Function at 0x14007cd90
Capabilities:
Initialize winhttp library
Make an http request with a cookie
Prepare http request
Read http header
Receive http response
Send data
Send http request
Set http header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1170]
mov eax, 0x1270
call fcn.140234360
sub rsp, rax
movaps xmmword [rsp + 0x1260], xmm6
mov rax, qword [0x1402fd960]
xor rax, rsp
mov qword [rbp + 0x1150], rax
mov rsi, qword [0x1406bd6b8]
cmp qword [rsi + 0x20], 0
ja 0x14007cdf5
mov dword [rsi + 0x160], 3
xor al, al
jmp 0x14007e071
lea rcx, [rbp + 0xd0]
call fcn.140087b00
nop
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
lea rdx, [0x1402dc548]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007ce37
lea rbx, [0x1402dc548]
lea r8d, [rax + 3]
jmp 0x14007ce6a
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
lea rbx, str.POST
mov rdx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14007e016
lea r8d, [rax + 4]
mov rdx, rbx
lea rcx, [rbp + 0xd0]
call fcn.1400885f0
mov dil, 1
xor r15d, r15d
cmp qword [rsi], r15
jne 0x14007cebb
lea rcx, [rsi + 0x188]
cmp qword [rcx + 0x18], 8
jb 0x14007ce95
mov rcx, qword [rcx]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rsi], rax
test rax, rax
jne 0x14007cebb
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x14007e01b
mov eax, dword [rsi + 0x21c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsi + 0x218]
mov r8d, dword [rsi + 0x214]
mov edx, dword [rsi + 0x210]
mov rcx, qword [rsi]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x300]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xa28
lea rcx, [rbp + 0x720]
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rax
mov dword [rbp + 0x20], 0x68
lea rax, [rbp + 0x300]
mov qword [rbp + 0x38], rax
mov dword [rbp + 0x40], 0x104
lea rax, [rbp + 0x720]
mov qword [rbp + 0x68], rax
mov dword [rbp + 0x70], 0x514
mov r12d, 1
mov dword [rbp + 0x30], r12d
lea rbx, [rsi + 0x10]
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14007cf74
mov rcx, qword [rbx]
lea r9, [rbp + 0x20]
xor r8d, r8d
mov edx, dword [rsi + 0x20]
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x14007e024
lea rax, [rbp + 0x300]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], r15w
jne 0x14007cfa0
lea rcx, [rsi + 0x30]
lea rdx, [rbp + 0x300]
call fcn.1400885f0
xor r9d, r9d
movzx r8d, word [rbp + 0x44]
lea rdx, [rbp + 0x300]
mov rcx, qword [rsi]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r14, rax
mov qword [rsp + 0x40], rax
test rax, rax
je 0x14007e024
mov ecx, r15d
mov eax, 0x800000
cmp dword [rbp + 0x34], 2
cmove ecx, eax
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rdx, qword [rbp + 0xd0]
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov r8, qword [rbp + 0x68]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
test rax, rax
je 0x14007e00b
cmp byte [rsi + 8], r15b
jne 0x14007d063
cmp dword [rbp + 0x34], 2
jne 0x14007d063
mov dword [rbp + 0x94], 0x3100
mov r9d, 4
lea r8, [rbp + 0x94]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
xor edi, edi
mov ecx, edi
movsd xmm6, qword [0x1402ddb40]
nop
mov eax, ecx
inc ecx
mov dword [rbp + 0x94], ecx
cmp eax, 3
jae 0x14007dff5
mov rax, qword [rsi + 0x130]
test rax, rax
je 0x14007d0c2
lea rdx, [rsi + 0x120]
cmp qword [rdx + 0x18], 8
jb 0x14007d0a0
mov rdx, qword [rdx]
mov r9d, 0x1000000
mov r8d, eax
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x14007d0c2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
cmp qword [rsi + 0x100], 0
jbe 0x14007d1b8
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], di
mov r8d, 8
lea rdx, str.Cookie:
lea rcx, [rbp + 0xb0]
call fcn.1400885f0
nop
lea rdx, [rsi + 0xf0]
cmp qword [rsi + 0x108], 8
jb 0x14007d122
mov rdx, qword [rsi + 0xf0]
mov r8, qword [rsi + 0x100]
lea rcx, [rbp + 0xb0]
call fcn.140088ff0
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 8
cmovae rdx, qword [rbp + 0xb0]
