Function at 0x1400019a0
Capabilities:
Check http status code
Connect to http server
Create http request
Delete file
Parse url
Send data
Send http request

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1428
call fcn.140009000
sub rsp, rax
movaps xmmword [rsp + 0x1410], xmm6
mov qword [rsp + 0x68], rdx
mov rax, qword [0x140011030]
xor rax, rsp
mov qword [rsp + 0x1408], rax
mov edi, 1
cmp ecx, 3
jl 0x140003999
mov eax, ecx
and eax, 1
je 0x140003999
mov eax, ecx
mov qword [rsp + 0x70], rax
mov r15d, 1
xor r12d, r12d
xorps xmm6, xmm6
xor ebp, ebp
xor esi, esi
mov rax, qword [rsp + 0x68]
mov rdi, qword [rax + r15*8 + 8]
mov qword [rsp + 0x1150], 0
mov qword [rsp + 0x1168], 0xf
mov byte [rsp + 0x1150], 0
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r14, rax
cmp rax, 0xf
jbe 0x140001a80
test r14, r14
js 0x1400039cd
mov rbx, r14
or rbx, 0xf
cmp rbx, 0x17
mov eax, 0x16
cmovb rbx, rax
cmp rbx, 0xfff
jb 0x140001aa6
lea rcx, [rbx + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x140001ab2
mov qword [rsp + 0x1160], r14
lea rcx, [rsp + 0x1150]
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + r14 + 0x1150], 0
jmp 0x140001ade
lea rcx, [rbx + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r13, rax
mov qword [rsp + 0x1160], r14
mov qword [rsp + 0x1168], rbx
mov rcx, r13
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r13 + r14], 0
mov qword [rsp + 0x1150], r13
mov rax, qword [rsp + 0x68]
mov rdi, qword [rax + r15*8]
mov qword [rsp + 0x1260], 0
mov qword [rsp + 0x1278], 0xf
mov byte [rsp + 0x1260], 0
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r13, rax
cmp rax, 0x10
lea rbx, [rsp + 0x1260]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r15
jb 0x140001b7b
test r13, r13
js 0x1400039cd
mov r15, r13
or r15, 0xf
cmp r15, 0x17
mov eax, 0x16
cmovb r15, rax
cmp r15, 0xfff
jb 0x140001bf7
lea rcx, [r15 + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140001c03
mov qword [rsp + 0x1270], r13
mov rcx, rbx
mov rdx, rdi
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + r13 + 0x1260], 0
mov rdi, qword [rsp + 0x1260]
mov r13, qword [rsp + 0x1270]
mov r15, qword [rsp + 0x1278]
mov qword [rsp + 0x150], 0
lea rax, [rsp + 0x170]
movups xmmword [rax - 0x10], xmm6
cmp r15, 0x10
setae al
cmovae rbx, rdi
cmp r13, 0xf
ja 0x140001bf3
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x150], xmm0
mov r12d, 0xf
mov esi, eax
jmp 0x140001ca6
mov esi, eax
jmp 0x140001c4c
lea rcx, [r15 + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbx, rax
mov qword [rsp + 0x1270], r13
mov qword [rsp + 0x1278], r15
mov rcx, rbx
mov rdx, rdi
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r13], 0
mov qword [rsp + 0x1260], rbx
mov qword [rsp + 0x150], 0
lea rax, [rsp + 0x170]
movups xmmword [rax - 0x10], xmm6
mov sil, 1
mov rdi, rbx
mov r12, r13
or r12, 0xf
movabs rax, 0x7fffffffffffffff
cmp r12, rax
cmovae r12, rax
cmp r12, 0xfff
jb 0x140001c85
lea rcx, [r12 + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140001c92
lea rcx, [r12 + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, rax
mov qword [rsp + 0x150], rcx
lea r8, [r13 + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], r12
mov r13, qword [rsp + 0x1150]
mov r12, qword [rsp + 0x1160]
mov rbp, qword [rsp + 0x1168]
cmp rbp, 0x10
lea r14, [rsp + 0x1150]
cmovae r14, r13
cmp r12, 0xf
ja 0x140001cfa
movups xmm0, xmmword [r14]
lea rax, [rsp + 0x170]
movups xmmword [rax], xmm0
mov ebx, 0xf
jmp 0x140001d53
mov rbx, r12
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140001d32
lea rcx, [rbx + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140001d3e
lea rcx, [rbx + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, rax
mov qword [rsp + 0x170], rcx
lea r8, [r12 + 1]
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], rbx
test sil, sil
mov r14, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
je 0x140001da6
lea rdx, [r15 + 1]
cmp rdx, 0x1000
jb 0x140001d9e
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x1400039c7
add r15, 0x28
mov rdx, r15
mov rdi, rax
mov rcx, rdi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp rbp, 0x10
mov r15, qword [rsp + 0x60]
jb 0x140001de5
lea rdx, [rbp + 1]
cmp rdx, 0x1000
jb 0x140001ddd
mov rax, qword [r13 - 8]
add r13, 0xfffffffffffffff8
sub r13, rax
cmp r13, 0x20
jae 0x1400039c7
add rbp, 0x28
mov rdx, rbp
mov r13, rax
mov rcx, r13
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rbp, qword [rsp + 0x80]
cmp rbp, r14
je 0x140001e0e
mov rcx, rbp
lea rdx, [rsp + 0x150]
call fcn.1400039e0
add rbp, 0x40
mov r13, r12
jmp 0x140001ffb
mov rsi, r15
mov rdi, rbp
sub rdi, r12
mov r14, rdi
sar r14, 6
lea r15, [r14 + 1]
mov rax, r14
shr rax, 1
movabs rdx, 0x3ffffffffffffff
mov rcx, rdx
sub rcx, rax
add rax, r14
cmp rax, r15
cmovbe rax, r15
cmp r14, rcx
cmova rax, rdx
cmp rax, rdx
ja 0x1400039d2
mov rcx, rax
shl rcx, 6
cmp rax, 0x40
mov qword [rsp + 0x50], rcx
jb 0x140001e7b
or rcx, 0x27
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x140001e92
test rax, rax
je 0x140001e8f
mov rcx, qword [rsp + 0x50]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r13, rax
jmp 0x140001e92
xor r13d, r13d
shl r14, 6
add r14, r13
mov rcx, r14
lea rdx, [rsp + 0x150]
call fcn.1400039e0
cmp r12, rbp
je 0x140001fa8
mov r14, r12
mov r12, r13
mov rcx, r13
mov rdx, r14
call fcn.1400039e0
add r13, 0x40
add r14, 0x40
cmp r14, rbp
jne 0x140001eb8
mov rax, qword [rsp + 0x58]
test rax, rax
mov r13, r12
mov r14, qword [rsp + 0x50]
je 0x140001feb
mov r12, rax
cmp rax, rbp
je 0x140001fb2
mov rbx, r12
mov rax, qword [rbx + 0x38]
cmp rax, 0x10
jb 0x140001f34
mov rcx, qword [rbx + 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140001f2f
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov qword [rbx + 0x30], 0
mov qword [rbx + 0x38], 0xf
mov byte [rbx + 0x20], 0
mov rax, qword [rbx + 0x18]
cmp rax, 0x10
jb 0x140001f86
mov rcx, qword [rbx]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140001f81
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x40
cmp rbx, rbp
jne 0x140001ef5
jmp 0x140001fb2
test r12, r12
mov r14, qword [rsp + 0x50]
je 0x140001feb
cmp rdi, 0x1000
jb 0x140001fd8
mov rax, qword [r12 - 8]
add r12, 0xfffffffffffffff8
sub r12, rax
cmp r12, 0x20
jae 0x1400039c7
or rdi, 0x27
mov r12, rax
mov rcx, r12
mov rdx, rdi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rbx, qword [rsp + 0x188]
shl r15, 6
add r15, r13
add r14, r13
mov rbp, r15
mov r15, rsi
cmp rbx, 0x10
jb 0x14000203a
mov rcx, qword [rsp + 0x170]
lea rdx, [rbx + 1]
cmp rdx, 0x1000
jb 0x140002035
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400039c7
add rbx, 0x28
mov rdx, rbx
mov rcx, rax
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rax, qword [rsp + 0x168]
cmp rax, 0x10
jb 0x140002081
mov rcx, qword [rsp + 0x150]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000207c
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rsi, r14
add r15, 2
mov r12, r13
cmp r15, qword [rsp + 0x70]
jb 0x140001a08
mov rax, qword [rsp + 0x68]
mov rdi, qword [rax + 0x10]
mov qword [rsp + 0x1380], 0
mov qword [rsp + 0x1398], 0xf
mov byte [rsp + 0x1380], 0
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r14, rax
cmp rax, 0xf
jbe 0x140002110
test r14, r14
js 0x1400039cd
mov r15, rbp
mov rax, r14
or rax, 0xf
cmp rax, 0x17
mov ebx, 0x16
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140002142
lea rcx, [rbx + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rbp, [rax + 0x27]
and rbp, 0xffffffffffffffe0
mov qword [rbp - 8], rax
jmp 0x14000214e
mov r15, rbp
mov qword [rsp + 0x50], rsi
lea r12, [rsp + 0x1380]
mov qword [r12 + 0x10], r14
mov rcx, r12
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + r14 + 0x1380], 0
mov rbp, qword [r12]
jmp 0x14000217f
lea rcx, [rbx + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbp, rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x1390], r14
mov qword [rsp + 0x1398], rbx
mov rcx, rbp
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + r14], 0
mov qword [rsp + 0x1380], rbp
lea r12, [rsp + 0x150]
mov r8d, 0x105
mov rcx, r12
xor edx, edx
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x1380]
