Function at 0x140001d00
Capabilities:
Connect to http server
Create http request
Parse url

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x798
movaps xmmword [rsp + 0x780], xmm9
movaps xmmword [rsp + 0x770], xmm8
movaps xmmword [rsp + 0x760], xmm7
movaps xmmword [rsp + 0x750], xmm6
mov r12, r8
mov r13, rdx
mov r14, qword [rsp + 0x808]
mov rax, qword [0x14002f010]
xor rax, rsp
mov qword [rsp + 0x748], rax
test r14, r14
je 0x140001d61
mov dword [r14], 0
mov r8, qword [r13]
mov rdx, qword [r8]
cmp rdx, r8
je 0x140001e09
mov rbx, qword [rdx + 0x30]
test rbx, rbx
je 0x140001ef2
lea rsi, [rdx + 0x20]
mov r10, qword [rdx + 0x38]
mov eax, 1
xor ebp, ebp
nop dword [rax]
mov rdi, rsi
cmp r10, 8
jb 0x140001d9c
mov rdi, qword [rsi]
movzx ebp, word [rdi + rbp*2]
xor r15d, r15d
cmp bp, 0x22
je 0x140001fc6
add ebp, 0xffffffe0
cmp bp, 0x5f
ja 0x140001fc6
mov ebp, eax
add eax, 1
cmp rbx, rbp
ja 0x140001d90
mov rbp, qword [rdx + 0x10]
cmp byte [rbp + 0x19], 0
je 0x140001df0
nop
mov rax, qword [rdx + 8]
cmp byte [rax + 0x19], 0
jne 0x140001dfd
cmp rdx, qword [rax + 0x10]
mov rdx, rax
je 0x140001dd0
jmp 0x140001dfd
mov rax, rbp
mov rbp, qword [rbp]
cmp byte [rbp + 0x19], 0
je 0x140001df0
mov rdx, rax
cmp rax, r8
jne 0x140001d71
xorps xmm0, xmm0
movaps xmmword [rsp + 0x60], xmm0
movaps xmmword [rsp + 0x70], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xc0], 0
mov dword [rsp + 0x60], 0x68
lea rax, [rsp + 0x550]
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x70], 0x10
lea rax, [rsp + 0x350]
mov qword [rsp + 0x78], rax
mov dword [rsp + 0x80], 0x100
lea rax, [rsp + 0x150]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0xb0], 0x100
mov edx, dword [rcx + 0x10]
cmp qword [rcx + 0x18], 7
jbe 0x140001ea4
mov rdi, r9
mov rcx, qword [rcx]
jmp 0x140001ea7
mov rdi, r9
xor r15d, r15d
lea r9, [rsp + 0x60]
xor r8d, r8d
call qword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x140001fc6
lea rdx, str.https
lea rcx, [rsp + 0x550]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
test eax, eax
je 0x140001efa
lea rdx, str.http
lea rcx, [rsp + 0x550]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscmp]
test eax, eax
je 0x140001f01
xor r15d, r15d
jmp 0x140001fc6
mov ebx, 0x880000
jmp 0x140001f06
mov ebx, 0x80000
mov dword [rsp + 0x20], 0
lea rcx, str.Breakpad_1.0__Windows_
xor r15d, r15d
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetOpenW]
test rax, rax
je 0x140001fc6
mov rbp, rax
movzx r8d, word [rsp + 0x84]
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
xor r15d, r15d
lea rdx, [rsp + 0x350]
mov rcx, rax
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetConnectW]
test rax, rax
je 0x140001fbd
mov rsi, rax
mov dword [rsp + 0x30], ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x38], 0
lea rdx, str.POST
xor r15d, r15d
lea r8, [rsp + 0x150]
mov rcx, rax
xor r9d, r9d
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
test rax, rax
jne 0x14000200f
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbp
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x748]
xor rcx, rsp
call fcn.140027320
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x750]
movaps xmm7, xmmword [rsp + 0x760]
movaps xmm8, xmmword [rsp + 0x770]
movaps xmm9, xmmword [rsp + 0x780]
add rsp, 0x798
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rbx, rax
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rsi
mov rsi, qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
call rsi
mov ebp, eax
call rsi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ebp
lea r8, str._s_08X_08X
lea r9, str.___________________________
lea rsi, [rsp + 0x5d0]
mov edx, 0x2c
mov rcx, rsi
call fcn.140001c70
mov word [rsp + 0x626], 0
movaps xmm9, xmmword [0x1400281b0]
movups xmmword [rsp + 0x140], xmm9
mov word [rsp + 0x130], 0
lea rbp, [rsp + 0x130]
mov rcx, rbp
mov rdx, rsi
call fcn.140001070
movups xmmword [rsp + 0x120], xmm9
mov word [rsp + 0x110], 0
lea rdx, str.Content_Type:_multipart_form_data__boundary
lea rsi, [rsp + 0x110]
mov rcx, rsi
call fcn.140001070
mov r8, qword [rsp + 0x140]
cmp qword [rsp + 0x148], 7
mov rdx, rbp
jbe 0x1400020d4
mov rdx, qword [rsp + 0x130]
mov rcx, rsi
call fcn.140001570
cmp qword [rsp + 0x128], 7
jbe 0x1400020ef
mov rsi, qword [rsp + 0x110]
mov rcx, rbx
mov rdx, rsi
mov r8d, 0xffffffff
mov r9d, 0x20000000
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
movaps xmm7, xmmword [0x1400281d0]
movups xmmword [rsp + 0x100], xmm7
mov byte [rsp + 0xf0], 0
lea rcx, [rsp + 0x720]
mov rdx, rbp
int3