Function at 0x140002d60
Capabilities:
Encode data using xor
Initialize winhttp library
Reference http user-agent string

Disassembly:
mov rax, rsp
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x278]
sub rsp, 0x338
movaps xmmword [rax - 0x58], xmm6
movaps xmmword [rax - 0x68], xmm7
movaps xmmword [rax - 0x78], xmm8
movaps xmmword [rax - 0x88], xmm9
mov rax, qword [0x1400a5200]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov r14, r9
mov rdi, r8
mov rbx, rdx
mov rax, rcx
mov qword [rbp - 0x78], rcx
xor edx, edx
mov qword [rbp + 0x1d8], rdx
mov qword [rbp + 0x1c0], rdx
lea rcx, [0x14008f9e4]
mov qword [rbp + 0x1c8], rcx
lea rcx, str.Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Trident_5.0_
mov qword [rbp + 0x1d0], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rdx
mov r15d, send
mov qword [rbp + 0x1b8], r15
mov byte [rbp + 0x1a0], dl
cmp qword [rax + 0x58], rdx
jbe 0x14000459f
mov dword [rsp + 0x20], edx
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rbp + 0x1c0], rax
test rax, rax
je 0x140004598
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
lea rsi, [r15 - 0x10]
lea r10d, [r15 - 0xb]
lea r11d, [r15 + 0x10]
lea r13, [0x1400abed0]
mov r12d, dword [reloc.WS2_32.dll_accept]
mov eax, dword [rcx + rax]
cmp dword [0x1400abea0], eax
jle 0x1400030aa
lea rcx, [0x1400abea0]
call fcn.140046968
cmp dword [0x1400abea0], esi
jne 0x1400030a0
movups xmm0, xmmword [str.QNOLN]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [0x140090d10]
movups xmmword [rsp + 0x68], xmm1
mov eax, dword [0x140090d20]
mov dword [rsp + 0x78], eax
movzx eax, word [0x140090d24]
mov word [rsp + 0x7c], ax
xor r8d, r8d
cmp r12d, 2
jl 0x140003003
movdqa xmm5, xmmword [0x140092970]
movdqa xmm4, xmmword [0x140092a40]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [0x140092990]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [0x140092a30]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rsp + 0x58]
mov edx, dword [rbp - 0x50]
nop word [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x20
jl 0x140002f00
cmp r8d, 0x26
jge 0x140003040
movsxd rax, r8d
lea r9, [rsp + 0x58]
add r9, rax
nop
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x26
jl 0x140003010
xorps xmm0, xmm0
movups xmmword [0x1400abed0], xmm0
mov qword [0x1400abee0], 0
mov qword [0x1400abee8], 0
lea rax, [rsp + 0x58]
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140003070
lea rdx, [rsp + 0x58]
mov rcx, r13
call fcn.140007030
lea rcx, [0x14007a660]
call fcn.140046d24
nop
lea rcx, [0x1400abea0]
call fcn.1400468fc
mov r11d, 0x1f
lea r10d, [r11 - 0x1b]
movsd xmm0, qword [0x140090cf0]
movsd qword [rbp - 0x70], xmm0
mov eax, dword [0x140090cf8]
mov dword [rbp - 0x68], eax
movzx eax, word [0x140090cfc]
mov word [rbp - 0x64], ax
movzx eax, byte [0x140090cfe]
mov byte [rbp - 0x62], al
xor r8d, r8d
cmp r12d, 2
jl 0x1400031e7
movdqa xmm4, xmmword [0x140092a40]
movd xmm6, r10d
movd xmm5, r11d
movdqa xmm2, xmmword [0x140092970]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140092990]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
mov eax, dword [0x140092a30]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140090cf0]
xorps xmm2, xmm0
movd dword [rbp - 0x70], xmm2
movdqa xmm3, xmmword [0x140092980]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140092990]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x6c]
xorps xmm2, xmm1
movd dword [rbp - 0x6c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xf
jl 0x140003200
mov eax, dword [0x140090d28]
mov dword [rsp + 0x48], eax
movzx ecx, word [0x140090d2c]
mov word [rsp + 0x4c], cx
movzx eax, byte [0x140090d2e]
mov byte [rsp + 0x48], 0x26
xor byte [rsp + 0x49], 0x3a
xor byte [rsp + 0x4a], 0x3b
xor byte [rsp + 0x4b], 0x3c
xor cl, 0x3d
mov byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], 0x3e
xor al, 0x3f
mov byte [rsp + 0x4e], al
movups xmm0, xmmword [0x140090c68]
movups xmmword [rbp - 0x60], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x140003410
cmp r12d, 2
jl 0x1400033cf
movdqa xmm5, xmmword [0x140092970]
xor edx, edx
movdqa xmm4, xmmword [0x140092a40]
movd xmm6, r10d
