Function at 0x1400291e0
Capabilities:
Initialize winhttp library
Prepare http request
Set http header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x48]
sub rsp, 0x148
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov rax, qword [0x14005a8e0]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov rsi, r9
mov r15, r8
mov r14, rdx
mov rdi, rcx
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], r8
mov qword [rsp + 0x78], r9
mov r12, qword [rbp + 0xb0]
mov qword [rbp - 0x80], r12
mov rax, qword [rbp + 0xb8]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0xc0]
mov qword [rsp + 0x58], rax
mov rax, qword [rbp + 0xc8]
mov qword [rsp + 0x48], rax
xor eax, eax
mov ebx, dword [r9 + 0x10]
mov r8, r9
cmp qword [r9 + 0x18], 8
jb 0x14002926d
mov r8, qword [r9]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
nop dword [rax + rax]
mov dword [rsp + 0x40], eax
movsxd rcx, eax
call fcn.140034cc0
mov r13, rax
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400292b0
mov r8, qword [rsi]
and qword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
lea r9d, [rbx + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_WideCharToMultiByte]
nop dword [rax + rax]
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], rax
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], al
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rbx + r13], al
jne 0x1400292f6
lea rcx, [rbp - 0x78]
cmp rbx, 0xf
ja 0x14002931f
mov qword [rbp - 0x68], rbx
mov r8, rbx
mov rdx, r13
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov byte [rbp + rbx - 0x78], 0
jmp 0x14002932b
mov r9, r13
mov rdx, rbx
call fcn.140010554
nop
mov rcx, r13
call fcn.140033a14
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], 0xaa0
mov r8, rsi
cmp qword [rsi + 0x18], 8
jb 0x14002934f
mov r8, qword [rsi]
lea rdx, str.Request_Body:__s
xor ecx, ecx
call fcn.14000c770
lea rcx, [rdi + 8]
cmp qword [rcx + 0x18], 8
jb 0x14002936b
mov rcx, qword [rcx]
xor r13d, r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
lea edx, [r13 + 4]
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
nop dword [rax + rax]
mov rbx, qword [rsp + 0x50]
mov qword [rbx], rax
test rax, rax
jne 0x140029400
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx edx, ax
or edx, 0x80070000
test eax, eax
cmovle edx, eax
mov ebx, 0x80004005
test edx, edx
cmovs ebx, edx
lea rdx, str.Error_sending_http_request_WinHttpOpen_hr__0x_08X
mov r8d, ebx
mov ecx, ebx
call fcn.14000c770
nop
lea rcx, [rbp - 0x78]
call fcn.14000d504
nop
mov rcx, r14
call fcn.14000d240
nop
mov rcx, r15
call fcn.14000d240
nop
mov rcx, rsi
call fcn.14000d240
nop
mov rcx, r12
call fcn.14000d240
mov eax, ebx
jmp 0x1400297de
mov r8d, dword [rsp + 0x44]
lea rdx, str.Session_set_with_protocal:__d
xor ecx, ecx
call fcn.14000c770
mov r9d, 4
lea r8, [rsp + 0x44]
lea edx, [r9 + 0x50]
mov rcx, qword [rbx]
call qword [sym.imp.WINHTTP.dll_WinHttpSetOption]
nop dword [rax + rax]
test eax, eax
jne 0x140029465
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
test ecx, ecx
cmovs ebx, ecx
lea rdx, str.Failed_to_set_WINHTTP_OPTION_SECURE_PROTOCOLS_in_WinHttpSetOption_hr__0x_08X
jmp 0x1400293c1
mov r9d, dword [rdi + 0x7c]
mov r8d, dword [rdi + 0x78]
lea rdx, str.Session_opened_with_connection_timeout:__ld_and_send_timeout:__ld
xor ecx, ecx
call fcn.14000c770
mov eax, dword [rdi + 0x80]
mov dword [rsp + 0x20], eax
mov r9d, dword [rdi + 0x7c]
mov r8d, dword [rdi + 0x78]
mov edx, dword [rdi + 0x84]
mov rcx, qword [rbx]
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
nop dword [rax + rax]
test eax, eax
jne 0x1400294d6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
test ecx, ecx
cmovs ebx, ecx
lea rdx, str.Error_sending_http_request_WinHttpSetTimeouts_hr__0x_08X
jmp 0x1400293c1
mov rdx, r14
cmp qword [r14 + 0x18], 8
jb 0x1400294e3
mov rdx, qword [r14]
xor r9d, r9d
movzx r8d, word [rdi + 0x28]
mov rcx, qword [rbx]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
nop dword [rax + rax]
mov rbx, qword [rsp + 0x58]
mov qword [rbx], rax
test rax, rax
jne 0x140029537
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
test ecx, ecx
cmovs ebx, ecx
lea rdx, str.Error_sending_http_request_WinHttpConnect_hr__0x_08X
jmp 0x1400293c1
movzx r9d, word [rdi + 0x28]
mov r8, r14
cmp qword [r14 + 0x18], 8
jb 0x140029549
mov r8, qword [r14]
lea rdx, str.Session_connected_to__s_port__d
xor ecx, ecx
call fcn.14000c770
mov r8, r15
cmp qword [r15 + 0x18], 8
jb 0x140029564
mov r8, qword [r15]
mov rdx, r12
cmp qword [r12 + 0x18], 8
jb 0x140029573
mov rdx, qword [r12]
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
mov rcx, qword [rbx]
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x48]
mov qword [rcx], rax
test rax, rax
jne 0x1400295d4
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
test ecx, ecx
cmovs ebx, ecx
lea rdx, str.Error_sending_http_request_WinHttpOpenRequest_hr__0x_08X
jmp 0x1400293c1
mov r13, qword [rdi + 0x38]
mov rbx, qword [r13]
cmp rbx, r13
je 0x140029740
lea rdx, [rbx + 0x10]
lea rcx, [rbp - 0x30]
call fcn.14000d340
nop
lea rdx, [rbx + 0x30]
lea rcx, [rbp - 0x10]
call fcn.14000d340
nop
movabs rax, 0x7ffffffffffffffe
mov rcx, qword [rbp - 0x20]
sub rax, rcx
cmp rax, 2
jb 0x1400297ff
lea r9, [rbp - 0x30]
cmp qword [rbp - 0x18], 8
cmovae r9, qword [rbp - 0x30]
mov qword [rsp + 0x30], 2
lea rax, [0x140047094]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x10]
call fcn.140018c48
nop
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x10]
call fcn.1400143d4
xor edi, edi
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 7
mov word [rax], di
lea rcx, [rbp + 0x10]
call fcn.14000d240
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae rdx, qword [rbp - 0x58]
mov r9d, 0x20000000
or r8d, 0xffffffff
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
nop dword [rax + rax]
test eax, eax
je 0x1400296ea
lea rcx, [rbp - 0x58]
call fcn.14000d240
nop
lea rcx, [rbp - 0x10]
call fcn.14000d240
lea rcx, [rbp - 0x30]
call fcn.14000d240
mov rbx, qword [rbx]
cmp rbx, r13
jne 0x1400295e5
jmp 0x140029742
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
test ecx, ecx
cmovs ebx, ecx
mov r8d, ebx
lea rdx, str.Error_sending_http_request_WinHttpAddRequestHeaders_hr__0x_08X
mov ecx, ebx
call fcn.14000c770
lea rcx, [rbp - 0x58]
call fcn.14000d240
nop
lea rcx, [rbp - 0x10]
call fcn.14000d240
lea rcx, [rbp - 0x30]
call fcn.14000d240
jmp 0x1400293cc
xor edi, edi
lea r9, [rbp - 0x78]
cmp qword [rbp - 0x60], 0x10
cmovae r9, qword [rbp - 0x78]
mov qword [rsp + 0x30], rdi
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
or r8d, 0xffffffff
xor edx, edx
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
nop dword [rax + rax]
test eax, eax
jne 0x1400297af
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
mov ebx, 0x80004005
test ecx, ecx
cmovs ebx, ecx
lea rdx, str.Error_sending_http_request_WinHttpSendRequest_hr__0x_08X
jmp 0x1400293c1
lea rcx, [rbp - 0x78]
call fcn.14000d504
nop
mov rcx, r14
call fcn.14000d240
nop
mov rcx, r15
call fcn.14000d240
nop
mov rcx, rsi
call fcn.14000d240
nop
mov rcx, r12
call fcn.14000d240
xor eax, eax
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.1400339f0
add rsp, 0x148
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140007740
nop
int3