Function at 0x14005b960
Capabilities:
Encode data using xor
Initialize winhttp library
Prepare http request
Receive http response
Set http header

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rax, qword [0x1400f8010]
xor rax, rsp
mov qword [rbp + 0x118], rax
mov rsi, rcx
mov qword [rbp + 0x40], rcx
xor r12d, r12d
lea rcx, [rbp + 0xf8]
call fcn.14005b720
nop
mov dword [rbp + 0x70], r12d
mov dword [rbp + 0x74], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
mov ebx, r12d
mov qword [rbp + 0x88], rbx
mov r14d, 0xf
mov qword [rbp + 0x90], r14
mov byte [rbp + 0x78], bl
mov dword [rsp + 0x60], 0xd7b2d7bf
mov dword [rsp + 0x64], 0xd7b0d7be
mov dword [rsp + 0x68], 0xd7a3d7a5
mov dword [rsp + 0x6c], 0xd7bad7b1
mov dword [rsp + 0x70], 0xd7b5d7f4
mov dword [rsp + 0x74], 0xd7afd7bb
mov dword [rsp + 0x78], 0xd7b4d7b1
mov dword [rsp + 0x7c], 0xd788d7ce
mov dword [rbp - 0x80], 0xd78d
mov byte [rbp - 0x7c], 1
mov ecx, r12d
mov r15d, 0x282e
nop dword [rax]
movzx eax, cx
sub ax, r15w
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0x11
jb 0x14005ba30
mov byte [rbp - 0x7c], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], r12
lea rax, [rsp + 0x60]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14005ba70
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xd8]
call fcn.140002ad0
nop
mov dword [rsp + 0x60], 0xd7a5d7fd
mov dword [rsp + 0x64], 0xd7a7d7b1
mov dword [rsp + 0x68], 0xd7b1d7bf
mov dword [rsp + 0x6c], 0xd7f4d7a1
mov dword [rsp + 0x70], 0xd7abd7a9
mov dword [rsp + 0x74], 0xd7b2d7b3
mov dword [rsp + 0x78], 0xd7bad7b8
mov dword [rsp + 0x7c], 0xd792
mov byte [rbp - 0x80], 1
mov rcx, r12
nop dword [rax]
nop dword [rax + rax]
movzx eax, cx
sub ax, r15w
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0xf
jb 0x14005bae0
mov byte [rbp - 0x80], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], r12
lea rax, [rsp + 0x60]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x14005bb20
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0xb8]
call fcn.140002ad0
nop
mov dword [rbp - 0x28], 0xd7f3d793
mov dword [rbp - 0x24], 0xd7bcd783
mov dword [rbp - 0x20], 0xd79fd7b8
mov dword [rbp - 0x1c], 0xd78dd78c
mov dword [rbp - 0x18], 0xd7fbd78a
mov dword [rbp - 0x14], 0xd7a5d799
mov dword [rbp - 0x10], 0xd7b2d7bf
mov dword [rbp - 0xc], 0xd78dd790
mov dword [rbp - 8], 0xd7c3d787
mov dword [rbp - 4], 0xd797d7b4
mov dword [rbp], 0xd780d789
mov dword [rbp + 4], 0xd788d79a
mov dword [rbp + 8], 0xd7c4d787
mov dword [rbp + 0xc], 0xd7c3d7dd
mov dword [rbp + 0x10], 0xd7de
mov byte [rbp + 0x14], 1
mov rcx, r12
nop dword [rax]
movzx eax, cx
sub ax, r15w
xor word [rbp + rcx*2 - 0x28], ax
inc rcx
cmp rcx, 0x1d
jb 0x14005bbb0
mov byte [rbp + 0x14], 0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x28]
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov r13, rax
test rax, rax
jne 0x14005bc49
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movdqa xmm0, xmmword [0x1400ebfa0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x100bdbd
mov rdx, r12
nop dword [rax + rax]
lea eax, [rdx - 0x38]
xor byte [rsp + rdx + 0x40], al
inc rdx
cmp rdx, 0x12
jb 0x14005bc10
mov byte [rsp + 0x53], 0
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140064410
lea rdx, [0x1400645e0]
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor bl, bl
jmp 0x14005c536
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 8
cmovae rdx, qword [rbp + 0xd8]
mov r8d, 0x50
xor r9d, r9d
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rdi, rax
mov qword [rbp + 0x68], rax
test rax, rax
jne 0x14005bcf2
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movdqa xmm0, xmmword [0x1400ebfc0]
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0xbbb1b5ba
mov word [rsp + 0x54], 0xbb
mov byte [rsp + 0x56], 1
mov rdx, r12
nop word [rax + rax]
lea eax, [rdx - 0x35]
xor byte [rsp + rdx + 0x40], al
inc rdx
cmp rdx, 0x15
jb 0x14005bcb0
mov byte [rsp + 0x56], 0
lea rdx, [rsp + 0x40]
mov rcx, rbx
call fcn.140064410
lea rdx, [0x1400645e0]
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor bl, bl
jmp 0x14005c536
lea r8, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 8
cmovae r8, qword [rbp + 0xb8]
mov dword [rsp + 0x40], 0xd79cd782
mov dword [rsp + 0x44], 0xd781d787
mov word [rsp + 0x48], r12w
mov byte [rsp + 0x4a], 1
mov rcx, r12
nop word [rax + rax]
movzx eax, cx
sub ax, r15w
xor word [rsp + rcx*2 + 0x40], ax
inc rcx
cmp rcx, 4
jb 0x14005bd30
mov byte [rsp + 0x4a], 0
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea rdx, [rsp + 0x40]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r15, rax
test rax, rax
jne 0x14005bdf9
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movdqa xmm0, xmmword [0x1400ebfd0]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0xbafbaeaa
mov dword [rbp - 0x3c], 0x85b3b7bc
mov word [rbp - 0x38], 0x85
mov byte [rbp - 0x36], 1
mov rdx, r12
nop word [rax + rax]
lea eax, [rdx - 0x37]
xor byte [rbp + rdx - 0x50], al
inc rdx
cmp rdx, 0x19
jb 0x14005bdb0
mov byte [rbp - 0x36], 0
lea rdx, [rbp - 0x50]
mov rcx, rbx
call fcn.140064410
lea rdx, [0x1400645e0]
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor bl, bl
jmp 0x14005c536
mov dword [rsp + 0x60], 0xd7bcd791
mov dword [rsp + 0x64], 0xd7a1d7ba
mov dword [rsp + 0x68], 0xd7b9d7b3
mov dword [rsp + 0x6c], 0xd7f4d7ac
mov dword [rsp + 0x70], 0xd7a2d78e
mov dword [rsp + 0x74], 0xd7b8d7ac
mov dword [rsp + 0x78], 0xd7ffd7e4
mov dword [rsp + 0x7c], 0xd791d781
mov dword [rbp - 0x80], 0xd78fd792
mov dword [rbp - 0x7c], 0xd786d78d
mov dword [rbp - 0x78], 0xd793d787
mov dword [rbp - 0x74], 0xd786d781
mov dword [rbp - 0x70], 0xd7c4d784
mov dword [rbp - 0x6c], 0xd79ed786
mov dword [rbp - 0x68], 0xd781d781
mov dword [rbp - 0x64], 0xd7fbd7fd
mov word [rbp - 0x60], r12w
mov byte [rbp - 0x5e], 1
mov rcx, r12
mov edx, 0x282e
movzx eax, cx
sub ax, dx
xor word [rsp + rcx*2 + 0x60], ax
inc rcx
cmp rcx, 0x20
jb 0x14005be82
mov byte [rbp - 0x5e], 0
mov r9d, 0x20000000
mov r8d, 0xffffffff
lea rdx, [rsp + 0x60]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov rdx, qword [rsi + 0x10]
mov qword [rbp + 0x38], rdx
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdx
cmp rax, 8
jb 0x14005c6b5
cmp qword [rsi + 0x18], 0x10
jb 0x14005bee4
mov rsi, qword [rsi]
mov qword [rbp + 0x40], rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], r12
lea r12, [rdx + 8]
mov edi, 0xf
lea rsi, [rbp + 0x18]
cmp r12, rdi
jbe 0x14005bf8d
mov rdi, r12
or rdi, 0xf
cmp rdi, rcx
jbe 0x14005bf1a
mov rdi, rcx
jmp 0x14005bf26
mov eax, 0x16
cmp rdi, rax
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x14005bf74
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14005c6af
mov rcx, rax
call fcn.1400668a0
test rax, rax
je 0x14005bf6d
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rdx, qword [rbp + 0x38]
jmp 0x14005bf89
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14005bf87
call fcn.1400668a0
mov rsi, rax
mov rdx, qword [rbp + 0x38]
jmp 0x14005bf89
xor esi, esi
mov qword [rbp + 0x18], rsi
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], rdi
mov rax, qword [str._key_:_]
mov qword [rsi], rax
lea rcx, [rsi + 8]
mov r8, rdx
mov rdx, qword [rbp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r12], 0
mov r8d, 0xa
lea rdx, str.___hwid_:_
lea rcx, [rbp + 0x18]
call fcn.140002650
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor r12d, r12d
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0x10
cmovae rdx, qword [rbp + 0xf8]
mov r8, qword [rbp + 0x108]
lea rcx, [rsp + 0x60]
call fcn.140002650
xorps xmm0, xmm0
movups xmmword [rbp + 0x48], xmm0
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea r8d, [r12 + 2]
lea rdx, [0x1400eb380]
lea rcx, [rbp + 0x48]
call fcn.140002650
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x14005c0e3
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c0de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c0de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668e4
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14005c133
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c12e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c12e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668e4
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x14005c184
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c17f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c17f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668e4
mov qword [rbp + 0x28], r12
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
lea r9, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0x10
cmovae r9, qword [rbp + 0x98]
mov qword [rsp + 0x30], r12
mov eax, dword [rbp + 0xa8]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x14005c4bb
xor edx, edx
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x14005c4bb
nop word [rax + rax]
mov dword [rbp + 0x70], r12d
lea rdx, [rbp + 0x70]
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
je 0x14005c314
mov ecx, dword [rbp + 0x70]
inc ecx
call fcn.1400670bc
mov rsi, rax
mov r8d, dword [rbp + 0x70]
inc r8d
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea r9, [rbp + 0x74]
mov r8d, dword [rbp + 0x70]
mov rdx, rsi
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
jne 0x14005c2a2
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movdqa xmm0, xmmword [0x1400ec090]
movdqu xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0x8e8881b9
mov dword [rbp - 0x3c], 0x1008086
mov rax, r12
nop dword [rax]
nop dword [rax + rax]
lea edx, [rax - 0x31]
xor byte [rbp + rax - 0x50], dl
inc rax
cmp rax, 0x16
jb 0x14005c270
mov byte [rbp - 0x39], 0
lea rdx, [rbp - 0x50]
mov rcx, rdi
call fcn.140064410
lea rdx, [0x1400645e0]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14005c301
mov edi, dword [rbp + 0x74]
mov rax, r14
sub rax, rbx
cmp rdi, rax
ja 0x14005c2df
lea rax, [rbx + rdi]
mov qword [rbp + 0x88], rax
lea rax, [rbp + 0x78]
cmp r14, 0x10
cmovae rax, qword [rbp + 0x78]
add rbx, rax
mov r8d, edi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x14005c2f3
mov qword [rsp + 0x20], rdi
mov r9, rsi
mov rdx, rdi
lea rcx, [rbp + 0x78]
call fcn.140002c10
mov rbx, qword [rbp + 0x88]
mov r14, qword [rbp + 0x90]
mov rcx, rsi
call fcn.1400668e4
cmp dword [rbp + 0x70], 0
jbe 0x14005c370
jmp 0x14005c1f0
mov rdi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
movdqa xmm0, xmmword [0x1400ebeb0]
movdqu xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x1400ebed0]
movdqu xmmword [rbp - 0x40], xmm1
mov word [rbp - 0x30], 0x100
mov rdx, r12
nop
lea eax, [rdx - 0x2e]
xor byte [rbp + rdx - 0x50], al
inc rdx
cmp rdx, 0x20
jb 0x14005c340
mov byte [rbp - 0x2f], 0
lea rdx, [rbp - 0x50]
mov rcx, rdi
call fcn.140064410
lea rdx, [0x1400645e0]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rsp + 0x40], 0xb6a1a0f0
mov dword [rsp + 0x44], 0xaaabb2b5
mov dword [rsp + 0x48], 0xafa8e1f8
mov dword [rsp + 0x4c], 0x100baab
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x2e]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xe
jb 0x14005c3a0
mov byte [rsp + 0x4f], 0
lea r8, [rsp + 0x4e]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.140055ed0
lea rsi, [rbp - 0x50]
mov rax, qword [rbp - 0x38]
cmp rax, 0x10
setae byte [rsp + 0x58]
mov r12, qword [rbp - 0x50]
cmovae rsi, r12
lea r15, [rbp + 0x78]
cmp r14, 0x10
cmovae r15, qword [rbp + 0x78]
mov rdi, qword [rbp - 0x40]
cmp rdi, rbx
ja 0x14005c463
test rdi, rdi
jne 0x14005c400
xor ebx, ebx
jmp 0x14005c46a
mov r13, r15
sub r13, rdi
add r13, rbx
movsx edx, byte [rsi]
lea r8, [r13 + 1]
sub r8, r15
mov rcx, r15
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x14005c45f
nop dword [rax]
nop word [rax + rax]
mov r8, rdi
mov rdx, rsi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14005c49e
inc rbx
lea r8, [r13 + 1]
sub r8, rbx
movsx edx, byte [rsi]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x14005c430
mov rax, qword [rbp - 0x38]
mov rbx, 0xffffffffffffffff
cmp byte [rsp + 0x58], 0
je 0x14005c4af
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x14005c4a7
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c4a7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rbx, r15
mov rax, qword [rbp - 0x38]
jmp 0x14005c46a
mov rcx, r12
call fcn.1400668e4
cmp rbx, 0xffffffffffffffff
setne bl
xor r12d, r12d
jmp 0x14005c4d9
mov rcx, r15
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, r13
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
xor bl, bl
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x14005c51d
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c518
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c518
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668e4
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp + 0xd0]
cmp rdx, 8
jb 0x14005c57f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c57a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c57a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668e4
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], 7
mov word [rbp + 0xb8], r12w
mov rdx, qword [rbp + 0xf0]
cmp rdx, 8
jb 0x14005c5e2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c5dd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c5dd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668e4
mov qword [rbp + 0xe8], r12
mov qword [rbp + 0xf0], 7
mov word [rbp + 0xd8], r12w
cmp r14, 0x10
jb 0x14005c638
lea rdx, [r14 + 1]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c632
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c632
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668e4
nop
mov rdx, qword [rbp + 0x110]
cmp rdx, 0x10
jb 0x14005c67c
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005c677
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005c677
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668e4
movzx eax, bl
mov rcx, qword [rbp + 0x118]
xor rcx, rsp
call fcn.140066880
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001570
nop
call fcn.140001610
int3