mov r9d, 0x1000000
mov r8d, dword [rbp + 0xc0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
jne 0x14007d172
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x14007d1b8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d1b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007dfc4
call fcn.140233920
cmp qword [rsi + 0x150], 0
jbe 0x14007d2b9
mov qword [rbp], 3
mov qword [rbp + 0x10], rdi
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
lea r8, [rsi + 0x140]
cmp qword [r8 + 0x18], 8
jb 0x14007d1f7
mov r8, qword [r8]
mov edx, 0x104
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0xf0]
mov qword [rbp + 8], rax
mov r9d, Ordinal_26
lea r8, [rbp]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14007d23b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov rax, qword [rsi + 0x1c0]
test rax, rax
je 0x14007d2b9
lea r8, [rsi + 0x1b0]
cmp qword [r8 + 0x18], 8
jb 0x14007d258
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1002
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14007d27a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov rax, qword [rsi + 0x1e0]
test rax, rax
je 0x14007d2b9
lea r8, [rsi + 0x1d0]
cmp qword [r8 + 0x18], 8
jb 0x14007d297
mov r8, qword [r8]
lea r9d, [rax + rax]
mov edx, 0x1003
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14007d2b9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
xor dil, dil
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x14007d4cb
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
lea rcx, [rbp - 0x70]
call qword [sym.imp.WINHTTP.dll_WinHttpGetIEProxyConfigForCurrentUser]
test eax, eax
je 0x14007dc27
mov rax, qword [rbp - 0x68]
test rax, rax
je 0x14007d3cb
mov dword [rbp - 0x20], 3
mov dword [rbp - 0x1c], r12d
mov qword [rbp - 0x18], rax
mov dword [rbp - 4], r12d
mov dword [rbp - 8], r15d
mov qword [rbp - 0x10], r15
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rax
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14007d346
mov rdx, qword [rbx]
lea r9, [rbp - 0x50]
lea r8, [rbp - 0x20]
mov rcx, qword [rsi]
call qword [sym.imp.WINHTTP.dll_WinHttpGetProxyForUrl]
test eax, eax
je 0x14007d478
mov r9d, Ordinal_26
lea r8, [rbp - 0x50]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
je 0x14007d3a4
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
movzx edi, dil
test eax, eax
cmovne edi, r12d
mov rcx, qword [rbp - 0x48]
test rcx, rcx
je 0x14007d3b3
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x14007d484
call qword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x14007d484
mov rbx, qword [rbp - 0x60]
test rbx, rbx
je 0x14007d4a2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x38], xmm0
mov qword [rbp - 0x28], rax
mov dword [rbp - 0x38], 3
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0xf0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0xf0]
mov qword [rbp - 0x30], rax
mov rbx, qword [rbp - 0x58]
test rbx, rbx
je 0x14007d45d
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x510]
call sub.VCRUNTIME140.dll_memset
mov r8, rbx
mov edx, 0x104
lea rcx, [rbp + 0x510]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea rax, [rbp + 0x510]
mov qword [rbp - 0x28], rax
mov r9d, Ordinal_26
lea r8, [rbp - 0x38]
lea edx, [r9 + 0xe]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
test eax, eax
jne 0x14007d484
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x14007d493
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14007d4a2
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x14007d4b1
call qword [sym.imp.KERNEL32.dll_GlobalFree]
test dil, dil
lea rbx, [rsi + 0x10]
mov ecx, dword [rbp + 0x94]
mov rdi, r15
je 0x14007d070
lea rbx, [rsi + 0x10]
mov rdx, qword [rsi + 0x110]
xor edi, edi
test rdx, rdx
je 0x14007d506
mov dword [rbp + 0x90], edi
lea r9, [rbp + 0x90]
mov r8d, dword [rsi + 0x118]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
jne 0x14007d506
