Function at 0x140002a30
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Set http header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4c8]
sub rsp, 0x5c8
mov rax, qword [0x1400890c0]
xor rax, rsp
mov qword [rbp + 0x4b0], rax
mov rbx, r9
mov qword [rbp - 0x68], r8
mov rsi, rdx
mov rdi, rcx
mov r15, qword [rbp + 0x530]
xor r13d, r13d
test r8, r8
je 0x140002a8e
mov qword [r8 + 0x10], r13
mov rax, r8
cmp qword [r8 + 0x18], 7
jbe 0x140002a8a
mov rax, qword [r8]
mov word [rax], r13w
test rbx, rbx
je 0x140002aa7
mov qword [r9 + 0x10], r13
mov rax, rbx
cmp qword [r9 + 0x18], 0xf
jbe 0x140002aa4
mov rax, qword [r9]
mov byte [rax], r13b
test r15, r15
je 0x140002ac1
mov qword [r15 + 0x10], r13
mov rax, r15
cmp qword [r15 + 0x18], 7
jbe 0x140002abd
mov rax, qword [r15]
mov word [rax], r13w
call qword [sym.imp.WINHTTP.dll_WinHttpCheckPlatform]
test eax, eax
je 0x140003389
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rax
mov dword [rbp - 0x30], 0x68
mov dword [rbp - 0x20], 0xffffffff
mov dword [rbp - 0x10], 0xffffffff
mov dword [rbp + 0x20], 0xffffffff
mov dword [rbp + 0x30], 0xffffffff
mov r14, 0xffffffffffffffff
mov rdx, r14
nop dword [rax]
inc rdx
cmp word [rdi + rdx*2], ax
jne 0x140002b20
lea r9, [rbp - 0x30]
xor r8d, r8d
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
je 0x140003389
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
xor ecx, ecx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov r12, rax
mov qword [rbp - 0x60], rax
test rax, rax
je 0x140003389
lea rax, [rbp + 0x60]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x70], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], r13
xor r8d, r8d
lea rdx, [0x14006ed74]
lea rcx, [rbp + 0x60]
call fcn.1400097b0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov rdx, qword [rbp + 0x18]
mov r8, r14
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140002bc0
lea rcx, [rsp + 0x50]
call fcn.1400097b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], r13
mov rdx, qword [rbp - 0x18]
mov r8, r14
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140002bf0
lea rcx, [rbp - 0x58]
call fcn.1400097b0
nop
lea r9, [rbp + 0x60]
lea r8, [rsp + 0x50]
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0xa0]
call fcn.1400024e0
nop
lea rdx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 7
cmova rdx, qword [rbp + 0xa0]
mov qword [rbp - 0x18], rdx
xor r9d, r9d
movzx r8d, word [rbp - 0xc]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14000333f
mov ecx, r13d
mov edx, 0x800000
cmp dword [rbp - 0x1c], 2
cmove ecx, edx
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
mov r8, qword [rbp + 0x18]
lea rdx, [0x14006ed78]
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
mov dword [rsp + 0x20], 0x1388
mov edx, 0x1388
mov r9d, edx
mov r8d, edx
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
movups xmm0, xmmword [str.Accept:___r_nReferer:]
movaps xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [0x14006ed90]
movaps xmmword [rbp + 0xd0], xmm1
movsd xmm0, qword [0x14006eda0]
movsd qword [rbp + 0xe0], xmm0
mov eax, dword [0x14006eda8]
mov dword [rbp + 0xe8], eax
movzx eax, word [0x14006edac]
mov word [rbp + 0xec], ax
xor edx, edx
mov r8d, 0x3ba
lea rcx, [rbp + 0xee]
call fcn.14005f600
mov r8, rdi
mov edx, 0x1f4
lea rcx, [rbp + 0xc0]
call fcn.14003a19c
lea r8, [0x14006edb0]
mov edx, 0x1f4
lea rcx, [rbp + 0xc0]
call fcn.14003a19c
lea r8, str.Accept_Language:_zh_cn
mov edx, 0x1f4
lea rcx, [rbp + 0xc0]
call fcn.14003a19c
lea r8, [0x14006ede8]
mov edx, 0x1f4
lea rcx, [rbp + 0xc0]
call fcn.14003a19c
lea r8, str.Cookie:
mov edx, 0x1f4
lea rcx, [rbp + 0xc0]
call fcn.14003a19c
test rsi, rsi
je 0x140002d93
mov r8, rsi
mov edx, 0x1f4
lea rcx, [rbp + 0xc0]
call fcn.14003a19c
mov r9d, 0x20000000
mov r8d, 0xffffffff
lea rdx, [rbp + 0xc0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
je 0x140003338
xor esi, esi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x140003333
xor edx, edx
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov r12d, esi
test eax, eax
je 0x140003342
mov dword [rsp + 0x40], esi
mov dword [rsp + 0x70], esi
lea rdx, [rsp + 0x40]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x140002ec8
mov eax, dword [rsp + 0x40]
cmp eax, 1
jb 0x140002ec6
lea rcx, [rax + 1]
call fcn.14002f248
mov rsi, rax
mov r8d, dword [rsp + 0x40]
inc r8
xor edx, edx
mov rcx, rax
call fcn.14005f600
lea r9, [rsp + 0x70]
mov r8d, dword [rsp + 0x40]
mov rdx, rsi
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
xor edi, edi
mov ecx, dword [rsp + 0x40]
test ecx, ecx
je 0x140002ea5
nop
movzx r9d, byte [rdi + rsi]
mov rcx, qword [rbx + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rcx, rdx
jae 0x140002e91
lea rax, [rcx + 1]
mov qword [rbx + 0x10], rax
mov rax, rbx
cmp rdx, 0xf
jbe 0x140002e86
mov rax, qword [rbx]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140002e99
mov rcx, rbx
call fcn.1400099a0
inc rdi
mov ecx, dword [rsp + 0x40]
cmp rdi, rcx
jb 0x140002e60
add r12d, ecx
mov rcx, rsi
call fcn.14002f120
lea rdx, [rsp + 0x40]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
jne 0x140002e13
xor esi, esi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x28], rsi
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x16]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
mov ecx, dword [rsp + 0x48]
mov eax, 2
mul rcx
cmovo rax, r14
mov rcx, rax
call fcn.14002f248
mov rdi, rax
mov qword [rsp + 0x28], rsi
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], rax
mov r9, rdi
xor r8d, r8d
lea edx, [r8 + 0x16]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test r15, r15
je 0x140002f7d
mov rdx, r14
inc rdx
cmp word [rdi + rdx*2], 0
jne 0x140002f33
mov rax, qword [r15 + 0x18]
cmp rdx, rax
ja 0x140002f72
mov rsi, r15
cmp rax, 7
jbe 0x140002f52
mov rsi, qword [r15]
mov qword [r15 + 0x10], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.14005ef60
xor eax, eax
mov word [rbx + rsi], ax
xor esi, esi
jmp 0x140002f7d
mov r9, rdi
mov rcx, r15
call fcn.14000aa30
mov r15, qword [rbp - 0x68]
test r15, r15
je 0x14000330b
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], rsi
mov r8d, 2
lea rdx, [0x14006ee04]
lea rcx, [rbp + 0x40]
call fcn.1400097b0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], rsi
nop dword [rax + rax]
inc r14
cmp word [rdi + r14*2], 0
jne 0x140002fd0
mov r8, r14
mov rdx, rdi
lea rcx, [rbp + 0x80]
call fcn.1400097b0
nop
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x80]
lea rcx, [rbp - 0x80]
call fcn.140002730
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x140003049
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003044
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400033b4
call fcn.14002f120
xor r14d, r14d
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r14w
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x1400030a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400033ba
call fcn.14002f120
mov esi, r14d
mov rdx, qword [rbp - 0x78]
mov rax, rdx
mov rcx, qword [rbp - 0x80]
sub rax, rcx
sar rax, 5
test rax, rax
je 0x1400032c8
mov rbx, r14
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r14
mov qword [rbp + 0x58], r14
mov r8d, reloc.WS2_32.dll_inet_ntoa
lea rdx, str.Set_Cookie:
lea rcx, [rbp + 0x40]
call fcn.1400097b0
nop
shl rbx, 5
add rbx, qword [rbp - 0x80]
lea r8, [rbp + 0x40]
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.140002730
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x140003150
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000314b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400033c6
call fcn.14002f120
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x50]
sub rax, rcx
sar rax, 5
cmp rax, 1
jbe 0x14000325e
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r14
mov qword [rbp + 0x78], r14
mov r8d, 1
lea rdx, [0x14006ee2c]
lea rcx, [rbp + 0x60]
call fcn.1400097b0
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0x20
lea r8, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.140002730
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 7
jbe 0x1400031e8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400033cc
call fcn.14002f120
mov rdx, qword [rbp + 0x40]
cmp qword [rdx + 0x18], 7
jbe 0x1400031f6
mov rdx, qword [rdx]
mov rcx, r15
call fcn.140007fe0
lea rdx, [0x14006ee30]
mov rcx, r15
call fcn.140007fe0
nop
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x140003259
mov rdx, qword [rbp + 0x48]
call fcn.14000a420
mov rdx, qword [rbp + 0x50]
mov rcx, qword [rbp + 0x40]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003254
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400033d2
call fcn.14002f120
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400032a8
mov rdx, qword [rsp + 0x58]
call fcn.14000a420
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400033d8
call fcn.14002f120
inc esi
mov rdx, qword [rbp - 0x78]
mov rax, rdx
mov rcx, qword [rbp - 0x80]
sub rax, rcx
sar rax, 5
movsxd rbx, esi
cmp rbx, rax
jb 0x1400030d0
test rcx, rcx
je 0x14000330b
call fcn.14000a420
mov rdx, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x80]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003306
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400033c0
call fcn.14002f120
mov rcx, rdi
call fcn.14002f120
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x140003342
mov r12d, esi
jmp 0x140003342
xor eax, eax
mov r12d, eax
jmp 0x140003342
mov r12d, r13d
mov rdx, qword [rbp + 0xb8]
cmp rdx, 7
jbe 0x140003384
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000337f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400033ae
call fcn.14002f120
mov eax, r12d
jmp 0x14000338b
xor eax, eax
mov rcx, qword [rbp + 0x4b0]
xor rcx, rsp
call fcn.14002f100
add rsp, 0x5c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140040b44
nop
call fcn.140040b44
nop
call fcn.140040b44
nop
call fcn.140040b44
nop
call fcn.140040b44
nop
call fcn.140040b44
nop
call fcn.140040b44
nop
call fcn.140040b44
int3