Function at 0x180051e90
Capabilities:
Create http request
Read data from internet
Receive data

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa20
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov rax, qword [0x1800f07a0]
xor rax, rsp
mov qword [rsp + 0xa18], rax
mov r14, r9
mov rsi, r8
mov rdi, rdx
mov qword [rsp + 0x68], rcx
mov r13, qword [rsp + 0xa88]
xor ebx, ebx
mov dword [rsp + 0x40], ebx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rbx
test rdx, rdx
je 0x180052518
cmp byte [rdx], bl
je 0x180052518
test r8, r8
je 0x180051f00
mov qword [r8], rbx
test r14, r14
je 0x180051f09
mov byte [r9], 0
test r13, r13
je 0x180051f13
mov byte [r13], 0
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, str.Dev_Client
call qword [sym.imp.WININET.dll_InternetOpenA]
mov r15, rax
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x180051f67
lea r8d, [rax + 0x7f]
lea rdx, str.Could_not_open_internet_handle
lea rcx, [rsp + 0x90]
call fcn.18007b980
lea rdx, [0x1800ee1b0]
lea rcx, [rsp + 0x90]
call fcn.18006ede8
mov dword [rsp + 0x38], 0x1388
mov r9d, 4
lea r8, [rsp + 0x38]
lea edx, [r9 + 2]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov dword [rsp + 0x38], 0x1388
mov r9d, 4
lea r8, [rsp + 0x38]
lea edx, [r9 - 2]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetOptionA]
mov r8d, 0x100
mov rdx, rdi
lea rcx, [0x1800f1f70]
call fcn.180062030
lea rdx, [0x180052f70]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetSetStatusCallback]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x40200
xor r9d, r9d
xor r8d, r8d
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rdi, rax
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x180052024
lea r8d, [rax + 0x7f]
lea rdx, str.Could_not_open_URL
lea rcx, [rsp + 0x110]
call fcn.18007b980
lea rdx, [0x1800ee1b0]
lea rcx, [rsp + 0x110]
call fcn.18006ede8
lea rdx, str._login.php
lea rcx, [0x1800f1f70]
call fcn.18005f7a0
test rax, rax
je 0x18005206a
mov r8d, 0x7f
lea rdx, str.Could_not_open_redirectURL
lea rcx, [rsp + 0x190]
call fcn.18007b980
lea rdx, [0x1800ee1b0]
lea rcx, [rsp + 0x190]
call fcn.18006ede8
test rsi, rsi
je 0x1800520dc
lea rdx, str._id
lea rcx, [0x1800f1f70]
call fcn.18005f7a0
test rax, rax
jne 0x1800520d0
lea rdx, str.id
lea rcx, [0x1800f1f70]
call fcn.18005f7a0
test rax, rax
jne 0x1800520d0
lea rdx, str._people_
lea rcx, [0x1800f1f70]
call fcn.18005f7a0
test rax, rax
je 0x1800520dc
lea rcx, [rax + 8]
mov edx, gethostbyaddr
call fcn.18006f1a8
test rax, rax
je 0x1800520dc
lea rcx, [rax + 1]
jmp 0x1800520d4
lea rcx, [rax + 4]
call fcn.1800726b8
mov qword [rsi], rax
test r14, r14
je 0x180052161
mov r12d, dword [rsp + 0xa80]
test r12d, r12d
je 0x180052169
lea rdx, str._people_
lea rcx, [0x1800f1f70]
call fcn.18005f7a0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180052169
add rax, 8
mov qword [rsp + 0x48], rax
mov r8d, r12d
mov rdx, rax
mov rcx, r14
call fcn.180062030
mov edx, gethostbyaddr
mov rcx, r14
call fcn.18006f4e0
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180052140
mov byte [rax], 0
mov rax, r14
mov qword [rsp + 0x48], rax
movzx ecx, byte [rax]
test cl, cl
je 0x180052169
cmp cl, 0x2d
jne 0x180052157
mov byte [rax], 0x20
inc rax
mov qword [rsp + 0x48], rax
jmp 0x180052148
mov r12d, dword [rsp + 0xa80]
test r13, r13
je 0x1800521e2
mov r15d, dword [rsp + 0xa90]
test r15d, r15d
je 0x1800521ea
lea rdx, str._id
lea rcx, [0x1800f1f70]
call fcn.18005f7a0
test rax, rax
jne 0x1800521ea
lea rdx, str.id
lea rcx, [0x1800f1f70]
call fcn.18005f7a0
test rax, rax
jne 0x1800521ea
lea rdx, str._people_
lea rcx, [0x1800f1f70]
call fcn.18005f7a0
test rax, rax
jne 0x1800521ea
lea edx, [rax + 0x2f]
lea rcx, [0x1800f1f70]
call fcn.18006f4e0
mov r8d, r15d
mov rdx, rax
mov rcx, r13
call fcn.180062030
jmp 0x1800521ea
mov r15d, dword [rsp + 0xa90]
test rsi, rsi
je 0x1800521f5
cmp qword [rsi], 0
je 0x180052211
test r14, r14
je 0x1800524c7
test r12d, r12d
je 0x1800524c7
cmp byte [r14], 0
jne 0x1800524c7
mov dword [rsp + 0x50], ebx
mov rax, qword [0x1800f0788]
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x210]
call fcn.18006eed0
mov rax, qword [0x1800f0788]
mov qword [rsp + 0x78], rax
mov rax, qword [0x1800f0788]
mov qword [rsp + 0x70], rax
nop
lea r9, [rsp + 0x3c]
mov r8d, 0x7ff
lea rdx, [rsp + 0x210]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x1800522b8
mov ecx, dword [rsp + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0x7fe
ja 0x1800522b8
cmp ebx, 0x100000
jae 0x1800522b8
cmp rcx, 0x800
jae 0x1800522b3
mov byte [rsp + rcx + 0x210], 0
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x30]
call fcn.180068760
add ebx, dword [rsp + 0x3c]
mov dword [rsp + 0x50], ebx
jmp 0x180052250
call fcn.18006b0dc
lea rdx, str.window.location.replace__http:__www.facebook.com_
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
mov rbx, rax
test rax, rax
je 0x180052321
add rbx, 0x34
mov edx, 0x22
mov rcx, rbx
call fcn.18006f1a8
mov rdi, rax
test rax, rax
je 0x180052321
mov byte [rax], 0
test r13, r13
je 0x180052305
test r15d, r15d
je 0x180052305
mov r8d, r15d
mov rdx, rbx
mov rcx, r13
call fcn.180062030
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
mov dword [rsp + 0x20], r12d
mov r9, r14
mov r8, rsi
mov rdx, rbx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
mov byte [rdi], 0x22
test rsi, rsi
je 0x18005239c
cmp qword [rsi], 0
jne 0x18005239c
lea rdx, str._profile_id_:
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
test rax, rax
je 0x180052348
lea rcx, [rax + 0x10]
jmp 0x180052394
lea rdx, str.amp_profile_id
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
test rax, rax
je 0x180052364
lea rcx, [rax + 0x10]
jmp 0x180052394
lea rdx, str.amp_fid
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
test rax, rax
jne 0x180052390
lea rdx, str.amp_cid
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
test rax, rax
je 0x18005239c
lea rcx, [rax + 9]
call fcn.1800726b8
mov qword [rsi], rax
test r14, r14
je 0x1800524a7
test r12d, r12d
je 0x1800524a7
lea rdx, str._H1_id_profile_name_
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
test rax, rax
jne 0x1800523f0
lea rdx, str._h2_class_public_
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
test rax, rax
jne 0x1800523f0
lea rdx, str._title
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
test rax, rax
je 0x180052426
mov edx, 0x3e
mov rcx, rax
call fcn.18006f1a8
test rax, rax
je 0x180052426
mov r8d, r12d
lea rdx, [rax + 1]
mov rcx, r14
call fcn.180062030
mov edx, 0x3c
mov rcx, r14
call fcn.18006f1a8
test rax, rax
je 0x180052426
mov byte [rax], 0
test rsi, rsi
je 0x1800524a7
cmp qword [rsi], 0
jne 0x1800524a7
cmp byte [r14], 0
je 0x1800524a7
lea rdx, str.href_http:__www.facebook.com_profile.php_id
mov rcx, qword [rsp + 0x30]
call fcn.18005f7a0
mov rbx, rax
nop dword [rax + rax]
test rbx, rbx
je 0x1800524a7
add rbx, 0x2d
lea rdx, [0x1800ac960]
mov rcx, rbx
call fcn.18005f7a0
mov rdi, rax
test rax, rax
je 0x180052493
mov byte [rax], 0
mov rdx, r14
mov rcx, rbx
call fcn.18005f7a0
mov byte [rdi], 0x3e
test rax, rax
je 0x180052493
mov rcx, rbx
call fcn.1800726b8
mov qword [rsi], rax
jmp 0x1800524a7
lea rdx, str.href_http:__www.facebook.com_profile.php_id
mov rcx, rbx
call fcn.18005f7a0
mov rbx, rax
jmp 0x180052450
lea rcx, [rsp + 0x70]
call fcn.180068430
nop
lea rcx, [rsp + 0x78]
call fcn.180068430
nop
lea rcx, [rsp + 0x30]
call fcn.180068430
test rsi, rsi
je 0x1800524d2
cmp qword [rsi], 0
je 0x1800524f1
test r14, r14
je 0x1800524dd
cmp byte [r14], 0
je 0x1800524f1
test r13, r13
je 0x1800524e9
cmp byte [r13], 0
je 0x1800524f1
mov dword [rsp + 0x40], 1
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x180052501
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180052512
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov eax, dword [rsp + 0x40]
jmp 0x18005251a
xor eax, eax
mov rcx, qword [rsp + 0xa18]
xor rcx, rsp
call fcn.18006ab60
add rsp, 0xa20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret