Function at 0x140001aee
Capabilities:
Create http request
Reference http user-agent string

Disassembly:
push rbp
push rsi
push rbx
sub rsp, 0xb30
lea rbp, [rsp + 0x80]
mov qword [rbp + 0xad0], rcx
mov qword [rbp + 0xad8], rdx
mov qword [rbp + 0xae0], r8
mov qword [rbp + 0xae8], r9
mov dword [rsp + 0x20], 0
mov r9d, 0
mov r8d, 0
mov edx, 1
lea rax, str.Mozilla_5.0__Windows_NT_10.0__rv:102.0__Gecko_20100101_Firefox_102.0
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetOpenA]
call rax
mov qword [rbp + 0xaa8], rax
cmp qword [rbp + 0xaa8], 0
jne 0x140001b63
mov ebx, 0
jmp 0x140001e5c
mov rax, qword [rbp + 0xad0]
mov rcx, rax
call fcn.14002faa0
mov rdx, rax
mov rax, qword [rbp + 0xaa8]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x4000000
mov r9d, 0
mov r8d, 0
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetOpenUrlA]
call rax
mov qword [rbp + 0xaa0], rax
cmp qword [rbp + 0xaa0], 0
jne 0x140001bd3
mov rax, qword [rbp + 0xaa8]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov ebx, 0
jmp 0x140001e5c
lea rax, [rbp + 0xa7f]
mov qword [rbp + 0xa80], rax
nop
nop
lea rdx, [rbp + 0xa7f]
lea rax, [rbp + 0xa50]
mov r8, rdx
lea rdx, str.Content_Type:_application_x_www_form_urlencoded__charsetutf_8_r_nAccept:_application_json__text_plain____r_nAccept_Language:_en_US_en_q0.5_r_n
mov rcx, rax
call fcn.1400b0470
lea rax, [rbp + 0xa7f]
mov rcx, rax
call fcn.1400a1100
nop
lea rax, [rbp + 0xa40]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetSystemTime]
call rax
lea rdx, [rbp + 0xa38]
lea rax, [rbp + 0xa40]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
call rax
mov eax, dword [rbp + 0xa38]
mov dword [rbp + 0xa30], eax
mov eax, dword [rbp + 0xa3c]
mov dword [rbp + 0xa34], eax
mov rax, qword [rbp + 0xa30]
movabs rdx, 0x346dc5d63886594b
mul rdx
shr rdx, 0xb
movabs rax, 0xfffff568cf499800
add rax, rdx
mov qword [rbp + 0xa98], rax
lea rax, [rbp + 0x980]
mov edx, 0x55
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetUserDefaultLocaleName]
call rax
lea rdx, [rbp + 0x980]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xaa
lea rax, [rbp + 0x8d0]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, rdx
mov edx, 0
mov ecx, 0xfde9
mov rax, qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
call rax
lea rax, [rbp + 0x7f0]
mov r8, rax
mov edx, 0xffffffff
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_EnumDisplaySettingsW]
call rax
mov eax, dword [rbp + 0x89c]
mov dword [rbp + 0xa94], eax
mov eax, dword [rbp + 0x8a0]
mov dword [rbp + 0xa90], eax
mov rax, qword [rbp + 0xae8]
mov rcx, rax
call fcn.14002faa0
mov rsi, rax
mov rax, qword [rbp + 0xae0]
mov rcx, rax
call fcn.14002faa0
mov rbx, rax
mov rax, qword [rbp + 0xad8]
mov rcx, rax
call fcn.14002faa0
mov rcx, rax
lea rax, [rbp - 0x10]
mov rdx, qword [rbp + 0xa98]
mov qword [rsp + 0x60], rdx
mov rdx, qword [rbp + 0xa98]
mov qword [rsp + 0x58], rdx
mov rdx, qword [rbp + 0xa98]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rsi
mov edx, dword [rbp + 0xa94]
mov dword [rsp + 0x40], edx
mov edx, dword [rbp + 0xa90]
mov dword [rsp + 0x38], edx
mov rdx, qword [rbp + 0xa98]
mov qword [rsp + 0x30], rdx
lea rdx, [rbp + 0x8d0]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rbx
mov r9, rcx
lea r8, str.event1data__7B__22localStorageSupported__22__3Atrue__2C__22queryString__22__3A__22__22__2C__22referrer__22__3A__22__22__2C__22websiteId__22__3A__22_s__22__2C__22templateId__22__3A__22_s__22__2C__22website_locale__22__3A__22_s__22__2C__22userAgent__22__3A__22Mozilla__2F5.0__20__28Windows__20NT__2010.0__3B__20Win64__3B__20x64__3B__20rv__3A102.0__29__20Gecko__2F20100101__20Firefox__2F102.0__22__2C__22clientDate__22__3A_lld__2C__22viewportInnerHeight__22__3A800__2C__22viewportInnerWidth__22__3A1800__2C__22screenHeight__22__3A_d__2C__22screenWidth__22__3A_d__2C__22url__22__3A__22__2F__22__2C__22pagePermissionTypeValue__22__3A1__2C__22title__22__3A__22EN__22__2C__22collectionId__22__3A__22_s__22__7Dss_cvr1b757475_9083_4a3c_be90_53ed378e8c7f__7C_lld__7C_lld__7C_lld__7C1
mov edx, 0x800
mov rcx, rax
call fcn.140001450
lea rax, [rbp - 0x10]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov ebx, eax
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.14002fc80
mov esi, eax
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.14002faa0
mov rdx, rax
lea rcx, [rbp - 0x10]
mov rax, qword [rbp + 0xaa0]
mov dword [rsp + 0x20], ebx
mov r9, rcx
mov r8d, esi
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_HttpSendRequestA]
call rax
mov dword [rbp + 0xa8c], eax
mov rax, qword [rbp + 0xaa0]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
mov rax, qword [rbp + 0xaa8]
mov rcx, rax
mov rax, qword [sym.imp.WININET.dll_InternetCloseHandle]
call rax
cmp dword [rbp + 0xa8c], 1
sete bl
lea rax, [rbp + 0xa50]
mov rcx, rax
call fcn.1400b1140
mov eax, ebx
jmp 0x140001e9b
add rsp, 0xb30
pop rbx
pop rsi
pop rbp
ret