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x14007dfad
mov dword [rbp - 0x78], edi
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x16]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14007d550
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14007da2d
mov ecx, dword [rbp - 0x78]
mov eax, 2
mul rcx
mov rbx, 0xffffffffffffffff
cmovo rax, rbx
mov rcx, rax
call fcn.140233f48
mov r15, rax
mov r8d, dword [rbp - 0x78]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov r9, r15
xor r8d, r8d
lea edx, [rbx + 0x17]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x14007da25
mov r8, rbx
nop dword [rax]
inc r8
cmp word [r15 + r8*2], 0
jne 0x14007d5b0
mov rdx, r15
lea rcx, [rsi + 0x50]
call fcn.1400885f0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
mov qword [rbp + 0xa8], rdi
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], di
xor r8d, r8d
lea rdx, [0x1402dc53c]
lea rcx, [rbp + 0xb0]
call fcn.1400885f0
nop
cmp byte [rsi + 0x1a8], 0
jne 0x14007d68e
mov r8d, Ordinal_26
lea rdx, str.charset_A_Za_z0_9___
lea rcx, [rbp + 0xb0]
call fcn.1400885f0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.14007c430
test al, al
je 0x14007d68e
mov rax, qword [rbp + 0xa0]
mov r8, qword [rbp + 0x98]
sub rax, r8
sar rax, 5
test rax, rax
je 0x14007d68e
lea rcx, [rsi + 0x90]
cmp rcx, r8
je 0x14007d68e
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14007d685
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.1400885f0
mov r8d, Ordinal_26
lea rdx, str.Content_Length:__0_9_
lea rcx, [rbp + 0xb0]
call fcn.1400885f0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.14007c430
test al, al
je 0x14007d6f7
mov rax, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0x98]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x14007d6f7
cmp qword [rcx + 0x18], 8
jb 0x14007d6eb
mov rcx, qword [rcx]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll__wtoi]
mov dword [rsi + 0xc8], eax
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Location:__0_9_
lea rcx, [rbp + 0xb0]
call fcn.1400885f0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.14007c430
test al, al
je 0x14007d76c
mov rax, qword [rbp + 0xa0]
mov r8, qword [rbp + 0x98]
sub rax, r8
sar rax, 5
test rax, rax
je 0x14007d76c
lea rcx, [rsi + 0x1f0]
cmp rcx, r8
je 0x14007d76c
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14007d763
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
call fcn.1400885f0
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Set_Cookie:_b.__n
lea rcx, [rbp + 0xb0]
call fcn.1400885f0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x50]
lea rcx, [rbp + 0xb0]
call fcn.14007c430
test al, al
je 0x14007d965
mov rax, qword [rbp + 0xa0]
mov r8, qword [rbp + 0x98]
sub rax, r8
sar rax, 5
test rax, rax
je 0x14007d96c
mov rbx, rdi
nop word [rax + rax]
add r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 8
jb 0x14007d7e0
mov rdx, qword [r8]
mov r8, qword [r8 + 0x10]
lea rcx, [rsi + 0xd0]
call fcn.140088ff0
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
mov r8, qword [rbp + 0x98]
sub rax, r8
sar rax, 5
dec rax
cmp rbx, rax
je 0x14007d837
mov r8d, 2
lea rdx, [0x1402dc63c]
lea rcx, [rsi + 0xd0]
call fcn.140088ff0
mov rcx, qword [rbp + 0xa0]
mov r8, qword [rbp + 0x98]
inc rbx
add rdi, 0x20
sub rcx, r8
sar rcx, 5
cmp rbx, rcx
jb 0x14007d7d0
xor edi, edi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], di
mov r8, r12
lea rdx, reloc.WLDAP32.dll_Ordinal_32
lea rcx, [rsp + 0x48]
call fcn.1400885f0
nop
lea rbx, [rsi + 0xd0]
lea r8, [rsp + 0x48]
mov rdx, rbx
lea rcx, [rsp + 0x68]
call fcn.14007c8e0
mov rdx, rax
mov rcx, rbx
call fcn.1400879f0
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x14007d8de
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d8d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007dfcb
call fcn.140233920
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], di
