Function at 0x18049c6d3
Capabilities:
Check http status code
Connect to http server
Create http request
Execute anti-debugging instructions
Send data
Send http request

Disassembly:
mov qword [rsp + 0x10], rbx
bts bx, r8w
rcr ebx, 0xb5
mov qword [rsp + 0x18], rsi
movzx rax, sp
rdtsc
mov qword [rsp + 0x20], rdi
shl dl, 0x3a
push rbp
cdqe
push r14
push r15
bsf bx, r10w
sub rsp, 0x110
bswap bx
adc ax, bp
cmovb eax, r14d
lea rbp, [rsp + 0x60]
cdq
bts dx, r13w
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180476ea8]
cmovp bx, r8w
cwd
xor rax, rsp
cmovbe dx, r15w
sbb bl, r13b
rcl rdx, cl
mov qword [rbp + 0xa0], rax
mov rbx, rcx
sub r15d, r15d
bswap cx
shl dh, 0xab
mov dword [rsp + 0x20], r15d
sub r9d, r9d
sub r8d, r8d
movsx dx, r13b
movzx edx, cx
cmovl edx, r8d
lea edx, [r15 + 1]
not rcx
mov cx, 0xc417
lea rcx, str.WinInet_Example
jmp 0x18049c77c
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rdi, rax
test rax, rax
jne 0x18049c7d0
lea rdx, str.Failed_to_open_internet_session.
movsx ecx, si
bswap cx
mov cl, r12b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
jmp 0x18049c7aa
call fcn.180162c90
lea rdx, [0x180162e60]
mov rcx, rax
jmp 0x18049c7be
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
sub al, al
jmp 0x18049c7cb
jmp 0x18049cdc4
movabs rax, 0xe3a413be01ede27f
test r8w, dx
mov qword [rbp], rax
movzx rcx, sp
mov rax, qword [rbp]
adc r8b, 0x11
dec ch
cmc
mov qword [rbp + 0x20], rax
movsxd rcx, r14d
movabs rax, 0xada6792b7dbae217
mov qword [rbp], rax
movzx edx, r8w
and dx, dx
mov rax, qword [rbp]
rol cx, 0xbf
or rdx, 0x1c236517
mov qword [rbp + 0x28], rax
bts ax, r15w
cwde
movabs rax, 0xf9c73d1d3c7dccea
sets r8b
or ecx, 0x7e3a74a2
mov qword [rbp], rax
shld ecx, r12d, 0x3b
sbb r8d, r14d
mov rax, qword [rbp]
bts cx, r13w
sete r8b
mov qword [rbp + 0x30], rax
or dl, r13b
sal rcx, 0xbf
and edx, esp
movabs rax, 0xf7e9db067d0c3408
rcl r8, cl
rcl r8b, 0x2b
mov qword [rbp], rax
bts rdx, rax
xor ch, 0x32
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x97ca72d671888a0b
sal r8w, cl
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xc5d2005b53c28f78
shl dl, cl
movsx dx, r8b
mov qword [rbp], rax
mov rax, r9
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
rdtsc
cdq
or rax, 0xffffffff860b1933
movabs rax, 0x9caf4a64521ca285
test r10w, 0x871e
mov cx, 0xa411
shld cx, r10w, 0x2c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
lahf
movabs rax, 0xf7e9b6691e22517a
mov qword [rbp], rax
cdqe
sal ecx, cl
mov rax, qword [rbp]
btr r8, 0x1b
ror dl, cl
mov qword [rbp + 0x98], rax
sbb r8b, al
sal r8b, 6
vmovdqu ymm0, ymmword [rbp + 0x20]
mov r8b, r14b
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
add dl, r9b
shld r8, r15, 0x24
shrd r8, rbx, 0x92
vmovdqa ymmword [rbp + 0x20], ymm1
mov r8d, 0x1bb
bswap rdx
xadd cx, dx
mov qword [rsp + 0x38], r15
ror edx, cl
inc dx
mov dword [rsp + 0x30], r15d
adc rcx, rsp
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r15
sar cl, cl
sub ecx, edx
movzx cx, r8b
xor r9d, r9d
lea rdx, [rbp + 0x20]
xchg ch, ch
not ch
mov rcx, rdi
jmp 0x18049c98d
vzeroupper
call qword [sym.imp.WININET.dll_InternetConnectA]
mov r14, rax
jmp 0x18049c9a0
test rax, rax
jmp 0x18049c9a8
jne 0x18049c9f0
lea rdx, str.Failed_to_connect.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
jmp 0x18049c9c1
call fcn.180162c90
lea rdx, [0x180162e60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x18049c9de
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor al, al
jmp 0x18049c9eb
jmp 0x18049cdc4
lea rax, str.text_
bswap rdx
mov cl, r14b
movzx dx, ah
mov qword [rbp + 0x68], rax
shrd rax, rbp, 0x22
mov qword [rbp + 0x70], r15
shl r8w, cl
mov qword [rsp + 0x38], r15
or al, r14b
rcl r8b, cl
cwd
mov dword [rsp + 0x30], 0x800000
xor r8, rbp
cmovns ecx, eax
movsx cx, bpl
lea rax, [rbp + 0x68]
bswap dx
or r8w, r11w
mov qword [rsp + 0x28], rax
movzx r8, di
mov qword [rsp + 0x20], r15
sub r9d, r9d
bswap r8
jmp 0x18049ca56
lea r8, str._auth
movsx cx, r10b
cdq
xchg edx, edx
lea rdx, str.POST
movzx ecx, di
sete cl
mov ecx, 0x3c2875bc
mov rcx, r14
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rsi, rax
test rax, rax
jmp 0x18049ca8b
jne 0x18049cadc
lea rdx, str.Failed_to_open_HTTP_request.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.180162c90
lea rdx, [0x180162e60]
mov rcx, rax
jmp 0x18049cab3
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, r14
jmp 0x18049cac1
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
jmp 0x18049cacf
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor al, al
jmp 0x18049cdc4
mov rcx, qword [rbx + 0x10]
bsr ax, ax
ror ah, 0x17
sbb eax, 0xa816891f
movabs rax, 0x7fffffffffffffff
test r11b, bpl
sub rax, rcx
cmp rax, 5
jmp 0x18049cb05
jb 0x18049ce2c
cmp qword [rbx + 0x18], 0x10
jmp 0x18049cb15
jb 0x18049cb26
mov rbx, qword [rbx]
movsxd r9, r10d
jmp 0x18049cb26
mov qword [rsp + 0x30], rcx
movzx r9w, r13b
mov qword [rsp + 0x28], rbx
movzx r9w, r13b
not r9w
mov qword [rsp + 0x20], 5
lea r9, str.hwid
movzx ecx, bp
movsx rcx, r15w
movsxd rcx, esp
lea rcx, [rbp + 0x48]
jmp 0x18049cb61
call fcn.1801996d0
nop
or edx, 0xf11664b9
lea r9, [rbp + 0x48]
btr rcx, 0x19
cqo
cmp qword [rbp + 0x60], 0x10
movsx ecx, cx
cwd
cmovae r9, qword [rbp + 0x48]
movsx cx, r12b
lahf
mov eax, dword [rbp + 0x58]
movsx cx, bl
mov dword [rsp + 0x20], eax
movsx rdx, bx
mov r8d, 0xffffffff
movzx ecx, bp
lea rdx, str.Content_Type:_application_x_www_form_urlencoded
jmp 0x18049cbb1
mov rcx, rsi
jmp 0x18049cbb9
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jmp 0x18049cbc6
jne 0x18049cc2d
lea rdx, str.Failed_to_send_HTTP_request.
mov cl, 0x2a
jmp 0x18049cbda
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
jmp 0x18049cbe6
call fcn.180162c90
lea rdx, [0x180162e60]
movsxd rcx, edx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x18049cc06
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
jmp 0x18049cc14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
jmp 0x18049cc22
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x18049cd30
mov dword [rbp + 0x40], r15d
movsxd rcx, esi
mov dword [rbp + 0x44], 4
jmp 0x18049cc43
mov qword [rsp + 0x20], r15
cmovb rcx, rsp
cqo
lea r9, [rbp + 0x44]
movsxd r8, ecx
movsx rcx, sp
xchg dh, dl
lea r8, [rbp + 0x40]
movzx cx, spl
mov edx, 0x20000013
movsx rcx, r10w
not cl
xchg cx, cx
mov rcx, rsi
jmp 0x18049cc7a
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
jmp 0x18049cc91
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
jmp 0x18049cc9f
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, dword [rbp + 0x40]
cmp di, si
cmp r15b, 0xa7
stc
cmp eax, 0xc8
jne 0x18049ccc7
mov bl, 1
jmp 0x18049ccc2
jmp 0x18049cd3b
cmp eax, 0x193
jmp 0x18049ccd1
jne 0x18049cce8
lea rdx, str.Youre_license_has_been_expired.
jmp 0x18049cce3
jmp 0x18049cd11
cmp eax, 0x194
mov dl, spl
lea rdx, str.Youre_not_whitelisted.
jmp 0x18049ccfc
je 0x18049cd11
lea rdx, str.Unknown_error._It_looks_like_you_are_having_problems_connecting_to_a_remote_server.
rcl r9b, 0x35
add r8b, 0x36
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Error:
test dx, 0x9713
xor ecx, ecx
jmp 0x18049cd2a
call qword [sym.imp.USER32.dll_MessageBoxA]
xor bl, bl
xor dl, 0x32
mov dx, si
inc dx
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jmp 0x18049cd48
jb 0x18049cdb4
inc rdx
and ecx, r9d
rol ah, cl
sbb eax, 0x5eb29bb0
mov rcx, qword [rbp + 0x48]
mov rax, 0xffffffffe394e509
jmp 0x18049cd6e
mov rax, rcx
test cl, r14b
cmp rdx, 0x1000
jmp 0x18049cd80
jb 0x18049cdaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
cmc
stc
sub rax, rcx
cmp esi, esp
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18049cdaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18038323c
movzx eax, bl
dec cl
adc ecx, 0xa210228e
jmp 0x18049cdc4
mov rcx, qword [rbp + 0xa0]
clc
cmp bp, r15w
xor rcx, rsp
jmp 0x18049cdd8
call fcn.1803831e0
lea r11, [rsp + 0x110]
movsx ebx, r11w
movzx rsi, r13w
movsx r14w, r15b
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
movzx r14d, si
movzx r14, r8w
mov rdi, qword [r11 + 0x38]
mov rsp, r11
movsxd r14, r14d
movsx rbp, bx
movzx r15w, spl
pop r15
movsx bp, al
setge bpl
pop r14
movzx rbp, r14w
pop rbp
jmp 0x18049ce2b
ret
call fcn.18012b080
nop
jmp 0x180195f32