cmp qword [rax + 0x18], 0x10
cmovb rbp, rax
mov r8d, 0x105
mov rcx, r12
mov rdx, rbp
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__fullpath]
test rax, rax
lea rbp, [rsp + 0x1150]
lea r14, [rsp + 0x1260]
je 0x14000227d
lea rdi, [rsp + 0xa0]
mov byte [rdi + 2], 0
mov word [rdi], 0
mov r8d, 0x100
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
xorps xmm6, xmm6
movups xmmword [rsp + 0x38], xmm6
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], 0x100
lea rcx, [rsp + 0x150]
mov r8d, 3
mov rdx, rdi
mov r9, r14
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath_s]
test eax, eax
jne 0x140002275
lea rdi, [rsp + 0x1150]
mov r8d, 0x105
mov rcx, rdi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
movups xmmword [rsp + 0x20], xmm6
lea r8, [rsp + 0xa0]
lea r9, [rsp + 0x1260]
mov edx, 0x105
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__makepath_s]
test eax, eax
jne 0x140002275
lea rcx, [rsp + 0x1150]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__chdir]
lea r14, [rsp + 0x1260]
mov rax, qword [rsp + 0x1398]
cmp rax, 0x10
jb 0x1400022c4
mov rcx, qword [rsp + 0x1380]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400022bf
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp r13, r15
je 0x140003897
mov rax, r13
xor r13d, r13d
xorps xmm6, xmm6
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x1260], r13
mov qword [rsp + 0x1270], r13
mov qword [rsp + 0x1278], 0xf
mov byte [rsp + 0x1260], 0
lea rax, [0x14000c1c0]
mov qword [rsp + 0x1150], rax
lea rcx, [rsp + 0x1200]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::ios_base::constructor_void____ptr64]
lea rax, [0x14000c268]
mov qword [rsp + 0x1200], rax
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rdi, [0x14000c1b8]
mov qword [rsp + rax + 0x1150], rdi
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
mov ebx, 0xffffff50
lea ecx, [rax + rbx]
mov dword [rsp + rax + 0x114c], ecx
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [0x14000c270]
mov qword [rsp + rax + 0x1150], rcx
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0x18]
mov dword [rsp + rax + 0x114c], ecx
mov qword [rsp + 0x1158], r13
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1150
lea rsi, [rsp + 0x1160]
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::init_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
mov qword [rsp + rax + 0x1150], rdi
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea ecx, [rax + rbx]
mov dword [rsp + rax + 0x114c], ecx
mov rcx, rsi
call fcn.140009310
mov rax, qword [rsp + 0x58]
lea rdx, [rax + 0x20]
cmp qword [rax + 0x38], 0x10
mov qword [rsp + 0x68], rdx
jb 0x140002415
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0x1160]
call fcn.140009390
mov rcx, qword [rsp + 0x1150]
movsxd rcx, dword [rcx + 4]
add rcx, rsp
add rcx, 0x1150
mov edx, 0
test rax, rax
jne 0x140002448
mov edx, dword [rcx + 0x10]
or edx, 2
xor r8d, r8d
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
cmp qword [rsp + 0x11e0], 0
mov rbx, qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
jne 0x14000248c
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x148], 0xf
mov qword [rsp + 0x140], r13
mov byte [rsp + 0x130], 0
jmp 0x140002582
mov r8d, 0x1000
mov rcx, rbp
mov rdx, r12
call rbx
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1150
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::bad_void_const___ptr64]
test al, al
jne 0x140002463
mov r9, qword [rsp + 0x1158]
mov rcx, qword [rsp + 0x1270]
mov rax, qword [rsp + 0x1278]
mov rdx, rax
sub rdx, rcx
cmp rdx, r9
jae 0x1400024ee
mov rcx, r14
mov rdx, r9
mov r8, r12
call fcn.140001840
jmp 0x14000251d
lea rsi, [rcx + r9]
mov qword [rsp + 0x1270], rsi
mov rdi, r14
cmp rax, 0x10
jb 0x14000250b
mov rdi, qword [rsp + 0x1260]
add rcx, rdi
mov rdx, r12
mov r8, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1150
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::eof_void_const___ptr64]
test al, al
je 0x14000248c
movups xmm0, xmmword [rsp + 0x1260]
movups xmm1, xmmword [rsp + 0x1270]
movaps xmmword [rsp + 0x140], xmm1
movaps xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x1270], 0
mov qword [rsp + 0x1278], 0xf
mov byte [rsp + 0x1260], 0
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [0x14000c1b8]
mov qword [rsp + rax + 0x1150], rcx
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0xb0]
mov dword [rsp + rax + 0x114c], ecx
lea rcx, [rsp + 0x1160]
call fcn.1400094b0
lea rcx, [rsp + 0x1200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
mov rax, qword [rsp + 0x1278]
cmp rax, 0x10
jb 0x140002618
mov rcx, qword [rsp + 0x1260]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140002613
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp qword [rsp + 0x140], 0
je 0x140002c6f
movaps xmmword [rsp + 0x1180], xmm6
movaps xmmword [rsp + 0x1190], xmm6
movaps xmmword [rsp + 0x1170], xmm6
movaps xmmword [rsp + 0x1160], xmm6
movaps xmmword [rsp + 0x1150], xmm6
mov qword [rsp + 0x11a0], 0
lea rax, [fcn.140004640]
mov qword [rsp + 0x1180], rax
lea rax, [0x140004650]
mov qword [rsp + 0x1188], rax
xor ecx, ecx
mov edx, 1
mov r8d, 0x1718
call fcn.140004640
test rax, rax
je 0x140002cbe
mov rdi, rax
mov qword [rsp + 0x1178], rax
mov qword [rax], rbp
mov dword [rax + 8], 0x2a
mov dword [rax + 0x2c], 2
mov qword [rax + 0x30], 0
movabs rax, 0xf00008000
mov qword [rdi + 0x44], rax
mov dword [rdi + 0x4c], 0x7fff
mov qword [rdi + 0x74], rax
movabs rax, 0x500007fff
mov qword [rdi + 0x7c], rax
xor ecx, ecx
mov edx, 0x8000
mov r8d, 2
call fcn.140004640
mov qword [rdi + 0x50], rax
mov edx, dword [rdi + 0x44]
mov rax, qword [rsp + 0x1180]
mov rcx, qword [rsp + 0x1190]
mov r8d, 2
call qword [0x140013010]
mov qword [rdi + 0x60], rax
mov edx, dword [rdi + 0x74]
mov rax, qword [rsp + 0x1180]
mov rcx, qword [rsp + 0x1190]
mov r8d, 2
call qword [0x140013010]
mov qword [rdi + 0x68], rax
mov dword [rdi + 0x1714], 0
mov dword [rdi + 0x16f0], 0x4000
mov rax, qword [rsp + 0x1180]
mov rcx, qword [rsp + 0x1190]
mov edx, 0x4000
mov r8d, 4
call qword [0x140013010]
mov qword [rdi + 0x10], rax
mov ecx, dword [rdi + 0x16f0]
lea edx, [rcx*4]
mov dword [rdi + 0x18], edx
cmp qword [rdi + 0x50], 0
je 0x140002ca0
cmp qword [rdi + 0x60], 0
je 0x140002ca0
cmp qword [rdi + 0x68], 0
je 0x140002ca0
test rax, rax
je 0x140002ca0
add rax, rcx
mov qword [rdi + 0x16e8], rax
lea eax, [rcx + rcx*2]
add eax, 0xfffffffd
mov dword [rdi + 0x16f8], eax
mov qword [rdi + 0xac], 6
mov byte [rdi + 0x3c], 8
cmp qword [rsp + 0x1180], 0
je 0x140002cbe
cmp qword [rsp + 0x1188], 0
je 0x140002cbe
mov rax, qword [rsp + 0x1178]
test rax, rax
je 0x140002cbe
cmp qword [rax], rbp
jne 0x140002cbe
mov ecx, dword [rax + 8]
cmp ecx, 0x71
jne 0x140002c76
mov dword [rsp + 0x116c], r13d
mov dword [rsp + 0x115c], r13d
mov qword [rsp + 0x1170], 0
mov dword [rsp + 0x1198], 2
mov dword [rax + 0x28], r13d
mov rcx, qword [rax + 0x10]
mov qword [rax + 0x20], rcx
mov ecx, dword [rax + 0x2c]
test ecx, ecx
js 0x140002ce9
xor edx, edx
cmp ecx, 2
mov ecx, 0x39
mov r8d, 0x2a
cmovne ecx, r8d
setne dl
mov dword [rax + 8], ecx
mov dword [rsp + 0x119c], edx
mov dword [rax + 0x40], 0xfffffffe
lea rcx, [rax + 0xbc]
mov qword [rax + 0xb40], rcx
lea rcx, [0x14000ea20]
mov qword [rax + 0xb50], rcx
lea rcx, [rax + 0x9b0]
mov qword [rax + 0xb58], rcx
lea rcx, [0x14000ea40]
mov qword [rax + 0xb68], rcx
lea rcx, [rax + 0xaa4]
mov qword [rax + 0xb70], rcx
lea rcx, [0x14000ea60]
mov qword [rax + 0xb80], rcx
mov word [rax + 0x170c], 0
mov dword [rax + 0x1710], 0
mov ecx, 0x30
mov word [rax + rcx*4 - 4], r13w
mov word [rax + rcx*4], r13w
add rcx, 2
cmp rcx, 0x14e
jne 0x1400028e9
mov word [rax + 0x9b0], r13w
mov word [rax + 0x9b4], r13w
mov word [rax + 0x9b8], r13w
mov word [rax + 0x9bc], r13w
mov word [rax + 0x9c0], r13w
mov word [rax + 0x9c4], r13w
mov word [rax + 0x9c8], r13w
mov word [rax + 0x9cc], r13w
mov word [rax + 0x9d0], r13w
mov word [rax + 0x9d4], r13w
mov word [rax + 0x9d8], r13w
mov word [rax + 0x9dc], r13w
mov word [rax + 0x9e0], r13w
mov word [rax + 0x9e4], r13w
mov word [rax + 0x9e8], r13w
mov word [rax + 0x9ec], r13w
mov word [rax + 0x9f0], r13w
mov word [rax + 0x9f4], r13w
mov word [rax + 0x9f8], r13w
mov word [rax + 0x9fc], r13w
mov word [rax + 0xa00], r13w
mov word [rax + 0xa04], r13w
mov word [rax + 0xa08], r13w
mov word [rax + 0xa0c], r13w
mov word [rax + 0xa10], r13w
mov word [rax + 0xa14], r13w
mov word [rax + 0xa18], r13w
mov word [rax + 0xa1c], r13w
mov word [rax + 0xa20], r13w
mov word [rax + 0xa24], r13w
mov word [rax + 0xaa4], r13w
mov word [rax + 0xaa8], r13w
mov word [rax + 0xaac], r13w
mov word [rax + 0xab0], r13w
mov word [rax + 0xab4], r13w
mov word [rax + 0xab8], r13w
mov word [rax + 0xabc], r13w
mov word [rax + 0xac0], r13w
mov word [rax + 0xac4], r13w
mov word [rax + 0xac8], r13w
mov word [rax + 0xacc], r13w
mov word [rax + 0xad0], r13w
mov word [rax + 0xad4], r13w
mov word [rax + 0xad8], r13w
mov word [rax + 0xadc], r13w
mov word [rax + 0xae0], r13w
mov word [rax + 0xae4], r13w
mov word [rax + 0xae8], r13w
mov word [rax + 0xaec], r13w
mov word [rax + 0x4bc], 1
mov qword [rax + 0x1700], r13
mov dword [rax + 0x16fc], r13d
mov dword [rax + 0x16f4], r13d
mov rsi, qword [rsp + 0x1178]
mov eax, dword [rsi + 0x44]
add eax, eax
mov dword [rsi + 0x58], eax
mov rax, qword [rsi + 0x68]
mov ecx, dword [rsi + 0x74]
dec ecx
mov word [rax + rcx*2], r13w
mov rcx, qword [rsi + 0x68]
mov r8d, dword [rsi + 0x74]
dec r8d
add r8, r8
xor edx, edx
call sub.VCRUNTIME140.dll_memset
movsxd rax, dword [rsi + 0xac]
shl rax, 4
lea rdx, [0x14000e680]
movzx ecx, word [rax + rdx + 2]
mov dword [rsi + 0xa8], ecx
movzx ecx, word [rax + rdx]
mov dword [rsi + 0xb4], ecx
movzx ecx, word [rax + rdx + 4]
mov dword [rsi + 0xb8], ecx
movzx eax, word [rax + rdx + 6]
mov dword [rsi + 0xa4], eax
movabs rax, 0x200000000
mov qword [rsi + 0x84], rax
mov qword [rsi + 0x9c], rax
mov dword [rsi + 0x1708], r13d
mov qword [rsi + 0x90], r13
mov dword [rsi + 0x70], r13d
mov qword [rsp + 0x1160], r12
mov dword [rsp + 0x1168], 0xfff
mov eax, dword [rsp + 0x140]
mov dword [rsp + 0x1158], eax
cmp qword [rsp + 0x148], 0x10
lea rcx, [rsp + 0x130]
jb 0x140002b7d
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x1150], rcx
mov qword [rsp + 0x1260], r13
mov qword [rsp + 0x1270], r13
mov qword [rsp + 0x1278], 0xf
mov byte [rsp + 0x1260], 0
test eax, eax
je 0x140002d12
mov rcx, rbp
xor edx, edx
call fcn.140004670
cmp dword [rsp + 0x1168], 0
jne 0x140002c52
mov rsi, qword [rsp + 0x1270]
mov rax, qword [rsp + 0x1278]
mov rcx, rax
sub rcx, rsi
cmp rcx, 0xfff
jae 0x140002c00
mov edx, 0xfff
mov r9d, 0xfff
mov rcx, r14
mov r8, r12
call fcn.140001840
jmp 0x140002c3a
lea rcx, [rsi + 0xfff]
mov qword [rsp + 0x1270], rcx
mov rdi, r14
cmp rax, 0x10
jb 0x140002c20
mov rdi, qword [rsp + 0x1260]
lea rcx, [rdi + rsi]
mov r8d, 0xfff
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi + 0xfff], 0
mov qword [rsp + 0x1160], r12
mov dword [rsp + 0x1168], 0xfff
jmp 0x140002bb1
mov edi, eax
cmp dword [rsp + 0x1158], 0
je 0x140002d0a
test edi, edi
je 0x140002bb1
jmp 0x140002d0a
xor esi, esi
jmp 0x140003720
lea edx, [rcx - 0x2a]
cmp edx, 0x3d
ja 0x140002c92
movabs r8, 0x2002000088008001
bt r8, rdx
jb 0x140002817
cmp ecx, 0x29a
je 0x140002817
jmp 0x140002cbe
mov dword [rdi + 8], 0x29a
lea rax, str.insufficient_memory
mov qword [rsp + 0x1170], rax
mov rcx, rbp
call fcn.1400042c0
xor esi, esi
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x128], 0xf
mov qword [rsp + 0x120], rsi
mov byte [rsp + 0x110], 0
jmp 0x140003720
neg ecx
mov dword [rax + 0x2c], ecx
jmp 0x140002855
mov rax, qword [rsp + 0x58]
add rax, 0x40
cmp rax, r15
jne 0x1400022db
jmp 0x14000388e
test edi, edi
jne 0x140002daa
mov rcx, rbp
mov edx, 4
call fcn.140004670
mov edi, eax
mov eax, dword [rsp + 0x1168]
cmp eax, 0xfff
je 0x140002daa
mov r9d, 0xfff
sub r9d, eax
mov rcx, qword [rsp + 0x1270]
mov rax, qword [rsp + 0x1278]
mov rdx, rax
sub rdx, rcx
cmp rdx, r9
jae 0x140002d63
mov rcx, r14
mov rdx, r9
mov r8, r12
call fcn.140001840
jmp 0x140002d92
lea rsi, [rcx + r9]
mov qword [rsp + 0x1270], rsi
mov rbx, r14
cmp rax, 0x10
jb 0x140002d80
mov rbx, qword [rsp + 0x1260]
add rcx, rbx
mov rdx, r12
mov r8, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
mov qword [rsp + 0x1160], r12
mov dword [rsp + 0x1168], 0xfff
jmp 0x140002d0a
mov rcx, rbp
call fcn.1400042c0
cmp edi, 1
jne 0x140002dd9
movups xmm0, xmmword [rsp + 0x1260]
movups xmm1, xmmword [rsp + 0x1270]
movaps xmmword [rsp + 0x120], xmm1
movaps xmmword [rsp + 0x110], xmm0
jmp 0x140002e48
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x128], 0xf
mov qword [rsp + 0x120], r13
mov byte [rsp + 0x110], 0
mov rax, qword [rsp + 0x1278]
cmp rax, 0xf
jbe 0x140002f6e
mov rcx, qword [rsp + 0x1260]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140002e43
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp qword [rsp + 0x120], 0
je 0x140002f6e
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
mov qword [rsp + 0x100], 0
mov dword [rsp + 0xa0], 0x68
mov qword [rsp + 0xa8], r12
mov eax, 0x100
mov dword [rsp + 0xb0], eax
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xc0], eax
mov qword [rsp + 0xe8], r14
mov dword [rsp + 0xf0], eax
mov rax, qword [rsp + 0x58]
cmp qword [rax + 0x18], 0x10
mov rcx, rax
jb 0x140002ee2
mov rcx, qword [rax]
mov edx, dword [rax + 0x10]
xor esi, esi
xor r8d, r8d
lea r9, [rsp + 0xa0]
call qword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
je 0x1400036d9
mov qword [rsp + 0x1360], 0
mov qword [rsp + 0x1378], 0xf
mov byte [rsp + 0x1360], 0
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
cmp rax, 0xf
jbe 0x140002f75
test rdi, rdi
js 0x1400039cd
mov rsi, rdi
or rsi, 0xf
cmp rsi, 0x17
mov eax, 0x16
cmovb rsi, rax
cmp rsi, 0xfff
jb 0x140002f9a
lea rcx, [rsi + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140002fa6
xor esi, esi
jmp 0x1400036d9
mov qword [rsp + 0x1370], rdi
lea rcx, [rsp + 0x1360]
mov rdx, rbp
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rdi + 0x1360], 0
jmp 0x140002fd1
lea rcx, [rsi + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r14, rax
mov qword [rsp + 0x1370], rdi
mov qword [rsp + 0x1378], rsi
mov rcx, r14
mov rdx, rbp
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
mov qword [rsp + 0x1360], r14
mov qword [rsp + 0x80], r15
mov eax, dword [0x140011170]
mov ecx, dword [0x1400110e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400037ad
mov rcx, qword [rsp + 0x1360]
mov rbp, qword [rsp + 0x1370]
mov rax, qword [rsp + 0x1378]
mov qword [rsp + 0x70], rax
cmp rax, 0x10
lea rsi, [rsp + 0x1360]
mov qword [rsp + 0x78], rcx
cmovae rsi, rcx
xor ebx, ebx
lea rax, [0x140011130]
mov r15, qword [rbx + rax + 0x10]
cmp qword [rbx + rax + 0x18], 0x10
jb 0x14000304c
mov r14, qword [rbx + rax]
jmp 0x140003050
lea r14, [rax + rbx]
cmp r15, 0xf
ja 0x140003069
movups xmm0, xmmword [r14]
movaps xmmword [rsp + 0x1380], xmm0
mov edi, 0xf
jmp 0x1400030c1
mov rdi, r15
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x1400030a1
lea rcx, [rdi + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x1400030ad
lea rcx, [rdi + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, rax
mov qword [rsp + 0x1380], rcx
lea r8, [r15 + 1]
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x1390], r15
mov qword [rsp + 0x1398], rdi
cmp rbp, r15
jne 0x1400030ff
lea rdx, [rsp + 0x1380]
cmp rdi, 0x10
jb 0x1400030ec
mov rdx, qword [rsp + 0x1380]
mov rcx, rsi
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete r14b
jmp 0x140003102
xor r14d, r14d
cmp rdi, 0x10
jb 0x140003142
mov rcx, qword [rsp + 0x1380]
cmp rdi, 0xfff
jb 0x140003137
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400039c7
add rdi, 0x28
mov rcx, rax
jmp 0x14000313a
inc rdi
mov rdx, rdi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp rbx, 0x20
sete al
or al, r14b
add rbx, 0x20
cmp al, 1
jne 0x140003032
mov r8, qword [rsp + 0x70]
cmp r8, 0x10
mov r15, qword [rsp + 0x80]
lea rbp, [rsp + 0x1150]
lea rbx, [rsp + 0x1380]
jb 0x1400031b8
lea rdx, [r8 + 1]
cmp rdx, 0x1000
jb 0x1400031ae
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400039c7
add r8, 0x28
mov rdx, r8
mov rcx, rax
jmp 0x1400031b3
mov rcx, qword [rsp + 0x78]
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
test r14b, r14b
je 0x1400033a7
mov dword [rsp + 0x20], 0
xor esi, esi
lea rcx, str.pingsender_1.0
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetOpenA]
test rax, rax
lea r14, [rsp + 0x1260]
je 0x1400036d9
mov rdi, rax
mov dword [rsp + 0x94], 0x7530
mov rcx, rax
mov edx, 2
lea r8, [rsp + 0x94]
mov r9d, 4
call qword [sym.imp.WININET.dll_InternetSetOptionA]
test eax, eax
mov qword [rsp + 0x70], rdi
je 0x1400033b6
movzx r8d, word [rsp + 0xc4]
xor esi, esi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov rcx, rdi
mov rdx, rbp
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetConnectA]
test rax, rax
je 0x1400033b8
mov r8d, dword [rsp + 0x150]
mov ecx, 0x70747468
xor r8d, ecx
movzx ecx, word [rsp + 0x154]
xor ecx, 0x73
xor edx, edx
or ecx, r8d
sete dl
shl edx, 0x17
or edx, 0x80000
movups xmmword [rsp + 0x20], xmm6
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x38], 0
xor esi, esi
mov qword [rsp + 0x78], rax
mov rcx, rax
lea rdx, str.POST
mov r8, r14
xor r9d, r9d
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov qword [rsp + 0x88], rax
test rax, rax
je 0x1400033c4
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rsp + 0x98], rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__gmtime64]
mov edx, 0x80
mov rcx, rbx
lea r8, str.Date:__a___d__b__Y__H:_M:_S_GMT
mov r9, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov qword [rsp + 0x1360], 0
mov qword [rsp + 0x1378], 0xf
mov byte [rsp + 0x1360], 0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
cmp rax, 0xf
jbe 0x1400033d0
test rdi, rdi
js 0x1400039cd
mov rsi, rdi
or rsi, 0xf
cmp rsi, 0x17
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jae 0x140003874
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r14, rax
mov qword [rsp + 0x1370], rdi
mov qword [rsp + 0x1378], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
mov qword [rsp + 0x1360], r14
lea r14, [rsp + 0x1260]
jmp 0x1400033f3
xor esi, esi
lea r14, [rsp + 0x1260]
jmp 0x1400036d9
xor esi, esi
mov rdi, qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x1400036d2
mov rdi, qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x1400036cb
mov qword [rsp + 0x1370], rdi
lea rcx, [rsp + 0x1360]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rdi + 0x1360], 0
mov rax, qword [rsp + 0x1370]
mov rcx, qword [rsp + 0x1378]
mov rdx, rcx
sub rdx, rax
cmp rdx, 2
jae 0x140003430
mov edx, 2
mov r9d, 2
lea rcx, [rsp + 0x1360]
lea r8, [0x14000f2c9]
call fcn.140001840
jmp 0x14000345d
lea rdx, [rax + 2]
mov qword [rsp + 0x1370], rdx
lea rdx, [rsp + 0x1360]
cmp rcx, 0x10
jb 0x140003452
mov rdx, qword [rsp + 0x1360]
mov word [rdx + rax], 0xa0d
mov byte [rdx + rax + 2], 0
movups xmm0, xmmword [rsp + 0x1360]
movups xmm1, xmmword [rsp + 0x1370]
movaps xmmword [rsp + 0x1390], xmm1
movaps xmmword [rsp + 0x1380], xmm0
mov rax, qword [rsp + 0x1390]
mov rcx, qword [rsp + 0x1398]
mov rdx, rcx
sub rdx, rax
cmp rdx, 0x19
jae 0x1400034b5
mov edx, 0x19
mov r9d, 0x19
mov rcx, rbx
lea r8, str.X_PingSender_Version:_1.0
call fcn.140001840
jmp 0x1400034ee
lea rdx, [rax + 0x19]
mov qword [rsp + 0x1390], rdx
mov rdx, rbx
cmp rcx, 0x10
jb 0x1400034d2
mov rdx, qword [rsp + 0x1380]
movups xmm0, xmmword [0x14000c189]
movups xmmword [rdx + rax + 9], xmm0
movaps xmm0, xmmword [str.X_PingSender_Version:_1.0]
movups xmmword [rdx + rax], xmm0
mov byte [rdx + rax + 0x19], 0
mov rax, qword [rsp + 0x1390]
mov rcx, qword [rsp + 0x1398]
mov rdx, rcx
sub rdx, rax
cmp rdx, 2
jae 0x140003526
mov edx, 2
mov r9d, 2
mov rcx, rbx
lea r8, [0x14000f2c9]
call fcn.140001840
jmp 0x14000354e
lea rdx, [rax + 2]
mov qword [rsp + 0x1390], rdx
mov rdx, rbx
cmp rcx, 0x10
jb 0x140003543
mov rdx, qword [rsp + 0x1380]
mov word [rdx + rax], 0xa0d
mov byte [rdx + rax + 2], 0
mov rax, qword [rsp + 0x1390]
mov rcx, qword [rsp + 0x1398]
mov rdx, rcx
sub rdx, rax
cmp rdx, 0x16
jae 0x140003586
mov edx, 0x16
mov r9d, 0x16
mov rcx, rbx
lea r8, str.Content_Encoding:_gzip
call fcn.140001840
jmp 0x1400035c2
lea rdx, [rax + 0x16]
mov qword [rsp + 0x1390], rdx
mov rdx, rbx
cmp rcx, 0x10
jb 0x1400035a3
mov rdx, qword [rsp + 0x1380]
movaps xmm0, xmmword [str.Content_Encoding:_gzip]
movups xmmword [rdx + rax], xmm0
movabs rcx, 0x70697a67203a676e
mov qword [rdx + rax + 0xe], rcx
mov byte [rdx + rax + 0x16], 0
mov eax, dword [rsp + 0x120]
cmp qword [rsp + 0x128], 0x10
lea r9, [rsp + 0x110]
jb 0x1400035e4
mov r9, qword [rsp + 0x110]
cmp qword [rsp + 0x1398], 0x10
mov rdx, rbx
jb 0x1400035fa
mov rdx, qword [rsp + 0x1380]
mov dword [rsp + 0x20], eax
mov rbx, qword [rsp + 0x88]
mov rcx, rbx
mov r8d, 0xffffffff
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x14000366f
mov dword [rsp + 0x1360], 0
mov dword [rsp + 0x98], 4
mov qword [rsp + 0x20], 0
mov rcx, rbx
mov edx, 0x20000013
lea r8, [rsp + 0x1360]
lea r9, [rsp + 0x98]
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
setne al
cmp dword [rsp + 0x1360], 0xc8
sete sil
and sil, al
jmp 0x140003671
xor esi, esi
mov rdi, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rax, qword [rsp + 0x1398]
cmp rax, 0x10
jb 0x1400036c6
mov rcx, qword [rsp + 0x1380]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400036ba
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rdi, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call rdi
mov rcx, qword [rsp + 0x78]
call rdi
mov rcx, qword [rsp + 0x70]
call rdi
mov rax, qword [rsp + 0x128]
cmp rax, 0x10
jb 0x140003720
mov rcx, qword [rsp + 0x110]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000371b
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rax, qword [rsp + 0x148]
cmp rax, 0x10
jb 0x140003767
mov rcx, qword [rsp + 0x130]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140003762
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov edi, 1
test sil, sil
je 0x140003890
mov rax, qword [rsp + 0x58]
cmp qword [rax + 0x30], 0
je 0x140003890
cmp qword [rax + 0x38], 0x10
jb 0x140003795
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
je 0x140002cf3
jmp 0x140003890
lea rcx, [0x140011170]
call fcn.1400083a0
cmp dword [0x140011170], 0xffffffff
jne 0x140002ffe
mov eax, 0xf
mov qword [0x140011148], rax
mov qword [0x140011140], 9
movabs rcx, 0x736f686c61636f6c
mov qword [0x140011130], rcx
mov word [0x140011138], 0x74
mov qword [0x140011150], 0
movaps xmmword [0x140011160], xmm6
mov qword [0x140011168], rax
mov byte [0x140011150], r13b
mov ecx, 0x20
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [0x140011160], 0x1e
mov qword [0x140011168], 0x1f
movups xmm0, xmmword [str.incoming.telemetry.mozilla.org]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x14000f283]
movups xmmword [rax + 0xe], xmm0
mov byte [rax + 0x1e], r13b
mov qword [0x140011150], rax
lea rcx, [0x140001770]
call fcn.140008538
lea rcx, [0x140011170]
call fcn.140008408
jmp 0x140002ffe
lea rcx, [rsi + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140003372
xor edi, edi
mov r13, qword [rsp + 0x60]
jmp 0x14000389c
xor edi, edi
mov r15, r13
test r13, r13
mov rbx, qword [rsp + 0x50]
je 0x140003999
cmp r13, r15
je 0x14000396a
mov rsi, r13
mov rax, qword [rsi + 0x38]
cmp rax, 0x10
jb 0x1400038f5
mov rcx, qword [rsi + 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400038f0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov qword [rsi + 0x30], 0
mov qword [rsi + 0x38], 0xf
mov byte [rsi + 0x20], 0
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x140003947
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140003942
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x1400039c7
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
add rsi, 0x40
cmp rsi, r15
jne 0x1400038b6
mov r15, r13
sub rbx, r15
cmp rbx, 0x1000
jb 0x14000398e
mov rax, qword [r15 - 8]
add r15, 0xfffffffffffffff8
sub r15, rax
cmp r15, 0x20
jae 0x1400039c7
or rbx, 0x27
mov r15, rax
mov rcx, r15
mov rdx, rbx
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rcx, qword [rsp + 0x1408]
xor rcx, rsp
call fcn.140008fd0
mov eax, edi
movaps xmm6, xmmword [rsp + 0x1410]
add rsp, 0x1428
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.140009210
call fcn.140009230
int3