Function at 0x14004ffb0
Capabilities:
Encode data using xor
Prepare http request
Receive http response
Set http header

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xf0
mov rax, qword [0x14013e0a0]
xor rax, rsp
mov qword [rbp - 1], rax
mov qword [rbp - 0x79], r8
mov r14, rdx
mov qword [rbp - 0x61], rdx
mov r15, rcx
mov qword [rbp - 0x71], rcx
mov qword [rbp - 0x59], rdx
mov rax, qword [rbp + 0x67]
mov qword [rsp + 0x68], rax
mov rbx, qword [rbp + 0x77]
mov byte [rsp + 0x40], 0
cmp qword [rcx], 0
jne 0x140050050
mov rdx, qword [rdx + 0x18]
cmp rdx, 8
jb 0x140050047
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140050042
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400506ae
mov rcx, r8
call fcn.1400a09c0
xor esi, esi
xor al, al
jmp 0x14005066b
xor esi, esi
mov word [rsp + 0x48], si
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x14011e780]
movdqu xmmword [rbp - 0x21], xmm1
mov word [rbp - 0x31], si
movups xmmword [rbp - 0x51], xmm0
movdqu xmmword [rbp - 0x41], xmm1
mov word [rbp - 0x51], si
lea r9, [rsp + 0x48]
lea r8, [rbp - 0x51]
lea rdx, [rbp - 0x31]
mov rcx, r14
call fcn.14004f610
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rdx, qword [rbp - 0x31]
xor r9d, r9d
movzx edi, word [rsp + 0x48]
movzx r8d, di
mov rcx, qword [r15]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r10, rax
mov qword [rbp - 0x69], rax
test rax, rax
jne 0x1400501ac
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x140050104
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400500ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400506c0
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e780]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], si
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x140050155
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050150
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400506a2
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e780]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], si
mov rdx, qword [r14 + 0x18]
cmp rdx, 8
jb 0x1400501a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x1400501a0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400506ae
mov rcx, r8
call fcn.1400a09c0
xor al, al
jmp 0x14005066b
lea rax, [0x14011cf98]
mov qword [rbp - 0x11], rax
mov qword [rbp - 9], rsi
mov edx, 0x1bb
mov ecx, esi
mov eax, 0x800000
cmp di, dx
cmove ecx, eax
mov rax, qword [r15 + 8]
lea r8, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae r8, qword [rbp - 0x51]
mov dword [rsp + 0x30], ecx
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, str.HTTP_1.1
lea rdx, str.POST
mov rcx, r10
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r12, rax
test rax, rax
jne 0x1400503df
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov dword [rsp + 0x40], 0xe0fcffc9
mov word [rsp + 0x44], 0xe2
mov byte [rsp + 0x46], 1
mov rdx, rsi
nop dword [rax]
nop word [rax + rax]
lea ecx, [rdx - 0x74]
xor byte [rsp + rdx + 0x40], cl
inc rdx
cmp rdx, 5
jb 0x140050240
mov byte [rsp + 0x46], 0
movdqa xmm0, xmmword [0x14011ec40]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0xfaebecf9
mov dword [rsp + 0x64], 0x100d5d3
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx - 0x74]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0x16
jb 0x140050280
mov byte [rsp + 0x67], 0
mov r9d, 0x30
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x50]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rax, [rbp - 0x61]
mov qword [rsp + 0x20], rax
mov r9d, 0x400
mov r8d, ebx
xor edx, edx
mov ecx, 0x1300
call qword [sym.imp.KERNEL32.dll_FormatMessageA]
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Error
mov rdx, qword [rbp - 0x61]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rbp - 0x61]
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x140050339
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050334
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400506b4
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e780]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], si
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x14005038a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050385
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400506ba
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e780]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], si
mov rdx, qword [r14 + 0x18]
cmp rdx, 8
jb 0x1400501a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x1400501a0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400506a8
jmp 0x14005019d
xor r15b, r15b
mov r13, qword [rbx + 8]
mov rbx, qword [rbx]
cmp rbx, r13
je 0x1400504e7
lea r9, str.Content_Type:
mov r14d, 1
nop
mov rax, qword [rbx + 0x10]
mov r10, rbx
mov rdi, qword [rbx + 0x18]
cmp rdi, 8
jb 0x140050414
mov r10, qword [rbx]
cmp rax, 0xd
jb 0x1400504a9
add rax, 0xfffffffffffffff4
lea r11, [r10 + rax*2]
mov rax, r10
nop dword [rax]
mov rcx, r11
sub rcx, rax
sar rcx, 1
mov rdx, rsi
je 0x140050459
cmp word [rax], 0x43
je 0x140050456
cmp rcx, r14
je 0x140050459
dec rcx
add rax, 2
cmp word [rax], 0x43
jne 0x140050444
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x1400504a9
mov r8d, reloc.WS2_32.dll_listen
mov rdx, r9
mov r9, rax
lea rcx, str.Content_Type:
sub r9, rcx
nop word [rax + rax]
movzx ecx, word [r9 + rdx]
cmp cx, word [rdx]
jne 0x140050563
add rdx, 2
sub r8, r14
jne 0x140050480
sub rax, r10
sar rax, 1
movzx r15d, r15b
cmp rax, 0xffffffffffffffff
cmovne r15d, r14d
mov rdx, rbx
cmp rdi, 8
jb 0x1400504b5
mov rdx, qword [rbx]
mov r9d, 0x20000000
mov r8d, 0xffffffff
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
add rbx, 0x20
cmp rbx, r13
lea r9, str.Content_Type:
jne 0x140050400
test r15b, r15b
mov r14, qword [rbp - 0x61]
jne 0x140050507
mov r9d, 0x20000000
mov r8d, 0xffffffff
lea rdx, str.Content_Type:_application_json
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
test eax, eax
je 0x140050573
mov qword [rsp + 0x30], rsi
mov eax, dword [rbp + 0x6f]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x68]
xor r8d, r8d
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x140050573
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x140050573
mov rdx, qword [rbp - 0x79]
mov rcx, r12
call fcn.140050ac0
mov rcx, qword [rbp - 0x71]
mov dword [rcx + 0x18], eax
mov ebx, dword [rsp + 0x40]
movzx ebx, bl
test eax, eax
mov eax, 1
cmovne ebx, eax
jmp 0x140050577
add rax, 2
lea r9, str.Content_Type:
jmp 0x140050430
mov ebx, dword [rsp + 0x40]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp - 0x69]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x1400505cb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400505c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400506c0
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e780]
movdqu xmmword [rbp - 0x41], xmm0
mov word [rbp - 0x51], si
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x14005061c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140050617
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400506a2
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e780]
movdqu xmmword [rbp - 0x21], xmm0
mov word [rbp - 0x31], si
mov rdx, qword [r14 + 0x18]
cmp rdx, 8
jb 0x140050668
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140050663
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400506ae
mov rcx, r8
call fcn.1400a09c0
movzx eax, bl
mov word [r14], si
mov qword [r14 + 0x18], 7
mov qword [r14 + 0x10], rsi
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.1400a09a0
mov rbx, qword [rsp + 0x148]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400d2350
nop
call fcn.1400d2350
int3
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
int3