Function at 0x14006a620
Capabilities:
Connect to http server
Create http request
Read data from internet
Receive data
Reference http user-agent string
Send data
Send http request

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1000]
mov eax, 0x1100
call fcn.140157830
sub rsp, rax
mov rax, qword [0x1401b7030]
xor rax, rsp
mov qword [rbp + 0xff0], rax
mov r15, r8
mov qword [rsp + 0x60], r8
mov r12, rdx
mov qword [rsp + 0x50], rdx
mov rdi, rcx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x78], rdx
mov qword [rbp - 0x80], r8
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x7f0]
call fcn.1401216a0
mov dword [rsp + 0x58], 0x400
lea r8, [rsp + 0x58]
lea rdx, [rbp + 0x7f0]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_ObtainUserAgentString]
test eax, eax
je 0x14006a6c3
lea r8, str.Mozilla_5.0__Windows_NT_10.0__WOW64__x64__Chrome_120.0.0.0_Safari_537.36
mov edx, 0x400
lea rcx, [rbp + 0x7f0]
call fcn.14012524c
xor esi, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea edx, [rsi + 1]
lea rcx, [rbp + 0x7f0]
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r13, rax
mov qword [rsp + 0x48], rax
mov r14, r12
mov rbx, qword [r12 + 0x18]
cmp rbx, 0x10
jb 0x14006a6f9
mov r14, qword [r12]
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp - 0x10]
call fcn.1401216a0
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x3f0]
call fcn.1401216a0
mov rcx, r12
cmp rbx, 0x10
jb 0x14006a72b
mov rcx, qword [r12]
lea rdx, [0x14019ec9c]
call fcn.140121060
mov rbx, rax
test rax, rax
je 0x14006aeb9
add rbx, 3
mov edx, 0x2f
mov rcx, rbx
call fcn.140120fe0
mov rsi, rax
test rax, rax
je 0x14006aea9
movzx ecx, byte [r14 + 4]
sub cl, 0x53
test cl, 0xdf
mov r14d, 0
sete r14b
mov dword [rsp + 0x44], r14d
mov r9, rax
sub r9, rbx
mov r8, rbx
mov edx, 0x400
lea rcx, [rbp - 0x10]
call fcn.140125604
mov edx, 0x3a
lea rcx, [rbp - 0x10]
call fcn.140120fe0
mov ebx, 0x1bb
mov ecx, 0x50
test r14d, r14d
cmove ebx, ecx
mov dword [rsp + 0x40], ebx
test rax, rax
je 0x14006a7c8
mov byte [rax], 0
lea rcx, [rax + 1]
call fcn.14012f788
mov dword [rsp + 0x40], eax
mov r8, rsi
mov edx, 0x400
lea rcx, [rbp + 0x3f0]
call fcn.14012524c
lea r8, [0x14019e1ac]
mov edx, 0x400
lea rcx, [rbp + 0x3f0]
call fcn.1401252ac
mov r8, r15
cmp qword [r15 + 0x18], 0x10
jb 0x14006a801
mov r8, qword [r15]
mov edx, 0x400
lea rcx, [rbp + 0x3f0]
call fcn.1401252ac
test r13, r13
jne 0x14006a851
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rax, str.InternetOpenW_failed_hInternet_:
add rdx, rax
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], InitCommonControls
mov byte [rdi], r13b
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rdx + rbx], 0
jne 0x14006a840
mov r8, rbx
jmp 0x14006aed2
xor edx, edx
mov qword [rbp - 0x68], rdx
mov ecx, 7
mov qword [rbp - 0x60], rcx
mov word [rbp - 0x78], dx
mov r14d, edx
lea r8, [rbp - 0x10]
mov rbx, 0xffffffffffffffff
mov rax, rbx
inc rax
cmp byte [r8 + rax], dl
jne 0x14006a875
test rax, rax
je 0x14006a8c7
lea rsi, [rbp - 0x10]
nop word [rax + rax]
movsx edx, byte [rsi]
lea rcx, [rbp - 0x78]
call fcn.14006b070
inc r14d
lea rsi, [rsi + 1]
lea rax, [rbp - 0x10]
mov rcx, rbx
nop word [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x14006a8b0
movsxd rax, r14d
cmp rax, rcx
jb 0x14006a890
mov rcx, qword [rbp - 0x60]
xor edx, edx
lea r13, [rbp - 0x78]
cmp rcx, 8
cmovae r13, qword [rbp - 0x78]
mov qword [rbp - 0x28], rdx
mov r12d, 7
mov qword [rbp - 0x20], r12
mov word [rbp - 0x38], dx
mov r14d, edx
cmp qword [r15 + 0x10], 0
jbe 0x14006a920
mov rsi, rdx
mov rax, r15
cmp qword [r15 + 0x18], 0x10
jb 0x14006a900
mov rax, qword [r15]
movsx edx, byte [rsi + rax]
lea rcx, [rbp - 0x38]
call fcn.14006b070
inc r14d
inc rsi
movsxd rax, r14d
cmp rax, qword [r15 + 0x10]
jb 0x14006a8f3
mov r12, qword [rbp - 0x20]
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r14
xor r9d, r9d
movzx r8d, word [rsp + 0x40]
mov rdx, r13
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WININET.dll_InternetConnectW]
test rax, rax
jne 0x14006aa2d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rax, str.InternetConnectW_failed_hConnect__NULL_:
add rdx, rax
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], InitCommonControls
mov byte [rdi], r14b
nop dword [rax + rax]
inc rbx
cmp byte [rdx + rbx], r14b
jne 0x14006a980
mov r8, rbx
mov rcx, rdi
call fcn.14002dc40
nop
cmp r12, 8
jb 0x14006a9d2
lea rdx, [r12*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a9cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af2b
call fcn.14011c3a0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14006aa12
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006aa0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af31
call fcn.14011c3a0
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], r14w
mov rcx, qword [rsp + 0x50]
jmp 0x14006aede
lea rcx, str.text_
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x38], r14
lea rcx, [rsp + 0x68]
xor r9d, r9d
lea r8, [rbp + 0x3f0]
lea rdx, [0x14019ecfc]
cmp dword [rsp + 0x44], r14d
je 0x14006ab6a
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r14
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rsi, rax
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x44], 0x3180
mov r9d, 4
lea r8, [rsp + 0x44]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
jne 0x14006ab8a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rax, str.InternetSetOptionW_failed:
add rdx, rax
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], InitCommonControls
mov byte [rdi], r14b
inc rbx
cmp byte [rdx + rbx], r14b
jne 0x14006aad0
mov r8, rbx
mov rcx, rdi
call fcn.14002dc40
nop
cmp r12, 8
jb 0x14006ab22
lea rdx, [r12*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ab1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af37
call fcn.14011c3a0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14006aa12
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006aa0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af1f
jmp 0x14006aa0d
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], r14
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rsi, rax
mov qword [rsp + 0x48], rax
test rsi, rsi
jne 0x14006ac4e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rax, str.HttpOpenRequestW_failed_hRequest__NULL_:
add rdx, rax
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], InitCommonControls
mov byte [rdi], r14b
inc rbx
cmp byte [rdx + rbx], r14b
jne 0x14006abb4
mov r8, rbx
mov rcx, rdi
call fcn.14002dc40
nop
cmp r12, 8
jb 0x14006ac06
lea rdx, [r12*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ac00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af3d
call fcn.14011c3a0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14006aa12
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006aa0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af25
jmp 0x14006aa0d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x14006ad2a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rax, str._bRequestSent____HttpSendRequestW_failed_with_error_code
add rdx, rax
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], InitCommonControls
mov byte [rdi], r14b
nop dword [rax]
inc rbx
cmp byte [rdx + rbx], r14b
jne 0x14006ac90
mov r8, rbx
mov rcx, rdi
call fcn.14002dc40
nop
cmp r12, 8
jb 0x14006ace2
lea rdx, [r12*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006acdc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af3d
call fcn.14011c3a0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14006aa12
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006aa0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af25
jmp 0x14006aa0d
mov rbx, r14
mov qword [rbp - 0x48], rbx
mov r14d, InitCommonControls
mov qword [rbp - 0x40], r14
mov byte [rbp - 0x58], bl
mov eax, 0xffffffff
mov dword [rsp + 0x40], eax
mov r15, qword [rsp + 0x48]
nop dword [rax]
test eax, eax
je 0x14006ade6
lea r9, [rsp + 0x40]
mov r8d, 0x400
lea rdx, [rbp + 0xbf0]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetReadFile]
mov r13d, eax
mov esi, dword [rsp + 0x40]
mov rcx, r14
sub rcx, rbx
cmp rsi, rcx
ja 0x14006adb5
lea rcx, [rbx + rsi]
mov qword [rbp - 0x48], rcx
lea rcx, [rbp - 0x58]
cmp r14, 0x10
cmovae rcx, qword [rbp - 0x58]
add rbx, rcx
mov r8d, esi
lea rdx, [rbp + 0xbf0]
mov rcx, rbx
call fcn.140121290
mov byte [rsi + rbx], 0
jmp 0x14006add0
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0xbf0]
xor r8d, r8d
mov rdx, rsi
lea rcx, [rbp - 0x58]
call fcn.140048790
test r13d, r13d
je 0x14006ade6
mov r14, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x48]
mov eax, dword [rsp + 0x40]
jmp 0x14006ad50
xor ebx, ebx
movups xmm0, xmmword [rbp - 0x58]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp - 0x48]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], InitCommonControls
mov byte [rbp - 0x58], bl
lea rcx, [rbp - 0x58]
call fcn.14002dbe0
nop
cmp r12, 8
mov r15, qword [rsp + 0x60]
jb 0x14006ae52
lea rdx, [r12*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ae4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af43
call fcn.14011c3a0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x14006ae92
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ae8d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006af19
call fcn.14011c3a0
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], bx
mov rcx, qword [rsp + 0x50]
jmp 0x14006aede
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], InitCommonControls
mov byte [rdi], al
jmp 0x14006aec8
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], InitCommonControls
mov byte [rdi], sil
lea rdx, [0x14019945a]
xor r8d, r8d
mov rcx, rdi
call fcn.14002dc40
nop
mov rcx, r12
call fcn.14002dbe0
nop
mov rcx, r15
call fcn.14002dbe0
mov rax, rdi
mov rcx, qword [rbp + 0xff0]
xor rcx, rsp
call fcn.14011c340
mov rbx, qword [rsp + 0x1158]
add rsp, 0x1100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14012d608
nop
call fcn.14012d608
int3
call fcn.14012d608
nop
call fcn.14012d608
nop
call fcn.14012d608
nop
call fcn.14012d608
int3
call fcn.14012d608
int3
call fcn.14012d608
int3