Function at 0x1401c2bc0
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Send data
Send http request

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3930]
mov eax, 0x3a30
call fcn.1402cb740
sub rsp, rax
mov qword [rbp + 0xd0], 0xfffffffffffffffe
mov qword [rsp + 0x3a80], rbx
movaps xmmword [rsp + 0x3a20], xmm6
movaps xmmword [rsp + 0x3a10], xmm7
movaps xmmword [rsp + 0x3a00], xmm8
mov rax, qword [0x140418a10]
xor rax, rsp
mov qword [rbp + 0x38f0], rax
mov qword [rbp + 0x68], rdx
mov r14, rcx
mov qword [rsp + 0x60], rcx
xor ebx, ebx
mov qword [rbp - 0x10], rbx
mov r13d, ebx
mov qword [rbp - 0x80], rbx
mov rax, qword [rcx + 0x40]
mov dword [rbp - 0x70], ebx
mov dword [rbp - 0x60], ebx
mov qword [rbp - 0x40], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp - 0x58], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbp - 0x50], rax
xor al, al
mov byte [rsp + 0x40], al
mov dword [rbp - 0x78], ebx
mov qword [rsp + 0x78], rbx
mov edi, ebx
mov dword [rsp + 0x4c], ebx
mov rdx, qword [r14 + 0x18]
add rdx, 8
mov rcx, qword [r14 + 8]
call fcn.1400f9c50
mov rsi, rax
mov qword [rbp - 0x18], rax
test rax, rax
jne 0x1401c2ccb
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [r14 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x1401c3dcb
mov rbx, qword [r14 + 0x18]
mov eax, dword [rbx + 0x38]
mov dword [rsp + 0x48], eax
or r15, 0xffffffffffffffff
movss xmm8, dword [0x140374998]
cmp byte [r14 + 0x30], dil
je 0x1401c317b
cmp eax, 0x10000
jb 0x1401c317b
mov rcx, rbx
call fcn.1400d7e80
xorps xmm2, xmm2
cvtss2sd xmm2, xmm0
movsd xmm1, qword [0x140374820]
comisd xmm1, xmm2
jb 0x1401c317b
lea rdx, [rbx + 8]
mov rax, qword [rsi]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x30]
mov r12, rax
test rax, rax
je 0x1401c317b
mov ecx, dword [rsp + 0x48]
call fcn.1402b9c60
mov rsi, rax
mov qword [rsp + 0x68], rax
xor r14d, r14d
mov bl, 1
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
je 0x1401c2dd0
mov edi, 0x5a4d
mov r13d, 0x5253
test bl, bl
je 0x1401c2d8d
xor bl, bl
cmp word [rbp + 0xf0], r13w
jne 0x1401c2d8d
mov word [rbp + 0xf0], di
mov r8d, dword [rsp + 0x44]
mov ecx, r14d
add rcx, rsi
lea rdx, [rbp + 0xf0]
call fcn.1402b9d30
add r14d, dword [rsp + 0x44]
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
jne 0x1401c2d76
mov edi, dword [rsp + 0x4c]
mov r13d, edi
mov ebx, dword [rsp + 0x48]
cmp r14d, ebx
je 0x1401c2def
mov r8d, r14d
mov edx, ebx
lea rcx, str._tFailed_to_read__u_bytes_from_stream__read__u_bytes__r_n
call fcn.1402ba358
jmp 0x1401c3113
mov rax, qword [rsp + 0x60]
mov rsi, qword [rax + 8]
mov rbx, qword [rax + 0x18]
cmp dword [rbx + 0x48], 2
je 0x1401c2e47
mov dword [rbx + 0x48], 2
movzx eax, byte [rbx + 0x40]
shr al, 4
test al, 1
jne 0x1401c2e26
mov rcx, rbx
call fcn.1400d9610
mov dl, 1
mov rcx, rax
call fcn.1400e3810
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x58], 4
lea rcx, [rsi + 0x388]
lea r8, [rsp + 0x50]
mov rdx, rsi
call fcn.140119b60
xor eax, eax
mov qword [rbp - 8], rax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
lea eax, [r14 + 9]
mov r13d, eax
mov ecx, eax
call fcn.1402b9c60
mov qword [rsp + 0x78], rax
mov dword [rax], r14d
xor eax, eax
mov qword [rbp + 0x1c], rax
mov dword [rbp + 0x24], r15d
mov dword [rbp + 0x18], r15d
mov dword [rbp + 0x14], r15d
mov dword [rbp + 0x10], r15d
mov dword [rbp + 0xc], r15d
mov dword [rbp + 8], r15d
mov dword [rbp + 4], r15d
mov dword [rbp], r15d
mov dword [rbp - 8], 9
mov dword [rbp - 4], 0x200000
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rbx, rax
mov qword [rbp + 0x48], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [rsp + 0x4c], eax
mov edx, r15d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov edx, 0x46a88
lea rcx, [0x14041a490]
call qword [0x14041a490]
mov rsi, rax
test rax, rax
je 0x1401c3046
mov rcx, rax
call fcn.1402a8cc0
lea rdx, [rbp - 8]
mov rcx, rsi
call fcn.1402a60a0
mov ebx, eax
test eax, eax
jne 0x1401c302c
mov edx, dword [rsi + 0x3d350]
movzx ecx, byte [rsi + 0x33bd4]
movzx eax, cl
shl al, 2
add cl, al
add cl, byte [rsi + 0x33bd0]
movzx eax, cl
shl al, 3
add cl, al
add cl, byte [rsi + 0x33bcc]
mov r8, qword [rsp + 0x78]
mov byte [r8 + 4], cl
mov ecx, 0xb
mov eax, 2
shl eax, cl
cmp edx, eax
jbe 0x1401c2f6a
mov eax, 3
shl eax, cl
cmp edx, eax
jbe 0x1401c2f63
inc ecx
cmp ecx, 0x1e
jle 0x1401c2f44
jmp 0x1401c2f71
mov edx, 3
jmp 0x1401c2f6f
mov edx, 2
shl edx, cl
mov byte [r8 + 5], dl
mov eax, edx
shr eax, 8
mov byte [r8 + 6], al
mov eax, edx
shr eax, 0x10
mov byte [r8 + 7], al
shr edx, 0x18
mov byte [r8 + 8], dl
lea rcx, [rsi + 0x3d360]
lea rax, [0x1402a6050]
mov qword [rcx], rax
mov rax, qword [rsp + 0x68]
mov qword [rsi + 0x3d368], rax
mov eax, r14d
mov qword [rsi + 0x3d370], rax
lea rax, [0x1402a9c00]
mov qword [rbp - 8], rax
lea rax, [r8 + 9]
mov qword [rbp], rax
mov qword [rbp + 8], r13
xor eax, eax
mov dword [rbp + 0x10], eax
mov dword [rsi + 0x3d330], eax
mov qword [rsi + 0x3d358], rcx
lea rax, [rbp - 8]
mov qword [rsi + 0x3d318], rax
mov rcx, rsi
call fcn.1402a9b90
mov ebx, eax
test eax, eax
jne 0x1401c301c
mov rcx, rsi
call fcn.1402a8eb0
mov ebx, eax
test eax, eax
jne 0x1401c301c
cmp dword [rsi + 0x3d344], 0
jne 0x1401c301c
mov rcx, rsi
call fcn.1402a8eb0
mov ebx, eax
test eax, eax
je 0x1401c3005
sub r13, qword [rbp + 8]
mov eax, 7
cmp dword [rbp + 0x10], 0
cmovne ebx, eax
mov rcx, rsi
call fcn.1402a8e10
mov rdx, rsi
lea rcx, [0x14041a490]
call qword [0x14041a498]
jmp 0x1401c304b
mov ebx, 2
mov edx, dword [rsp + 0x4c]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
test ebx, ebx
je 0x1401c3083
mov edx, ebx
lea rcx, str.Compression_failed__LzmaEncode___failed__returned__d__r_n
call fcn.1402ba358
mov rcx, qword [rsp + 0x78]
call fcn.1402b9c20
mov qword [rsp + 0x78], 0
jmp 0x1401c3106
cmp r13, 0x1900000
jbe 0x1401c309a
lea rcx, str.File_still_too_large_after_compression_r_n
call fcn.1402ba358
jmp 0x1401c306b
lea esi, [r13 + 9]
mov dword [rsp + 0x48], esi
mov eax, esi
xorps xmm1, xmm1
cvtsi2ss xmm1, rax
mulss xmm1, xmm8
mov eax, r14d
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm1, xmm0
movaps xmm6, xmm8
subss xmm6, xmm1
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rbx + 0x18]
call fcn.1400d8af0
movss dword [rax + 0x14], xmm6
mov rax, qword [rbx + 0x18]
mov rcx, qword [rax + 8]
xorps xmm1, xmm1
cvtss2sd xmm1, xmm6
mov qword [rsp + 0x20], rcx
mov r9d, esi
mov r8d, r14d
movq rdx, xmm1
lea rcx, str.Compressed__3.1f_____u____u_bytes__r_n_t_s_r_n
call fcn.1402bbf64
mov rsi, qword [rsp + 0x68]
mov r13, qword [rbp - 0x80]
mov ebx, dword [rsp + 0x48]
mov rcx, rsi
call fcn.1402b9c20
mov rax, qword [r12]
mov edx, 1
mov rcx, r12
call qword [rax]
mov rsi, qword [rsp + 0x78]
test rsi, rsi
je 0x1401c3172
mov ecx, 0x18
call fcn.1402b968c
mov r12, rax
test rax, rax
je 0x1401c3165
lea rax, vtable.HitmanPro35::MemoryFileDataStream.0
mov qword [r12], rax
mov qword [r12 + 8], rsi
mov dword [r12 + 0x10], ebx
mov dword [r12 + 0x14], 0
jmp 0x1401c3168
xor r12d, r12d
mov r14, qword [rsp + 0x60]
jmp 0x1401c3206
mov rsi, qword [rbp - 0x18]
mov r14, qword [rsp + 0x60]
mov rcx, qword [r14 + 0x18]
cmp dword [rcx + 0x38], 0x1900000
jae 0x1401c2c9e
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1401c31ef
mov rcx, qword [r14 + 0x18]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rbx, rax
test rax, rax
je 0x1401c2c9e
mov ecx, 0x18
call fcn.1402b968c
mov r12, rax
test rax, rax
je 0x1401c31ea
mov rax, qword [rbx + 8]
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
lea rax, vtable.HitmanPro35::MemoryFileDataStream.0
mov qword [r12], rax
mov qword [r12 + 8], rcx
mov dword [r12 + 0x10], edx
mov dword [r12 + 0x14], 0
jmp 0x1401c3206
xor r12d, r12d
jmp 0x1401c3206
mov rdx, qword [r14 + 0x18]
add rdx, 8
mov rax, qword [rsi]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x30]
mov r12, rax
test r12, r12
je 0x1401c2c9e
mov rsi, qword [r14 + 8]
mov rbx, qword [r14 + 0x18]
cmp dword [rbx + 0x48], 3
je 0x1401c3262
mov dword [rbx + 0x48], 3
movzx eax, byte [rbx + 0x40]
shr al, 4
test al, 1
jne 0x1401c3241
mov rcx, rbx
call fcn.1400d9610
mov dl, 1
mov rcx, rax
call fcn.1400e3810
mov qword [rsp + 0x50], rbx
mov dword [rsp + 0x58], 4
lea rcx, [rsi + 0x388]
lea r8, [rsp + 0x50]
mov rdx, rsi
call fcn.140119b60
lea rsi, [0x140348ca0]
mov qword [rbp - 0x28], rsi
xor eax, eax
mov qword [rbp - 0x20], rax
mov rbx, qword [r14 + 0x18]
lea rdx, [rbp - 8]
mov rcx, rbx
call fcn.1400d7a50
cmp qword [rax + 8], 0
setne al
test al, al
je 0x1401c32dc
lea rdx, [rbp + 0x50]
mov rcx, rbx
call fcn.1400d7a50
nop
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.1400cb0d0
nop
lea rax, vtable.Core::DateTime.0
mov qword [rbp + 0x50], rax
mov r8, qword [rsp + 0x50]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_DateCreated__r_n_r_n_s_r_n
lea rcx, [rbp - 0x28]
call fcn.1401fdb30
nop
cmp dword [rsp + 0x58], 0
jle 0x1401c32dc
mov rcx, qword [rsp + 0x50]
call fcn.1402b9c20
mov rcx, qword [r14 + 8]
call fcn.140111000
mov r8, qword [rax]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_Guid__r_n_r_n_s_r_n
lea rcx, [rbp - 0x28]
call fcn.1401fdb30
mov rax, qword [r14 + 0x18]
lea rcx, str.x_7z_compressed
lea r9, str.octet_stream
cmp qword [rsp + 0x78], 0
cmovne r9, rcx
mov r8, qword [rax + 8]
lea rdx, str.____Strider35_r_nContent_Disposition:_form_data__name_Upload___filename__s__r_nContent_Type:_application__s_r_n_r_n
lea rcx, [rbp - 0x28]
call fcn.1401fdb30
lea rax, vtable.Core::Text::ASCIIEncoding.0
mov qword [rbp + 0x48], rax
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x1800
lea rax, [rbp + 0x20f0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x1c]
mov r8, qword [rbp - 0x28]
xor edx, edx
mov ecx, 0x4e4
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rcx, eax
mov dword [rsp + 0x4c], ecx
cmp ecx, 0x1800
jge 0x1401c337e
mov byte [rbp + rcx + 0x20f0], bl
cmp rcx, 0x1800
jae 0x1401c3dc5
mov byte [rbp + rcx + 0x20f0], bl
mov eax, dword [rsp + 0x48]
add eax, ecx
add rax, 0x13
mov qword [rbp - 0x18], rax
call fcn.1402049d0
mov r14, rax
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], rbx
test rax, rax
je 0x1401c3413
mov rax, qword [rax]
mov rbx, qword [rsp + 0x60]
mov r8, qword [rbx + 0x20]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rax + 0x10]
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rbp - 0x38]
call fcn.1401ff260
movsxd r9, dword [rbx + 0xc]
mov eax, dword [rbp - 0x30]
inc eax
movsxd rdx, eax
mov r8, qword [rbx]
mov rcx, qword [rbp - 0x38]
call fcn.1402bd21c
mov edx, dword [rbx + 0xc]
lea rcx, [rbp - 0x38]
call fcn.140200570
nop
cmp dword [rsp + 0x58], 0
jle 0x1401c3423
mov rcx, qword [rsp + 0x50]
call fcn.1402b9c20
jmp 0x1401c3423
mov rdx, qword [0x14041a158]
lea rcx, [rbp - 0x38]
call fcn.1401fd6c0
mov r8, qword [rbp - 0x38]
test r8, r8
je 0x1401c344c
nop dword [rax]
inc r15
cmp word [r8 + r15*2], 0
jne 0x1401c3430
test r15, r15
sete al
test al, al
jne 0x1401c344c
mov edx, 3
jmp 0x1401c3451
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0x10000000
xor r9d, r9d
lea rcx, str.Mozilla_4.0__compatible__Win32_
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rsi, rax
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x1401c348c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov r15, qword [rsp + 0x60]
test eax, eax
jne 0x1401c37fc
jmp 0x1401c34d5
mov r15, qword [rsp + 0x60]
lea r8, [r15 + 0x28]
mov edx, 3
lea r9d, [rdx + 1]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, 4
lea r8, [r15 + 0x2c]
lea edx, [r9 + 1]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, 4
lea r8, [r15 + 0x2c]
lea edx, [r9 + 2]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
lea rdx, [rbp + 0xb0]
mov rcx, qword [r15 + 0x20]
call fcn.140202550
mov rdx, qword [rax]
mov rax, qword [r15 + 0x20]
xor r9d, r9d
movzx r8d, word [rax + 0x40]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rbx, rax
mov qword [rbp - 0x10], rax
cmp dword [rbp + 0xb8], 0
jle 0x1401c3519
mov rcx, qword [rbp + 0xb0]
call fcn.1402b9c20
test rbx, rbx
jne 0x1401c3568
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rbp - 0x40]
mov qword [rsp + 0x58], rcx
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [rbx + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c355e
mov edi, dword [rbp - 0x70]
test edi, edi
jne 0x1401c37fc
mov r13, qword [rbp - 0x68]
mov qword [rbp - 0x10], r13
jmp 0x1401c356b
mov edi, 0x2ef1
jmp 0x1401c37fc
mov r13, rbx
mov esi, 0x100
xor eax, eax
mov qword [rsp + 0x70], rax
lea edx, [rax + 5]
lea rcx, [rsp + 0x68]
call fcn.1401ff260
mov eax, dword [rsp + 0x70]
inc eax
movsxd rdx, eax
mov r9d, 5
lea r8, str.https
mov rcx, qword [rsp + 0x68]
call fcn.1402bd21c
mov edx, 5
lea rcx, [rsp + 0x68]
call fcn.140200570
nop
lea rdx, [rsp + 0x50]
mov rcx, qword [r15 + 0x20]
call fcn.140202750
mov r8, rax
mov r9, qword [rsp + 0x68]
mov ecx, dword [rax + 0xc]
cmp dword [rsp + 0x74], ecx
