Function at 0x180001280
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Set http header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x430]
sub rsp, 0x530
mov rax, qword [0x180022040]
xor rax, rsp
mov qword [rbp + 0x420], rax
mov rdi, rdx
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x18]
mov r15, rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x20]
mov qword [rsp + 0x60], rax
xor r13d, r13d
mov word [rbp - 0x20], r13w
mov rdi, qword [rax]
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x20]
mov rcx, rax
call qword [rdi + 0xb8]
mov ecx, 0x190
movzx eax, word [rbp - 0x20]
sub ax, cx
cmp ax, 0x63
ja 0x18000211f
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 8]
mov rsi, qword [rax + 0x58]
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r13
mov qword [rbp + 0x88], r13
mov r8d, 0x15
lea rdx, str.http:__152.32.223.176
lea rcx, [rbp + 0x70]
call fcn.180003e50
nop
mov rbx, 0xffffffffffffffff
nop word [rax + rax]
inc rbx
cmp word [rsi + rbx*2], 0
jne 0x180001370
mov r14, qword [rbp + 0x80]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
sub rax, r14
cmp rbx, rax
ja 0x1800013c6
lea rax, [r14 + rbx]
mov qword [rbp + 0x80], rax
lea rdi, [rbp + 0x70]
cmp rcx, 7
cmova rdi, qword [rbp + 0x70]
lea rcx, [rdi + r14*2]
lea r8, [rbx + rbx]
mov rdx, rsi
call fcn.180014550
lea rax, [r14 + rbx]
mov word [rdi + rax*2], r13w
jmp 0x1800013da
mov qword [rsp + 0x20], rbx
mov r9, rsi
mov rdx, rbx
lea rcx, [rbp + 0x70]
call fcn.180004450
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x18001dd88]
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rbx, rax
mov qword [rsp + 0x58], rax
test rax, rax
je 0x18000146e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rax
mov dword [rsp + 0x70], 0x68
mov dword [rbp - 0x80], 0xffffffff
mov dword [rbp - 0x70], 0xffffffff
mov dword [rbp - 0x40], 0xffffffff
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 7
cmova rcx, qword [rbp + 0x70]
lea r9, [rsp + 0x70]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
jne 0x1800014bc
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r14d, r13d
mov rdx, qword [rbp + 0x88]
cmp rdx, 7
jbe 0x1800014b4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800014af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002157
call fcn.180005830
mov eax, r14d
jmp 0x180002121
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], r13w
mov edx, dword [rbp - 0x70]
lea rcx, [rbp + 0x50]
cmp rdx, 7
ja 0x1800014fd
mov qword [rbp + 0x60], rdx
lea rdi, [rdx + rdx]
mov r8, rdi
mov rdx, qword [rbp - 0x78]
call fcn.180014550
mov word [rbp + rdi + 0x50], r13w
jmp 0x180001506
mov r9, qword [rbp - 0x78]
call fcn.180003cf0
lea rdx, [rbp + 0x50]
cmp qword [rbp + 0x68], 7
cmova rdx, qword [rbp + 0x50]
xor r9d, r9d
movzx r8d, word [rbp - 0x6c]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x180001543
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r14d, r13d
jmp 0x1800020cd
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x2f0]
call fcn.180014bf0
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x40]
lea rcx, [rbp + 0x2f8]
mov qword [rbp + 0x2f0], rcx
mov r8d, 3
mov rdx, rax
lea rcx, [rbp + 0x2f0]
call fcn.1800036c0
nop
mov eax, r13d
mov ecx, 0x800000
cmp dword [rbp - 0x7c], 2
cmove eax, ecx
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
mov r8, qword [rbp - 0x48]
mov rdx, qword [rbp + 0x2f0]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r12, rax
test rax, rax
jne 0x1800015d1
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, rbx
jmp 0x1800020ab
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 8]
mov r13, rax
xor edx, edx
mov esi, edx
mov dword [rsp + 0x68], edx
lea rdi, [0x180000000]
movabs r8, 0x7fffffffffffffff
movabs r9, 0x8000000000000000
mov r10d, 0x16
mov r14d, 2
nop dword [rax]
mov eax, esi
add rax, rax
mov r15, qword [r13 + rax*8 + 0xa0]
test r15, r15
je 0x1800019fb
cmp esi, 0x28
ja case.default.0x18000163c
movsxd rax, esi
mov ecx, dword [rdi + rax*4 + 0x2188]
add rcx, rdi
jmp rcx
lea rbx, str.Cache_Control
jmp 0x180001803
lea rbx, str.Connection
jmp 0x180001803
lea rbx, str.Date
jmp 0x180001803
lea rbx, str.Keep_Alive
jmp 0x180001803
lea rbx, str.Pragma
jmp 0x180001803
lea rbx, str.Trailer
jmp 0x180001803
lea rbx, str.Transfer_Encoding
jmp 0x180001803
lea rbx, str.Upgrade
jmp 0x180001803
lea rbx, [0x18001de28]
jmp 0x180001803
lea rbx, str.Warning
jmp 0x180001803
lea rbx, str.Allow
jmp 0x180001803
lea rbx, str.Content_Length
jmp 0x180001803
lea rbx, str.Content_Type
jmp 0x180001803
lea rbx, str.Content_Encoding
jmp 0x180001803
lea rbx, str.Content_Language
jmp 0x180001803
lea rbx, str.Content_Location
jmp 0x180001803
lea rbx, str.Content_MD5
jmp 0x180001803
lea rbx, str.Content_Range
jmp 0x180001803
lea rbx, str.Expires
jmp 0x180001803
lea rbx, str.Last_Modified
jmp 0x180001803
lea rbx, str.Accept
jmp 0x180001803
lea rbx, str.Accept_Charset
jmp 0x180001803
lea rbx, str.Accept_Encoding
jmp 0x180001803
lea rbx, str.Accept_Language
jmp 0x180001803
lea rbx, str.Authorization
jmp 0x180001803
lea rbx, str.Cookie
jmp 0x180001803
lea rbx, str.Expect
jmp 0x180001803
lea rbx, str.From
jmp 0x180001803
lea rbx, str.Host
jmp 0x180001803
lea rbx, str.If_Match
jmp 0x180001803
lea rbx, str.If_Modified_Since
jmp 0x180001803
lea rbx, str.If_None_Match
jmp 0x180001803
lea rbx, str.If_Range
jmp 0x180001803
lea rbx, str.If_Unmodified_Since
jmp 0x180001803
lea rbx, str.Max_Forwards
jmp 0x180001803
lea rbx, str.Proxy_Authorization
jmp 0x180001803
lea rbx, str.Referer
jmp 0x180001803
lea rbx, str.Range
jmp 0x180001803
lea rbx, [0x18001dfe0]
jmp 0x180001803
lea rbx, str.Translate
jmp 0x180001803
lea rbx, str.User_Agent
jmp 0x180001803
mov rbx, rdx
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
mov qword [rbp - 8], rdx
mov qword [rbp], rdx
mov rdi, 0xffffffffffffffff
nop dword [rax]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x180001820
cmp rdi, r8
ja 0x180002169
cmp rdi, 0xf
ja 0x18000185d
mov qword [rbp - 8], rdi
mov qword [rbp], 0xf
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.180014550
mov byte [rbp + rdi - 0x18], 0
jmp 0x1800018ed
mov r14, rdi
or r14, 0xf
cmp r14, r8
jbe 0x180001872
mov r14, r8
lea rax, [r9 + 0x27]
jmp 0x18000189e
cmp r14, 0x16
cmovb r14, r10
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x180001888
mov rsi, rdx
jmp 0x1800018c5
cmp rcx, 0x1000
jb 0x1800018bd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000215d
mov rcx, rax
call fcn.180005864
test rax, rax
je 0x180002163
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1800018c5
call fcn.180005864
mov rsi, rax
mov qword [rbp - 0x18], rsi
mov qword [rbp - 8], rdi
mov qword [rbp], r14
mov r8, rdi
mov rdx, rbx
mov rcx, rsi
call fcn.180014550
mov byte [rdi + rsi], 0
mov esi, dword [rsp + 0x68]
mov r14d, 2
mov r8, r14
lea rdx, [0x18001dd84]
lea rcx, [rbp - 0x18]
call fcn.180003260
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x180001910
mov rdx, r15
lea rcx, [rbp - 0x18]
call fcn.180003260
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0xd8]
call fcn.180014bf0
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova rdx, qword [rbp - 0x18]
lea rax, [rbp + 0xd8]
mov qword [rbp + 0xd0], rax
mov r8d, 3
lea rcx, [rbp + 0xd0]
call fcn.1800036c0
mov r9d, 0x20000000
mov r8d, 0xffffffff
mov rdx, qword [rbp + 0xd0]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
lea rax, [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
cmp rcx, rax
je 0x18000199d
call fcn.18000b180
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x1800019d8
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800019d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002163
call fcn.180005830
mov r10d, 0x16
movabs r9, 0x8000000000000000
lea rdi, [0x180000000]
movabs r8, 0x7fffffffffffffff
xor edx, edx
inc esi
mov dword [rsp + 0x68], esi
cmp esi, 0x29
jb 0x180001610
mov ebx, edx
cmp dx, word [r13 + 0x78]
jae 0x180001b44
nop word [rax + rax]
mov eax, ebx
lea rcx, [rax + rax*2]
lea rdi, [rcx*8]
mov rdx, qword [r13 + 0x80]
mov rdx, qword [rdx + rdi + 8]
lea rcx, [rbp - 0x18]
call fcn.180003340
nop
mov r8, r14
lea rdx, [0x18001dd84]
lea rcx, [rbp - 0x18]
call fcn.180003260
mov rax, qword [r13 + 0x80]
mov rdx, qword [rdi + rax + 0x10]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180001a70
lea rcx, [rbp - 0x18]
call fcn.180003260
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x1e8]
call fcn.180014bf0
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova rdx, qword [rbp - 0x18]
lea rax, [rbp + 0x1e8]
mov qword [rbp + 0x1e0], rax
mov r8d, 3
lea rcx, [rbp + 0x1e0]
call fcn.1800036c0
mov r9d, 0x20000000
mov r8d, 0xffffffff
mov rdx, qword [rbp + 0x1e0]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
lea rax, [rbp + 0x1e8]
mov rcx, qword [rbp + 0x1e0]
cmp rcx, rax
je 0x180001afa
call fcn.18000b180
nop
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x180001b35
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180001b30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000216f
call fcn.180005830
inc ebx
movzx eax, word [r13 + 0x78]
cmp ebx, eax
jb 0x180001a20
xor r13d, r13d
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x180002092
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x180002092
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], r13b
mov dword [rsp + 0x68], r13d
lea rdx, [rsp + 0x68]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov eax, dword [rsp + 0x68]
test eax, eax
je 0x180001c5e
mov ecx, eax
call fcn.180005c10
mov rsi, rax
mov dword [rbp + 0x48], r13d
lea r9, [rbp + 0x48]
mov r8d, dword [rsp + 0x68]
mov rdx, rax
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
mov ebx, dword [rbp + 0x48]
mov rdx, qword [rbp + 0x38]
mov rdi, qword [rbp + 0x40]
mov rcx, rdi
sub rcx, rdx
cmp rbx, rcx
ja 0x180001c1e
lea rax, [rdx + rbx]
mov qword [rbp + 0x38], rax
lea rax, [rbp + 0x28]
cmp rdi, 0xf
cmova rax, qword [rbp + 0x28]
lea rdi, [rax + rdx]
mov r8d, ebx
mov rdx, rsi
mov rcx, rdi
call fcn.180014550
mov byte [rbx + rdi], 0
jmp 0x180001c32
mov qword [rsp + 0x20], rbx
mov r9, rsi
mov rdx, rbx
lea rcx, [rbp + 0x28]
call fcn.180003f80
mov edx, 1
mov rcx, rsi
call fcn.180005830
mov dword [rsp + 0x68], r13d
lea rdx, [rsp + 0x68]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov eax, dword [rsp + 0x68]
test eax, eax
jne 0x180001bb8
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r13w
mov dword [rbp - 0x1c], r13d
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x16
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov edx, dword [rbp - 0x1c]
mov r8, qword [rbp + 0x18]
cmp rdx, r8
ja 0x180001cc1
mov qword [rbp + 0x18], rdx
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova rax, qword [rbp + 8]
mov word [rax + rdx*2], r13w
jmp 0x180001d12
sub rdx, r8
mov rcx, qword [rbp + 0x20]
mov rax, rcx
sub rax, r8
cmp rdx, rax
ja 0x180001d06
lea rax, [rdx + r8]
mov qword [rbp + 0x18], rax
lea r9, [rbp + 8]
cmp rcx, 7
cmova r9, qword [rbp + 8]
lea rdi, [r9 + r8*2]
test rdx, rdx
je 0x180001cfb
movzx eax, r13w
mov rcx, rdx
rep stosw word [rdi], ax
lea rax, [r8 + rdx]
mov word [r9 + rax*2], r13w
jmp 0x180001d12
mov r9, rdx
lea rcx, [rbp + 8]
call fcn.1800042a0
lea r9, [rbp + 8]
cmp qword [rbp + 0x20], 7
cmova r9, qword [rbp + 8]
mov qword [rsp + 0x28], r13
lea rax, [rbp - 0x1c]
mov qword [rsp + 0x20], rax
xor r8d, r8d
mov edx, 0x16
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], 0
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], r13
mov ecx, 0x60
call fcn.180005864
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0xb8], rax
lea r8, [rbp + 0x90]
lea rdx, [rbp + 8]
call fcn.180002840
test al, al
jne 0x180001dcd
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r14d, r13d
jmp 0x180001f3a
mov rbx, qword [rsp + 0x60]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
lea r8, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova r8, qword [rbp + 0x98]
mov rax, qword [rbx]
xor r9d, r9d
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x28], r13
mov dword [rsp + 0x20], r13d
movzx edx, word [rbp + 0x90]
mov rcx, rbx
call qword [rax + 0x18]
mov rax, qword [rbp + 0xb8]
mov rdi, qword [rax]
cmp rdi, rax
je 0x180001eb9
nop word [rax + rax]
lea rdx, [rdi + 0x20]
lea r8, [rdi + 0x40]
cmp qword [rdi + 0x58], 0xf
jbe 0x180001e43
mov r8, qword [rdi + 0x40]
mov r9, qword [rdi + 0x50]
cmp qword [rdx + 0x18], 0xf
jbe 0x180001e51
mov rdx, qword [rdx]
mov rax, qword [rbx]
mov dword [rsp + 0x20], 1
mov rcx, rbx
call qword [rax + 0x28]
mov rax, qword [rdi + 0x10]
cmp byte [rax + 0x19], 0
je 0x180001e8e
mov rax, qword [rdi + 8]
cmp byte [rax + 0x19], 0
jne 0x180001e89
cmp rdi, qword [rax + 0x10]
jne 0x180001e89
mov rdi, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x180001e76
mov rdi, rax
jmp 0x180001eac
mov rdi, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x180001eac
nop word [rax + rax]
mov rdi, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180001ea0
cmp rdi, qword [rbp + 0xb8]
jne 0x180001e30
mov dword [rbp + 0x400], r13d
lea rax, [rbp + 0x28]
cmp qword [rbp + 0x40], 0xf
cmova rax, qword [rbp + 0x28]
mov qword [rbp + 0x408], rax
mov eax, dword [rbp + 0x38]
mov dword [rbp + 0x410], eax
mov rax, qword [rbx]
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0xcc]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], 1
xor r9d, r9d
mov r8d, 1
lea rdx, [rbp + 0x400]
mov rcx, rbx
call qword [rax + 0xa8]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rcx, qword [rbp + 0xb8]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x180001f90
nop dword [rax + rax]
mov r8, qword [rbx + 0x10]
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0xb8]
call fcn.180004b30
mov rdi, rbx
mov rbx, qword [rbx]
lea rcx, [rdi + 0x20]
call fcn.180004b90
mov edx, 0x60
mov rcx, rdi
call fcn.180005830
cmp byte [rbx + 0x19], 0
je 0x180001f50
mov rcx, qword [rbp + 0xb8]
mov edx, 0x60
call fcn.180005830
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x180001fdb
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180001fd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002175
call fcn.180005830
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 7
jbe 0x180002034
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000202f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000217b
call fcn.180005830
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x20], 7
mov word [rbp + 8], r13w
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x180002080
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000207b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002181
call fcn.180005830
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x40], 0xf
mov byte [rbp + 0x28], 0
jmp 0x1800020b4
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r14d, r13d
lea rax, [rbp + 0x2f8]
mov rcx, qword [rbp + 0x2f0]
cmp rcx, rax
je 0x1800020cd
call fcn.18000b180
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 7
jbe 0x180002109
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002104
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180002151
call fcn.180005830
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], r13w
jmp 0x180001471
xor eax, eax
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.180005810
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18000b594
nop
call fcn.18000b594
nop
call fcn.180001120
int3
call fcn.18000b594
int3
call fcn.1800011c0
int3
call fcn.18000b594
nop
call fcn.18000b594
nop
call fcn.18000b594
nop
call fcn.18000b594
int3