Function at 0x14013c070
Capabilities:
Connect to http server
Create http request
Read .ini file
Read and send data from client to server
Read data from internet
Receive data
Send data
Send http request

Disassembly:
mov qword [rsp + 8], rcx
push rdi
mov eax, 0x1e30
call fcn.1401da720
sub rsp, rax
mov qword [rsp + 0x1e20], 0xfffffffffffffffe
mov rax, qword [0x1402aa5c0]
xor rax, rsp
mov qword [rsp + 0x1e28], rax
mov qword [rsp + 0x40], 4
mov edx, 1
mov rcx, qword [rsp + 0x1e40]
mov rcx, qword [rcx + 8]
call fcn.1400d88c0
test eax, eax
je 0x14013c851
mov dword [rsp + 0x20], 2
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x50]
mov rdx, qword [rsp + 0x1e40]
mov rdx, qword [rdx + 8]
mov rcx, qword [rsp + 0x1e40]
mov rcx, qword [rcx + 0x20]
call fcn.1400d9460
test eax, eax
je 0x14013c851
mov byte [rsp + 0x1050], 0x4e
mov byte [rsp + 0x1051], 0x4f
mov byte [rsp + 0x1052], 0x50
mov byte [rsp + 0x1053], 0x32
mov byte [rsp + 0x1054], 0
mov r8d, 4
lea rdx, [rsp + 0x1050]
lea rcx, [rsp + 0x50]
call fcn.1400cd4f8
test eax, eax
jne 0x14013c851
xor eax, eax
mov word [rsp + 0x1070], ax
lea rdi, [rsp + 0x1072]
xor eax, eax
mov ecx, 0x7fe
rep stosb byte [rdi], al
mov r8d, 0x800
lea rdx, [rsp + 0x1070]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dx, 0x2e
lea rcx, [rsp + 0x1070]
call fcn.140001460
mov rdx, rax
xor eax, eax
mov word [rdx], ax
lea rdx, [rsp + 0x1070]
lea rcx, [rsp + 0x1a08]
call fcn.140002100
nop
mov eax, 0x2e
mov word [rsp + 0x19e0], ax
mov eax, 0x69
mov word [rsp + 0x19e2], ax
mov eax, WSASetLastError
mov word [rsp + 0x19e4], ax
mov eax, 0x69
mov word [rsp + 0x19e6], ax
xor eax, eax
mov word [rsp + 0x19e8], ax
lea rdx, [rsp + 0x19e0]
lea rcx, [rsp + 0x1a08]
call fcn.1400060d0
mov edx, 0x43
mov word [rsp + 0x1058], dx
mov eax, reloc.WSOCK32.dll_WSAGetLastError
mov word [rsp + 0x105a], ax
mov eax, WSASetLastError
mov word [rsp + 0x105c], ax
mov eax, 0x66
mov word [rsp + 0x105e], ax
mov eax, 0x69
mov word [rsp + 0x1060], ax
mov eax, 0x67
mov word [rsp + 0x1062], ax
xor eax, eax
mov word [rsp + 0x1064], ax
mov eax, 0x52
mov word [rsp + 0x19d0], ax
mov eax, 0x65
mov word [rsp + 0x19d2], ax
mov eax, 0x67
mov word [rsp + 0x19d4], ax
mov eax, 0x43
mov word [rsp + 0x19d6], ax
mov eax, reloc.WSOCK32.dll_WSAGetLastError
mov word [rsp + 0x19d8], ax
mov eax, 0x64
mov word [rsp + 0x19da], ax
mov eax, 0x65
mov word [rsp + 0x19dc], ax
xor eax, eax
mov word [rsp + 0x19de], ax
lea rcx, [rsp + 0x1a08]
call fcn.14000f8f0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x64
lea r9, [rsp + 0x1880]
lea r8, [0x14023587c]
lea rdx, [rsp + 0x19d0]
lea rcx, [rsp + 0x1058]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 1
xor ecx, ecx
call qword [sym.imp.WININET.dll_InternetOpenW]
mov qword [rsp + 0x1a00], rax
mov eax, 0x65
mov word [rsp + 0x1958], ax
mov eax, 0x78
mov word [rsp + 0x195a], ax
mov eax, WSASetLastError
mov word [rsp + 0x195c], ax
mov eax, 0x2e
mov word [rsp + 0x195e], ax
mov eax, 0x63
mov word [rsp + 0x1960], ax
mov eax, 0x63
mov word [rsp + 0x1962], ax
mov eax, 0x62
mov word [rsp + 0x1964], ax
mov eax, reloc.WSOCK32.dll_WSAGetLastError
mov word [rsp + 0x1966], ax
mov eax, reloc.WSOCK32.dll_WSAGetLastError
mov word [rsp + 0x1968], ax
mov eax, reloc.WSOCK32.dll_WSACleanup
mov word [rsp + 0x196a], ax
mov eax, 0x2e
mov word [rsp + 0x196c], ax
mov eax, 0x63
mov word [rsp + 0x196e], ax
mov eax, reloc.WSOCK32.dll_WSAGetLastError
mov word [rsp + 0x1970], ax
mov eax, WSASetLastError
mov word [rsp + 0x1972], ax
xor eax, eax
mov word [rsp + 0x1974], ax
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8w, 0x50
lea rdx, [rsp + 0x1958]
mov rcx, qword [rsp + 0x1a00]
call qword [sym.imp.WININET.dll_InternetConnectW]
mov qword [rsp + 0x1870], rax
lea rcx, [rsp + 0x19f8]
call fcn.140002de0
nop
mov eax, 0x2f
mov word [rsp + 0x1980], ax
mov eax, WSACleanup
mov word [rsp + 0x1982], ax
mov eax, 0x65
mov word [rsp + 0x1984], ax
mov eax, 0x67
mov word [rsp + 0x1986], ax
mov eax, 0x2f
mov word [rsp + 0x1988], ax
mov eax, 0x69
mov word [rsp + 0x198a], ax
mov eax, WSASetLastError
mov word [rsp + 0x198c], ax
mov eax, 0x64
mov word [rsp + 0x198e], ax
mov eax, 0x65
mov word [rsp + 0x1990], ax
mov eax, 0x78
mov word [rsp + 0x1992], ax
mov eax, 0x2e
mov word [rsp + 0x1994], ax
mov eax, reloc.WSOCK32.dll_WSASetLastError
mov word [rsp + 0x1996], ax
mov eax, 0x68
mov word [rsp + 0x1998], ax
mov eax, reloc.WSOCK32.dll_WSASetLastError
mov word [rsp + 0x199a], ax
mov eax, 0x3f
mov word [rsp + 0x199c], ax
mov eax, reloc.WSOCK32.dll_WSASetLastError
mov word [rsp + 0x199e], ax
mov eax, WSACleanup
mov word [rsp + 0x19a0], ax
mov eax, reloc.WSOCK32.dll_WSAGetLastError
mov word [rsp + 0x19a2], ax
mov eax, 0x64
mov word [rsp + 0x19a4], ax
mov eax, 0x75
mov word [rsp + 0x19a6], ax
mov eax, 0x63
mov word [rsp + 0x19a8], ax
mov eax, reloc.WSOCK32.dll_WSACleanup
mov word [rsp + 0x19aa], ax
mov eax, 0x3d
mov word [rsp + 0x19ac], ax
mov eax, 0x63
mov word [rsp + 0x19ae], ax
mov eax, 0x63
mov word [rsp + 0x19b0], ax
mov eax, 0x62
mov word [rsp + 0x19b2], ax
mov eax, reloc.WSOCK32.dll_WSAGetLastError
mov word [rsp + 0x19b4], ax
mov eax, reloc.WSOCK32.dll_WSAGetLastError
mov word [rsp + 0x19b6], ax
mov eax, reloc.WSOCK32.dll_WSACleanup
mov word [rsp + 0x19b8], ax
mov eax, 0x26
mov word [rsp + 0x19ba], ax
mov eax, 0x69
mov word [rsp + 0x19bc], ax
mov eax, 0x64
mov word [rsp + 0x19be], ax
mov eax, 0x3d
mov word [rsp + 0x19c0], ax
xor eax, eax
mov word [rsp + 0x19c2], ax
lea rdx, [rsp + 0x1980]
lea rcx, [rsp + 0x19f8]
call fcn.1400020d0
lea rdx, [rsp + 0x1880]
lea rcx, [rsp + 0x19f8]
call fcn.1400060d0
mov edx, 0x47
mov word [rsp + 0x1950], dx
mov eax, 0x45
mov word [rsp + 0x1952], ax
mov eax, 0x54
mov word [rsp + 0x1954], ax
xor eax, eax
mov word [rsp + 0x1956], ax
lea rcx, [rsp + 0x19f8]
call fcn.14000f8f0
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0x28f500
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, [rsp + 0x1950]
mov rcx, qword [rsp + 0x1870]
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov qword [rsp + 0x1068], rax
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x1068]
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x14013c713
mov rcx, qword [rsp + 0x1068]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x1870]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x1a00]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [rsp + 0x1e10], 0
lea rcx, [rsp + 0x19f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a08]
call fcn.140001490
mov eax, dword [rsp + 0x1e10]
jmp 0x14013c856
movzx eax, byte [0x140217fad]
mov byte [rsp + 0x1a10], al
lea rdi, [rsp + 0x1a11]
xor eax, eax
mov ecx, 0x3ff
rep stosb byte [rdi], al
mov dword [rsp + 0x19f0], 0
lea r9, [rsp + 0x19f0]
mov r8d, 0x3ff
lea rdx, [rsp + 0x1a10]
mov rcx, qword [rsp + 0x1068]
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x14013c7c1
mov rcx, qword [rsp + 0x1068]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x1870]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x1a00]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [rsp + 0x1e14], 0
lea rcx, [rsp + 0x19f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a08]
call fcn.140001490
mov eax, dword [rsp + 0x1e14]
jmp 0x14013c856
mov eax, dword [rsp + 0x19f0]
mov byte [rsp + rax + 0x1a10], 0
mov rcx, qword [rsp + 0x1068]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x1870]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x1a00]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
movsx eax, byte [rsp + 0x1a10]
cmp eax, 0x2d
jne 0x14013c836
mov dword [rsp + 0x1e18], 0
lea rcx, [rsp + 0x19f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a08]
call fcn.140001490
mov eax, dword [rsp + 0x1e18]
jmp 0x14013c856
lea rcx, [rsp + 0x19f8]
call fcn.140001490
nop
lea rcx, [rsp + 0x1a08]
call fcn.140001490
mov eax, 1
mov rcx, qword [rsp + 0x1e28]
xor rcx, rsp
call fcn.1400a8790
add rsp, 0x1e30
pop rdi
ret