je 0x1401c35d7
xor bl, bl
jmp 0x1401c35f9
mov rax, r9
mov r8, qword [r8]
sub r8, r9
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1401c35f4
add rax, 2
test ecx, ecx
jne 0x1401c35e0
test edx, edx
sete bl
cmp dword [rsp + 0x58], 0
jle 0x1401c360f
mov rcx, qword [rsp + 0x50]
call fcn.1402b9c20
mov r9, qword [rsp + 0x68]
cmp dword [rsp + 0x70], 0
jle 0x1401c361e
mov rcx, r9
call fcn.1402b9c20
mov eax, 0x800100
test bl, bl
cmovne esi, eax
lea rax, [0x14035c450]
mov qword [rbp + 0x80], rax
xor ebx, ebx
mov qword [rbp + 0x88], rbx
lea rdx, [rbp + 0x90]
mov rcx, qword [r15 + 0x20]
call fcn.140202580
mov dword [rsp + 0x30], esi
lea rcx, [rbp + 0x80]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rbx
lea r9, str.HTTP_1.1
mov r8, qword [rax]
lea rdx, str.POST
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
cmp dword [rbp + 0x98], ebx
jle 0x1401c3695
mov rcx, qword [rbp + 0x90]
call fcn.1402b9c20
test r13, r13
jne 0x1401c36d9
mov rcx, qword [rbp - 0x58]
mov qword [rsp + 0x50], rcx
mov rcx, qword [rbp - 0x40]
mov qword [rsp + 0x58], rcx
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [r13 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c355e
mov edi, dword [rbp - 0x70]
test edi, edi
jne 0x1401c37fc
mov r13, qword [rbp - 0x68]
xor r9d, r9d
mov r8d, 0x7e4c00
lea rdx, [0x1401802b0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetStatusCallback]
cmp rax, 0xffffffffffffffff
jne 0x1401c3708
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jne 0x1401c37fc
test r14, r14
je 0x1401c37fc
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x28]
mov rbx, rax
test rax, rax
je 0x1401c37fc
xor r14d, r14d
mov qword [rsp + 0x70], r14
lea rax, [0x140348ca0]
mov qword [rsp + 0x68], rax
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.140200570
nop
mov r9, qword [rbx]
lea r8, [rsp + 0x68]
mov rdx, qword [r15 + 0x20]
mov rcx, rbx
call qword [r9 + 8]
mov rbx, rax
cmp dword [rsp + 0x70], r14d
jle 0x1401c376e
mov rcx, qword [rsp + 0x68]
call fcn.1402b9c20
test rbx, rbx
je 0x1401c37ff
cmp dword [rbx + 0x14], 0
jle 0x1401c37c1
lea r9, [rbx + 0x18]
lea rdx, [rbx + 8]
lea r8, [0x140347f58]
lea rcx, [rsp + 0x50]
call fcn.1401fe320
mov r9d, dword [rsp + 0x5c]
mov r8, qword [rsp + 0x50]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
cmp dword [rsp + 0x58], 0
jle 0x1401c37d7
mov rcx, qword [rsp + 0x50]
call fcn.1402b9c20
jmp 0x1401c37d7
mov r9d, dword [rbx + 0x24]
mov r8, qword [rbx + 0x18]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov r9d, dword [rbx + 0x34]
mov r8, qword [rbx + 0x28]
mov edx, 0x1003
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov rax, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [rax]
jmp 0x1401c37ff
xor r14d, r14d
movsd xmm6, qword [0x140374930]
movsd xmm7, qword [0x1403747d8]
nop
cmp edi, 0x2f00
je 0x1401c3820
test edi, edi
jne 0x1401c3b90
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp - 0x18]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], r14d
xor r9d, r9d
lea r8d, [r9 + 0x39]
lea rdx, str.content_type:_multipart_form_data__boundary__Strider35_r_n
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x1401c3886
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x58], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c388e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c3820
test edi, edi
jne 0x1401c3b90
xor r9d, r9d
mov r8d, dword [rsp + 0x4c]
lea rdx, [rbp + 0x20f0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c38ee
mov rax, qword [rbp - 0x58]
mov qword [rsp + 0x68], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x70], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x68]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c38f6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c3820
mov dword [rbp - 0x60], r14d
test edi, edi
jne 0x1401c3b90
mov rcx, qword [r15 + 0x18]
call fcn.1400d8af0
mov rbx, rax
mov dword [rsp + 0x44], r14d
lea rcx, [rbp + 0x50]
call fcn.1400eae80
nop
mov r15d, r14d
cmp qword [rsp + 0x78], 0
sete sil
mov r10, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [r10 + 8]
test al, al
je 0x1401c3b10
nop dword [rax + rax]
test sil, sil
je 0x1401c3982
xor sil, sil
mov eax, 0x5253
cmp word [rbp + 0xf0], ax
jne 0x1401c3982
mov eax, 0x5a4d
mov word [rbp + 0xf0], ax
xor r9d, r9d
mov r8d, dword [rsp + 0x44]
lea rdx, [rbp + 0xf0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c39d9
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0xa8], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0xa0]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c39e1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c3b03
test edi, edi
jne 0x1401c3b10
mov eax, dword [rbp - 0x60]
mov dword [rbp - 0x60], edi
add r14d, eax
add r15d, eax
lea rcx, [rbp + 0xd8]
call fcn.1400eae80
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0xc0]
mov rcx, rax
call fcn.1400cb050
xorps xmm1, xmm1
cvtsi2sd xmm1, qword [rax + 8]
divsd xmm1, xmm6
lea rax, vtable.Core::TimeSpan.0
mov qword [rbp + 0xc0], rax
lea rax, vtable.Core::DateTime.0
mov qword [rbp + 0xd8], rax
comisd xmm1, xmm7
jb 0x1401c3a88
movd xmm0, r15d
cvtdq2pd xmm0, xmm0
divsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [rbx + 0x10], eax
lea rcx, [rbp - 8]
call fcn.1400eae80
mov rcx, qword [rax + 8]
mov qword [rbp + 0x58], rcx
mov eax, dword [rax + 0x10]
mov dword [rbp + 0x60], eax
lea rax, vtable.Core::DateTime.0
mov qword [rbp - 8], rax
xor r15d, r15d
movd xmm1, r14d
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm8
mov eax, dword [rsp + 0x48]
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
divss xmm1, xmm0
ucomiss xmm1, dword [rbx + 0xc]
jp 0x1401c3aad
je 0x1401c3add
movss dword [rbx + 0xc], xmm1
cmp byte [rbx + 8], 0
je 0x1401c3add
mov rax, qword [rbx]
mov rdx, qword [0x14042bb58]
mov qword [rbp + 0x70], rax
mov dword [rbp + 0x78], 3
lea rcx, [rdx + 0x388]
lea r8, [rbp + 0x70]
call fcn.140119b60
mov rax, qword [r12]
lea r9, [rsp + 0x44]
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r12
call qword [rax + 8]
test al, al
jne 0x1401c3960
jmp 0x1401c3b10
mov r15, qword [rsp + 0x60]
xor r14d, r14d
jmp 0x1401c3810
test edi, edi
jne 0x1401c3b8d
xor r9d, r9d
lea r8d, [rdi + 0x13]
lea rdx, str._r_n____Strider35___r_n
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x1401c3b60
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x30], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x28]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c3b68
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
mov r15, qword [rsp + 0x60]
mov r14d, 0
je 0x1401c3820
mov eax, dword [rbp - 0x60]
test edi, edi
cmove eax, r14d
mov dword [rbp - 0x60], eax
jmp 0x1401c3b90
xor r14d, r14d
mov r15, qword [rsp + 0x60]
cmp byte [rsp + 0x40], 0
jne 0x1401c3bb6
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [r15 + 0x50]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
setne al
mov byte [rsp + 0x40], al
test edi, edi
jne 0x1401c3d12
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x1401c3bfe
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x40], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea ecx, [rdi + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov edi, 0x2ef1
test eax, eax
cmove edi, dword [rbp - 0x70]
jmp 0x1401c3c06
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp edi, 0x2f00
je 0x1401c3820
test edi, edi
jne 0x1401c3d12
mov dword [rsp + 0x4c], 4
mov dword [rsp + 0x44], r14d
mov qword [rsp + 0x28], r14
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
xor r8d, r8d
mov edx, 0x20000013
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov ebx, dword [rbp - 0x78]
test eax, eax
cmovne ebx, dword [rsp + 0x44]
lea rax, vtable.Core::Text::ASCIIEncoding.0
mov qword [rbp - 0x18], rax
mov rsi, qword [rbp + 0x68]
nop word [rax + rax]
xor r9d, r9d
mov r8d, 0x2000
lea rdx, [rbp + 0xf0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x1401c3cbb
mov rax, qword [rbp - 0x58]
mov qword [rbp + 0x38], rax
mov rax, qword [rbp - 0x40]
mov qword [rbp + 0x40], rax
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
jne 0x1401c3d10
mov eax, dword [rbp - 0x70]
jmp 0x1401c3cc1
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1401c3d10
mov eax, dword [rbp - 0x60]
mov dword [rbp - 0x60], r14d
test eax, eax
je 0x1401c3d10
mov dword [rsp + 0x20], eax
xor r9d, r9d
lea r8, [rbp + 0xf0]
lea rdx, [rbp + 0x28]
lea rcx, [rbp - 0x18]
call fcn.1402043c0
nop
mov rdx, rax
mov rcx, rsi
call fcn.1401fd840
nop
cmp dword [rbp + 0x30], 0
jle 0x1401c3c70
mov rcx, qword [rbp + 0x28]
call fcn.1402b9c20
jmp 0x1401c3c70
jmp 0x1401c3d15
mov ebx, dword [rbp - 0x78]
test r13, r13
je 0x1401c3d30
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
or edx, 0xffffffff
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x1401c3d42
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x1401c3d52
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
test ebx, ebx
jne 0x1401c3d8d
cmp dword [rbp - 0x30], ebx
jle 0x1401c3d65
mov rcx, qword [rbp - 0x38]
call fcn.1402b9c20
nop
cmp dword [rbp - 0x20], 0
jle 0x1401c3d75
mov rcx, qword [rbp - 0x28]
call fcn.1402b9c20
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, edi
jmp 0x1401c3dcb
cmp dword [rbp - 0x30], 0
jle 0x1401c3d9d
mov rcx, qword [rbp - 0x38]
call fcn.1402b9c20
nop
cmp dword [rbp - 0x20], 0
jle 0x1401c3dad
mov rcx, qword [rbp - 0x28]
call fcn.1402b9c20
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, ebx
jmp 0x1401c3dcb
call fcn.1402bb5f0
nop
mov rcx, qword [rbp + 0x38f0]
xor rcx, rsp
call fcn.1402b9610
lea r11, [rsp + 0x3a30]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret