Function at 0x140001aa4
Capabilities:
Connect to http server
Create http request
Get geographical location
Parse url
Reference http user-agent string
Send data
Send http request

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x8d8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x880], rcx
mov qword [rbp + 0x888], rdx
mov qword [rbp + 0x890], r8
mov qword [rbp + 0x898], r9
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 1
lea rax, str.Mozilla_5.0__Windows_NT_10.0__rv:102.0__Gecko_20100101_Firefox_102.0
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetOpenA]
call rax
mov qword [rbp + 0x848], rax
cmp qword [rbp + 0x848], 0
jne 0x140001b1a
mov ebx, 0
jmp 0x1400020ec
lea rdx, [rbp + 0x7a0]
mov eax, 0
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov dword [rbp + 0x7a0], 0x68
mov dword [rbp + 0x7f0], 0xffffffff
mov eax, dword [rbp + 0x7f0]
mov dword [rbp + 0x7c0], eax
mov eax, dword [rbp + 0x7c0]
mov dword [rbp + 0x7b0], eax
lea rax, [rbp + 0x6a0]
mov qword [rbp + 0x7b8], rax
mov dword [rbp + 0x7c0], 0x100
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x7e8], rax
mov dword [rbp + 0x7f0], 0x400
mov rax, qword [rbp + 0x880]
mov rcx, rax
call fcn.14002fd70
lea rdx, [rbp + 0x7a0]
mov r9, rdx
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCrackUrlA]
call rax
test eax, eax
sete al
test al, al
je 0x140001be3
mov rax, qword [rbp + 0x848]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov ebx, 0
jmp 0x1400020ec
movzx eax, word [rbp + 0x7c4]
movzx ecx, ax
mov rdx, qword [rbp + 0x7b8]
mov rax, qword [rbp + 0x848]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8d, ecx
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetConnectA]
call rax
mov qword [rbp + 0x840], rax
cmp qword [rbp + 0x840], 0
jne 0x140001c60
mov rax, qword [rbp + 0x848]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov ebx, 0
jmp 0x1400020ec
mov rdx, qword [rbp + 0x7e8]
mov rax, qword [rbp + 0x840]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0
mov r8, rdx
lea rdx, str.POST
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_HttpOpenRequestA]
call rax
mov qword [rbp + 0x838], rax
cmp qword [rbp + 0x838], 0
jne 0x140001cee
mov rax, qword [rbp + 0x840]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x848]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov ebx, 0
jmp 0x1400020ec
lea rax, [rbp + 0x817]
mov qword [rbp + 0x818], rax
nop
nop
lea rdx, [rbp + 0x817]
lea rax, [rbp + 0x280]
mov r8, rdx
lea rdx, str.Content_Type:_application_x_www_form_urlencoded__charsetutf_8_r_nAccept:_application_json__text_plain____r_nAccept_Language:_en_US_en_q0.5_r_n
mov rcx, rax
call fcn.1400b0d30
lea rax, [rbp + 0x817]
mov rcx, rax
call fcn.1400a1910
nop
lea rax, [rbp + 0x270]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetSystemTime]
call rax
lea rdx, [rbp + 0x268]
lea rax, [rbp + 0x270]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
call rax
mov eax, dword [rbp + 0x268]
mov dword [rbp + 0x260], eax
mov eax, dword [rbp + 0x26c]
mov dword [rbp + 0x264], eax
mov rax, qword [rbp + 0x260]
movabs rdx, 0x346dc5d63886594b
mul rdx
shr rdx, 0xb
movabs rax, 0xfffff568cf499800
add rax, rdx
mov qword [rbp + 0x830], rax
lea rax, [rbp + 0x200]
mov r9d, 0x55
mov r8, rax
mov edx, 0x5c
mov ecx, 0x400
mov rax, qword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
call rax
lea rdx, [rbp + 0x160]
mov eax, 0
mov ecx, 0x13
mov rdi, rdx
rep stosq qword [rdi], rax
mov rdx, rdi
mov dword [rdx], eax
add rdx, 4
mov word [rbp + 0x184], 0x9c
lea rax, [rbp + 0x160]
mov r8, rax
mov edx, 0xffffffff
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_EnumDisplaySettingsA]
call rax
mov eax, dword [rbp + 0x1cc]
mov dword [rbp + 0x82c], eax
mov eax, dword [rbp + 0x1d0]
mov dword [rbp + 0x828], eax
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1400c33d0
lea rax, [rbp - 0x20]
lea rdx, str.event1data_7B_22localStorageSupported_22_3Atrue_2C_22queryString_22_3A_22_22_2C
mov rcx, rax
call fcn.1400cf550
mov rcx, rax
lea rax, str._22referrer_22_3A_22_22_2C_22websiteId_22_3A_22
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov rax, qword [rbp + 0x888]
mov rdx, rax
call fcn.1400cf890
mov rcx, rax
lea rax, str._22_2C_22templateId_22_3A_22
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov rax, qword [rbp + 0x890]
mov rdx, rax
call fcn.1400cf890
mov rcx, rax
lea rax, str._22_2C
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
lea rax, str._22website_locale_22_3A_22
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
lea rax, [rbp + 0x200]
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
lea rax, str._22_2C_22userAgent_22_3A_22Mozilla_2F5.0_20_Windows_20NT_2010.0_3B_20Win64_3B_20x64_3B_20rv_3A102.0__20Gecko_2F20100101_20Firefox_2F102.0_22_2C
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
lea rax, str._22clientDate_22_3A
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov rax, qword [rbp + 0x830]
mov rdx, rax
call fcn.140081330
mov rcx, rax
lea rax, str._2C_22viewportInnerHeight_22_3A800_2C_22viewportInnerWidth_22_3A1800_2C
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
lea rax, str._22screenHeight_22_3A
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov eax, dword [rbp + 0x828]
mov edx, eax
call fcn.1400812b0
mov rcx, rax
lea rax, str._2C_22screenWidth_22_3A
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov eax, dword [rbp + 0x82c]
mov edx, eax
call fcn.1400812b0
mov rcx, rax
lea rax, str._2C_22url_22_3A_22_2F_22_2C
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
lea rax, str._22pagePermissionTypeValue_22_3A1_2C_22title_22_3A_22EN_22_2C_22collectionId_22_3A_22
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov rax, qword [rbp + 0x898]
mov rdx, rax
call fcn.1400cf890
mov rcx, rax
lea rax, str._22_7D
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
lea rax, str.ss_cvr1b757475_9083_4a3c_be90_53ed378e8c7f_7C
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov rax, qword [rbp + 0x830]
mov rdx, rax
call fcn.140081330
mov rcx, rax
lea rax, [0x1400d9388]
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov rax, qword [rbp + 0x830]
mov rdx, rax
call fcn.140081330
mov rcx, rax
lea rax, [0x1400d9388]
mov rdx, rax
call fcn.1400cf550
mov rcx, rax
mov rax, qword [rbp + 0x830]
mov rdx, rax
call fcn.140081330
mov rcx, rax
lea rax, str._7C1
mov rdx, rax
call fcn.1400cf550
lea rax, [rbp - 0x40]
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.140031750
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14002ff50
mov esi, eax
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.14002fd70
mov rbx, rax
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.14002ff50
mov edi, eax
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.14002fd70
mov rdx, rax
mov rax, qword [rbp + 0x838]
mov dword [rsp + 0x20], esi
mov r9, rbx
mov r8d, edi
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_HttpSendRequestA]
call rax
mov dword [rbp + 0x824], eax
mov rax, qword [rbp + 0x838]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x840]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0x848]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
cmp dword [rbp + 0x824], 1
sete bl
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.1400b1a20
lea rax, [rbp - 0x20]
mov rcx, rax
call fcn.1400c3d00
lea rax, [rbp + 0x280]
mov rcx, rax
call fcn.1400b1a20
mov eax, ebx
jmp 0x14000214d
add rsp, 0x8d8
pop rbx
pop rsi
pop rdi
pop rbp
ret