Function at 0x140002810
Capabilities:
Check http status code
Connect to http server
Create http request
Delete file
Parse url
Send data
Send http request

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1428
call fcn.140008fc0
sub rsp, rax
movaps xmmword [rsp + 0x1410], xmm6
mov qword [rsp + 0x68], rdx
mov rax, qword [0x140011030]
xor rax, rsp
mov qword [rsp + 0x1408], rax
mov edi, 1
cmp ecx, 3
jl 0x140004809
mov eax, ecx
and eax, 1
je 0x140004809
mov eax, ecx
mov qword [rsp + 0x70], rax
mov r15d, 1
xor r12d, r12d
xorps xmm6, xmm6
xor ebp, ebp
xor esi, esi
mov rax, qword [rsp + 0x68]
mov rdi, qword [rax + r15*8 + 8]
mov qword [rsp + 0x1150], 0
mov qword [rsp + 0x1168], 0xf
mov byte [rsp + 0x1150], 0
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r14, rax
cmp rax, 0xf
jbe 0x1400028f0
test r14, r14
js 0x14000483d
mov rbx, r14
or rbx, 0xf
cmp rbx, 0x17
mov eax, 0x16
cmovb rbx, rax
cmp rbx, 0xfff
jb 0x140002916
lea rcx, [rbx + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x140002922
mov qword [rsp + 0x1160], r14
lea rcx, [rsp + 0x1150]
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + r14 + 0x1150], 0
jmp 0x14000294e
lea rcx, [rbx + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r13, rax
mov qword [rsp + 0x1160], r14
mov qword [rsp + 0x1168], rbx
mov rcx, r13
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r13 + r14], 0
mov qword [rsp + 0x1150], r13
mov rax, qword [rsp + 0x68]
mov rdi, qword [rax + r15*8]
mov qword [rsp + 0x1260], 0
mov qword [rsp + 0x1278], 0xf
mov byte [rsp + 0x1260], 0
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r13, rax
cmp rax, 0x10
lea rbx, [rsp + 0x1260]
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r15
jb 0x1400029eb
test r13, r13
js 0x14000483d
mov r15, r13
or r15, 0xf
cmp r15, 0x17
mov eax, 0x16
cmovb r15, rax
cmp r15, 0xfff
jb 0x140002a67
lea rcx, [r15 + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140002a73
mov qword [rsp + 0x1270], r13
mov rcx, rbx
mov rdx, rdi
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + r13 + 0x1260], 0
mov rdi, qword [rsp + 0x1260]
mov r13, qword [rsp + 0x1270]
mov r15, qword [rsp + 0x1278]
mov qword [rsp + 0x150], 0
lea rax, [rsp + 0x170]
movups xmmword [rax - 0x10], xmm6
cmp r15, 0x10
setae al
cmovae rbx, rdi
cmp r13, 0xf
ja 0x140002a63
movups xmm0, xmmword [rbx]
movaps xmmword [rsp + 0x150], xmm0
mov r12d, 0xf
mov esi, eax
jmp 0x140002b16
mov esi, eax
jmp 0x140002abc
lea rcx, [r15 + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbx, rax
mov qword [rsp + 0x1270], r13
mov qword [rsp + 0x1278], r15
mov rcx, rbx
mov rdx, rdi
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r13], 0
mov qword [rsp + 0x1260], rbx
mov qword [rsp + 0x150], 0
lea rax, [rsp + 0x170]
movups xmmword [rax - 0x10], xmm6
mov sil, 1
mov rdi, rbx
mov r12, r13
or r12, 0xf
movabs rax, 0x7fffffffffffffff
cmp r12, rax
cmovae r12, rax
cmp r12, 0xfff
jb 0x140002af5
lea rcx, [r12 + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140002b02
lea rcx, [r12 + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, rax
mov qword [rsp + 0x150], rcx
lea r8, [r13 + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], r12
mov r13, qword [rsp + 0x1150]
mov r12, qword [rsp + 0x1160]
mov rbp, qword [rsp + 0x1168]
cmp rbp, 0x10
lea r14, [rsp + 0x1150]
cmovae r14, r13
cmp r12, 0xf
ja 0x140002b6a
movups xmm0, xmmword [r14]
lea rax, [rsp + 0x170]
movups xmmword [rax], xmm0
mov ebx, 0xf
jmp 0x140002bc3
mov rbx, r12
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140002ba2
lea rcx, [rbx + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140002bae
lea rcx, [rbx + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, rax
mov qword [rsp + 0x170], rcx
lea r8, [r12 + 1]
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], rbx
test sil, sil
mov r14, qword [rsp + 0x50]
mov r12, qword [rsp + 0x58]
je 0x140002c16
lea rdx, [r15 + 1]
cmp rdx, 0x1000
jb 0x140002c0e
mov rax, qword [rdi - 8]
add rdi, 0xfffffffffffffff8
sub rdi, rax
cmp rdi, 0x20
jae 0x140004837
add r15, 0x28
mov rdx, r15
mov rdi, rax
mov rcx, rdi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp rbp, 0x10
mov r15, qword [rsp + 0x60]
