Function at 0x140028a00
Capabilities:
Prepare http request
Read http header

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
mov r14, r9
mov rdi, r8
mov rbx, rdx
mov rsi, rcx
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov dword [rsp + 0x5c], 0
lea rax, [rsp + 0x58]
mov qword [rsp + 0x90], rax
mov eax, 0x686e970d
lea r15, [rsp + 0xa0]
mov r13, qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140028a70
mov rax, qword [rsp + 0x70]
mov eax, 0xcc54534c
nop word cs:[rax + rax]
nop dword [rax]
cmp eax, 0xf97bf8af
jg 0x140028ad0
cmp eax, 0xde963a3b
jle 0x140028b80
cmp eax, 0xec44cda4
jle 0x140028c11
cmp eax, 0xf1c65f26
jle 0x140028cdf
cmp eax, 0xf1c65f27
je 0x140028e53
cmp eax, 0xf25edc40
je 0x140028e90
cmp eax, 0xf4e1074c
jne 0x140028a70
cmp qword [rsp + 0x48], 0
mov eax, 0xde963a3c
mov ecx, 0x641b8ed8
cmove eax, ecx
jmp 0x140028a70
cmp eax, 0x36cc8389
jle 0x140028bd0
cmp eax, 0x6355b9ef
jle 0x140028c4a
cmp eax, 0x686e970c
jle 0x140028d0b
cmp eax, 0x7d4b54a1
je 0x140028ea4
cmp eax, 0x6f7135ac
je 0x140028eae
cmp eax, 0x686e970d
jne 0x140028a70
mov rax, qword [rsp + 0x90]
mov dword [rsp + 0x58], 4
mov qword [rsp + 0x70], r15
mov rax, qword [rsp + 0x70]
mov rax, qword [rsp + 0x70]
movaps xmm0, xmmword [0x140053a80]
movaps xmmword [rax], xmm0
mov rax, qword [rsp + 0x120]
mov dword [rax], 0
mov rcx, rsi
mov rdx, rdi
mov r8w, 0x50
xor r9d, r9d
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
sete byte [rsp + 0x45]
mov eax, 0x19d8e76c
jmp 0x140028a70
cmp eax, 0xc4516286
jle 0x140028c7c
cmp eax, 0xd9f4e9e0
jg 0x140028d35
cmp eax, 0xc4516287
je 0x140028eb8
cmp eax, 0xcc54534c
jne 0x140028fb2
mov rax, qword [rsp + 0x90]
mov rax, qword [rsp + 0x68]
mov eax, 0xc5c595ee
jmp 0x140028a70
cmp eax, 0x19ae83b0
jg 0x140028ca7
cmp eax, 0xfdc6e53e
jg 0x140028d55
cmp eax, 0xf97bf8b0
je 0x140028ec2
cmp eax, 0xfc9bfe02
jne 0x140028a70
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x88], eax
mov eax, 0x19ae83b1
jmp 0x140028a70
cmp eax, 0xe4139afe
jg 0x140028da7
cmp eax, 0xde963a3c
je 0x140028ed3
cmp eax, 0xe18ab716
jne 0x140028a70
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov eax, 0x2e552fe4
jmp 0x140028a70
cmp eax, 0x4be1c14c
jg 0x140028dd4
cmp eax, 0x36cc838a
je 0x140028eee
cmp eax, 0x45a862be
jne 0x140028a70
call r13
mov dword [rsp + 0x7c], eax
mov eax, 0xfdc6e53f
jmp 0x140028a70
cmp eax, 0x99442b9b
jg 0x140028e0a
cmp eax, 0x812fd578
je 0x140028ef8
cmp eax, 0x8b84ff6a
jne 0x140028a70
mov eax, 0xed7bfe66
jmp 0x140028a70
cmp eax, 0x2e552fe3
jg 0x140028e2a
cmp eax, 0x19ae83b1
je 0x140028f0d
cmp eax, 0x19d8e76c
jne 0x140028a70
cmp byte [rsp + 0x45], 0
mov eax, 0xf1c65f27
mov ecx, 0x45a862be
cmovne eax, ecx
jmp 0x140028a70
cmp eax, 0xec44cda5
je 0x140028f28
cmp eax, 0xed7bfe66
jne 0x140028a70
mov r12, qword [rsp + 0x48]
mov eax, 0x6355b9f0
mov ebp, dword [rsp + 0x80]
jmp 0x140028a70
cmp eax, 0x6355b9f0
je 0x140028f3d
cmp eax, 0x641b8ed8
jne 0x140028a70
call r13
mov dword [rsp + 0x80], eax
mov eax, 0x8b84ff6a
jmp 0x140028a70
cmp eax, 0xd9f4e9e1
je 0x140028a59
cmp eax, 0xde5c522c
jne 0x140028a70
mov eax, 0x36cc838a
jmp 0x140028a70
cmp eax, 0xfdc6e53f
je 0x140028f67
cmp eax, 0x4feb238
jne 0x140028a70
mov r9, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x48]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0
mov edx, 0x20000013
xor r8d, r8d
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
setne byte [rsp + 0x46]
mov eax, 0xebc2beaa
jmp 0x140028a70
cmp eax, 0xe4139aff
je 0x140028f71
cmp eax, 0xebc2beaa
jne 0x140028a70
cmp byte [rsp + 0x46], 0
mov eax, 0xf25edc40
mov ecx, 0xfc9bfe02
cmovne eax, ecx
jmp 0x140028a70
cmp eax, 0x4be1c14d
je 0x140028f88
cmp eax, 0x4f461df7
jne 0x140028a70
cmp dword [rsp + 0x54], 0
mov eax, 0x6355b9f0
mov ecx, 0x6f7135ac
cmove eax, ecx
mov r12, qword [rsp + 0x48]
mov ebp, dword [rsp + 0x54]
jmp 0x140028a70
cmp eax, 0x99442b9c
je 0x140028f9e
cmp eax, 0xb8cd16dc
jne 0x140028a70
mov eax, 0x4f461df7
jmp 0x140028a70
cmp eax, 0x2e552fe4
je 0x140028fa8
cmp eax, 0x3558ca81
jne 0x140028a70
mov r12, qword [rsp + 0x48]
mov eax, 0x6355b9f0
mov ebp, dword [rsp + 0x54]
jmp 0x140028a70
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x20], 0
lea rdx, [0x14005ea90]
mov r8, r14
xor r9d, r9d
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov qword [rsp + 0x48], rax
mov eax, 0x99442b9c
jmp 0x140028a70
call r13
mov dword [rsp + 0x84], eax
mov eax, 0x7d4b54a1
jmp 0x140028a70
mov eax, 0x4be1c14d
jmp 0x140028a70
mov eax, 0x4feb238
jmp 0x140028a70
mov eax, 0xec44cda5
jmp 0x140028a70
mov eax, 0x6355b9f0
mov ebp, dword [rsp + 0x7c]
xor r12d, r12d
jmp 0x140028a70
mov rcx, qword [rsp + 0x48]
mov rdx, rbx
call fcn.1400286e0
mov dword [rsp + 0x54], eax
mov eax, 0xb8cd16dc
jmp 0x140028a70
mov eax, 0xd9f4e9e1
jmp 0x140028a70
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov eax, 0xde5c522c
jmp 0x140028a70
mov eax, dword [rsp + 0x88]
mov rcx, qword [rsp + 0x120]
mov dword [rcx], eax
mov eax, 0x3558ca81
jmp 0x140028a70
cmp qword [rsp + 0x60], 0
setne byte [rsp + 0x47]
mov eax, 0xe4139aff
jmp 0x140028a70
mov qword [rsp + 0x98], r12
mov dword [rsp + 0x8c], ebp
cmp qword [rsp + 0x98], 0
mov eax, 0xe18ab716
mov ecx, 0xec44cda5
cmove eax, ecx
jmp 0x140028a70
mov eax, 0xf97bf8b0
jmp 0x140028a70
cmp byte [rsp + 0x47], 0
mov eax, 0xd9f4e9e1
mov ecx, 0x812fd578
cmovne eax, ecx
jmp 0x140028a70
mov r12, qword [rsp + 0x48]
mov eax, 0x6355b9f0
mov ebp, dword [rsp + 0x84]
jmp 0x140028a70
mov eax, 0xf4e1074c
jmp 0x140028a70
mov eax, 0xc4516287
jmp 0x140028a70
cmp eax, 0xc5c595ee
jne 0x140028a70
mov eax, dword [rsp + 0x8c]
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret