Function at 0x180001cb0
Capabilities:
Initialize winhttp library
Terminate process

Disassembly:
push rbp
push rdi
push r14
push r15
sub rsp, 0x38
call fcn.1800026c0
mov r14, rax
test rax, rax
je 0x180001d2f
call qword [sym.imp.WINHTTP.dll_WinHttpCheckPlatform]
test eax, eax
je 0x180001d2f
mov qword [rsp + 0x78], r12
xor r9d, r9d
mov qword [rsp + 0x30], r13
xor r8d, r8d
xor r13d, r13d
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], r13d
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov r12, rax
test rax, rax
je 0x180001d25
mov edx, 0xea60
mov dword [rsp + 0x20], 0xea60
mov r9d, edx
mov r8d, edx
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
jne 0x180001d3a
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r12, qword [rsp + 0x78]
mov r13, qword [rsp + 0x30]
add rsp, 0x38
pop r15
pop r14
pop rdi
pop rbp
ret
mov edx, 0x10
mov qword [rsp + 0x60], rbx
lea ecx, [rdx + 0x30]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rbx, rax
test rax, rax
jne 0x180001d5e
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov edx, 0x10
mov qword [rsp + 0x70], rsi
lea ecx, [rdx + 0x30]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
test rax, rax
jne 0x180001d86
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov edi, dword [r14 + 0x2c]
cmp edi, dword [r14 + 0x28]
jb 0x180001da6
mov ecx, dword [r14 + 0x10]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, r14
call fcn.180002410
mov edi, dword [r14 + 0x2c]
mov rdx, qword [r14 + 0x20]
mov r8d, r13d
mov eax, edi
mov rcx, qword [rdx + rax*8]
lea eax, [rdi + 1]
mov qword [r14 + 0x30], rcx
mov edi, r13d
mov r9, qword [rdx + rax*8]
mov ecx, r13d
movzx edx, word [r9]
test dx, dx
je 0x180001dfe
nop dword [rax]
lea eax, [rdx - 0x30]
cmp ax, 9
ja 0x180001dfb
lea ecx, [rcx + rcx*4]
movzx eax, dx
lea ecx, [rcx - 0x18]
lea ecx, [rax + rcx*2]
cmp r8d, ecx
ja 0x180001dfb
inc edi
mov r8d, ecx
movzx edx, word [r9 + rdi*2]
test dx, dx
jne 0x180001dd0
jmp 0x180001dfe
or ecx, 0xffffffff
mov rdx, qword [r14 + 0x30]
movzx r8d, cx
add dword [r14 + 0x2c], 2
xor r9d, r9d
mov word [r14 + 0x38], cx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r15, rax
test rax, rax
je 0x180001d86
mov ebp, r13d
nop dword [rax + rax]
mov r8, qword [r14 + 0x18]
mov r9, rbx
mov rdx, qword [r14 + 8]
mov rcx, r15
mov qword [rsp + 0x20], rsi
call fcn.180002000
mov rdi, qword [rbx]
test eax, eax
mov eax, dword [rbx + 8]
mov rcx, rdi
je 0x180001e8b
mov ebp, 1
test rdi, rdi
je 0x180001e6c
test eax, eax
je 0x180001e6c
mov ecx, eax
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbx]
test rcx, rcx
je 0x180001e7a
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rbx], r13
mov rdx, rbx
mov dword [rbx + 8], r13d
mov rcx, rsi
call fcn.1800019d0
jmp 0x180001eb6
test ebp, ebp
je 0x180001ef3
dec ebp
test rdi, rdi
je 0x180001ea4
test eax, eax
je 0x180001ea4
mov rcx, rax
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbx]
test rcx, rcx
je 0x180001eb2
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rbx], r13
mov dword [rbx + 8], r13d
mov rdi, qword [rsi]
mov eax, dword [rsi + 8]
mov rcx, rdi
test rdi, rdi
je 0x180001ed1
test eax, eax
je 0x180001ed1
mov ecx, eax
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rsi]
test rcx, rcx
je 0x180001edf
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsi], r13
mov ecx, 0x2710
mov dword [rsi + 8], r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x180001e30
test rdi, rdi
je 0x180001f06
test eax, eax
je 0x180001f06
mov rcx, rax
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rbx]
test rcx, rcx
je 0x180001f14
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rbx], r13
mov dword [rbx + 8], r13d
mov rdi, qword [rsi]
mov eax, dword [rsi + 8]
mov rcx, rdi
test rdi, rdi
je 0x180001f33
test eax, eax
je 0x180001f33
mov ecx, eax
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rsi]
test rcx, rcx
je 0x180001f41
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsi], r13
mov rcx, r15
mov dword [rsi + 8], r13d
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x180001d86