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14007d932
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d92d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007dfd2
call fcn.140233920
mov rdx, qword [rsi + 0xe0]
test rdx, rdx
je 0x14007d965
mov rax, rbx
cmp qword [rbx + 0x18], 8
jb 0x14007d94b
mov rax, qword [rbx]
cmp word [rax + rdx*2 - 2], 0x3b
je 0x14007d965
mov r8, r12
lea rdx, [0x1402dc644]
mov rcx, rbx
call fcn.140088ff0
mov r8, qword [rbp + 0x98]
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x14007d9b9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007d9ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007dfd9
call fcn.140233920
mov r8, qword [rbp + 0x98]
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], di
test r8, r8
je 0x14007da25
mov rdx, qword [rbp + 0xa0]
mov rcx, r8
call fcn.14008c140
mov rdx, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0x98]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007da20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007dfe0
call fcn.140233920
mov rcx, r15
call fcn.140233920
mov dword [rbp - 0x78], edi
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x13]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14007da64
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x14007dae2
mov ecx, dword [rbp - 0x78]
mov eax, 2
mul rcx
mov r14, 0xffffffffffffffff
cmovo rax, r14
mov rcx, rax
call fcn.140233f48
mov rbx, rax
mov r8d, dword [rbp - 0x78]
add r8, r8
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x28], rdi
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov r9, rbx
xor r8d, r8d
lea edx, [r14 + 0x14]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
je 0x14007dada
mov r8, r14
nop
inc r8
cmp word [rbx + r8*2], 0
jne 0x14007dac0
lea rcx, [rsi + 0x168]
mov rdx, rbx
call fcn.1400885f0
mov rcx, rbx
call fcn.140233920
mov r12d, 0x2800
mov r14d, edi
mov rcx, qword [rsi + 0xb0]
test rcx, rcx
je 0x14007db03
call fcn.140233920
mov qword [rsi + 0xb0], rdi
mov rcx, r12
call fcn.140233f48
mov qword [rsi + 0xb0], rax
xor edx, edx
mov r8, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
nop
mov dword [rbp - 0x78], edi
lea rdx, [rbp - 0x78]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x14007dc40
mov rdx, qword [rsi + 0xc0]
test rdx, rdx
je 0x14007db6b
mov ecx, dword [rsi + 0xc8]
test ecx, ecx
je 0x14007db6b
mov eax, r14d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov ecx, dword [rbp - 0x78]
inc ecx
call fcn.140233f48
mov r15, rax
mov r8d, dword [rbp - 0x78]
inc r8d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x90], edi
lea r9, [rbp + 0x90]
mov r8d, dword [rbp - 0x78]
mov rdx, r15
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x14007dc1d
mov ecx, dword [rbp + 0x90]
lea eax, [rcx + r14]
cmp eax, r12d
jbe 0x14007dc01
mov rdi, qword [rsi + 0xb0]
add r12d, r12d
mov ecx, r12d
call fcn.140233f48
mov qword [rsi + 0xb0], rax
mov r8d, r12d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r8d, r14d
mov rdx, rdi
mov rcx, qword [rsi + 0xb0]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rdi
call fcn.140233920
mov ecx, dword [rbp + 0x90]
xor edi, edi
mov r8d, ecx
mov ecx, r14d
add rcx, qword [rsi + 0xb0]
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
add r14d, dword [rbp + 0x90]
mov rcx, r15
call fcn.140233920
jmp 0x14007dc4c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov ecx, dword [rbp + 0x94]
xor edi, edi
jmp 0x14007d070
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
cmp dword [rbp - 0x78], 0
ja 0x14007db20
mov rdx, qword [rsi + 0xc0]
test rdx, rdx
je 0x14007dc89
mov ecx, dword [rsi + 0xc8]
test ecx, ecx
je 0x14007dc89
mov eax, r14d
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
xorps xmm1, xmm1
cvtsi2sd xmm1, rcx
divsd xmm0, xmm1
call rdx
mov dword [rsi + 0xb8], r14d
mov r15d, edi
mov r12d, 1
lea rcx, [rsi + 0x90]
cmp qword [rcx + 0x18], 8
