Function at 0x140035910
Capabilities:
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Set http header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2810]
mov eax, 0x2910
call fcn.14005f310
sub rsp, rax
mov rax, qword [0x1400b5200]
xor rax, rsp
mov qword [rbp + 0x2800], rax
mov r15, rdx
mov r13, rcx
mov qword [rsp + 0x58], rdx
xor edi, edi
mov r12d, edi
mov dword [rsp + 0x50], edi
add rcx, 0x60
cmp qword [rcx + 0x18], 7
jbe 0x140035968
mov rcx, qword [rcx]
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rsi, rax
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x140035990
mov byte [r15 + 0x20], al
jmp 0x140035ad5
cmp word [r13 + 0xa4], 0
jne 0x1400359a5
mov word [r13 + 0xa4], 0x1bb
cmp dword [r13 + 0xa0], 0
jne 0x1400359b9
mov byte [r15 + 0x20], 0
jmp 0x140035acc
mov rdx, qword [r13 + 0x98]
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xa8], rdi
mov r8, 0xffffffffffffffff
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400359e0
lea rcx, [rbp + 0x90]
call fcn.140004b90
nop
mov ecx, dword [r13 + 0xa0]
mov r8, qword [rbp + 0xa0]
cmp r8, rcx
jbe 0x140035a2d
mov qword [rbp + 0xa0], rcx
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 7
cmova rax, qword [rbp + 0x90]
mov word [rax + rcx*2], di
lea rdx, [rbp + 0x90]
cmp qword [rbp + 0xa8], 7
cmova rdx, qword [rbp + 0x90]
xor r9d, r9d
movzx r8d, word [r13 + 0xa4]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rbx, rax
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x140035b02
mov byte [r15 + 0x20], al
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x140035ab3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035aae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036193
call fcn.14005e4dc
mov word [rbp + 0x90], di
mov qword [rbp + 0xa8], 7
mov qword [rbp + 0xa0], rdi
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rax, r15
mov rcx, qword [rbp + 0x2800]
xor rcx, rsp
call fcn.14005e480
mov rbx, qword [rsp + 0x2960]
add rsp, 0x2910
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov edx, dword [r13 + 0x58]
lea rcx, [rbp + 0xd0]
call fcn.140036a40
nop
mov eax, 0x800100
mov ecx, 0x100
cmp dword [r13 + 0x94], 2
cmovne eax, ecx
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 7
cmova rdx, qword [rbp + 0xd0]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8, qword [r13 + 0xc8]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r14, rax
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x140035bdc
mov byte [r15 + 0x20], al
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x140035bb7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140035bb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400361a5
call fcn.14005e4dc
movdqa xmm0, xmmword [0x1400a5060]
movdqu xmmword [rbp + 0xe0], xmm0
mov word [rbp + 0xd0], di
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x140035a6d
mov dword [rsp + 0x20], 0xea60
mov edx, 0xea60
mov r9d, edx
mov r8d, edx
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
mov dword [rsp + 0x4c], 0x3300
mov r9d, 4
lea r8, [rsp + 0x4c]
mov edx, 0x1f
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
mov rdi, qword [r13 + 0x48]
mov rdi, qword [rdi]
cmp byte [rdi + 0x19], 0
jne 0x140035e63
nop word [rax + rax]
lea rbx, [rdi + 0x20]
mov edx, 1
lea rcx, [rbp - 0x70]
call fcn.140005990
nop
lea rsi, [rbx + 0x20]
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 7
jbe 0x140035c55
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.140008590
lea rdx, [0x14008f6e0]
mov rcx, rax
call fcn.140004350
mov r8, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 7
jbe 0x140035c7e
mov rsi, qword [rsi]
mov rdx, rsi
mov rcx, rax
call fcn.140008590
lea rdx, [0x14008f6d8]
mov rcx, rax
call fcn.140004350
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xor esi, esi
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], si
or r12d, 4
mov dword [rsp + 0x50], r12d
mov ecx, dword [rbp + 0x18]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140035cf3
mov rax, qword [rbp - 0x18]
mov rdx, qword [rax]
test rdx, rdx
je 0x140035cf3
mov rax, qword [rbp - 0x38]
mov r9, qword [rax]
cmp rdx, qword [rbp + 0x10]
cmovb rdx, qword [rbp + 0x10]
sub rdx, r9
jmp 0x140035d1b
test cl, 4
jne 0x140035d5b
mov rax, qword [rbp - 0x20]
mov rcx, qword [rax]
test rcx, rcx
je 0x140035d5b
mov rax, qword [rbp - 0x40]
mov r9, qword [rax]
mov rax, qword [rbp - 8]
movsxd rdx, dword [rax]
add rdx, rdx
sub rdx, r9
add rdx, rcx
mov rax, r9
sar rdx, 1
test rax, rax
je 0x140035d5b
lea rcx, [rbp + 0xb0]
cmp rdx, 7
ja 0x140035d53
mov qword [rbp + 0xc0], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
call fcn.1400874e0
mov word [rbp + rbx + 0xb0], si
jmp 0x140035d5b
xor r8d, r8d
call fcn.14000d110
and r12d, 0xfffffffb
or r12d, 2
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova rdx, qword [rbp + 0xb0]
mov r9d, 0xa0000000
mov r8d, 0xffffffff
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x140035dd5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035dd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003619f
call fcn.14005e4dc
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], si
lea rcx, [rbp - 0x70]
call fcn.140005200
mov rax, qword [rdi + 0x10]
cmp byte [rax + 0x19], 0
je 0x140035e28
mov rax, qword [rdi + 8]
cmp byte [rax + 0x19], 0
jne 0x140035e23
nop dword [rax + rax]
cmp rdi, qword [rax + 0x10]
jne 0x140035e23
mov rdi, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x140035e10
mov rdi, rax
jmp 0x140035e4f
mov rdi, rax
mov rcx, qword [rax]
cmp byte [rcx + 0x19], 0
jne 0x140035e4f
nop dword [rax]
nop dword [rax + rax]
mov rdi, rcx
mov rax, qword [rcx]
mov rcx, rax
cmp byte [rax + 0x19], 0
je 0x140035e40
cmp byte [rdi + 0x19], 0
je 0x140035c30
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x58]
xor edi, edi
mov r9d, edi
mov eax, edi
cmp dword [r13 + 0x58], 1
jne 0x140035e7c
mov r9, qword [r13 + 0x28]
mov eax, dword [r13 + 0x30]
sub eax, r9d
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x140035ead
mov byte [r15 + 0x20], dil
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x140035b71
xor edx, edx
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x140035ec4
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140035e9b
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], rdi
mov dword [rsp + 0x44], edi
mov dword [rsp + 0x40], 4
mov qword [rsp + 0x28], rdi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x44]
xor r8d, r8d
mov edx, 0x20000013
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
movzx eax, word [rsp + 0x44]
mov word [rbp + 0xb0], ax
mov dword [rsp + 0x40], edi
lea rdx, [rsp + 0x40]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
xor edx, edx
mov r8d, 0x2710
lea rcx, [rbp + 0xf0]
call fcn.140087b80
mov eax, dword [rsp + 0x40]
test eax, eax
je 0x140035fa0
mov dword [rsp + 0x48], edi
lea r9, [rsp + 0x48]
mov r8d, eax
lea rdx, [rbp + 0xf0]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x140035fa0
mov eax, dword [rsp + 0x48]
test eax, eax
je 0x140036090
mov r9d, eax
lea r8, [rbp + 0xf0]
mov rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0xb8]
call fcn.1400353e0
lea rdx, [rsp + 0x40]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
mov eax, dword [rsp + 0x40]
test eax, eax
jne 0x140035f41
movzx eax, word [rbp + 0xb0]
mov word [r15], ax
mov rax, qword [rbp + 0xb8]
mov qword [r15 + 8], rax
mov rax, qword [rbp + 0xc0]
mov qword [r15 + 0x10], rax
mov rax, qword [rbp + 0xc8]
mov qword [r15 + 0x18], rax
mov byte [r15 + 0x20], 1
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x140036021
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003601c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400361a5
call fcn.14005e4dc
movdqa xmm0, xmmword [0x1400a5060]
movdqu xmmword [rbp + 0xe0], xmm0
mov word [rbp + 0xd0], di
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x140035ab3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035aae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036193
jmp 0x140035aae
mov byte [r15 + 0x20], 0
mov rcx, qword [rbp + 0xb8]
test rcx, rcx
je 0x1400360d6
mov rdx, qword [rbp + 0xc8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400360d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400361ab
call fcn.14005e4dc
nop
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x140036122
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003611d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003618d
call fcn.14005e4dc
movdqa xmm0, xmmword [0x1400a5060]
movdqu xmmword [rbp + 0xe0], xmm0
mov word [rbp + 0xd0], di
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 7
jbe 0x140035ab3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035aae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140036199
jmp 0x140035aae
call fcn.1400645e4
nop
call fcn.1400645e4
int3
call fcn.1400645e4
nop
call fcn.1400645e4
nop
call fcn.1400645e4
nop
call fcn.1400645e4
int3