movdqa xmm7, xmmword [0x140092990]
movd xmm8, r11d
movdqa xmm0, xmmword [0x140092a30]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x60]
mov r8d, dword [rbp - 0x50]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x10
jl 0x1400032d2
jmp 0x140003410
lea r9, [rbp - 0x60]
xor r8d, r8d
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x10
jl 0x1400033e0
movups xmm0, xmmword [str.HZRIaK91_02__1_9__]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [0x140090d40]
movsd xmm0, qword [0x140090d50]
movzx eax, byte [0x140090d58]
movups xmmword [rsp + 0x68], xmm1
movsd qword [rsp + 0x78], xmm0
mov byte [rbp - 0x80], al
xor r8d, r8d
cmp r12d, 2
jl 0x140003593
movdqa xmm5, xmmword [0x140092970]
movdqa xmm4, xmmword [0x140092a40]
movd xmm6, r10d
movdqa xmm7, xmmword [0x140092990]
movd xmm8, r11d
movdqa xmm0, xmmword [0x140092a30]
movdqa xmmword [rbp - 0x50], xmm0
lea rcx, [rsp + 0x58]
mov edx, dword [rbp - 0x50]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x28
jl 0x140003490
cmp r8d, 0x29
jge 0x1400035d0
movsxd rax, r8d
lea r9, [rsp + 0x58]
add r9, rax
nop
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x29
jl 0x1400035a0
lea rax, [rsp + 0x58]
mov rcx, rsi
nop dword [rax + rax]
inc rcx
cmp byte [rax + rcx], 0
jne 0x1400035e0
mov rdx, qword [rbx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x14000462c
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140003610
mov rax, qword [rbx]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x58]
mov r8, rbx
movzx edx, byte [rsp + 0x40]
lea rcx, [rbp + 0x90]
call fcn.140007fd0
nop
lea rax, [rbp - 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140003640
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x90]
call fcn.140006410
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
xor ebx, ebx
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r15
mov byte [rax], bl
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], 0x10
jb 0x140003692
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp + 0x50]
call fcn.140006410
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r15
mov byte [rax], 0
lea rax, [rsp + 0x48]
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400036d0
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x30]
call fcn.140006410
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r15
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
add rdx, 0x48
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x140003727
mov rdx, qword [rdx]
lea rcx, [rbp + 0x10]
call fcn.140006410
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rbx
mov qword [rbp + 8], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r15
mov byte [rax], 0
lea rax, [rbp - 0x70]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x140003760
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x10]
call fcn.140006410
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r15
mov byte [rax], 0
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 0x10
jb 0x1400037ae
mov r14, qword [r14]
mov rdx, r14
lea rcx, [rbp - 0x30]
call fcn.140006410
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], rbx
mov qword [rbp + 0x188], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x170], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x180], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], r15
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x14000382d
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003828
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004632
call fcn.140046d3c
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], r15
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x140003874
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000386f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004638
call fcn.140046d3c
mov qword [rbp], rbx
mov qword [rbp + 8], r15
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x1400038bb
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000463e
call fcn.140046d3c
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], r15
mov byte [rbp + 0x10], 0
mov rdx, qword [rbp + 0x48]
cmp rdx, 0x10
jb 0x140003902
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038fd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004644
call fcn.140046d3c
mov qword [rbp + 0x40], rbx
mov qword [rbp + 0x48], r15
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140003949
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003944
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000464a
call fcn.140046d3c
mov qword [rbp + 0x60], rbx
mov qword [rbp + 0x68], r15
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0x10
jb 0x140003996
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003991
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004650
call fcn.140046d3c
mov qword [rbp + 0xa0], rbx
mov qword [rbp + 0xa8], r15
mov byte [rbp + 0x90], 0
movups xmm0, xmmword [str.zUUHXPKm]
movups xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [0x140090d90]
movups xmmword [rbp + 0x120], xmm1
movups xmm0, xmmword [0x140090da0]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [0x140090db0]
movups xmmword [rbp + 0x140], xmm1
movups xmm0, xmmword [0x140090dc0]
movups xmmword [rbp + 0x150], xmm0
movups xmm1, xmmword [0x140090dd0]
movups xmmword [rbp + 0x160], xmm1
cmp r12d, 2
jl 0x140003b37
movdqa xmm5, xmmword [0x140092970]
mov edx, ebx
movdqa xmm4, xmmword [0x140092a40]
mov r14d, 4
movd xmm6, r14d
movdqa xmm7, xmmword [0x140092990]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm9, xmmword [str.99999999]
lea rcx, [rbp + 0x110]
nop dword [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [rdx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm9
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add edx, 8
lea rcx, [rcx + 0x10]
cmp edx, 0x30
jl 0x140003a50
jmp 0x140003b8a
lea r9, [rbp + 0x110]
mov r8d, ebx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x31
movzx eax, r8w
sub ax, cx
add ax, 0x39
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x30
jl 0x140003b50
mov r14d, 4
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], rbx
mov qword [rbp + 0x88], rbx
lea rax, [rbp + 0x110]
mov r8, rsi
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140003bb0
lea rdx, [rbp + 0x110]
lea rcx, [rbp + 0x70]
call fcn.140006b70
nop
lea rax, [rbp + 0x70]
mov qword [rbp - 0x60], rax
lea rax, [rbp + 0x90]
mov qword [rbp - 0x58], rax
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140005810
nop
cmp qword [0x1400abee8], 0x10
cmovae r13, qword [0x1400abed0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, esi
mov r8, r13
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovo rax, rsi
mov rcx, rax
call fcn.140046d44
mov rdi, rax
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
mov r9d, esi
mov r8, r13
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc8], xmm0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe0], 0
mov r8, rsi
nop dword [rax + rax]
inc r8
cmp word [rdi + r8*2], 0
jne 0x140003c80
mov rdx, rdi
lea rcx, [rbp + 0xc8]
call fcn.140006b70
nop
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 8
cmovae rdx, qword [rbp + 0xc8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov r8, rsi
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x140003cd0
lea rcx, [rsp + 0x58]
call fcn.140006b70
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x170]
lea r8, [rbp - 0x50]
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x1c0]
call fcn.140002b20
movzx ebx, al
mov rdx, qword [rbp + 0xe0]
cmp rdx, 8
jb 0x140003d57
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003d51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004656
call fcn.140046d3c
nop
lea rcx, [rbp - 0x50]
call fcn.1400057a0
nop
lea r9, [fcn.1400059d0]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rbp + 0x70]
call fcn.140046a1c
test bl, bl
jne 0x140003e6d
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x140003d95
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x140003dd6
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003dd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004620
call fcn.140046d3c
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x188], r15
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x140003e30
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004626
call fcn.140046d3c
xor al, al
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.1400468a0
lea r11, [rsp + 0x338]
movaps xmm6, xmmword [r11 - 0x18]
movaps xmm7, xmmword [r11 - 0x28]
movaps xmm8, xmmword [r11 - 0x38]
movaps xmm9, xmmword [r11 - 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [rbp + 0x100], 0
lea r8, [rbp + 0xc8]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x190]
call fcn.140006a50
nop
movzx r10d, byte [rbp + 0x190]
cmp r10b, 9
je 0x140004528
movsd xmm0, qword [str.XYXYNM_4._E]
movsd qword [rsp + 0x48], xmm0
mov eax, dword [0x140090c60]
mov dword [rsp + 0x50], eax
movzx eax, byte [0x140090c64]
mov byte [rsp + 0x54], al
xor r8d, r8d
cmp r12d, 2
jl 0x140003fe1
movdqa xmm4, xmmword [0x140092a40]
movd xmm6, r14d
mov eax, 0x1f
movd xmm5, eax
movdqa xmm2, xmmword [0x140092970]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140092990]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
mov eax, dword [0x140092a30]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.XYXYNM_4._E]
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movdqa xmm3, xmmword [0x140092980]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140092990]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x4c]
xorps xmm2, xmm1
movd dword [rsp + 0x4c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x48]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x140003ff0
cmp r10b, 1
sete byte [rsp + 0x40]
jne 0x140004528
mov r14, qword [rbp + 0x198]
mov r12, qword [r14]
mov rbx, qword [r12 + 8]
mov r13, r12
cmp byte [rbx + 0x19], 0
jne 0x1400040ba
lea rax, [rsp + 0x48]
mov rdi, rsi
nop
inc rdi
cmp byte [rax + rdi], 0
jne 0x140004050
nop dword [rax]
lea rcx, [rbx + 0x20]
mov r14, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x140004072
mov rcx, qword [rcx]
mov r8, r14
cmp rdi, r14
cmovb r8, rdi
lea rdx, [rsp + 0x48]
call fcn.140049ba0
test eax, eax
je 0x140004090
jns 0x14000409b
mov al, 1
jmp 0x14000409d
cmp r14, rdi
jae 0x140004099
mov al, 1
jmp 0x14000409d
jbe 0x1400040a7
xor al, al
test al, al
je 0x1400040a7
mov rbx, qword [rbx + 0x10]
jmp 0x1400040ad
mov r13, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x140004060
mov r14, qword [rbp + 0x198]
cmp byte [r13 + 0x19], 0
jne 0x140004528
lea rcx, [r13 + 0x20]
lea rax, [rsp + 0x48]
mov rbx, rsi
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400040d1
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x1400040e8
mov rcx, qword [rcx]
mov r8, rdi
cmp rbx, rdi
cmovb r8, rbx
lea rdx, [rsp + 0x48]
call fcn.140049ba0
test eax, eax
je 0x140004106
jns 0x140004111
mov al, 0xff
jmp 0x140004113
cmp rdi, rbx
jae 0x14000410f
mov al, 0xff
jmp 0x140004113
jbe 0x14000411b
mov al, 1
test al, al
jg 0x140004528
cmp r13, r12
je 0x140004528
movsd xmm0, qword [str.K__NXMW]
movsd qword [rsp + 0x48], xmm0
mov eax, dword [str.5___F]
mov dword [rsp + 0x50], eax
movzx eax, word [0x140090cbc]
mov word [rsp + 0x54], ax
cmp byte [0x140090cbd], 0
je 0x1400042b0
xor r8d, r8d
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140004275
movdqa xmm4, xmmword [0x140092a40]
mov eax, 4
movd xmm6, eax
mov eax, 0x1f
movd xmm5, eax
movdqa xmm2, xmmword [0x140092970]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140092990]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
mov eax, dword [0x140092a30]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str.K__NXMW]
xorps xmm2, xmm0
movd dword [rsp + 0x48], xmm2
movdqa xmm3, xmmword [0x140092980]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140092990]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140092a10]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x4c]
xorps xmm2, xmm1
movd dword [rsp + 0x4c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x48]
add r9, rax
mov eax, 0x5397829d
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
sub al, cl
add al, 0x39
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140004280
cmp byte [rsp + 0x40], 0
je 0x140004528
mov r12, qword [r14]
mov rbx, qword [r12 + 8]
mov r13, r12
cmp byte [rbx + 0x19], 0
jne 0x140004333
lea rax, [rsp + 0x48]
mov rdi, rsi
inc rdi
cmp byte [rax + rdi], 0
jne 0x1400042d4
nop dword [rax]
lea rcx, [rbx + 0x20]
mov r14, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x1400042f2
mov rcx, qword [rcx]
mov r8, r14
cmp rdi, r14
cmovb r8, rdi
lea rdx, [rsp + 0x48]
call fcn.140049ba0
test eax, eax
je 0x140004310
jns 0x14000431b
mov al, 1
jmp 0x14000431d
cmp r14, rdi
jae 0x140004319
mov al, 1
jmp 0x14000431d
jbe 0x140004327
xor al, al
test al, al
je 0x140004327
mov rbx, qword [rbx + 0x10]
jmp 0x14000432d
mov r13, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1400042e0
cmp byte [r13 + 0x19], 0
jne 0x140004528
lea rcx, [r13 + 0x20]
lea rax, [rsp + 0x48]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140004347
mov rbx, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14000435e
mov rcx, qword [rcx]
mov r8, rbx
cmp rsi, rbx
cmovb r8, rsi
lea rdx, [rsp + 0x48]
call fcn.140049ba0
test eax, eax
je 0x14000437c
jns 0x140004387
mov al, 0xff
jmp 0x140004389
cmp rbx, rsi
jae 0x140004385
mov al, 0xff
jmp 0x140004389
jbe 0x140004391
mov al, 1
test al, al
jg 0x140004528
cmp r13, r12
je 0x140004528
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xor edi, edi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
lea r8d, [rdi + 0xc]
lea rdx, str.access_token
lea rcx, [rsp + 0x58]
call fcn.140007030
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x190]
call fcn.140007de0
cmp byte [rax], 3
jne 0x14000465c
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x1400043ee
mov rdx, qword [r8]
mov rbx, qword [rbp - 0x78]
lea rcx, [rbx + 0x68]
mov r8, qword [r8 + 0x10]
call fcn.1400062b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rdi
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.refresh_token
lea rcx, [rsp + 0x58]
call fcn.140007030
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x190]
call fcn.140007de0
cmp byte [rax], 3
jne 0x1400045de
mov r8, qword [rax + 8]
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140004453
mov rdx, qword [r8]
lea rcx, [rbx + 0x88]
mov r8, qword [r8 + 0x10]
call fcn.1400062b0
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x140004476
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
movzx edx, byte [rbp + 0x190]
lea rcx, [rbp + 0x198]
call fcn.140005dc0
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x1400044cb
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400044c6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004620
call fcn.140046d3c
mov qword [rbp + 0x180], rdi
mov qword [rbp + 0x188], r15
mov byte [rbp + 0x170], 0
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 0x10
jb 0x140004521
inc rdx
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000451c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004626
call fcn.140046d3c
mov al, 1
jmp 0x140003e32
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x14000453b
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
movzx edx, byte [rbp + 0x190]
lea rcx, [rbp + 0x198]
call fcn.140005dc0
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x140003dd6
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003dd1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004620
jmp 0x140003dd1
mov r15, qword [rbp + 0x1b8]
cmp r15, 0x10
jb 0x140003e30
lea rdx, [r15 + 1]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003e2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004626
jmp 0x140003e2b
mov rcx, rax
call fcn.140008950
mov qword [rbp - 0x78], rax
lea r8, [rbp - 0x78]
lea rcx, [rbp + 0x70]
call fcn.140012ad0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x90]
call fcn.14000d370
lea rdx, [0x1400a2948]
lea rcx, [rbp + 0x90]
call fcn.1400489a0
nop
call fcn.14005c8f4
nop
call fcn.14005c8f4
nop
call fcn.140001670
nop
call fcn.14005c8f4
nop
call fcn.14005c8f4
nop
call fcn.14005c8f4
nop
call fcn.14005c8f4
nop
call fcn.14005c8f4
nop
call fcn.14005c8f4
nop
call fcn.14005c8f4
nop
mov rcx, rax
call fcn.140008950
mov qword [rbp - 0x78], rax
lea r8, [rbp - 0x78]
lea rcx, [rbp + 0x70]
call fcn.140012ad0
nop
mov r8, rax
mov edx, 0x12e
lea rcx, [rbp + 0x90]
call fcn.14000d370
lea rdx, [0x1400a2948]
lea rcx, [rbp + 0x90]
call fcn.1400489a0
int3