jb 0x14007dcaa
mov rcx, qword [rcx]
mov r8d, 5
lea rdx, [0x1402dc648]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsnicmp]
test eax, eax
jne 0x14007dcca
mov r15d, 0xfde9
mov r12d, edi
mov r9d, dword [rsi + 0xb8]
inc r9d
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r8, qword [rsi + 0xb0]
mov edx, r12d
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r14d, eax
test eax, eax
jg 0x14007dd30
mov r15d, edi
mov r12d, 1
mov r9d, dword [rsi + 0xb8]
inc r9d
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r8, qword [rsi + 0xb0]
mov edx, r12d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r14d, eax
test eax, eax
jle 0x14007ddb0
mov ebx, r14d
mov eax, 2
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140233f48
mov rdi, rax
lea r8, [rbx + rbx]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov r9d, dword [rsi + 0xb8]
inc r9d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rdi
mov r8, qword [rsi + 0xb0]
mov edx, r12d
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x14007dda8
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdi + r8*2], 0
jne 0x14007dd91
lea rcx, [rsi + 0x70]
mov rdx, rdi
call fcn.1400885f0
mov rcx, rdi
call fcn.140233920
mov dil, 1
lea rcx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 8
cmovae rcx, qword [rbp + 0xd0]
cmp qword [rbp + 0xe0], 3
jne 0x14007dffd
mov r8d, 3
lea rdx, [0x1402dc548]
nop word [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14007dffd
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x14007ddf0
xor r15d, r15d
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], r15w
lea r8d, [r15 + 8]
lea rdx, str._html_
lea rcx, [rbp + 0xb0]
call fcn.1400885f0
nop
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x98], xmm1
mov qword [rbp + 0xa8], r15
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x70]
lea rcx, [rbp + 0xb0]
call fcn.14007c430
mov rdx, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0x98]
test al, al
je 0x14007def6
mov rax, rdx
sub rax, rcx
sar rax, 5
test rax, rax
je 0x14007def6
lea r8d, [r15 + 9]
lea rdx, str.__html_
lea rcx, [rbp + 0xb0]
call fcn.1400885f0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x20], rax
lea r9, [rsi + 0x70]
lea rcx, [rbp + 0xb0]
call fcn.14007c430
mov rdx, qword [rbp + 0xa0]
mov rcx, qword [rbp + 0x98]
test al, al
je 0x14007dee9
mov rax, rdx
sub rax, rcx
sar rax, 5
test rax, rax
jne 0x14007def6
mov dword [rsi + 0x160], reloc.WS2_32.dll_listen
xor dil, dil
test rcx, rcx
je 0x14007df51
call fcn.14008c140
mov rdx, qword [rbp + 0xa8]
mov rcx, qword [rbp + 0x98]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007df3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007dfe7
call fcn.140233920
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r15
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x14007df93
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007df8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007dfee
call fcn.140233920
test dil, dil
jne 0x14007dffa
lea rbx, [rsi + 0x10]
mov ecx, dword [rbp + 0x94]
xor edi, edi
lea r12d, [rdi + 1]
jmp 0x14007d070
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi + 0x160], eax
mov ecx, dword [rbp + 0x94]
jmp 0x14007d070
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor dil, dil
jmp 0x14007dffd
mov dil, 1
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r14, qword [rsp + 0x40]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x14007e024
mov eax, 0x57
mov dword [rsi + 0x160], eax
xor dil, dil
mov rdx, qword [rbp + 0xe8]
cmp rdx, 8
jb 0x14007e06d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007e068
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007e068
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140233920
movzx eax, dil
mov rcx, qword [rbp + 0x1150]
xor rcx, rsp
call fcn.140233900
lea r11, [rsp + 0x1270]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret