Function at 0x140025ea8
Capabilities:
Initialize winhttp library
Prepare http request
Set http header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x48]
sub rsp, 0x148
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov rax, qword [0x1400548d0]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov rsi, r9
mov r12, r8
mov r15, rdx
mov rbx, rcx
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x78], r9
mov r14, qword [rbp + 0xb0]
mov qword [rbp - 0x80], r14
mov rax, qword [rbp + 0xb8]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0xc0]
mov qword [rsp + 0x58], rax
mov rax, qword [rbp + 0xc8]
mov qword [rsp + 0x48], rax
mov edi, dword [r9 + 0x10]
mov r8, r9
cmp qword [r9 + 0x18], 8
jb 0x140025f33
mov r8, qword [r9]
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
nop dword [rax + rax]
mov dword [rsp + 0x40], eax
movsxd rcx, eax
call fcn.1400321f0
mov r13, rax
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x140025f78
mov r8, qword [rsi]
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], al
or r8, 0xffffffffffffffff
inc r8
cmp byte [r8 + r13], al
jne 0x140025fba
mov rdx, r13
lea rcx, [rbp - 0x78]
call fcn.14000d09c
nop
mov rcx, r13
call fcn.140031098
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], 0xaa0
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x140025ff4
mov r8, qword [rsi]
lea rdx, str.Request_Body:__s
xor ecx, ecx
call fcn.14000ad50
lea rcx, [rbx + 8]
cmp qword [rcx + 0x18], 8
jb 0x140026010
mov rcx, qword [rcx]
xor r13d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea edx, [r13 + 4]
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
nop dword [rax + rax]
mov rdi, qword [rsp + 0x50]
mov qword [rdi], rax
test rax, rax
jne 0x140026053
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.Error_sending_http_request_WinHttpOpen_hr__0x_08X
jmp 0x1400262f4
mov r8d, dword [rsp + 0x44]
lea rdx, str.Session_set_with_protocal:__d
xor ecx, ecx
call fcn.14000ad50
mov r9d, 4
lea r8, [rsp + 0x44]
lea edx, [r9 + 0x50]
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
nop dword [rax + rax]
test eax, eax
jne 0x1400260a0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.Failed_to_set_WINHTTP_OPTION_SECURE_PROTOCOLS_in_WinHttpSetOption_hr__0x_08X
jmp 0x1400262f4
mov r9d, dword [rbx + 0x7c]
mov r8d, dword [rbx + 0x78]
lea rdx, str.Session_opened_with_connection_timeout:__ld_and_send_timeout:__ld
xor ecx, ecx
call fcn.14000ad50
mov eax, dword [rbx + 0x80]
mov dword [rsp + 0x20], eax
mov r9d, dword [rbx + 0x7c]
mov r8d, dword [rbx + 0x78]
mov edx, dword [rbx + 0x84]
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
nop dword [rax + rax]
test eax, eax
jne 0x1400260f9
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.Error_sending_http_request_WinHttpSetTimeouts_hr__0x_08X
jmp 0x1400262f4
mov rdx, r15
cmp qword [r15 + 0x18], 8
jb 0x140026106
mov rdx, qword [r15]
xor r9d, r9d
movzx r8d, word [rbx + 0x28]
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
nop dword [rax + rax]
mov rdi, qword [rsp + 0x58]
mov qword [rdi], rax
test rax, rax
jne 0x140026142
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.Error_sending_http_request_WinHttpConnect_hr__0x_08X
jmp 0x1400262f4
movzx r9d, word [rbx + 0x28]
mov r8, r15
cmp qword [r15 + 0x18], 8
jb 0x140026154
mov r8, qword [r15]
lea rdx, str.Session_connected_to__s_port__d
xor ecx, ecx
call fcn.14000ad50
mov r8, r12
cmp qword [r12 + 0x18], 8
jb 0x140026171
mov r8, qword [r12]
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x14002617e
mov rdx, qword [r14]
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
mov rcx, qword [rdi]
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x48]
mov qword [rcx], rax
test rax, rax
jne 0x1400261c7
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.Error_sending_http_request_WinHttpOpenRequest_hr__0x_08X
jmp 0x1400262f4
mov r13, qword [rbx + 0x38]
mov rbx, qword [r13]
cmp rbx, r13
je 0x14002629d
lea rdx, [rbx + 0x10]
lea rcx, [rbp - 0x10]
call fcn.14000b8a4
nop
lea rdx, [rbx + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14000b8a4
nop
lea r8, [0x1400422d4]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call fcn.140016c08
nop
lea r8, [rbp + 0x10]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140016c70
nop
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
jb 0x140026235
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
call fcn.14000ec50
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae rdx, qword [rbp - 0x58]
mov r9d, 0x20000000
or r8d, 0xffffffff
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
nop dword [rax + rax]
test eax, eax
je 0x1400263dc
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x140026285
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
call fcn.14000ec50
nop
lea rcx, [rbp - 0x10]
call fcn.140017680
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r13
jne 0x1400261d8
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 0x10
cmovae r9, qword [rbp - 0x78]
xor r13d, r13d
mov qword [rsp + 0x30], r13
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
or r8d, 0xffffffff
xor edx, edx
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
nop dword [rax + rax]
test eax, eax
jne 0x140026494
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
lea rdx, str.Error_sending_http_request_WinHttpSendRequest_hr__0x_08X
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov edi, 0x80004005
test ecx, ecx
cmovs edi, ecx
mov r8d, edi
mov ecx, edi
call fcn.14000ad50
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x14002632d
inc rdx
mov rcx, qword [rbp - 0x78]
call fcn.14000ec50
mov byte [rbp - 0x78], r13b
mov qword [rbp - 0x60], 0xf
mov qword [rbp - 0x68], r13
mov rdx, qword [r15 + 0x18]
cmp rdx, 8
jb 0x140026357
lea rdx, [rdx*2 + 2]
mov rcx, qword [r15]
call fcn.14000ec50
mov ebx, 7
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], rbx
mov word [r15], r13w
mov rdx, qword [r12 + 0x18]
cmp rdx, 8
jb 0x140026384
lea rdx, [rdx*2 + 2]
mov rcx, qword [r12]
call fcn.14000ec50
mov qword [r12 + 0x10], r13
mov qword [r12 + 0x18], rbx
mov word [r12], r13w
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x1400263ad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsi]
call fcn.14000ec50
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], rbx
mov word [rsi], r13w
mov rdx, qword [r14 + 0x18]
cmp rdx, 8
jb 0x140026553
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
call fcn.14000ec50
jmp 0x140026553
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
xor r13d, r13d
test eax, eax
cmovle ecx, eax
mov edi, 0x80004005
test ecx, ecx
cmovs edi, ecx
mov r8d, edi
lea rdx, str.Error_sending_http_request_WinHttpAddRequestHeaders_hr__0x_08X
mov ecx, edi
call fcn.14000ad50
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x14002642f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
call fcn.14000ec50
mov qword [rbp - 0x48], r13
mov ebx, 7
mov qword [rbp - 0x40], rbx
mov word [rbp - 0x58], r13w
lea rcx, [rbp - 0x10]
call fcn.140017680
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140026461
inc rdx
mov rcx, qword [rbp - 0x78]
call fcn.14000ec50
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], r13b
mov rdx, qword [r15 + 0x18]
cmp rdx, 8
jb 0x14002635c
lea rdx, [rdx*2 + 2]
mov rcx, qword [r15]
call fcn.14000ec50
jmp 0x14002635c
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x1400264aa
inc rdx
mov rcx, qword [rbp - 0x78]
call fcn.14000ec50
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], r13b
mov rdx, qword [r15 + 0x18]
cmp rdx, 8
jb 0x1400264d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [r15]
call fcn.14000ec50
mov qword [r15 + 0x10], r13
mov ebx, 7
mov qword [r15 + 0x18], rbx
mov word [r15], r13w
mov rdx, qword [r12 + 0x18]
cmp rdx, 8
jb 0x140026501
lea rdx, [rdx*2 + 2]
mov rcx, qword [r12]
call fcn.14000ec50
mov qword [r12 + 0x10], r13
mov qword [r12 + 0x18], rbx
mov word [r12], r13w
mov rdx, qword [rsi + 0x18]
cmp rdx, 8
jb 0x14002652a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsi]
call fcn.14000ec50
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], rbx
mov word [rsi], r13w
mov rdx, qword [r14 + 0x18]
cmp rdx, 8
jb 0x140026550
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
call fcn.14000ec50
mov edi, r13d
mov qword [r14 + 0x10], r13
mov qword [r14 + 0x18], rbx
mov word [r14], r13w
mov eax, edi
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140031070
add rsp, 0x148
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret