Function at 0x14000d060
Capabilities:
Check http status code
Check if file exists
Create new key via cryptacquirecontext
Delete file
Hash data via wincrypt
Hash data with md5
Initialize hashing via wincrypt
Initialize winhttp library
Prepare http request
Read http header
Receive http response
Write file on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1700]
mov eax, 0x1800
call fcn.1400a9150
sub rsp, rax
mov qword [rbp + 0x370], 0xfffffffffffffffe
mov qword [rsp + 0x1850], rbx
movaps xmmword [rsp + 0x17f0], xmm6
movaps xmmword [rsp + 0x17e0], xmm7
mov rax, qword [0x1400f8010]
xor rax, rsp
mov qword [rbp + 0x16d0], rax
mov r12, rdx
mov qword [rbp - 0x78], rdx
mov qword [rbp + 0x3f8], rcx
xor ebx, ebx
mov dword [rsp + 0x70], ebx
lea rdx, str.Download
call fcn.14000f4e0
mov r15d, ebx
mov dword [rbp + 0x4b8], ebx
mov eax, 4
mov dword [rbp + 0x518], eax
mov dword [rbp + 0x4b4], ebx
mov dword [rbp + 0x51c], eax
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x38], rbx
mov qword [rsp + 0x78], rbx
mov qword [rbp + 0x4a0], rbx
mov qword [rbp + 0x4a8], 7
mov word [rbp + 0x490], bx
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x550], xmm0
mov word [rbp + 0x540], bx
movdqu xmmword [rbp + 0x530], xmm0
mov word [rbp + 0x520], bx
lea rax, str.Absolute
lea rdx, str.Prepare
cmp byte [r12 + 0x60], bl
cmovne rdx, rax
mov qword [rbp + 0x4f8], rbx
mov qword [rbp + 0x500], 7
mov word [rbp + 0x4e8], bx
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000d180
lea rcx, [rbp + 0x4e8]
call fcn.1400039c0
nop
xor edx, edx
lea r8d, [rdx + 0x68]
lea rcx, [rbp + 0x420]
call fcn.140080170
xor edx, edx
mov r8d, 0x1000
lea rcx, [rbp + 0x6d0]
call fcn.140080170
mov r13d, ebx
mov dword [rbp + 0x514], 0x20
mov dword [rbp - 0x70], 3
mov r12, 0xffffffffffffffff
mov qword [rbp + 0x4e0], rbx
mov qword [rbp + 0x508], rbx
xor eax, eax
mov qword [rbp + 0x4c0], rax
mov qword [rbp + 0x4c8], rax
mov qword [rbp + 0x4d0], rax
mov qword [rbp + 0x4d8], rax
xor edx, edx
mov r8d, 0xa0
lea rcx, [rbp + 0x630]
call fcn.140080170
xor edx, edx
mov r8d, 0xa0
lea rcx, [rbp + 0x590]
call fcn.140080170
lea rcx, [rbp + 0x4c0]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
lea rcx, [rbp + 0x4d0]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
movzx eax, byte [rbp + 0x4cf]
movzx ecx, byte [rbp + 0x4ce]
movzx edx, byte [rbp + 0x4cd]
movzx r8d, byte [rbp + 0x4cc]
movzx r10d, byte [rbp + 0x4cb]
movzx r11d, byte [rbp + 0x4ca]
movzx ebx, byte [rbp + 0x4c9]
movzx edi, byte [rbp + 0x4c8]
movzx esi, word [rbp + 0x4c6]
movzx r9d, word [rbp + 0x4c4]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x48], r8d
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
mov r8d, dword [rbp + 0x4c0]
lea rdx, str._08lX__04hX__04hX__02hhX_02hhX__02hhX_02hhX_02hhX_02hhX_02hhX_02hhX
lea rcx, [rbp + 0x630]
call fcn.1400180a0
movzx eax, byte [rbp + 0x4df]
movzx ecx, byte [rbp + 0x4de]
movzx r8d, byte [rbp + 0x4dd]
movzx r10d, byte [rbp + 0x4dc]
movzx r11d, byte [rbp + 0x4db]
movzx ebx, byte [rbp + 0x4da]
movzx edi, byte [rbp + 0x4d9]
movzx esi, byte [rbp + 0x4d8]
movzx r14d, word [rbp + 0x4d6]
movzx r9d, word [rbp + 0x4d4]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0x50], r8d
mov dword [rsp + 0x48], r10d
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r14d
mov r8d, dword [rbp + 0x4d0]
lea rdx, str._08lX__04hX__04hX__02hhX_02hhX__02hhX_02hhX_02hhX_02hhX_02hhX_02hhX
lea rcx, [rbp + 0x590]
call fcn.1400180a0
mov dword [rbp + 0x420], WSASetLastError
mov dword [rbp + 0x430], 0xffffffff
mov dword [rbp + 0x440], 0xffffffff
mov dword [rbp + 0x470], 0xffffffff
mov dword [rbp + 0x480], 0xffffffff
mov rsi, qword [rbp - 0x78]
cmp byte [rsi + 0x61], r13b
jne 0x14000d78a
cmp byte [rsi + 0x60], r13b
je 0x14000d441
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x130], xmm0
xor r14d, r14d
mov word [rbp + 0x120], r14w
lea r8d, [r12 + 2]
lea rdx, [0x1400ca38c]
lea rcx, [rbp + 0x120]
call fcn.1400039c0
nop
mov dword [rsp + 0x70], 1
lea rax, [rbp + 0x590]
mov r8, r12
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14000d3f0
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0x120]
call fcn.140003b30
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1f0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rbx, [rbp + 0x1e0]
mov eax, 0x23
jmp 0x14000d45c
lea rdx, [rsi + 0x20]
lea rcx, [rbp + 0x2a0]
call fcn.140014ea0
mov rbx, rax
mov eax, 4
xor r14d, r14d
mov edi, eax
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
or eax, 0x40
mov dword [rsp + 0x70], eax
mov rdx, qword [rsi + 0x10]
inc rdx
lea rcx, [rbp - 0x60]
call fcn.140004570
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14000d494
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rbp - 0x60]
call fcn.140003b30
mov r8d, 1
lea rdx, [0x1400ca38c]
lea rcx, [rbp - 0x60]
call fcn.140003b30
lea rdx, [rbp + 0x4e8]
cmp qword [rbp + 0x500], 8
cmovae rdx, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f8]
lea rcx, [rbp - 0x60]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x150], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x140], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x150], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov eax, edi
or eax, 0xc0
mov dword [rsp + 0x70], eax
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x14000d526
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
lea rcx, [rbp + 0x140]
call fcn.140003b30
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x378], xmm7
movups xmm6, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
or edi, 0x1c0
lea rcx, [rbp + 0x490]
call fcn.140003450
movups xmmword [rbp + 0x490], xmm7
movups xmmword [rbp + 0x4a0], xmm6
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x388], xmm0
mov word [rbp + 0x378], r14w
mov rdx, qword [rbp + 0x158]
mov ebx, 0x1000
cmp rdx, 8
jb 0x14000d5d3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, rbx
jb 0x14000d5ce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f448
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x150], xmm0
mov word [rbp + 0x140], r14w
and edi, 0xffffffbf
mov dword [rbp - 0x80], edi
mov dword [rsp + 0x70], edi
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000d631
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, rbx
jb 0x14000d62c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f44e
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], r14w
test dil, 4
je 0x14000d6ad
and edi, 0xfffffffb
mov dword [rbp - 0x80], edi
mov dword [rsp + 0x70], edi
mov rdx, qword [rbp + 0x2b8]
cmp rdx, 8
jb 0x14000d695
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2a0]
mov rax, rcx
cmp rdx, rbx
jb 0x14000d690
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f454
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x2b0], xmm0
mov word [rbp + 0x2a0], r14w
test dil, 2
je 0x14000d717
and edi, 0xfffffffd
mov dword [rbp - 0x80], edi
mov dword [rsp + 0x70], edi
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 8
jb 0x14000d6ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, rbx
jb 0x14000d6fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f45a
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x1f0], xmm0
mov word [rbp + 0x1e0], r14w
test dil, 1
je 0x14000dac0
and edi, 0xfffffffe
mov dword [rbp - 0x80], edi
mov dword [rsp + 0x70], edi
mov rdx, qword [rbp + 0x138]
cmp rdx, 8
jb 0x14000d76d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, rbx
jb 0x14000d768
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f460
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x130], xmm0
mov word [rbp + 0x120], r14w
jmp 0x14000dac0
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp - 0x18], xmm0
xor r14d, r14d
mov word [rbp - 0x28], r14w
mov dword [rsp + 0x70], 0x200
mov rdx, qword [rsi + 0x10]
inc rdx
lea rcx, [rbp - 0x28]
call fcn.140004570
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x14000d7c4
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rbp - 0x28]
call fcn.140003b30
mov r8d, 1
lea rdx, [0x1400ca38c]
lea rcx, [rbp - 0x28]
call fcn.140003b30
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Uncompression
lea rcx, [rbp - 0x28]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xd0], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xc0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xd0], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov dword [rsp + 0x70], 0x600
mov r8d, 1
lea rdx, [0x1400ca38c]
lea rcx, [rbp + 0xc0]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x110], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov dword [rsp + 0x70], 0xe00
lea rax, [rbp + 0x630]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x14000d894
lea rdx, [rbp + 0x630]
lea rcx, [rbp + 0x100]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x170], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x160], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x170], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
mov dword [rsp + 0x70], 0x1e00
mov r8d, 4
lea rdx, str..zip
lea rcx, [rbp + 0x160]
call fcn.140003b30
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x398], xmm7
movups xmm6, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 7
mov word [rax], r14w
lea rcx, [rbp + 0x490]
call fcn.140003450
movups xmmword [rbp + 0x490], xmm7
movups xmmword [rbp + 0x4a0], xmm6
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x3a8], xmm0
mov word [rbp + 0x398], r14w
mov rdx, qword [rbp + 0x178]
mov ebx, 0x1000
cmp rdx, 8
jb 0x14000d99a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, rbx
jb 0x14000d995
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f466
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x170], xmm0
mov word [rbp + 0x160], r14w
mov rdx, qword [rbp + 0x118]
cmp rdx, 8
jb 0x14000d9f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, rbx
jb 0x14000d9ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f46c
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x100], r14w
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x14000da4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, rbx
jb 0x14000da49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f472
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0xd0], xmm0
mov word [rbp + 0xc0], r14w
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14000daa2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, rbx
jb 0x14000da9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f478
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r14w
mov edi, 0x3c00
mov dword [rbp - 0x80], edi
mov dword [rsp + 0x70], edi
lea r9, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae r9, qword [rbp + 0x490]
lea rbx, [rsi + 0x40]
mov r8, rbx
cmp qword [rbx + 0x18], 8
jb 0x14000dae8
mov r8, qword [rbx]
lea rdx, str.Downloading__s_to__s
mov r14, qword [rbp + 0x3f8]
mov rcx, r14
call fcn.14000f4e0
cmp qword [rbx + 0x18], 8
jb 0x14000db08
mov rbx, qword [rbx]
lea r9, [rbp + 0x420]
xor r8d, r8d
mov edx, dword [rsi + 0x50]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
jne 0x14000db4d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov rbx, qword [rsp + 0x78]
mov esi, 0x1000
mov r15d, eax
test eax, eax
jle 0x14000dff4
movzx r15d, ax
or r15d, 0x80070000
jmp 0x14000dff4
mov r8d, dword [rbp + 0x440]
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x210], xmm0
xor ebx, ebx
mov word [rbp + 0x200], bx
mov rdx, qword [rbp + 0x438]
lea rcx, [rbp + 0x200]
call fcn.1400039c0
lea rcx, [rbp + 0x540]
call fcn.140003450
movups xmm0, xmmword [rbp + 0x200]
movups xmmword [rbp + 0x540], xmm0
movups xmm1, xmmword [rbp + 0x210]
movups xmmword [rbp + 0x550], xmm1
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x210], xmm0
mov word [rbp + 0x200], bx
mov r8d, dword [rbp + 0x470]
movdqu xmmword [rbp + 0x230], xmm0
mov word [rbp + 0x220], bx
mov rdx, qword [rbp + 0x468]
lea rcx, [rbp + 0x220]
call fcn.1400039c0
lea rcx, [rbp + 0x520]
call fcn.140003450
movups xmm0, xmmword [rbp + 0x220]
movups xmmword [rbp + 0x520], xmm0
movups xmm1, xmmword [rbp + 0x230]
movups xmmword [rbp + 0x530], xmm1
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x230], xmm0
mov word [rbp + 0x220], bx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, str.LUP_1.0
call qword [sym.imp.WINHTTP.dll_WinHttpOpen]
mov rbx, rax
mov qword [rbp - 0x30], rax
test rax, rax
jne 0x14000dc65
lea rcx, [r14 + 0x10]
lea r8d, [rax + 0x14]
lea rdx, str.Download_WinHttpOpen
call fcn.1400039c0
jmp 0x14000db22
mov dword [rsp + 0x20], 0x2bf20
mov edx, 0xea60
mov r9d, edx
mov r8d, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
test eax, eax
jne 0x14000dc9e
lea rcx, [r14 + 0x10]
lea r8d, [rax + 0x1b]
lea rdx, str.Download_WinHttpSetTimeouts
call fcn.1400039c0
jmp 0x14000db22
lea rdx, [rbp + 0x540]
cmp qword [rbp + 0x558], 8
cmovae rdx, qword [rbp + 0x540]
xor r9d, r9d
movzx r8d, word [rbp + 0x444]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov rcx, rax
mov qword [rbp - 0x38], rax
test rax, rax
jne 0x14000dcee
lea rcx, [r14 + 0x10]
lea r8d, [rax + 0x17]
lea rdx, str.Download_WinHttpConnect
call fcn.1400039c0
jmp 0x14000db22
lea r8, [rbp + 0x520]
cmp qword [rbp + 0x538], 8
cmovae r8, qword [rbp + 0x520]
mov eax, 0x800000
cmp dword [rbp + 0x434], 1
mov edx, 0
cmove eax, edx
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
lea r9, str.HTTP_1.1
lea rdx, [0x1400caee0]
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x14000dd67
lea rcx, [r14 + 0x10]
lea r8d, [rax + 0x1b]
lea rdx, str.Download_WinHttpOpenRequest
call fcn.1400039c0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000db2d
xor eax, eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], eax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x14000ddaa
lea rcx, [r14 + 0x10]
lea r8d, [rax + 0x1b]
lea rdx, str.Download_WinHttpSendRequest
