Function at 0x180009bf0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Initialize winhttp library
Prepare http request
Receive http response
Send data
Send http request
Set http header

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1d8]
sub rsp, 0x2a0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x1800f0040]
xor rax, rsp
mov qword [rbp + 0x178], rax
mov r15, rdx
mov r12, rcx
mov qword [rbp + 0xb8], rdx
xor r13d, r13d
movdqa xmm0, xmmword [0x1800e9160]
movdqu xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x1800e9240]
movdqu xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x1800e8e30]
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1800e90d0]
movdqu xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x1800e8e00]
movdqu xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x1800e8e50]
movdqu xmmword [rbp + 0x40], xmm1
movdqa xmm0, xmmword [0x1800e8eb0]
movdqu xmmword [rbp + 0x50], xmm0
movdqa xmm1, xmmword [0x1800e8e10]
movdqu xmmword [rbp + 0x60], xmm1
movdqa xmm0, xmmword [0x1800e8dd0]
movdqu xmmword [rbp + 0x70], xmm0
mov dword [rbp + 0x80], 0x64746669
mov dword [rbp + 0x84], 0x2041585b
mov dword [rbp + 0x88], 0x28512370
mov word [rbp + 0x8c], 0x100
mov ecx, r13d
nop dword [rax + rax]
lea eax, [rcx + 0x7a]
xor byte [rbp + rcx - 0x10], al
inc rcx
cmp rcx, 0x9c
jb 0x180009ce0
mov byte [rbp + 0x8d], 0
lea r8, [rbp + 0x8c]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x58]
call fcn.1800113a0
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x158]
call fcn.180003330
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x180009d5e
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009d59
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009d59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov rdi, r13
mov qword [rbp + 0xe8], r13
mov esi, 7
mov qword [rbp + 0xf0], rsi
mov word [rbp + 0xd8], r13w
lea rbx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rbx, qword [rbp + 0x158]
lea r14, [rbp + 0x158]
cmova r14, qword [rbp + 0x158]
add r14, qword [rbp + 0x168]
cmp rbx, r14
je 0x180009e16
nop dword [rax + rax]
movsx r9d, byte [rbx]
cmp rdi, rsi
jae 0x180009df4
lea rax, [rdi + 1]
mov qword [rbp + 0xe8], rax
lea rax, [rbp + 0xd8]
cmp rsi, 7
cmova rax, qword [rbp + 0xd8]
mov word [rax + rdi*2], r9w
mov word [rax + rdi*2 + 2], r13w
jmp 0x180009e00
lea rcx, [rbp + 0xd8]
call fcn.1800117b0
inc rbx
mov rsi, qword [rbp + 0xf0]
mov rdi, qword [rbp + 0xe8]
cmp rbx, r14
jne 0x180009dc0
movups xmm0, xmmword [str.qC_ZXR]
movups xmmword [rsp + 0x60], xmm0
mov ecx, dword [0x1800e8d08]
mov dword [rsp + 0x70], ecx
movzx eax, word [0x1800e8d0c]
mov edx, 0x43
mov word [rsp + 0x60], dx
xor word [rsp + 0x62], 0x33
xor word [rsp + 0x64], 0x34
xor word [rsp + 0x66], 0x35
xor word [rsp + 0x68], 0x36
xor word [rsp + 0x6a], 0x37
xor word [rsp + 0x6c], 0x38
xor word [rsp + 0x6e], 0x39
xor cx, 0x3a
mov word [rsp + 0x70], cx
xor word [rsp + 0x72], 0x3b
xor ax, 0x3c
mov word [rsp + 0x74], ax
xor r14d, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rbx, rax
mov qword [rbp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
mov r8d, 0xe
cmp rdi, r8
cmovb r8, rdi
lea rdx, [rbp + 0xd8]
cmp rsi, 7
cmova rdx, qword [rbp + 0xd8]
lea rcx, [rbp - 0x38]
call fcn.180011cb0
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 7
cmova rdx, qword [rbp - 0x38]
mov r8d, 0x1bb
xor r9d, r9d
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r13, rax
mov rdx, qword [rbp - 0x20]
cmp rdx, 7
jbe 0x180009f42
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009f3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180009f3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
movdqa xmm0, xmmword [0x1800e8d30]
movdqu xmmword [rbp - 0x28], xmm0
mov word [rbp - 0x38], r14w
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov rax, qword [rbp + 0xe8]
cmp rax, 0xe
jb 0x18000ae23
add rax, 0xfffffffffffffff2
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 7
cmova rdx, qword [rbp + 0xd8]
add rdx, 0x1c
lea rcx, [rbp - 0x58]
call fcn.180011cb0
lea r8, [rbp - 0x58]
movsd xmm0, qword [0x1800e8958]
movzx eax, word [0x1800e8960]
movsd qword [rsp + 0x50], xmm0
cmp qword [rbp - 0x40], 7
jbe 0x180009fce
mov r8, qword [rbp - 0x58]
mov ecx, 0x50
mov word [rsp + 0x50], cx
xor word [rsp + 0x52], 0x33
xor word [rsp + 0x54], 0x34
xor word [rsp + 0x56], 0x35
xor ax, 0x36
mov word [rsp + 0x58], ax
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, [rsp + 0x50]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rsi, rax
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x18000a05c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a057
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000a057
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
movdqa xmm0, xmmword [0x1800e8d30]
movdqu xmmword [rbp - 0x48], xmm0
mov word [rbp - 0x58], r14w
mov qword [rbp + 0xc8], r14
cmp qword [r12 + 0x18], 0xf
jbe 0x18000a081
mov r12, qword [r12]
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0xc8]
mov rcx, r12
call fcn.180009a60
mov r12, rax
movdqa xmm0, xmmword [str.Xvv_]
movdqu xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x1800e9220]
movdqu xmmword [rbp - 0x78], xmm1
mov dword [rbp - 0x68], 0xeeb1efff
mov dword [rbp - 0x64], 0xc0c5edea
mov dword [rbp - 0x60], 0xa8aeaecf
mov word [rbp - 0x5c], 0xac
mov byte [rbp - 0x5a], 1
movdqa xmm0, xmmword [0x1800e8ea0]
movdqu xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [0x1800e9200]
movdqu xmmword [rbp], xmm1
movdqa xmm0, xmmword [0x1800e9040]
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x1800e8d90]
movdqu xmmword [rbp + 0x20], xmm1
mov byte [rbp + 0x30], 1
mov rcx, r14
nop
lea eax, [rcx + 0x7a]
xor byte [rbp + rcx - 0x10], al
inc rcx
cmp rcx, 0x3f
jb 0x18000a110
mov byte [rbp + 0x30], r14b
mov r8, r15
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xf8]
call fcn.180011220
mov rbx, rax
cmp byte [rbp - 0x5a], 0
je 0x18000a164
mov rdx, r14
nop dword [rax]
nop word [rax + rax]
lea ecx, [rdx + 0x7a]
xor byte [rsp + rdx + 0x78], cl
inc rdx
cmp rdx, 0x2d
jb 0x18000a150
mov byte [rbp - 0x5a], 0
lea r8, [rbp - 0x5b]
lea rdx, [rsp + 0x78]
lea rcx, [rbp + 0x98]
call fcn.1800113a0
nop
lea r8, [rbp + 0x98]
mov rdx, rbx
lea rcx, [rbp + 0x138]
call fcn.180010f40
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x18000a1d6
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a1d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000a1d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
nop
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x18000a21a
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a215
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000a215
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
movdqa xmm0, xmmword [0x1800e8d40]
movdqu xmmword [rbp + 0x108], xmm0
mov byte [rbp + 0xf8], 0
mov dword [rsp + 0x40], 0x50517177
mov dword [rsp + 0x44], 0xb3b0464f
mov dword [rsp + 0x48], 0x8f89aeaf
mov word [rsp + 0x4c], 0x100
mov rcx, r14
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x7a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xc
jb 0x18000a260
mov byte [rsp + 0x4d], 0
lea r8, [rsp + 0x4c]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x118]
call fcn.1800113a0
nop
movups xmm0, xmmword [str.qZASYL]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [str.nBLX]
movups xmmword [rbp], xmm1
movups xmm0, xmmword [0x1800e8b10]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [0x1800e8b20]
movups xmmword [rbp + 0x20], xmm1
movups xmm0, xmmword [0x1800e8b30]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [0x1800e8b40]
movups xmmword [rbp + 0x40], xmm1
mov eax, dword [0x1800e8b50]
mov dword [rbp + 0x50], eax
mov r8d, r14d
mov edi, dword [0x1800f0088]
cmp edi, 2
jl 0x18000a3ff
movdqa xmm5, xmmword [0x1800e8d50]
movdqa xmm4, xmmword [0x1800e8dc0]
movdqa xmm6, xmmword [0x1800e8d70]
movdqa xmm7, xmmword [0x1800e8d80]
lea rcx, [rbp - 0x10]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x30
jl 0x18000a310
cmp r8d, 0x32
jge 0x18000a444
movsxd rax, r8d
lea r9, [rbp - 0x10]
lea r9, [r9 + rax*2]
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x35
movzx eax, r8w
sub ax, cx
add ax, 0x32
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x32
jl 0x18000a410
mov r9d, 0x20000000
mov r8d, 0xffffffff
lea rdx, [rbp - 0x10]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov edx, dword [rbp + 0x148]
add edx, dword [rbp + 0x128]
mov ebx, dword [rbp + 0xc0]
add edx, ebx
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], edx
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [rbp + 0xd0], r14d
mov r14, qword [rbp + 0xc8]
test eax, eax
je 0x18000ac0e
lea rdx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova rdx, qword [rbp + 0x138]
lea r9, [rbp + 0xd0]
mov r8d, dword [rbp + 0x148]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
lea r9, [rbp + 0xd0]
mov r8d, ebx
mov rdx, r14
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
lea rdx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0xf
cmova rdx, qword [rbp + 0x118]
lea r9, [rbp + 0xd0]
mov r8d, dword [rbp + 0x128]
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpWriteData]
test eax, eax
je 0x18000ac0e
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
cmp byte [0x18026d739], 1
jne 0x18000ac0e
mov ecx, 0x17d6b0
call fcn.180014974
test rax, rax
je 0x18000ac7b
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
mov qword [rbp + 0xf8], rcx
lea rbx, [rcx + 0x17d689]
mov qword [rbp + 0x108], rbx
mov r8d, 0x17d689
lea rdx, [0x1800f00b0]
call sub.VCRUNTIME140.dll_memmove
mov qword [rbp + 0x100], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
test eax, eax
je 0x18000abd2
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
jne 0x18000a799
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x1800e8be4]
mov dword [rbp + 0xc8], ecx
cmp byte [0x1800e8be7], bl
je 0x18000a6a0
cmp edi, 2
jl 0x18000a661
movdqa xmm3, xmmword [0x1800e8d50]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1800e8dc0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1800e8dc0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1800e8d70]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800e8da0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, ecx
xorps xmm2, xmm0
movd dword [rbp + 0xc8], xmm2
jmp 0x18000a6a0
lea r9, [rbp + 0xc8]
xor r8d, r8d
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x18000a670
mov eax, dword [0x1800e8be8]
mov dword [rbp + 0xc0], eax
cmp byte [0x1800e8beb], 0
je 0x18000a780
cmp edi, 2
jl 0x18000a742
movdqa xmm3, xmmword [0x1800e8d50]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1800e8dc0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1800e8dc0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1800e8d70]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800e8da0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0xc0], xmm2
jmp 0x18000a780
lea r9, [rbp + 0xc0]
xor r8d, r8d
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x18000a750
xor r9d, r9d
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0xc0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov dword [rbp + 0xc8], 0
lea rdx, [rbp + 0xc8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
je 0x18000a7e9
mov dword [rbp + 0xc0], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [rbp + 0xc0]
cmp dword [rbp + 0xc8], eax
je 0x18000a9c9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [str.XXX5]
mov dword [rbp + 0xc0], eax
cmp byte [0x1800e89c7], 0
je 0x18000a8d0
cmp edi, 2
jl 0x18000a894
movdqa xmm3, xmmword [0x1800e8d50]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1800e8dc0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1800e8dc0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1800e8d70]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800e8da0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0xc0], xmm2
jmp 0x18000a8d0
lea r9, [rbp + 0xc0]
xor r8d, r8d
nop
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x18000a8a0
mov eax, dword [str.U__5p]
mov dword [rbp + 0xc8], eax
cmp byte [0x1800e8967], 0
je 0x18000a9b0
cmp edi, 2
jl 0x18000a972
movdqa xmm3, xmmword [0x1800e8d50]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1800e8dc0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1800e8dc0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1800e8d70]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800e8da0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0xc8], xmm2
jmp 0x18000a9b0
lea r9, [rbp + 0xc8]
xor r8d, r8d
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x18000a980
xor r9d, r9d
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0xc8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0xf8]
mov rcx, rbx
call fcn.180013620
test al, al
jne 0x18000abc9
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [str.BBF5]
mov dword [rbp + 0xc0], eax
cmp byte [0x1800e8d2f], 0
je 0x18000aad0
cmp edi, 2
jl 0x18000aa8b
movdqa xmm3, xmmword [0x1800e8d50]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1800e8dc0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1800e8dc0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1800e8d70]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800e8da0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0xc0], xmm2
jmp 0x18000aad0
lea r9, [rbp + 0xc0]
xor r8d, r8d
nop word [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x18000aaa0
mov eax, dword [0x1800e8954]
mov dword [rbp + 0xc8], eax
cmp byte [0x1800e8957], 0
je 0x18000abb0
cmp edi, 2
jl 0x18000ab72
movdqa xmm3, xmmword [0x1800e8d50]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1800e8dc0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1800e8dc0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x1800e8d70]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1800e8da0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.2222222222222222]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp + 0xc8], xmm2
jmp 0x18000abb0
lea r9, [rbp + 0xc8]
xor r8d, r8d
nop dword [rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x32
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 4
jl 0x18000ab80
xor r9d, r9d
lea r8, [rbp + 0xc0]
lea rdx, [rbp + 0xc8]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xf8]
test rcx, rcx
je 0x18000ac0e
mov rdx, qword [rbp + 0x108]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ac09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ac7b
call fcn.1800145b0
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r8, r14
xor edx, edx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x18000ac87
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ac82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ac82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1800145b0
movdqa xmm0, xmmword [0x1800e8d40]
movdqu xmmword [rbp + 0x128], xmm0
mov byte [rbp + 0x118], 0
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x18000ace2
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000acdd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000acdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
movdqa xmm0, xmmword [0x1800e8d40]
movdqu xmmword [rbp + 0x148], xmm0
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0xf0]
cmp rdx, 7
jbe 0x18000ad43
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ad3d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ad3d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x18000ad87
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ad82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000ad82
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800145b0
movdqa xmm0, xmmword [0x1800e8d40]
movdqu xmmword [rbp + 0x168], xmm0
mov byte [rbp + 0x158], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x18000add4
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x18000adcf
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000ae1c
mov rcx, r8
call fcn.1800145b0
mov qword [r15 + 0x10], 0
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rcx, qword [rbp + 0x178]
xor rcx, rsp
call fcn.180014590
lea r11, [rsp + 0x2a0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180010dd0
nop
int3