jb 0x140002c55
lea rdx, [rbp + 1]
cmp rdx, 0x1000
jb 0x140002c4d
mov rax, qword [r13 - 8]
add r13, 0xfffffffffffffff8
sub r13, rax
cmp r13, 0x20
jae 0x140004837
add rbp, 0x28
mov rdx, rbp
mov r13, rax
mov rcx, r13
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rbp, qword [rsp + 0x80]
cmp rbp, r14
je 0x140002c7e
mov rcx, rbp
lea rdx, [rsp + 0x150]
call fcn.140004850
add rbp, 0x40
mov r13, r12
jmp 0x140002e6b
mov rsi, r15
mov rdi, rbp
sub rdi, r12
mov r14, rdi
sar r14, 6
lea r15, [r14 + 1]
mov rax, r14
shr rax, 1
movabs rdx, 0x3ffffffffffffff
mov rcx, rdx
sub rcx, rax
add rax, r14
cmp rax, r15
cmovbe rax, r15
cmp r14, rcx
cmova rax, rdx
cmp rax, rdx
ja 0x140004842
mov rcx, rax
shl rcx, 6
cmp rax, 0x40
mov qword [rsp + 0x50], rcx
jb 0x140002ceb
or rcx, 0x27
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r13, [rax + 0x27]
and r13, 0xffffffffffffffe0
mov qword [r13 - 8], rax
jmp 0x140002d02
test rax, rax
je 0x140002cff
mov rcx, qword [rsp + 0x50]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r13, rax
jmp 0x140002d02
xor r13d, r13d
shl r14, 6
add r14, r13
mov rcx, r14
lea rdx, [rsp + 0x150]
call fcn.140004850
cmp r12, rbp
je 0x140002e18
mov r14, r12
mov r12, r13
mov rcx, r13
mov rdx, r14
call fcn.140004850
add r13, 0x40
add r14, 0x40
cmp r14, rbp
jne 0x140002d28
mov rax, qword [rsp + 0x58]
test rax, rax
mov r13, r12
mov r14, qword [rsp + 0x50]
je 0x140002e5b
mov r12, rax
cmp rax, rbp
je 0x140002e22
mov rbx, r12
mov rax, qword [rbx + 0x38]
cmp rax, 0x10
jb 0x140002da4
mov rcx, qword [rbx + 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140002d9f
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov qword [rbx + 0x30], 0
mov qword [rbx + 0x38], 0xf
mov byte [rbx + 0x20], 0
mov rax, qword [rbx + 0x18]
cmp rax, 0x10
jb 0x140002df6
mov rcx, qword [rbx]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140002df1
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
add rbx, 0x40
cmp rbx, rbp
jne 0x140002d65
jmp 0x140002e22
test r12, r12
mov r14, qword [rsp + 0x50]
je 0x140002e5b
cmp rdi, 0x1000
jb 0x140002e48
mov rax, qword [r12 - 8]
add r12, 0xfffffffffffffff8
sub r12, rax
cmp r12, 0x20
jae 0x140004837
or rdi, 0x27
mov r12, rax
mov rcx, r12
mov rdx, rdi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rbx, qword [rsp + 0x188]
shl r15, 6
add r15, r13
add r14, r13
mov rbp, r15
mov r15, rsi
cmp rbx, 0x10
jb 0x140002eaa
mov rcx, qword [rsp + 0x170]
lea rdx, [rbx + 1]
cmp rdx, 0x1000
jb 0x140002ea5
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140004837
add rbx, 0x28
mov rdx, rbx
mov rcx, rax
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rax, qword [rsp + 0x168]
cmp rax, 0x10
jb 0x140002ef1
mov rcx, qword [rsp + 0x150]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140002eec
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rsi, r14
add r15, 2
mov r12, r13
cmp r15, qword [rsp + 0x70]
jb 0x140002878
mov rax, qword [rsp + 0x68]
mov rdi, qword [rax + 0x10]
mov qword [rsp + 0x1380], 0
mov qword [rsp + 0x1398], 0xf
mov byte [rsp + 0x1380], 0
mov rcx, rdi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r14, rax
cmp rax, 0xf
jbe 0x140002f80
test r14, r14
js 0x14000483d
mov r15, rbp
mov rax, r14
or rax, 0xf
cmp rax, 0x17
mov ebx, 0x16
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140002fb2
lea rcx, [rbx + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rbp, [rax + 0x27]
and rbp, 0xffffffffffffffe0
mov qword [rbp - 8], rax
jmp 0x140002fbe
mov r15, rbp
mov qword [rsp + 0x50], rsi
lea r12, [rsp + 0x1380]
mov qword [r12 + 0x10], r14
mov rcx, r12
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memmove
mov byte [rsp + r14 + 0x1380], 0
mov rbp, qword [r12]
jmp 0x140002fef
lea rcx, [rbx + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbp, rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x1390], r14
mov qword [rsp + 0x1398], rbx
mov rcx, rbp
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + r14], 0
mov qword [rsp + 0x1380], rbp
lea r12, [rsp + 0x150]
mov r8d, 0x105
mov rcx, r12
xor edx, edx
call sub.VCRUNTIME140.dll_memset
lea rax, [rsp + 0x1380]
cmp qword [rax + 0x18], 0x10
cmovb rbp, rax
mov r8d, 0x105
mov rcx, r12
mov rdx, rbp
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__fullpath]
test rax, rax
lea rbp, [rsp + 0x1150]
lea r14, [rsp + 0x1260]
je 0x1400030ed
lea rdi, [rsp + 0xa0]
mov byte [rdi + 2], 0
mov word [rdi], 0
mov r8d, 0x100
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
xorps xmm6, xmm6
movups xmmword [rsp + 0x38], xmm6
movups xmmword [rsp + 0x28], xmm6
mov qword [rsp + 0x20], 0x100
lea rcx, [rsp + 0x150]
mov r8d, 3
mov rdx, rdi
mov r9, r14
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath_s]
test eax, eax
jne 0x1400030e5
lea rdi, [rsp + 0x1150]
mov r8d, 0x105
mov rcx, rdi
xor edx, edx
call sub.VCRUNTIME140.dll_memset
movups xmmword [rsp + 0x20], xmm6
lea r8, [rsp + 0xa0]
lea r9, [rsp + 0x1260]
mov edx, 0x105
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__makepath_s]
test eax, eax
jne 0x1400030e5
lea rcx, [rsp + 0x1150]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__chdir]
lea r14, [rsp + 0x1260]
mov rax, qword [rsp + 0x1398]
cmp rax, 0x10
jb 0x140003134
mov rcx, qword [rsp + 0x1380]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000312f
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp r13, r15
je 0x140004707
mov rax, r13
xor r13d, r13d
xorps xmm6, xmm6
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x1260], r13
mov qword [rsp + 0x1270], r13
mov qword [rsp + 0x1278], 0xf
mov byte [rsp + 0x1260], 0
lea rax, [0x14000c1c0]
mov qword [rsp + 0x1150], rax
lea rcx, [rsp + 0x1200]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::ios_base::constructor_void____ptr64]
lea rax, [0x14000c268]
mov qword [rsp + 0x1200], rax
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rdi, [0x14000c1b8]
mov qword [rsp + rax + 0x1150], rdi
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
mov ebx, 0xffffff50
lea ecx, [rax + rbx]
mov dword [rsp + rax + 0x114c], ecx
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [0x14000c270]
mov qword [rsp + rax + 0x1150], rcx
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0x18]
mov dword [rsp + rax + 0x114c], ecx
mov qword [rsp + 0x1158], r13
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1150
lea rsi, [rsp + 0x1160]
mov rdx, rsi
xor r8d, r8d
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::init_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
mov qword [rsp + rax + 0x1150], rdi
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea ecx, [rax + rbx]
mov dword [rsp + rax + 0x114c], ecx
mov rcx, rsi
call fcn.1400092d0
mov rax, qword [rsp + 0x58]
lea rdx, [rax + 0x20]
cmp qword [rax + 0x38], 0x10
mov qword [rsp + 0x68], rdx
jb 0x140003285
mov rdx, qword [rax + 0x20]
lea rcx, [rsp + 0x1160]
call fcn.140009350
mov rcx, qword [rsp + 0x1150]
movsxd rcx, dword [rcx + 4]
add rcx, rsp
add rcx, 0x1150
mov edx, 0
test rax, rax
jne 0x1400032b8
mov edx, dword [rcx + 0x10]
or edx, 2
xor r8d, r8d
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
cmp qword [rsp + 0x11e0], 0
mov rbx, qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
jne 0x1400032fc
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x148], 0xf
mov qword [rsp + 0x140], r13
mov byte [rsp + 0x130], 0
jmp 0x1400033f2
mov r8d, 0x1000
mov rcx, rbp
mov rdx, r12
call rbx
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1150
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::bad_void_const___ptr64]
test al, al
jne 0x1400032d3
mov r9, qword [rsp + 0x1158]
mov rcx, qword [rsp + 0x1270]
mov rax, qword [rsp + 0x1278]
mov rdx, rax
sub rdx, rcx
cmp rdx, r9
jae 0x14000335e
mov rcx, r14
mov rdx, r9
mov r8, r12
call fcn.1400026b0
jmp 0x14000338d
lea rsi, [rcx + r9]
mov qword [rsp + 0x1270], rsi
mov rdi, r14
cmp rax, 0x10
jb 0x14000337b
mov rdi, qword [rsp + 0x1260]
add rcx, rdi
mov rdx, r12
mov r8, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi], 0
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [rsp + rax]
add rcx, 0x1150
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::eof_void_const___ptr64]
test al, al
je 0x1400032fc
movups xmm0, xmmword [rsp + 0x1260]
movups xmm1, xmmword [rsp + 0x1270]
movaps xmmword [rsp + 0x140], xmm1
movaps xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x1270], 0
mov qword [rsp + 0x1278], 0xf
mov byte [rsp + 0x1260], 0
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea rcx, [0x14000c1b8]
mov qword [rsp + rax + 0x1150], rcx
mov rax, qword [rsp + 0x1150]
movsxd rax, dword [rax + 4]
lea ecx, [rax - 0xb0]
mov dword [rsp + rax + 0x114c], ecx
lea rcx, [rsp + 0x1160]
call fcn.140009470
lea rcx, [rsp + 0x1200]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::ios_base::destructor_void____ptr64]
mov rax, qword [rsp + 0x1278]
cmp rax, 0x10
jb 0x140003488
mov rcx, qword [rsp + 0x1260]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140003483
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp qword [rsp + 0x140], 0
je 0x140003adf
movaps xmmword [rsp + 0x1180], xmm6
movaps xmmword [rsp + 0x1190], xmm6
movaps xmmword [rsp + 0x1170], xmm6
movaps xmmword [rsp + 0x1160], xmm6
movaps xmmword [rsp + 0x1150], xmm6
mov qword [rsp + 0x11a0], 0
lea rax, [fcn.140005250]
mov qword [rsp + 0x1180], rax
lea rax, [0x140005260]
mov qword [rsp + 0x1188], rax
xor ecx, ecx
mov edx, 1
mov r8d, 0x1718
call fcn.140005250
test rax, rax
je 0x140003b2e
mov rdi, rax
mov qword [rsp + 0x1178], rax
mov qword [rax], rbp
mov dword [rax + 8], 0x2a
mov dword [rax + 0x2c], 2
mov qword [rax + 0x30], 0
movabs rax, 0xf00008000
mov qword [rdi + 0x44], rax
mov dword [rdi + 0x4c], 0x7fff
mov qword [rdi + 0x74], rax
movabs rax, 0x500007fff
mov qword [rdi + 0x7c], rax
xor ecx, ecx
mov edx, 0x8000
mov r8d, 2
call fcn.140005250
mov qword [rdi + 0x50], rax
mov edx, dword [rdi + 0x44]
mov rax, qword [rsp + 0x1180]
mov rcx, qword [rsp + 0x1190]
mov r8d, 2
call qword [0x140013010]
mov qword [rdi + 0x60], rax
mov edx, dword [rdi + 0x74]
mov rax, qword [rsp + 0x1180]
mov rcx, qword [rsp + 0x1190]
mov r8d, 2
call qword [0x140013010]
mov qword [rdi + 0x68], rax
mov dword [rdi + 0x1714], 0
mov dword [rdi + 0x16f0], 0x4000
mov rax, qword [rsp + 0x1180]
mov rcx, qword [rsp + 0x1190]
mov edx, 0x4000
mov r8d, 4
call qword [0x140013010]
mov qword [rdi + 0x10], rax
mov ecx, dword [rdi + 0x16f0]
lea edx, [rcx*4]
mov dword [rdi + 0x18], edx
cmp qword [rdi + 0x50], 0
je 0x140003b10
cmp qword [rdi + 0x60], 0
je 0x140003b10
cmp qword [rdi + 0x68], 0
je 0x140003b10
test rax, rax
je 0x140003b10
add rax, rcx
mov qword [rdi + 0x16e8], rax
lea eax, [rcx + rcx*2]
add eax, 0xfffffffd
mov dword [rdi + 0x16f8], eax
mov qword [rdi + 0xac], 6
mov byte [rdi + 0x3c], 8
cmp qword [rsp + 0x1180], 0
je 0x140003b2e
cmp qword [rsp + 0x1188], 0
je 0x140003b2e
mov rax, qword [rsp + 0x1178]
test rax, rax
je 0x140003b2e
cmp qword [rax], rbp
jne 0x140003b2e
mov ecx, dword [rax + 8]
cmp ecx, 0x71
jne 0x140003ae6
mov dword [rsp + 0x116c], r13d
mov dword [rsp + 0x115c], r13d
mov qword [rsp + 0x1170], 0
mov dword [rsp + 0x1198], 2
mov dword [rax + 0x28], r13d
mov rcx, qword [rax + 0x10]
mov qword [rax + 0x20], rcx
mov ecx, dword [rax + 0x2c]
test ecx, ecx
js 0x140003b59
xor edx, edx
cmp ecx, 2
mov ecx, 0x39
mov r8d, 0x2a
cmovne ecx, r8d
setne dl
mov dword [rax + 8], ecx
mov dword [rsp + 0x119c], edx
mov dword [rax + 0x40], 0xfffffffe
lea rcx, [rax + 0xbc]
mov qword [rax + 0xb40], rcx
lea rcx, [0x14000ea20]
mov qword [rax + 0xb50], rcx
lea rcx, [rax + 0x9b0]
mov qword [rax + 0xb58], rcx
lea rcx, [0x14000ea40]
mov qword [rax + 0xb68], rcx
lea rcx, [rax + 0xaa4]
mov qword [rax + 0xb70], rcx
lea rcx, [0x14000ea60]
mov qword [rax + 0xb80], rcx
mov word [rax + 0x170c], 0
mov dword [rax + 0x1710], 0
mov ecx, 0x30
mov word [rax + rcx*4 - 4], r13w
mov word [rax + rcx*4], r13w
add rcx, 2
cmp rcx, 0x14e
jne 0x140003759
mov word [rax + 0x9b0], r13w
mov word [rax + 0x9b4], r13w
mov word [rax + 0x9b8], r13w
mov word [rax + 0x9bc], r13w
mov word [rax + 0x9c0], r13w
mov word [rax + 0x9c4], r13w
mov word [rax + 0x9c8], r13w
mov word [rax + 0x9cc], r13w
mov word [rax + 0x9d0], r13w
mov word [rax + 0x9d4], r13w
mov word [rax + 0x9d8], r13w
mov word [rax + 0x9dc], r13w
mov word [rax + 0x9e0], r13w
mov word [rax + 0x9e4], r13w
mov word [rax + 0x9e8], r13w
mov word [rax + 0x9ec], r13w
mov word [rax + 0x9f0], r13w
mov word [rax + 0x9f4], r13w
mov word [rax + 0x9f8], r13w
mov word [rax + 0x9fc], r13w
mov word [rax + 0xa00], r13w
mov word [rax + 0xa04], r13w
mov word [rax + 0xa08], r13w
mov word [rax + 0xa0c], r13w
mov word [rax + 0xa10], r13w
mov word [rax + 0xa14], r13w
mov word [rax + 0xa18], r13w
mov word [rax + 0xa1c], r13w
mov word [rax + 0xa20], r13w
mov word [rax + 0xa24], r13w
mov word [rax + 0xaa4], r13w
mov word [rax + 0xaa8], r13w
mov word [rax + 0xaac], r13w
mov word [rax + 0xab0], r13w
mov word [rax + 0xab4], r13w
mov word [rax + 0xab8], r13w
mov word [rax + 0xabc], r13w
mov word [rax + 0xac0], r13w
mov word [rax + 0xac4], r13w
mov word [rax + 0xac8], r13w
mov word [rax + 0xacc], r13w
mov word [rax + 0xad0], r13w
mov word [rax + 0xad4], r13w
mov word [rax + 0xad8], r13w
mov word [rax + 0xadc], r13w
mov word [rax + 0xae0], r13w
mov word [rax + 0xae4], r13w
mov word [rax + 0xae8], r13w
mov word [rax + 0xaec], r13w
mov word [rax + 0x4bc], 1
mov qword [rax + 0x1700], r13
mov dword [rax + 0x16fc], r13d
mov dword [rax + 0x16f4], r13d
mov rsi, qword [rsp + 0x1178]
mov eax, dword [rsi + 0x44]
add eax, eax
mov dword [rsi + 0x58], eax
mov rax, qword [rsi + 0x68]
mov ecx, dword [rsi + 0x74]
dec ecx
mov word [rax + rcx*2], r13w
mov rcx, qword [rsi + 0x68]
mov r8d, dword [rsi + 0x74]
dec r8d
add r8, r8
xor edx, edx
call sub.VCRUNTIME140.dll_memset
movsxd rax, dword [rsi + 0xac]
shl rax, 4
lea rdx, [0x14000e680]
movzx ecx, word [rax + rdx + 2]
mov dword [rsi + 0xa8], ecx
movzx ecx, word [rax + rdx]
mov dword [rsi + 0xb4], ecx
movzx ecx, word [rax + rdx + 4]
mov dword [rsi + 0xb8], ecx
movzx eax, word [rax + rdx + 6]
mov dword [rsi + 0xa4], eax
movabs rax, 0x200000000
mov qword [rsi + 0x84], rax
mov qword [rsi + 0x9c], rax
mov dword [rsi + 0x1708], r13d
mov qword [rsi + 0x90], r13
mov dword [rsi + 0x70], r13d
mov qword [rsp + 0x1160], r12
mov dword [rsp + 0x1168], 0xfff
mov eax, dword [rsp + 0x140]
mov dword [rsp + 0x1158], eax
cmp qword [rsp + 0x148], 0x10
lea rcx, [rsp + 0x130]
jb 0x1400039ed
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x1150], rcx
mov qword [rsp + 0x1260], r13
mov qword [rsp + 0x1270], r13
mov qword [rsp + 0x1278], 0xf
mov byte [rsp + 0x1260], 0
test eax, eax
je 0x140003b82
mov rcx, rbp
xor edx, edx
call section..text
cmp dword [rsp + 0x1168], 0
jne 0x140003ac2
mov rsi, qword [rsp + 0x1270]
mov rax, qword [rsp + 0x1278]
mov rcx, rax
sub rcx, rsi
cmp rcx, 0xfff
jae 0x140003a70
mov edx, 0xfff
mov r9d, 0xfff
mov rcx, r14
mov r8, r12
call fcn.1400026b0
jmp 0x140003aaa
lea rcx, [rsi + 0xfff]
mov qword [rsp + 0x1270], rcx
mov rdi, r14
cmp rax, 0x10
jb 0x140003a90
mov rdi, qword [rsp + 0x1260]
lea rcx, [rdi + rsi]
mov r8d, 0xfff
mov rdx, r12
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rsi + 0xfff], 0
mov qword [rsp + 0x1160], r12
mov dword [rsp + 0x1168], 0xfff
jmp 0x140003a21
mov edi, eax
cmp dword [rsp + 0x1158], 0
je 0x140003b7a
test edi, edi
je 0x140003a21
jmp 0x140003b7a
xor esi, esi
jmp 0x140004590
lea edx, [rcx - 0x2a]
cmp edx, 0x3d
ja 0x140003b02
movabs r8, 0x2002000088008001
bt r8, rdx
jb 0x140003687
cmp ecx, 0x29a
je 0x140003687
jmp 0x140003b2e
mov dword [rdi + 8], 0x29a
lea rax, str.insufficient_memory
mov qword [rsp + 0x1170], rax
mov rcx, rbp
call fcn.140005130
xor esi, esi
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x128], 0xf
mov qword [rsp + 0x120], rsi
mov byte [rsp + 0x110], 0
jmp 0x140004590
neg ecx
mov dword [rax + 0x2c], ecx
jmp 0x1400036c5
mov rax, qword [rsp + 0x58]
add rax, 0x40
cmp rax, r15
jne 0x14000314b
jmp 0x1400046fe
test edi, edi
jne 0x140003c1a
mov rcx, rbp
mov edx, 4
call section..text
mov edi, eax
mov eax, dword [rsp + 0x1168]
cmp eax, 0xfff
je 0x140003c1a
mov r9d, 0xfff
sub r9d, eax
mov rcx, qword [rsp + 0x1270]
mov rax, qword [rsp + 0x1278]
mov rdx, rax
sub rdx, rcx
cmp rdx, r9
jae 0x140003bd3
mov rcx, r14
mov rdx, r9
mov r8, r12
call fcn.1400026b0
jmp 0x140003c02
lea rsi, [rcx + r9]
mov qword [rsp + 0x1270], rsi
mov rbx, r14
cmp rax, 0x10
jb 0x140003bf0
mov rbx, qword [rsp + 0x1260]
add rcx, rbx
mov rdx, r12
mov r8, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
mov qword [rsp + 0x1160], r12
mov dword [rsp + 0x1168], 0xfff
jmp 0x140003b7a
mov rcx, rbp
call fcn.140005130
cmp edi, 1
jne 0x140003c49
movups xmm0, xmmword [rsp + 0x1260]
movups xmm1, xmmword [rsp + 0x1270]
movaps xmmword [rsp + 0x120], xmm1
movaps xmmword [rsp + 0x110], xmm0
jmp 0x140003cb8
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x128], 0xf
mov qword [rsp + 0x120], r13
mov byte [rsp + 0x110], 0
mov rax, qword [rsp + 0x1278]
cmp rax, 0xf
jbe 0x140003dde
mov rcx, qword [rsp + 0x1260]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140003cb3
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp qword [rsp + 0x120], 0
je 0x140003dde
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0xb0], xmm6
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xd0], xmm6
mov qword [rsp + 0x100], 0
mov dword [rsp + 0xa0], 0x68
mov qword [rsp + 0xa8], r12
mov eax, 0x100
mov dword [rsp + 0xb0], eax
mov qword [rsp + 0xb8], rbp
mov dword [rsp + 0xc0], eax
mov qword [rsp + 0xe8], r14
mov dword [rsp + 0xf0], eax
mov rax, qword [rsp + 0x58]
cmp qword [rax + 0x18], 0x10
mov rcx, rax
jb 0x140003d52
mov rcx, qword [rax]
mov edx, dword [rax + 0x10]
xor esi, esi
xor r8d, r8d
lea r9, [rsp + 0xa0]
call qword [sym.imp.WININET.dll_InternetCrackUrlA]
test eax, eax
je 0x140004549
mov qword [rsp + 0x1360], 0
mov qword [rsp + 0x1378], 0xf
mov byte [rsp + 0x1360], 0
mov rcx, rbp
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
cmp rax, 0xf
jbe 0x140003de5
test rdi, rdi
js 0x14000483d
mov rsi, rdi
or rsi, 0xf
cmp rsi, 0x17
mov eax, 0x16
cmovb rsi, rax
cmp rsi, 0xfff
jb 0x140003e0a
lea rcx, [rsi + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140003e16
xor esi, esi
jmp 0x140004549
mov qword [rsp + 0x1370], rdi
lea rcx, [rsp + 0x1360]
mov rdx, rbp
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rdi + 0x1360], 0
jmp 0x140003e41
lea rcx, [rsi + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r14, rax
mov qword [rsp + 0x1370], rdi
mov qword [rsp + 0x1378], rsi
mov rcx, r14
mov rdx, rbp
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
mov qword [rsp + 0x1360], r14
mov qword [rsp + 0x80], r15
mov eax, dword [0x140011170]
mov ecx, dword [0x1400110e8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x14000461d
mov rcx, qword [rsp + 0x1360]
mov rbp, qword [rsp + 0x1370]
mov rax, qword [rsp + 0x1378]
mov qword [rsp + 0x70], rax
cmp rax, 0x10
lea rsi, [rsp + 0x1360]
mov qword [rsp + 0x78], rcx
cmovae rsi, rcx
xor ebx, ebx
lea rax, [0x140011130]
mov r15, qword [rbx + rax + 0x10]
cmp qword [rbx + rax + 0x18], 0x10
jb 0x140003ebc
mov r14, qword [rbx + rax]
jmp 0x140003ec0
lea r14, [rax + rbx]
cmp r15, 0xf
ja 0x140003ed9
movups xmm0, xmmword [r14]
movaps xmmword [rsp + 0x1380], xmm0
mov edi, 0xf
jmp 0x140003f31
mov rdi, r15
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x140003f11
lea rcx, [rdi + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140003f1d
lea rcx, [rdi + 1]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rcx, rax
mov qword [rsp + 0x1380], rcx
lea r8, [r15 + 1]
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x1390], r15
mov qword [rsp + 0x1398], rdi
cmp rbp, r15
jne 0x140003f6f
lea rdx, [rsp + 0x1380]
cmp rdi, 0x10
jb 0x140003f5c
mov rdx, qword [rsp + 0x1380]
mov rcx, rsi
mov r8, rbp
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete r14b
jmp 0x140003f72
xor r14d, r14d
cmp rdi, 0x10
jb 0x140003fb2
mov rcx, qword [rsp + 0x1380]
cmp rdi, 0xfff
jb 0x140003fa7
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140004837
add rdi, 0x28
mov rcx, rax
jmp 0x140003faa
inc rdi
mov rdx, rdi
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
cmp rbx, 0x20
sete al
or al, r14b
add rbx, 0x20
cmp al, 1
jne 0x140003ea2
mov r8, qword [rsp + 0x70]
cmp r8, 0x10
mov r15, qword [rsp + 0x80]
lea rbp, [rsp + 0x1150]
lea rbx, [rsp + 0x1380]
jb 0x140004028
lea rdx, [r8 + 1]
cmp rdx, 0x1000
jb 0x14000401e
mov rcx, qword [rsp + 0x78]
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140004837
add r8, 0x28
mov rdx, r8
mov rcx, rax
jmp 0x140004023
mov rcx, qword [rsp + 0x78]
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
test r14b, r14b
je 0x140004217
mov dword [rsp + 0x20], 0
xor esi, esi
lea rcx, str.pingsender_1.0
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetOpenA]
test rax, rax
lea r14, [rsp + 0x1260]
je 0x140004549
mov rdi, rax
mov dword [rsp + 0x94], 0x7530
mov rcx, rax
mov edx, 2
lea r8, [rsp + 0x94]
mov r9d, 4
call qword [sym.imp.WININET.dll_InternetSetOptionA]
test eax, eax
mov qword [rsp + 0x70], rdi
je 0x140004226
movzx r8d, word [rsp + 0xc4]
xor esi, esi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x20], rsi
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x28], 3
mov rcx, rdi
mov rdx, rbp
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetConnectA]
test rax, rax
je 0x140004228
mov r8d, dword [rsp + 0x150]
mov ecx, 0x70747468
xor r8d, ecx
movzx ecx, word [rsp + 0x154]
xor ecx, 0x73
xor edx, edx
or ecx, r8d
sete dl
shl edx, 0x17
or edx, 0x80000
movups xmmword [rsp + 0x20], xmm6
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x38], 0
xor esi, esi
mov qword [rsp + 0x78], rax
mov rcx, rax
lea rdx, str.POST
mov r8, r14
xor r9d, r9d
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov qword [rsp + 0x88], rax
test rax, rax
je 0x140004234
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov qword [rsp + 0x98], rax
lea rcx, [rsp + 0x98]
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__gmtime64]
mov edx, 0x80
mov rcx, rbx
lea r8, str.Date:__a___d__b__Y__H:_M:_S_GMT
mov r9, rax
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
mov qword [rsp + 0x1360], 0
mov qword [rsp + 0x1378], 0xf
mov byte [rsp + 0x1360], 0
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, rax
cmp rax, 0xf
jbe 0x140004240
test rdi, rdi
js 0x14000483d
mov rsi, rdi
or rsi, 0xf
cmp rsi, 0x17
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jae 0x1400046e4
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov r14, rax
mov qword [rsp + 0x1370], rdi
mov qword [rsp + 0x1378], rsi
mov rcx, r14
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rdi], 0
mov qword [rsp + 0x1360], r14
lea r14, [rsp + 0x1260]
jmp 0x140004263
xor esi, esi
lea r14, [rsp + 0x1260]
jmp 0x140004549
xor esi, esi
mov rdi, qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140004542
mov rdi, qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14000453b
mov qword [rsp + 0x1370], rdi
lea rcx, [rsp + 0x1360]
mov rdx, rbx
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rdi + 0x1360], 0
mov rax, qword [rsp + 0x1370]
mov rcx, qword [rsp + 0x1378]
mov rdx, rcx
sub rdx, rax
cmp rdx, 2
jae 0x1400042a0
mov edx, 2
mov r9d, 2
lea rcx, [rsp + 0x1360]
lea r8, [0x14000f2c9]
call fcn.1400026b0
jmp 0x1400042cd
lea rdx, [rax + 2]
mov qword [rsp + 0x1370], rdx
lea rdx, [rsp + 0x1360]
cmp rcx, 0x10
jb 0x1400042c2
mov rdx, qword [rsp + 0x1360]
mov word [rdx + rax], 0xa0d
mov byte [rdx + rax + 2], 0
movups xmm0, xmmword [rsp + 0x1360]
movups xmm1, xmmword [rsp + 0x1370]
movaps xmmword [rsp + 0x1390], xmm1
movaps xmmword [rsp + 0x1380], xmm0
mov rax, qword [rsp + 0x1390]
mov rcx, qword [rsp + 0x1398]
mov rdx, rcx
sub rdx, rax
cmp rdx, 0x19
jae 0x140004325
mov edx, 0x19
mov r9d, 0x19
mov rcx, rbx
lea r8, str.X_PingSender_Version:_1.0
call fcn.1400026b0
jmp 0x14000435e
lea rdx, [rax + 0x19]
mov qword [rsp + 0x1390], rdx
mov rdx, rbx
cmp rcx, 0x10
jb 0x140004342
mov rdx, qword [rsp + 0x1380]
movups xmm0, xmmword [0x14000c189]
movups xmmword [rdx + rax + 9], xmm0
movaps xmm0, xmmword [str.X_PingSender_Version:_1.0]
movups xmmword [rdx + rax], xmm0
mov byte [rdx + rax + 0x19], 0
mov rax, qword [rsp + 0x1390]
mov rcx, qword [rsp + 0x1398]
mov rdx, rcx
sub rdx, rax
cmp rdx, 2
jae 0x140004396
mov edx, 2
mov r9d, 2
mov rcx, rbx
lea r8, [0x14000f2c9]
call fcn.1400026b0
jmp 0x1400043be
lea rdx, [rax + 2]
mov qword [rsp + 0x1390], rdx
mov rdx, rbx
cmp rcx, 0x10
jb 0x1400043b3
mov rdx, qword [rsp + 0x1380]
mov word [rdx + rax], 0xa0d
mov byte [rdx + rax + 2], 0
mov rax, qword [rsp + 0x1390]
mov rcx, qword [rsp + 0x1398]
mov rdx, rcx
sub rdx, rax
cmp rdx, 0x16
jae 0x1400043f6
mov edx, 0x16
mov r9d, 0x16
mov rcx, rbx
lea r8, str.Content_Encoding:_gzip
call fcn.1400026b0
jmp 0x140004432
lea rdx, [rax + 0x16]
mov qword [rsp + 0x1390], rdx
mov rdx, rbx
cmp rcx, 0x10
jb 0x140004413
mov rdx, qword [rsp + 0x1380]
movaps xmm0, xmmword [str.Content_Encoding:_gzip]
movups xmmword [rdx + rax], xmm0
movabs rcx, 0x70697a67203a676e
mov qword [rdx + rax + 0xe], rcx
mov byte [rdx + rax + 0x16], 0
mov eax, dword [rsp + 0x120]
cmp qword [rsp + 0x128], 0x10
lea r9, [rsp + 0x110]
jb 0x140004454
mov r9, qword [rsp + 0x110]
cmp qword [rsp + 0x1398], 0x10
mov rdx, rbx
jb 0x14000446a
mov rdx, qword [rsp + 0x1380]
mov dword [rsp + 0x20], eax
mov rbx, qword [rsp + 0x88]
mov rcx, rbx
mov r8d, 0xffffffff
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
je 0x1400044df
mov dword [rsp + 0x1360], 0
mov dword [rsp + 0x98], 4
mov qword [rsp + 0x20], 0
mov rcx, rbx
mov edx, 0x20000013
lea r8, [rsp + 0x1360]
lea r9, [rsp + 0x98]
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
test eax, eax
setne al
cmp dword [rsp + 0x1360], 0xc8
sete sil
and sil, al
jmp 0x1400044e1
xor esi, esi
mov rdi, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rax, qword [rsp + 0x1398]
cmp rax, 0x10
jb 0x140004536
mov rcx, qword [rsp + 0x1380]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000452a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rdi, qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rbx
call rdi
mov rcx, qword [rsp + 0x78]
call rdi
mov rcx, qword [rsp + 0x70]
call rdi
mov rax, qword [rsp + 0x128]
cmp rax, 0x10
jb 0x140004590
mov rcx, qword [rsp + 0x110]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14000458b
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rax, qword [rsp + 0x148]
cmp rax, 0x10
jb 0x1400045d7
mov rcx, qword [rsp + 0x130]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400045d2
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov edi, 1
test sil, sil
je 0x140004700
mov rax, qword [rsp + 0x58]
cmp qword [rax + 0x30], 0
je 0x140004700
cmp qword [rax + 0x38], 0x10
jb 0x140004605
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
test eax, eax
je 0x140003b63
jmp 0x140004700
lea rcx, [0x140011170]
call fcn.140008360
cmp dword [0x140011170], 0xffffffff
jne 0x140003e6e
mov eax, 0xf
mov qword [0x140011148], rax
mov qword [0x140011140], 9
movabs rcx, 0x736f686c61636f6c
mov qword [0x140011130], rcx
mov word [0x140011138], 0x74
mov qword [0x140011150], 0
movaps xmmword [0x140011160], xmm6
mov qword [0x140011168], rax
mov byte [0x140011150], r13b
mov ecx, 0x20
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [0x140011160], 0x1e
mov qword [0x140011168], 0x1f
movups xmm0, xmmword [str.incoming.telemetry.mozilla.org]
movups xmmword [rax], xmm0
movups xmm0, xmmword [0x14000f283]
movups xmmword [rax + 0xe], xmm0
mov byte [rax + 0x1e], r13b
mov qword [0x140011150], rax
lea rcx, [0x1400025e0]
call fcn.1400084f8
lea rcx, [0x140011170]
call fcn.1400083c8
jmp 0x140003e6e
lea rcx, [rsi + 0x28]
call sub.mozglue.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x1400041e2
xor edi, edi
mov r13, qword [rsp + 0x60]
jmp 0x14000470c
xor edi, edi
mov r15, r13
test r13, r13
mov rbx, qword [rsp + 0x50]
je 0x140004809
cmp r13, r15
je 0x1400047da
mov rsi, r13
mov rax, qword [rsi + 0x38]
cmp rax, 0x10
jb 0x140004765
mov rcx, qword [rsi + 0x20]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140004760
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov qword [rsi + 0x30], 0
mov qword [rsi + 0x38], 0xf
mov byte [rsi + 0x20], 0
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x1400047b7
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x1400047b2
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140004837
add rax, 0x28
mov rdx, rax
mov rcx, r8
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
add rsi, 0x40
cmp rsi, r15
jne 0x140004726
mov r15, r13
sub rbx, r15
cmp rbx, 0x1000
jb 0x1400047fe
mov rax, qword [r15 - 8]
add r15, 0xfffffffffffffff8
sub r15, rax
cmp r15, 0x20
jae 0x140004837
or rbx, 0x27
mov r15, rax
mov rcx, r15
mov rdx, rbx
call sub.mozglue.dll_void___cdecl_operator_delete_void____ptr64__unsigned_long_long_unsigned___int64__
mov rcx, qword [rsp + 0x1408]
xor rcx, rsp
call fcn.140008f90
mov eax, edi
movaps xmm6, xmmword [rsp + 0x1410]
add rsp, 0x1428
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.1400091d0
call fcn.1400091f0
int3