Function at 0x140002840
Capabilities:
Connect to http server
Create http request
Send data
Send http request

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140050070]
xor rax, rsp
mov qword [rbp + 8], rax
mov rsi, rcx
mov qword [rbp - 0x70], rcx
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov ecx, 0x60
call fcn.1400105b8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x68], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 6
lea rdx, str.action
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
cmp rcx, rsi
je 0x1400028f9
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x1400028ef
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002936
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002931
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032cb
call fcn.1400105b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0xb
lea rdx, str.actioncount
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
mov r8d, 1
lea rdx, [0x140048a5c]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400029c9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032d1
call fcn.1400105b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 9
lea rdx, str.spendtime
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
mov eax, 0x10624dd3
imul dword [0x140052f20]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
lea rcx, [rsp + 0x70]
call fcn.140001550
mov rbx, rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
mov rdx, rbx
call fcn.140009980
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140002a73
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032d7
call fcn.1400105b0
movdqa xmm0, xmmword [0x140049190]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002ac2
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002abd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032dd
call fcn.1400105b0
lea rcx, [rbp - 0x58]
call fcn.1400023b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 9
lea rdx, str.timestamp
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
lea rax, [rbp - 0x58]
cmp rcx, rax
je 0x140002b30
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rdx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x48]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002b6d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032e3
call fcn.1400105b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 5
lea rdx, str.gclid
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
lea rbx, [0x140052ff0]
cmp rcx, rbx
je 0x140002bdc
mov rdx, rbx
cmp qword [0x140053008], 0x10
cmovae rdx, qword [0x140052ff0]
mov r8, qword [0x140053000]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002c19
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032e9
call fcn.1400105b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0xc
lea rdx, str.pc_device_id
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [0x140052f70]
cmp rcx, rdx
je 0x140002c85
cmp qword [0x140052f88], 0x10
cmovae rdx, qword [0x140052f70]
mov r8, qword [0x140052f80]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002cc2
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002cbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032ef
call fcn.1400105b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 7
lea rdx, str.version
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [0x140052f50]
cmp rcx, rdx
je 0x140002d2e
cmp qword [0x140052f68], 0x10
cmovae rdx, qword [0x140052f50]
mov r8, qword [0x140052f60]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002d6b
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032f5
call fcn.1400105b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 9
lea rdx, str.buildcode
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [0x140052fd0]
cmp rcx, rdx
je 0x140002dd7
cmp qword [0x140052fe8], 0x10
cmovae rdx, qword [0x140052fd0]
mov r8, qword [0x140052fe0]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002e14
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e0f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032fb
call fcn.1400105b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 8
lea rdx, str.platform
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [0x140052f90]
cmp rcx, rdx
je 0x140002e80
cmp qword [0x140052fa8], 0x10
cmovae rdx, qword [0x140052f90]
mov r8, qword [0x140052fa0]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002ebd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002eb8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003301
call fcn.1400105b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0xb
lea rdx, str.phone_model
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [0x140052fb0]
cmp rcx, rdx
je 0x140002f29
cmp qword [0x140052fc8], 0x10
cmovae rdx, qword [0x140052fb0]
mov r8, qword [0x140052fc0]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002f66
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003307
call fcn.1400105b0
mov r8, rbx
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x18]
call fcn.14000cc50
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 3
lea rdx, [0x140048acc]
lea rcx, [rsp + 0x40]
call fcn.14000d540
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x68]
call fcn.14000d1a0
mov rcx, qword [rax]
add rcx, 0x40
lea rax, [rbp - 0x18]
cmp rcx, rax
je 0x140002fdb
lea rdx, [rbp - 0x18]
cmp qword [rbp], 0x10
cmovae rdx, qword [rbp - 0x18]
mov r8, qword [rbp - 8]
call fcn.14000b1f0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140003018
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003013
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000330d
call fcn.1400105b0
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x38]
call fcn.1400024b0
lea rbx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0x10
cmovae rbx, qword [rbp - 0x38]
xor r12d, r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea edx, [r12 + 1]
lea rcx, str.Microsoft_Internet_Explorer
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r15, rax
test rax, rax
je 0x14000313d
lea r8d, [r12 + 0x50]
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.apilast.im30app.com
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetConnectA]
mov r14, rax
test rax, rax
je 0x14000313d
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x80000000
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8, str._gameservice_opengames_lf_pc.php
lea rdx, str.POST
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rdi, rax
test rax, rax
je 0x14000313d
mov r9d, 0x20000000
lea r8d, [r12 + 0x2f]
lea rdx, str.Content_Type:_application_x_www_form_urlencoded
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
test eax, eax
je 0x14000313d
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rbx + rax], r12b
jne 0x140003100
mov dword [rsp + 0x20], eax
mov r9, rbx
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x14000313d
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x140003178
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003173
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003313
call fcn.1400105b0
movdqa xmm0, xmmword [0x140049190]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], r12b
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x1400031c5
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003319
call fcn.1400105b0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x140003201
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032bf
call fcn.1400105b0
nop
mov rcx, qword [rbp - 0x68]
mov rdi, qword [rcx + 8]
cmp byte [rdi + 0x19], 0
jne 0x140003247
nop
mov r8, qword [rdi + 0x10]
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x68]
call fcn.14000ec40
mov rbx, rdi
mov rdi, qword [rdi]
lea rcx, [rbx + 0x20]
call fcn.14000ecd0
mov edx, 0x60
mov rcx, rbx
call fcn.1400105b0
cmp byte [rdi + 0x19], 0
je 0x140003210
mov rcx, qword [rbp - 0x68]
mov edx, 0x60
call fcn.1400105b0
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x140003288
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x140003283
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400032c5
mov rcx, r8
call fcn.1400105b0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.140010590
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.14001c610
nop
call fcn.14001c610
nop
call fcn.14001c610
int3
call fcn.14001c610
nop
call fcn.14001c610
nop
call fcn.14001c610
nop
call fcn.14001c610
int3
call fcn.14001c610
int3
call fcn.14001c610
int3
call fcn.14001c610
int3
call fcn.14001c610
int3
call fcn.14001c610
int3
call fcn.14001c610
nop
call fcn.14001c610
int3
call fcn.14001c610
nop
call fcn.14001c610
int3