Function at 0x14005ab60
Capabilities:
Connect to http server
Create http request
Parse url
Send data
Send http request

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1120]
mov eax, 0x1220
call fcn.140068770
sub rsp, rax
mov qword [rbp - 0x10], 0xfffffffffffffffe
mov qword [rsp + 0x1270], rbx
mov rax, qword [0x1400b14a0]
xor rax, rsp
mov qword [rbp + 0x1110], rax
mov r12d, r9d
mov dword [rsp + 0x48], r9d
movzx edi, r8b
mov r14, rdx
mov qword [rsp + 0x58], rdx
mov rbx, rcx
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x98]
call fcn.140001678
nop
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.140001678
nop
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x70]
call fcn.140001678
nop
lea r13, [rbx + 0x48]
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rbx
mov rcx, r13
call fcn.1400028b0
xor r15d, r15d
mov esi, 0x460c000
test dil, dil
je 0x14005b30b
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 8]
call fcn.140001678
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rbx
lea rcx, [rbp - 8]
call fcn.1400028b0
nop
cmp qword [rbp + 8], r15
je 0x14005b28b
nop
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14005ac4f
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rcx, [rbp - 8]
call fcn.1400026e0
mov r12, rax
lea rcx, [rbp - 8]
call fcn.1400016d4
mov rdi, rax
mov rsi, qword [r13 + 0x10]
cmp rsi, rsi
mov rcx, r13
call fcn.1400016d4
mov r11, rax
mov rdx, r12
cmp rsi, r12
cmovb rdx, rsi
test rdx, rdx
je 0x14005acc0
nop dword [rax + rax]
movzx ecx, word [rdi]
cmp word [r11], cx
jne 0x14005aca8
add r11, 2
add rdi, 2
dec rdx
jne 0x14005ac90
jmp 0x14005acc0
mov ecx, 1
movzx eax, word [rdi]
cmp word [r11], ax
mov rdi, 0xffffffffffffffff
cmovb ecx, edi
jmp 0x14005acc7
mov ecx, r15d
or rdi, 0xffffffffffffffff
movsxd rax, ecx
test ecx, ecx
jne 0x14005ace0
cmp rsi, r12
jae 0x14005acd7
mov eax, edi
jmp 0x14005ace0
mov eax, r15d
cmp rsi, r12
setne al
test eax, eax
sete al
test al, al
sete al
test al, al
je 0x14005ad65
mov r8, r13
lea rdx, str.Redirect
lea rcx, [rbp + 0x48]
call fcn.14000d770
nop
lea r8, [0x140091b68]
mov rdx, rax
lea rcx, [rbp + 0xe8]
call fcn.14000d720
nop
lea r8, [rbp - 8]
mov rdx, rax
lea rcx, [rbp + 0x20]
call fcn.140033340
nop
mov rcx, rax
call fcn.1400018c0
mov r8, rax
lea rdx, str.INFO
mov rcx, r14
call fcn.140018920
nop
lea rcx, [rbp + 0x20]
call fcn.140001624
nop
lea rcx, [rbp + 0xe8]
call fcn.140001624
nop
lea rcx, [rbp + 0x48]
call fcn.140001624
mov r9, rdi
xor r8d, r8d
lea rdx, [rbp - 8]
mov rcx, r13
call fcn.1400028b0
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x14005ad8a
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov qword [rbx + 0x28], r15
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14005ad9d
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov qword [rbx + 0x30], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.httpget
call qword [sym.imp.WININET.dll_InternetOpenW]
mov qword [rbx + 0x28], rax
test rax, rax
je 0x14005b208
mov dword [rsp + 0x50], 0x3100
mov r9d, 4
lea r8, [rsp + 0x50]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov dword [rsp + 0x68], 4
mov dword [rsp + 0x44], r15d
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x44]
mov edx, 0x32
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetQueryOptionW]
test eax, eax
je 0x14005ae37
test byte [rsp + 0x44], 0x10
je 0x14005ae37
mov qword [rsp + 0x60], 1
mov r9d, 8
lea r8, [rsp + 0x60]
lea edx, [r9 + 0x2a]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
lea rcx, [rbp - 8]
call fcn.1400018c0
mov rdi, rax
xor r14b, r14b
mov edx, 0x5000
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
mov edx, 0x5000
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r12, rax
mov edx, 0x5000
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r13, rax
mov edx, 0x5000
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r15, rax
mov edx, 0x5000
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov qword [rsp + 0x70], rax
mov dword [rbp - 0x80], 0x68
xor ecx, ecx
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rsi
mov word [rbp - 0x5c], cx
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x28], r13
mov dword [rbp - 0x20], 0x2800
mov dword [rbp - 0x30], 0x2800
mov dword [rbp - 0x60], 0x2800
mov dword [rbp - 0x40], 0x104
mov dword [rbp - 0x50], 0x104
lea r9, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x14005af36
mov r14b, 1
mov rdx, rsi
lea rcx, [rbp + 0x98]
call fcn.1400026b0
mov rdx, r12
lea rcx, [rbp + 0xc0]
call fcn.1400026b0
mov rdx, r13
lea rcx, [rbp + 0x70]
call fcn.1400026b0
movzx edi, word [rbp - 0x5c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LocalFree]
test r14b, r14b
je 0x14005b200
lea r8, [rbx + 0x40]
mov edx, 2
lea r9d, [rdx + 2]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
je 0x14005b200
lea r8, [rbx + 0x44]
mov edx, 6
lea r9d, [rdx - 2]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
je 0x14005b200
lea rcx, [rbp + 0x98]
call fcn.1400018c0
mov rdx, rax
xor r15d, r15d
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r15
xor r9d, r9d
movzx r8d, di
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetConnectW]
mov rsi, rax
mov qword [rbx + 0x30], rax
test rax, rax
setne al
test al, al
je 0x14005b203
cmp qword [rbp + 8], r15
je 0x14005b05a
lea rcx, str.https
call fcn.14000193c
mov r9, rax
xor r8d, r8d
lea rdx, str.https
lea rcx, [rbp - 8]
call fcn.140009490
test rax, rax
je 0x14005b053
lea rcx, str.HTTPS
call fcn.14000193c
mov r9, rax
xor r8d, r8d
lea rdx, str.HTTPS
lea rcx, [rbp - 8]
call fcn.140009490
test rax, rax
jne 0x14005b05a
mov eax, 1
jmp 0x14005b05d
mov eax, r15d
mov edi, 0x460c000
test al, al
mov eax, 0x4e0f000
cmovne edi, eax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140001678
or r12, 0xffffffffffffffff
mov r9, r12
xor r8d, r8d
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x20]
call fcn.1400028b0
nop
mov r9, r12
xor r8d, r8d
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x20]
call fcn.14000272c
lea rcx, [rbp + 0x20]
call fcn.1400018c0
mov r8, rax
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, str.HTTP_1.1
lea rdx, str.HEAD
mov rcx, rsi
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov rdi, rax
test rax, rax
je 0x14005b14e
mov dword [rsp + 0x4c], 4
lea r9, [rsp + 0x4c]
lea r8, [rsp + 0x40]
lea edx, [r12 + 0x20]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetQueryOptionW]
test eax, eax
je 0x14005b12a
or dword [rsp + 0x40], 0x3100
lea r9d, [r12 + 5]
lea r8, [rsp + 0x40]
lea edx, [r12 + 0x20]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x14005b14e
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
lea rcx, [rbp + 0x20]
call fcn.140001624
mov qword [rbx + 0x38], rdi
test rdi, rdi
je 0x14005b1cc
mov word [rbp + 0x110], r15w
xor edx, edx
mov r8d, 0xffe
lea rcx, [rbp + 0x112]
call fcn.140062200
mov dword [rsp + 0x50], 0x1000
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x50]
lea r8, [rbp + 0x110]
mov edx, 0x21
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpQueryInfoW]
lea rdx, [rbp + 0x110]
lea rcx, [rbp - 8]
call fcn.1400026b0
mov r14, qword [rsp + 0x58]
cmp qword [rbp + 8], 0
je 0x14005b281
lea r13, [rbx + 0x48]
jmp 0x14005ac40
lea rcx, [rbp - 8]
call fcn.140001624
nop
lea rcx, [rbp + 0x70]
call fcn.140001624
nop
lea rcx, [rbp + 0xc0]
call fcn.140001624
nop
lea rcx, [rbp + 0x98]
call fcn.140001624
xor eax, eax
jmp 0x14005b693
xor r15d, r15d
mov r14, qword [rsp + 0x58]
lea r8, [rbp - 8]
lea rdx, str.Cant_open_connection_to
lea rcx, [rbp + 0x48]
call fcn.14000d770
nop
mov rcx, rax
call fcn.1400018c0
mov r8, rax
lea rdx, str.ERROR
mov rcx, r14
call fcn.140018920
nop
lea rcx, [rbp + 0x48]
call fcn.140001624
mov rcx, r14
call fcn.140018840
mov qword [rbx + 0x38], r15
lea rcx, [rbp - 8]
call fcn.140001624
nop
lea rcx, [rbp + 0x70]
call fcn.140001624
nop
lea rcx, [rbp + 0xc0]
call fcn.140001624
nop
lea rcx, [rbp + 0x98]
call fcn.140001624
xor eax, eax
jmp 0x14005b693
mov esi, 0x460c000
mov r12d, dword [rsp + 0x48]
mov rcx, rbx
call fcn.14005b6c0
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14005b2d7
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov qword [rbx + 0x38], r15
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x14005b2b9
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov qword [rbx + 0x28], r15
mov rcx, qword [rbx + 0x30]
test rcx, rcx
je 0x14005b2cc
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov qword [rbx + 0x30], r15
lea rcx, [rbp - 8]
call fcn.140001624
jmp 0x14005b30b
lea rcx, [rbp - 8]
call fcn.140001624
nop
lea rcx, [rbp + 0x70]
call fcn.140001624
nop
lea rcx, [rbp + 0xc0]
call fcn.140001624
nop
lea rcx, [rbp + 0x98]
call fcn.140001624
xor eax, eax
jmp 0x14005b693
lea rdx, [rbp + 0x48]
mov rcx, rbx
call fcn.14005a980
mov rdi, rax
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.httpget
call qword [sym.imp.WININET.dll_InternetOpenW]
mov qword [rbx + 0x28], rax
test rax, rax
je 0x14005b466
mov dword [rsp + 0x48], 0x3100
mov r9d, 4
lea r8, [rsp + 0x48]
lea edx, [r9 + 0x1b]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov dword [rsp + 0x4c], 4
mov dword [rsp + 0x44], r15d
lea r9, [rsp + 0x4c]
lea r8, [rsp + 0x44]
mov edx, 0x32
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetQueryOptionW]
test eax, eax
je 0x14005b3b4
test byte [rsp + 0x44], 0x10
je 0x14005b3b4
mov qword [rsp + 0x60], 1
mov r9d, 8
lea r8, [rsp + 0x60]
lea edx, [r9 + 0x2a]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
mov word [rsp + 0x40], r15w
mov rcx, rdi
call fcn.1400018c0
mov rcx, rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x70]
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0x98]
call fcn.14005a9d0
test al, al
je 0x14005b466
lea r8, [rbx + 0x40]
mov edx, 2
lea r9d, [rdx + 2]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
je 0x14005b466
lea r8, [rbx + 0x44]
mov edx, 6
lea r9d, [rdx - 2]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
je 0x14005b466
lea rcx, [rbp + 0x98]
call fcn.1400018c0
mov rdx, rax
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r15
xor r9d, r9d
movzx r8d, word [rsp + 0x40]
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.WININET.dll_InternetConnectW]
mov qword [rbx + 0x30], rax
test rax, rax
setne dil
jmp 0x14005b469
xor dil, dil
lea rcx, [rbp + 0x48]
call fcn.140001624
mov rcx, rbx
test dil, dil
je 0x14005b60f
lea rdx, [rbp + 0x48]
call fcn.14005a980
nop
mov rcx, rax
call fcn.14005a800
mov rdi, qword [rbx + 0x30]
test al, al
mov eax, 0x4e0f000
cmovne esi, eax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x20]
call fcn.140001678
or r13, 0xffffffffffffffff
mov r9, r13
xor r8d, r8d
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x20]
call fcn.1400028b0
nop
mov r9, r13
xor r8d, r8d
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x20]
call fcn.14000272c
lea rcx, [rbp + 0x20]
call fcn.1400018c0
mov r8, rax
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
lea r9, str.HTTP_1.1
lea rdx, [0x140091ba0]
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov rdi, rax
test rax, rax
je 0x14005b55a
mov dword [rsp + 0x48], 4
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x40]
lea edx, [r13 + 0x20]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetQueryOptionW]
test eax, eax
je 0x14005b55a
or dword [rsp + 0x40], 0x3100
lea r9d, [r13 + 5]
lea r8, [rsp + 0x40]
lea edx, [r13 + 0x20]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetSetOptionW]
nop
lea rcx, [rbp + 0x20]
call fcn.140001624
mov qword [rbx + 0x38], rdi
lea rcx, [rbp + 0x48]
call fcn.140001624
mov r9d, dword [rbp + 0x1180]
cmp byte [rbx + 0x70], 0
je 0x14005b582
test r9d, r9d
jne 0x14005b588
cmp r12d, 0xffffffff
je 0x14005b5d7
lea eax, [r12 + r9 - 1]
mov dword [rsp + 0x20], eax
lea r8, str.Range:_bytes_u__u
mov edx, 0x400
lea rcx, [rbp + 0x110]
call qword [sym.imp.SHLWAPI.dll_wnsprintfW]
xor eax, eax
mov rcx, r13
lea rdi, [rbp + 0x110]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov r9d, 0x20000000
lea rdx, [rbp + 0x110]
mov rcx, qword [rbx + 0x38]
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersW]
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14005b605
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WININET.dll_HttpSendRequestW]
test eax, eax
jne 0x14005b605
mov rcx, qword [rbx + 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov qword [rbx + 0x38], r15
mov rcx, rbx
call fcn.14005b6c0
jmp 0x14005b669
lea rdx, [rbp + 0xe8]
call fcn.14005a980
nop
mov r8, rax
lea rdx, str.Cant_open_connection_to
lea rcx, [rbp + 0x48]
call fcn.14002f6e0
nop
mov rcx, rax
call fcn.1400018c0
mov r8, rax
lea rdx, str.ERROR
mov rcx, r14
call fcn.140018920
nop
lea rcx, [rbp + 0x48]
call fcn.140001624
nop
lea rcx, [rbp + 0xe8]
call fcn.140001624
mov rcx, r14
call fcn.140018840
mov rdi, qword [rbx + 0x38]
lea rcx, [rbp + 0x70]
call fcn.140001624
nop
lea rcx, [rbp + 0xc0]
call fcn.140001624
nop
lea rcx, [rbp + 0x98]
call fcn.140001624
mov rax, rdi
mov rcx, qword [rbp + 0x1110]
xor rcx, rsp
call fcn.14005ba60
mov rbx, qword [rsp + 0x1270]
add rsp, 0x1220
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret