0x10
mov byte [r8 + 7], al
shr edx, 0x18
mov byte [r8 + 8], dl
lea rcx, [rsi + 0x3d360]
lea rax, [0x1402a3960]
mov qword [rcx], rax
mov rax, qword [rsp + 0x68]
mov qword [rsi + 0x3d368], rax
mov eax, r14d
mov qword [rsi + 0x3d370], rax
lea rax, [0x1402a7510]
mov qword [rbp - 8], rax
lea rax, [r8 + 9]
mov qword [rbp], rax
mov qword [rbp + 8], r13
xor eax, eax
mov dword [rbp + 0x10], eax
mov dword [rsi + 0x3d330], eax
mov qword [rsi + 0x3d358], rcx
lea rax, [rbp - 8]
mov qword [rsi + 0x3d318], rax
mov rcx, rsi
call fcn.1402a74a0
mov ebx, eax
test eax, eax
jne 0x1401c19fc
mov rcx, rsi
call fcn.1402a67c0
mov ebx, eax
test eax, eax
jne 0x1401c19fc
cmp dword [rsi + 0x3d344], 0
jne 0x1401c19fc
mov rcx, rsi
call fcn.1402a67c0
mov ebx, eax
test eax, eax
je 0x1401c19e5
sub r13, qword [rbp + 8]
mov eax, 7
cmp dword [rbp + 0x10], 0
cmovne ebx, eax
mov rcx, rsi
call fcn.1402a6720
mov rdx, rsi
lea rcx, [0x140417490]
call qword [0x140417498]
jmp 0x1401c1a2b
mov ebx, 2
mov edx, dword [rsp + 0x4c]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test ebx, ebx
je 0x1401c1a63
mov edx, ebx
lea rcx, str.Compression_failed__LzmaEncode___failed__returned__d__r_n
call fcn.1402b7a88
mov rcx, qword [rsp + 0x78]
call fcn.1402b7350
mov qword [rsp + 0x78], 0
jmp 0x1401c1ae6
cmp r13, 0x1900000
jbe 0x1401c1a7a
lea rcx, str.File_still_too_large_after_compression_r_n
call fcn.1402b7a88
jmp 0x1401c1a4b
lea esi, [r13 + 9]
mov dword [rsp + 0x48], esi
mov eax, esi
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mulss xmm1, xmm8
mov eax, r14d
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm1, xmm0
movaps xmm6, xmm8
subss xmm6, xmm1
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbx + 0x18]
call fcn.1400d8a80
movss dword [rax + 0x14], xmm6
mov rax, qword [rbx + 0x18]
mov rcx, qword [rax + 8]
xorps xmm1, xmm1
cvtss2sd xmm1, xmm6
mov qword [rsp + 0x20], rcx
mov r9d, esi
mov r8d, r14d
movq rdx, xmm1
lea rcx, str.Compressed__3.1f_____u____u_bytes__r_n_t_s_r_n
call fcn.1402b9694
mov rsi, qword [rsp + 0x68]
mov r13, qword [rbp - 0x80]
mov ebx, dword [rsp + 0x48]
mov rcx, rsi
call fcn.1402b7350
mov rax, qword [r12]
mov edx, 1
mov rcx, r12
call qword [rax]
mov rsi, qword [rsp + 0x78]
test rsi, rsi
je 0x1401c1b52
mov ecx, 0x18
call fcn.1402b6dbc
mov r12, rax
test rax, rax
je 0x1401c1b45
lea rax, vtable.HitmanPro35::MemoryFileDataStream.0
mov qword [r12], rax
mov qword [r12 + 8], rsi
mov dword [r12 + 0x10], ebx
mov dword [r12 + 0x14], 0
jmp 0x1401c1b48
xor r12d, r12d
mov r14, qword [rsp + 0x60]
jmp 0x1401c1be6
mov rsi, qword [rbp - 0x18]
mov r14, qword [rsp + 0x60]
mov rcx, qword [r14 + 0x18]
cmp dword [rcx + 0x38], 0x1900000
jae 0x1401c167e
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1401c1bcf
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rbx, rax
test rax, rax
je 0x1401c167e
mov ecx, 0x18
call fcn.1402b6dbc
mov r12, rax
test rax, rax
je 0x1401c1bca
mov rax, qword [rbx + 8]
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
lea rax, vtable.HitmanPro35::MemoryFileDataStream.0
mov qword [r12], rax
mov qword [r12 + 8], rcx
mov dword [r12 + 0x10], edx
mov dword [r12 + 0x14], 0
jmp 0x1401c1be6
xor r12d, r12d
jmp 0x1401c1be6
mov rdx, qword [r14 + 0x18]
add rdx, 8
mov rax, qword [rsi]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x30]
mov r12, rax
test r12, r12
je 0x1401c167e
mov rsi, qword [r14 + 8]
mov rbx, qword [r14 + 0x18]
cmp dword [rbx + 0x48], 3
je 0x1401c1c42
mov dword [rbx + 0x48], 3
movzx eax, byte [rbx + 0x40]
shr al, 4
test al, 1
jne 0x1401c1c21
mov rcx, rbx
call fcn.1400d95a0
mov dl, 1
mov rcx, rax
call fcn.1400e37a0
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x58], 4
lea rcx, [rsi + 0x388]
lea r8, [rsp + 0x50]
mov rdx, rsi
call fcn.1401188e0
lea rsi, [0x140346ce0]
mov qword [rbp - 0x28], rsi
xor eax, eax
mov qword [rbp - 0x20], rax
mov rbx, qword [r14 + 0x18]
lea rdx, [rbp - 8]
mov rcx, rbx
call fcn.1400d79e0
cmp qword [rax + 8], 0
setne al
test al, al
je 0x1401c1cbc
lea rdx, [rbp + 0x50]
mov rcx, rbx
call fcn.1400d79e0
nop
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.1400cb0d0
nop
lea rax, vtable.Core::DateTime.0
mov qword [rbp + 0x50], rax
mov r8, qword [rsp + 0x50]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_DateCreated__r_n_r_n_s_r_n
lea rcx, [rbp - 0x28]
call fcn.1401fb410
nop
cmp dword [rsp + 0x58], 0
jle 0x1401c1cbc
mov rcx, qword [rsp + 0x50]
call fcn.1402b7350
mov rcx, qword [r14 + 8]
call fcn.14010fd80
mov r8, qword [rax]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_Guid__r_n_r_n_s_r_n
lea rcx, [rbp - 0x28]
call fcn.1401fb410
mov rax, qword [r14 + 0x18]
lea rcx, str.x_7z_compressed
lea r9, str.octet_stream
cmp qword [rsp + 0x78], 0
cmovne r9, rcx
mov r8, qword [rax + 8]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_Upload___filename__s__r_nContent_Type:_application__s_r_n_r_n
lea rcx, [rbp - 0x28]
call fcn.1401fb410
lea rax, vtable.Core::Text::ASCIIEncoding.0
mov qword [rbp + 0x48], rax
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x1800
lea rax, [rbp + 0x20f0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x1c]
mov r8, qword [rbp - 0x28]
xor edx, edx
mov ecx, 0x4e4
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rcx, eax
mov dword [rsp + 0x4c], ecx
cmp ecx, 0x1800
jge 0x1401c1d5e
mov byte [rbp + rcx + 0x20f0], bl
cmp rcx, 0x1800
jae 0x1401c27a5
mov byte [rbp + rcx + 0x20f0], bl
mov eax, dword [rsp + 0x48]
add eax, ecx
add rax, 0x13
mov qword [rbp - 0x18], rax
call fcn.1402022b0
mov r14, rax
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], rbx
test rax, rax
je 0x1401c1df3
mov rax, qword [rax]
mov rbx, qword [rsp + 0x60]
mov r8, qword [rbx + 0x20]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rax + 0x10]
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rbp - 0x38]
call fcn.1401fcb40
movsxd r9, dword [rbx + 0xc]
mov eax, dword [rbp - 0x30]
inc eax
movsxd rdx, eax
mov r8, qword [rbx]
mov rcx, qword [rbp - 0x38]
call fcn.1402ba94c
mov edx, dword [rbx + 0xc]
lea rcx, [rbp - 0x38]
call fcn.1401fde50
nop
cmp dword [rsp + 0x58], 0
jle 0x1401c1e03
mov rcx, qword [rsp + 0x50]
call fcn.1402b7350
jmp 0x1401c1e03
mov rdx, qword [0x140416ee8]
lea rcx, [rbp - 0x38]
call fcn.1401fafa0
mov r8, qword [rbp - 0x38]
test r8, r8
je 0x1401c1e2c
nop dword [rax]
inc r15
cmp word [r8 + r15*2], 0
jne 0x1401c1e10
test r15, r15
sete al
test al, al
jne 0x1401c1e2c
mov edx, 3
jmp 0x1401c1e31
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0x10000000
xor r9d, r9d
lea rcx, str.Mozilla_4.0__compatible__Win32_
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rsi, rax
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x1401c1e6c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov r15, qword [rsp + 0x60]
test eax, eax
jne 0x1401c21dc
jmp 0x1401c1eb5
mov r15, qword [rsp + 0x60]
lea r8, [r15 + 0x28]
mov edx, 3
lea r9d, [rdx + 1]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, 4
lea r8, [r15 + 0x2c]
lea edx, [r9 + 1]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, 4
lea r8, [r15 + 0x2c]
lea edx, [r9 + 2]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
lea rdx, [rbp + 0xb0]
mov rcx, qword [r15 + 0x20]
call fcn.1401ffe30
mov rdx, qword [rax]
mov rax, qword [r15 + 0x20]
xor r9d, r9d
movzx r8d, word [rax + 0x40]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rbx, rax
mov qword [rbp - 0x10], rax
cmp dword [rbp + 0xb8], 0
jle 0x1401c1ef9
mov rcx, qword [rbp + 0xb0]
call fcn.1402b7350
test rbx, rbx
jne 0x1401c1f48
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rbp - 0x40]
mov qword [rsp + 0x58], rcx
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c1f3e
mov edi, dword [rbp - 0x70]
test edi, edi
jne 0x1401c21dc
mov r13, qword [rbp - 0x68]
mov qword [rbp - 0x10], r13
jmp 0x1401c1f4b
mov edi, 0x2ef1
jmp 0x1401c21dc
mov r13, rbx
mov esi, 0x100
xor eax, eax
mov qword [rsp + 0x70], rax
lea edx, [rax + 5]
lea rcx, [rsp + 0x68]
call fcn.1401fcb40
mov eax, dword [rsp + 0x70]
inc eax
movsxd rdx, eax
mov r9d, 5
lea r8, str.https
mov rcx, qword [rsp + 0x68]
call fcn.1402ba94c
mov edx, 5
lea rcx, [rsp + 0x68]
call fcn.1401fde50
nop
lea rdx, [rsp + 0x50]
mov rcx, qword [r15 + 0x20]
call fcn.140200030
mov r8, rax
mov r9, qword [rsp + 0x68]
mov ecx, dword [rax + 0xc]
cmp dword [rsp + 0x74], ecx
je 0x1401c1fb7
xor bl, bl
jmp 0x1401c1fd9
mov rax, r9
mov r8, qword [r8]
sub r8, r9
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1401c1fd4
add rax, 2
test ecx, ecx
jne 0x1401c1fc0
test edx, edx
sete bl
cmp dword [rsp + 0x58], 0
jle 0x1401c1fef
mov rcx, qword [rsp + 0x50]
call fcn.1402b7350
mov r9, qword [rsp + 0x68]
cmp dword [rsp + 0x70], 0
jle 0x1401c1ffe
mov rcx, r9
call fcn.1402b7350
mov eax, 0x800100
test bl, bl
cmovne esi, eax
lea rax, [0x14035a3f0]
mov qword [rbp + 0x80], rax
xor ebx, ebx
mov qword [rbp + 0x88], rbx
lea rdx, [rbp + 0x90]
mov rcx, qword [r15 + 0x20]
call fcn.1401ffe60
mov dword [rsp + 0x30], esi
lea rcx, [rbp + 0x80]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
lea r9, str.HTTP_1.1
mov r8, qword [rax]
lea rdx, str.POST
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
cmp dword [rbp + 0x98], ebx
jle 0x1401c2075
mov rcx, qword [rbp + 0x90]
call fcn.1402b7350
test r13, r13
jne 0x1401c20b9
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rbp - 0x40]
mov qword [rsp + 0x58], rcx
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [r13 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c1f3e
mov edi, dword [rbp - 0x70]
test edi, edi
jne 0x1401c21dc
mov r13, qword [rbp - 0x68]
xor r9d, r9d
mov r8d, 0x7e4c00
lea rdx, [0x14017eee0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetStatusCallback]
cmp rax, 0xffffffffffffffff
jne 0x1401c20e8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jne 0x1401c21dc
test r14, r14
je 0x1401c21dc
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x28]
mov rbx, rax
test rax, rax
je 0x1401c21dc
xor r14d, r14d
mov qword [rsp + 0x70], r14
lea rax, [0x140346ce0]
mov qword [rsp + 0x68], rax
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.1401fde50
nop
mov r9, qword [rbx]
lea r8, [rsp + 0x68]
mov rdx, qword [r15 + 0x20]
mov rcx, rbx
call qword [r9 + 8]
mov rbx, rax
cmp dword [rsp + 0x70], r14d
jle 0x1401c214e
mov rcx, qword [rsp + 0x68]
call fcn.1402b7350
test rbx, rbx
je 0x1401c21df
cmp dword [rbx + 0x14], 0
jle 0x1401c21a1
lea r9, [rbx + 0x18]
lea rdx, [rbx + 8]
lea r8, [0x140345f98]
lea rcx, [rsp + 0x50]
call fcn.1401fbc00
mov r9d, dword [rsp + 0x5c]
mov r8, qword [rsp + 0x50]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
cmp dword [rsp + 0x58], 0
jle 0x1401c21b7
mov rcx, qword [rsp + 0x50]
call fcn.1402b7350
jmp 0x1401c21b7
mov r9d, dword [rbx + 0x24]
mov r8, qword [rbx + 0x18]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, dword [rbx + 0x34]
mov r8, qword [rbx + 0x28]
mov edx, 0x1003
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
jmp 0x1401c21df
xor r14d, r14d
movsd xmm6, qword [0x140372120]
movsd xmm7, qword [0x140371fc8]
nop
cmp edi, 0x2f00
je 0x1401c2200
test edi, edi
jne 0x1401c2570
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 0x18]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8d, [r9 + 0x39]
lea rdx, str.content_type:_multipart_form_data__boundary__Strider35_r_n
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x1401c2266
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c226e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c2200
test edi, edi
jne 0x1401c2570
xor r9d, r9d
mov r8d, dword [rsp + 0x4c]
lea rdx, [rbp + 0x20f0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c22ce
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x68], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x70], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c22d6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c2200
mov dword [rbp - 0x60], r14d
test edi, edi
jne 0x1401c2570
mov rcx, qword [r15 + 0x18]
call fcn.1400d8a80
mov rbx, rax
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0x50]
call fcn.1400e9be0
nop
mov r15d, r14d
cmp qword [rsp + 0x78], 0
sete sil
mov r10, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [r10 + 8]
test al, al
je 0x1401c24f0
nop dword [rax + rax]
test sil, sil
je 0x1401c2362
xor sil, sil
mov eax, 0x5253
cmp word [rbp + 0xf0], ax
jne 0x1401c2362
mov eax, 0x5a4d
mov word [rbp + 0xf0], ax
xor r9d, r9d
mov r8d, dword [rsp + 0x44]
lea rdx, [rbp + 0xf0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c23b9
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0xa8], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0xa0]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c23c1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c24e3
test edi, edi
jne 0x1401c24f0
mov eax, dword [rbp - 0x60]
mov dword [rbp - 0x60], edi
add r14d, eax
add r15d, eax
lea rcx, [rbp + 0xd8]
call fcn.1400e9be0
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0xc0]
mov rcx, rax
call fcn.1400cb050
xorps xmm1, xmm1
cvtsi2sd xmm1, qword [rax + 8]
divsd xmm1, xmm6
lea rax, vtable.Core::TimeSpan.0
mov qword [rbp + 0xc0], rax
lea rax, vtable.Core::DateTime.0
mov qword [rbp + 0xd8], rax
comisd xmm1, xmm7
jb 0x1401c2468
movd xmm0, r15d
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [rbx + 0x10], eax
lea rcx, [rbp - 8]
call fcn.1400e9be0
mov rcx, qword [rax + 8]
mov qword [rbp + 0x58], rcx
mov eax, dword [rax + 0x10]
mov dword [rbp + 0x60], eax
lea rax, vtable.Core::DateTime.0
mov qword [rbp - 8], rax
xor r15d, r15d
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm8
mov eax, dword [rsp + 0x48]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm1, xmm0
ucomiss xmm1, dword [rbx + 0xc]
jp 0x1401c248d
je 0x1401c24bd
movss dword [rbx + 0xc], xmm1
cmp byte [rbx + 8], 0
je 0x1401c24bd
mov rax, qword [rbx]
mov rdx, qword [0x140428b78]
mov qword [rbp + 0x70], rax
mov dword [rbp + 0x78], 3
lea rcx, [rdx + 0x388]
lea r8, [rbp + 0x70]
call fcn.1401188e0
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
jne 0x1401c2340
jmp 0x1401c24f0
mov r15, qword [rsp + 0x60]
xor r14d, r14d
jmp 0x1401c21f0
test edi, edi
jne 0x1401c256d
xor r9d, r9d
lea r8d, [rdi + 0x13]
lea rdx, str._r_n____Strider35___r_n
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c2540
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x30], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x28]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c2548
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
mov r15, qword [rsp + 0x60]
mov r14d, 0
je 0x1401c2200
mov eax, dword [rbp - 0x60]
test edi, edi
cmove eax, r14d
mov dword [rbp - 0x60], eax
jmp 0x1401c2570
xor r14d, r14d
mov r15, qword [rsp + 0x60]
cmp byte [rsp + 0x40], 0
jne 0x1401c2596
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [r15 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
setne al
mov byte [rsp + 0x40], al
test edi, edi
jne 0x1401c26f2
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x1401c25de
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x40], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c25e6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c2200
test edi, edi
jne 0x1401c26f2
mov dword [rsp + 0x4c], 4
mov dword [rsp + 0x44], r14d
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
xor r8d, r8d
mov edx, 0x20000013
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov ebx, dword [rbp - 0x78]
test eax, eax
cmovne ebx, dword [rsp + 0x44]
lea rax, vtable.Core::Text::ASCIIEncoding.0
mov qword [rbp - 0x18], rax
mov rsi, qword [rbp + 0x68]
nop word [rax + rax]
xor r9d, r9d
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x1401c269b
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x40], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c26f0
mov eax, dword [rbp - 0x70]
jmp 0x1401c26a1
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1401c26f0
mov eax, dword [rbp - 0x60]
mov dword [rbp - 0x60], r14d
test eax, eax
je 0x1401c26f0
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x28]
lea rcx, [rbp - 0x18]
call fcn.140201ca0
nop
mov rdx, rax
mov rcx, rsi
call fcn.1401fb120
nop
cmp dword [rbp + 0x30], 0
jle 0x1401c2650
mov rcx, qword [rbp + 0x28]
call fcn.1402b7350
jmp 0x1401c2650
jmp 0x1401c26f5
mov ebx, dword [rbp - 0x78]
test r13, r13
je 0x1401c2710
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
or edx, 0xffffffff
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x1401c2722
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1401c2732
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test ebx, ebx
jne 0x1401c276d
cmp dword [rbp - 0x30], ebx
jle 0x1401c2745
mov rcx, qword [rbp - 0x38]
call fcn.1402b7350
nop
cmp dword [rbp - 0x20], 0
jle 0x1401c2755
mov rcx, qword [rbp - 0x28]
call fcn.1402b7350
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
jmp 0x1401c27ab
cmp dword [rbp - 0x30], 0
jle 0x1401c277d
mov rcx, qword [rbp - 0x38]
call fcn.1402b7350
nop
cmp dword [rbp - 0x20], 0
jle 0x1401c278d
mov rcx, qword [rbp - 0x28]
call fcn.1402b7350
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
jmp 0x1401c27ab
call fcn.1402b8d20
nop
mov rcx, qword [rbp + 0x38f0]
xor rcx, rsp
call fcn.1402b6d40
lea r11, [rsp + 0x3a30]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret