Function at 0x140068650
Capabilities:
Encode data using xor
Initialize winhttp library
Reference http user-agent string

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x278]
sub rsp, 0x378
mov rax, qword [0x14013e0a0]
xor rax, rsp
mov qword [rbp + 0x260], rax
mov r15, r9
mov r14, r8
mov rsi, rdx
mov r13, rcx
xor edi, edi
mov ebx, edi
mov dword [rsp + 0x68], ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
mov dword [rbp + 0x178], edi
movups xmmword [rbp + 0x180], xmm0
movdqa xmm1, xmmword [0x14011e7a0]
movdqa xmmword [rbp + 0x190], xmm1
mov byte [rbp + 0x180], bl
mov qword [rbp + 0x160], rdi
lea rax, [0x14011ced4]
mov qword [rbp + 0x168], rax
lea rcx, str.Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Trident_5.0_
mov qword [rbp + 0x170], rcx
movups xmmword [rbp + 0x1c0], xmm0
movdqu xmmword [rbp + 0x1d0], xmm1
mov byte [rbp + 0x1c0], dil
cmp qword [r13 + 0x58], rdi
jbe 0x1400693fd
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rbp + 0x160], rax
test rax, rax
je 0x1400693fd
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
lea r12, [0x1401c3698]
mov eax, dword [rcx + rax]
cmp dword [0x1401c3668], eax
jle 0x1400687e3
lea rcx, [0x1401c3668]
call fcn.1400a0df8
cmp dword [0x1401c3668], 0xffffffff
jne 0x1400687e3
movdqa xmm0, xmmword [0x14011eb50]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x14011ec10]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0xdbd1d8dd
mov word [rbp - 0x64], 0x89
mov byte [rbp - 0x62], 1
mov edx, edi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdx - 0x6e]
xor byte [rsp + rdx + 0x78], al
inc rdx
cmp rdx, 0x25
jb 0x1400687a0
mov byte [rbp - 0x62], 0
lea r8, [rbp - 0x63]
lea rdx, [rsp + 0x78]
mov rcx, r12
call fcn.14005b580
mov ebx, 0xc000
lea rcx, [0x1400ff1e0]
call fcn.1400a0d0c
nop
lea rcx, [0x1401c3668]
call fcn.1400a0d8c
mov dword [rsp + 0x40], 0xebebffaa
mov dword [rsp + 0x44], 0xf0f7e3f9
mov dword [rsp + 0x48], 0xe5e3cae0
mov dword [rsp + 0x4c], 0x100a4f1
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x74]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xe
jb 0x140068810
mov byte [rsp + 0x4f], 0
mov dword [rsp + 0x68], 0xebe1eeaa
mov dword [rsp + 0x6c], 0x100acf5
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx - 0x74]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 6
jb 0x140068840
mov byte [rsp + 0x6f], 0
movdqa xmm0, xmmword [0x14011e8c0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x60], 1
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx - 0x6e]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0xf
jb 0x140068870
mov byte [rsp + 0x60], 0
movdqa xmm0, xmmword [0x14011ec70]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x14011ed10]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0xc1dad6db
mov dword [rbp - 0x64], 0x84dcdee9
mov word [rbp - 0x60], 0x100
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x6e]
xor byte [rsp + rcx + 0x78], al
inc rcx
cmp rcx, 0x28
jb 0x1400688c0
mov byte [rbp - 0x5f], 0
lea rax, [rsp + 0x78]
mov rdi, 0xffffffffffffffff
mov rcx, rdi
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400688e3
mov rdx, qword [rsi + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x1400694c0
mov rax, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140068913
mov rax, qword [rsi]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x78]
mov r8, rsi
movzx edx, byte [rsp + 0x70]
lea rcx, [rbp + 0xf8]
call fcn.14005db00
or ebx, 4
lea rax, [rsp + 0x50]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140068946
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0xf8]
call fcn.140007a40
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
xor esi, esi
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], send
mov byte [rax], sil
or ebx, 8
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0x10
jb 0x1400689a1
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp + 0x20]
call fcn.140007a40
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
xor r14d, r14d
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], r14b
or ebx, 0x10
lea rax, [rsp + 0x68]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400689f4
lea rdx, [rsp + 0x68]
lea rcx, [rbp + 0xc0]
call fcn.140007a40
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], 0
or ebx, 0x20
lea rdx, [r13 + 0x48]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140068a5d
mov rdx, qword [rdx]
lea rcx, [rbp + 0xa0]
call fcn.140007a40
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], 0
or ebx, 0x40
lea rax, [rsp + 0x40]
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140068ab0
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.140007a40
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], 0
bts ebx, 7
mov r8, qword [r15 + 0x10]
cmp qword [r15 + 0x18], 0x10
jb 0x140068b0a
mov r15, qword [r15]
mov rdx, r15
lea rcx, [rbp + 0x60]
call fcn.140007a40
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x1b0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], send
mov byte [rax], 0
bts ebx, 8
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x140068b8e
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068b89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694c6
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e7a0]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0x10
jb 0x140068be0
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068bdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694cc
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e7a0]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x140068c38
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068c33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694d2
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e7a0]
movdqu xmmword [rbp + 0xb0], xmm0
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0x10
jb 0x140068c90
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068c8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694d8
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e7a0]
movdqu xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0x10
jb 0x140068ce2
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068cdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694de
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e7a0]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x140068d34
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068d2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694e4
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e7a0]
movdqu xmmword [rbp + 0x108], xmm0
mov byte [rbp + 0xf8], 0
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x68], rax
mov dword [rbp - 0x50], 0x3efc3ed1
mov dword [rbp - 0x4c], 0x3ee13efa
mov dword [rbp - 0x48], 0x3ef93ef3
mov dword [rbp - 0x44], 0x3eb43eec
mov dword [rbp - 0x40], 0x3ee23ece
mov dword [rbp - 0x3c], 0x3ef83eec
mov dword [rbp - 0x38], 0x3ebf3ea4
mov dword [rbp - 0x34], 0x3ed13ec1
mov dword [rbp - 0x30], 0x3ecf3ed2
mov dword [rbp - 0x2c], 0x3ec63ecd
mov dword [rbp - 0x28], 0x3ed33ec7
mov dword [rbp - 0x24], 0x3ec63ec1
mov dword [rbp - 0x20], 0x3e843ec4
mov dword [rbp - 0x1c], 0x3e803ed4
mov dword [rbp - 0x18], 0x3ed83ed9
mov dword [rbp - 0x14], 0x3e9c3ec7
mov dword [rbp - 0x10], 0x3edc3ed4
mov dword [rbp - 0xc], 0x3ed83ec6
mov dword [rbp - 8], 0x3ec23e9b
mov dword [rbp - 4], 0x3ed53eca
mov dword [rbp], 0x3ed53edf
mov dword [rbp + 4], 0x3ed23edf
mov dword [rbp + 8], 0x3eda3eda
mov dword [rbp + 0xc], 0x3ea4
mov byte [rbp + 0x10], 1
mov rcx, r14
mov edx, 0x3e92
nop dword [rax + rax]
lea eax, [rdx + rcx]
xor word [rbp + rcx*2 - 0x50], ax
inc rcx
cmp rcx, 0x2f
jb 0x140068e10
mov byte [rbp + 0x10], 0
lea r8, [rbp + 0xe]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x78]
call fcn.14005b430
or ebx, 0x600
lea rax, [rsp + 0x78]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x68]
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0xe0]
call fcn.140056690
mov rsi, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1e0], xmm0
movups xmmword [rbp + 0x1f0], xmm0
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x210], xmm0
movups xmmword [rbp + 0x220], xmm0
movups xmmword [rbp + 0x230], xmm0
movups xmmword [rbp + 0x240], xmm0
mov qword [rbp + 0x250], rax
lea rcx, [rbp + 0x1e0]
call fcn.14006aac0
nop
cmp qword [0x1401c36b0], 0x10
cmovae r12, qword [0x1401c3698]
mov r9, qword [0x1401c36a8]
add r9, r12
mov r8, r12
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x1e0]
call fcn.14006aef0
or ebx, 0x1800
lea rcx, [rbp + 0x1e0]
call fcn.14006a9d0
nop
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdx, qword [rbp + 0x40]
xorps xmm0, xmm0
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], r14
mov qword [rbp + 0x130], r14
inc rdi
cmp word [rdx + rdi*2], 0
jne 0x140068f14
mov r8, rdi
lea rcx, [rbp + 0x118]
call fcn.14005bac0
nop
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x1a0]
lea r8, [rbp + 0x1c0]
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x160]
call fcn.14004fd60
movzx edi, al
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x140068f98
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140068f92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694ea
call fcn.1400a09c0
nop
lea r9, [fcn.1400065c0]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rsp + 0x78]
call fcn.1400a0a04
test dil, dil
jne 0x140068fd0
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x140068fc9
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor bl, bl
jmp 0x1400693a3
mov qword [rbp - 0x18], r14
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x1c0]
lea rcx, [rbp + 0x150]
call fcn.14005b190
nop
cmp byte [rbp + 0x150], 9
je 0x1400691a4
mov dword [rsp + 0x50], 0xeaedeeed
mov dword [rsp + 0x54], 0xe7cde2e3
mov dword [rsp + 0x58], 0xf9f3fefb
mov word [rsp + 0x5c], 0x100
mov rcx, r14
nop dword [rax + rax]
lea eax, [rcx - 0x74]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x140069020
mov byte [rsp + 0x5d], 0
lea r8, [rsp + 0x5c]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x40]
call fcn.14005b580
or ebx, 0x30000
or ebx, 1
mov dword [rsp + 0x68], ebx
cmp byte [rbp + 0x150], 1
jne 0x1400691a4
mov rsi, qword [rbp + 0x158]
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0xe0]
mov rcx, rsi
call fcn.140063a50
mov rdi, qword [rbp + 0xf0]
cmp byte [rdi + 0x19], 0
jne 0x14006909a
lea r8, [rdi + 0x20]
lea rdx, [rbp + 0x40]
call fcn.140063590
test al, al
je 0x14006909d
mov rdi, qword [rsi]
mov rax, qword [rbp + 0x158]
cmp rdi, qword [rax]
je 0x1400691a4
mov dword [rsp + 0x40], 0xfde8e8fe
mov dword [rsp + 0x44], 0xccfae2f5
mov dword [rsp + 0x48], 0xf2fdfae0
mov word [rsp + 0x4c], 0xf6
mov byte [rsp + 0x4e], 1
mov rcx, r14
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx - 0x74]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xd
jb 0x1400690e0
mov byte [rsp + 0x4e], 0
lea r8, [rsp + 0x4d]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.14005b580
or ebx, 0xc00002
cmp byte [rbp + 0x150], 1
jne 0x1400691a4
mov r12, qword [rbp + 0x158]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0xe0]
mov rcx, r12
call fcn.140063a50
mov rdi, qword [rbp + 0x38]
mov rsi, qword [rbp + 0xf0]
cmp byte [rsi + 0x19], 0
jne 0x140069184
lea rdx, [rsi + 0x20]
mov r14, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140069158
mov rdx, qword [rdx]
mov r15, qword [rbp + 0x30]
lea rcx, [rbp + 0x20]
cmp rdi, 0x10
cmovae rcx, qword [rbp + 0x20]
mov r8, r15
cmp r14, r15
cmovb r8, r14
call fcn.1400c2470
test eax, eax
je 0x140069199
jns 0x1400691a0
mov al, 0xff
test al, al
jns 0x140069188
mov rsi, qword [r12]
mov rax, qword [rbp + 0x158]
cmp rsi, qword [rax]
je 0x1400691a8
xor sil, sil
jmp 0x1400691ab
cmp r15, r14
jb 0x14006917e
jbe 0x140069188
mov al, 1
jmp 0x140069180
mov rdi, qword [rbp + 0x38]
mov sil, 1
test bl, 2
je 0x1400691ec
and ebx, 0xfffffffd
cmp rdi, 0x10
jb 0x1400691ec
lea rdx, [rdi + 1]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400691e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694f0
call fcn.1400a09c0
nop
test bl, 1
je 0x14006922c
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14006922c
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069227
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694f6
call fcn.1400a09c0
test sil, sil
je 0x140069253
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x14006924c
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor esi, esi
mov qword [rbp + 0x160], rsi
xor bl, bl
jmp 0x14006938f
mov dword [rsp + 0x50], 0xeaedeeed
mov dword [rsp + 0x54], 0xe7cde2e3
mov dword [rsp + 0x58], 0xf9f3fefb
mov word [rsp + 0x5c], 0x100
xor esi, esi
mov ecx, esi
nop word [rax + rax]
lea eax, [rcx - 0x74]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0xc
jb 0x140069280
mov byte [rsp + 0x5d], sil
lea r8, [rsp + 0x5c]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x78]
call fcn.14005b580
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x150]
call fcn.14005d720
cmp byte [rax], 3
jne 0x1400694fc
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400692d4
mov rdx, qword [r8]
lea rcx, [r13 + 0x68]
mov r8, qword [r8 + 0x10]
call fcn.1400078e0
mov dword [rsp + 0x40], 0xfde8e8fe
mov dword [rsp + 0x44], 0xccfae2f5
mov dword [rsp + 0x48], 0xf2fdfae0
mov word [rsp + 0x4c], 0xf6
mov byte [rsp + 0x4e], 1
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx - 0x74]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xd
jb 0x140069310
mov byte [rsp + 0x4e], sil
lea r8, [rsp + 0x4d]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x78]
call fcn.14005b580
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x150]
call fcn.14005d720
cmp byte [rax], 3
jne 0x140069540
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140069364
mov rdx, qword [r8]
lea rcx, [r13 + 0x88]
mov r8, qword [r8 + 0x10]
call fcn.1400078e0
mov rcx, qword [rbp + 0x160]
test rcx, rcx
je 0x14006938d
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov qword [rbp + 0x160], rsi
mov bl, 1
movzx edx, byte [rbp + 0x150]
lea rcx, [rbp + 0x158]
call fcn.1400597c0
nop
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x1400693e4
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400693df
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140069584
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e7a0]
movdqu xmmword [rbp + 0x1b0], xmm0
mov byte [rbp + 0x1a0], 0
jmp 0x1400693ff
xor bl, bl
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 0x10
jb 0x140069440
inc rdx
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006943b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006958a
call fcn.1400a09c0
movdqa xmm0, xmmword [0x14011e7a0]
movdqu xmmword [rbp + 0x1d0], xmm0
mov byte [rbp + 0x1c0], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0x10
jb 0x140069494
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006948f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400694ba
call fcn.1400a09c0
movzx eax, bl
mov rcx, qword [rbp + 0x260]
xor rcx, rsp
call fcn.1400a09a0
add rsp, 0x378
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400d2350
nop
call fcn.1400027c0
nop
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
nop
call fcn.1400d2350
int3
mov rcx, rax
call fcn.14005a680
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rcx, [rbp + 0x40]
call fcn.140067d10
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x118]
call fcn.14005b6b0
lea rdx, [0x14013b2e0]
lea rcx, [rbp + 0x118]
call fcn.1400c1890
nop
mov rcx, rax
call fcn.14005a680
mov qword [rsp + 0x68], rax
lea r8, [rsp + 0x68]
lea rcx, [rbp + 0x40]
call fcn.140067d10
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x118]
call fcn.14005b6b0
lea rdx, [0x14013b2e0]
lea rcx, [rbp + 0x118]
call fcn.1400c1890
nop
call fcn.1400d2350
nop
call fcn.1400d2350
int3