call fcn.1400039c0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000db2d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x14000ddd8
lea rcx, [r14 + 0x10]
lea r8d, [rax + 0x1f]
lea rdx, str.Download_WinHttpReceiveResponse
call fcn.1400039c0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000db2d
mov qword [rsp + 0x28], 0
lea rax, [rbp + 0x518]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4b8]
xor r8d, r8d
mov edx, 0x20000013
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14000de28
lea rcx, [r14 + 0x10]
lea r8d, [rax + 0x2d]
lea rdx, str.Download_WinHttpQueryHeaders_with_STATUS_CODE
call fcn.1400039c0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000db2d
cmp dword [rbp + 0x4b8], 0xc8
je 0x14000de5d
lea rcx, [r14 + 0x10]
mov r8d, 0x18
lea rdx, str.Download_CheckStatusCode
call fcn.1400039c0
mov r15d, dword [rbp + 0x4b8]
or r15d, 0xa0818000
jmp 0x14000dfef
mov qword [rsp + 0x28], 0
lea rax, [rbp + 0x51c]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x4b4]
xor r8d, r8d
mov edx, 0x20000005
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpQueryHeaders]
test eax, eax
jne 0x14000dead
lea rcx, [r14 + 0x10]
lea r8d, [rax + 0x30]
lea rdx, str.Download_WinHttpQueryHeaders_with_CONTENT_LENGTH
call fcn.1400039c0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000db2d
cmp dword [rbp + 0x4b4], 0
jne 0x14000ded7
lea rcx, [r14 + 0x10]
mov r8d, 0x1b
lea rdx, str.Download_CheckContentLength
call fcn.1400039c0
mov r15d, 0xa0810005
jmp 0x14000dfef
cmp byte [rsi + 0x61], 0
jne 0x14000e018
lea rdx, [0x1400ca38c]
lea rcx, [rbp + 0x490]
call fcn.140014cc0
mov r8, rax
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0xb0], xmm0
xor ebx, ebx
mov word [rbp + 0xa0], bx
mov qword [rbp + 0x560], rax
mov rax, qword [rbp + 0x4a0]
mov qword [rbp + 0x2e0], rax
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae rdx, qword [rbp + 0x490]
lea rcx, [rbp + 0xa0]
call fcn.1400039c0
bts edi, 0xe
mov dword [rbp - 0x80], edi
mov dword [rsp + 0x70], edi
lea rdx, [rbp + 0xa0]
call fcn.14000f7f0
mov r15d, eax
mov rdx, qword [rbp + 0xb8]
cmp rdx, 8
jb 0x14000dfb1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
mov r8d, 0x1000
cmp rdx, r8
jb 0x14000dfac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f47e
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0xb0], xmm0
mov word [rbp + 0xa0], bx
lea rbx, [r14 + 0x10]
mov qword [rbp - 0x68], rbx
mov r8d, 0x24
lea rdx, str.Download_CreateDirectoryRecursively1
mov rcx, rbx
call fcn.1400039c0
test r15d, r15d
jns 0x14000e020
mov rbx, qword [rsp + 0x78]
mov esi, 0x1000
mov rcx, qword [rbp + 0x508]
test rcx, rcx
je 0x14000f20b
call qword [sym.imp.api_ms_win_security_cryptoapi_l1_1_0.dll_CryptDestroyHash]
xor edi, edi
mov qword [rbp + 0x508], rdi
jmp 0x14000f20d
lea rbx, [r14 + 0x10]
mov qword [rbp - 0x68], rbx
mov dword [rbp - 0x40], edi
movsd xmm6, qword [0x1400cf7b0]
xor ebx, ebx
nop dword [rax]
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae rcx, qword [rbp + 0x490]
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14000f1f0
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
mov dword [rsp + 0x20], 0xf0000000
mov r9d, 0x18
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x4e0]
call qword [sym.imp.api_ms_win_security_cryptoapi_l1_1_0.dll_CryptAcquireContextW]
test eax, eax
je 0x14000f1d5
lea rax, [rbp + 0x508]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x8003
mov rcx, qword [rbp + 0x4e0]
call qword [sym.imp.api_ms_win_security_cryptoapi_l1_1_0.dll_CryptCreateHash]
test eax, eax
je 0x14000f1ba
mov eax, dword [rbp + 0x4b4]
cmp r13d, eax
jae 0x14000e1f1
nop dword [rax]
nop word [rax + rax]
mov dword [rbp + 0x4b0], ebx
sub eax, r13d
mov esi, 0x1000
cmp eax, esi
cmova eax, esi
lea r9, [rbp + 0x4b0]
mov r8d, eax
lea rdx, [rbp + 0x6d0]
mov rbx, qword [rsp + 0x78]
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x14000e369
mov esi, dword [rbp + 0x4b0]
add r13d, esi
mov eax, r13d
xorps xmm1, xmm1
cvtsi2sd xmm1, rax
mov eax, dword [rbp + 0x4b4]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si rax, xmm1
mov qword [r14 + 8], rax
xor ecx, ecx
mov ebx, ecx
test esi, esi
je 0x14000e1b7
mov edi, esi
nop word [rax + rax]
mov dword [rbp + 0x4b0], ecx
mov eax, ebx
lea rdx, [rbp + 0x6d0]
add rdx, rax
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x4b0]
mov r8d, edi
mov rcx, r12
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_WriteFile]
test eax, eax
je 0x14000e333
sub edi, dword [rbp + 0x4b0]
add ebx, dword [rbp + 0x4b0]
cmp ebx, esi
mov ecx, 0
jb 0x14000e170
xor r9d, r9d
mov r8d, esi
lea rdx, [rbp + 0x6d0]
mov rcx, qword [rbp + 0x508]
call qword [sym.imp.api_ms_win_security_cryptoapi_l1_1_0.dll_CryptHashData]
test eax, eax
je 0x14000e34e
mov eax, dword [rbp + 0x4b4]
cmp r13d, eax
mov ebx, 0
jb 0x14000e0f0
mov rsi, qword [rbp - 0x78]
mov dword [rsp + 0x20], ebx
lea r9, [rbp + 0x514]
lea r8, [rbp + 0x568]
mov edx, 2
mov rcx, qword [rbp + 0x508]
call qword [sym.imp.api_ms_win_security_cryptoapi_l1_1_0.dll_CryptGetHashParam]
test eax, eax
je 0x14000f19f
xor edx, edx
mov rcx, qword [rbp + 0x4e0]
call qword [sym.imp.api_ms_win_security_cryptoapi_l1_1_0.dll_CryptReleaseContext]
mov qword [rbp + 0x4e0], rbx
mov rcx, r12
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov r12, 0xffffffffffffffff
mov r8d, dword [rbp + 0x514]
lea rdx, [rsi + 0x62]
lea rcx, [rbp + 0x568]
call fcn.140080820
test eax, eax
je 0x14000e275
mov eax, dword [rbp - 0x70]
add eax, 0xffffffff
mov dword [rbp - 0x70], eax
je 0x14000e38a
test eax, eax
jne 0x14000e030
mov qword [r14], 2
mov qword [r14 + 8], rbx
cmp byte [rsi + 0x61], 1
jne 0x14000e9fa
lea r8, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae r8, qword [rbp + 0x490]
lea rdx, str.Downloaded_zip_file__s
mov rcx, r14
call fcn.14000f4e0
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
mov qword [rbp + 0x400], rbx
mov qword [rbp + 0x418], rbx
mov qword [rbp + 0x410], rbx
mov qword [rbp + 0x3f8], rbx
mov qword [rbp + 0x408], rbx
mov dword [rbp + 0x510], ebx
mov rcx, qword [rbp + 0x4a0]
inc rcx
mov eax, 2
mul rcx
mov r13, r12
cmovo rax, r12
mov rcx, rax
call fcn.140087a3c
mov rdi, rax
cmp byte [rsi + 0x60], 0
je 0x14000e3ab
lea rax, [rbp + 0x590]
mov rdx, r12
nop dword [rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x14000e320
add rdx, 3
jmp 0x14000e3b3
lea rcx, [r14 + 0x10]
mov r8d, send
lea rdx, str.Download_WriteFile
call fcn.1400039c0
jmp 0x14000db22
lea rcx, [r14 + 0x10]
mov r8d, 0x16
lea rdx, str.Download_CryptHashData
call fcn.1400039c0
jmp 0x14000db22
lea rcx, [r14 + 0x10]
mov r8d, 0x18
lea rdx, str.Download_WinHttpReadData
call fcn.1400039c0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
jmp 0x14000db32
lea rcx, [r14 + 0x10]
mov r8d, 0x18
lea rdx, str.Download_CompareChecksum
call fcn.1400039c0
mov r15d, 0xa0810006
jmp 0x14000dfea
mov rdx, qword [rsi + 0x30]
add rdx, 2
add rdx, qword [rbp + 0x4f8]
add rdx, qword [rsi + 0x10]
mov eax, 2
mul rdx
cmovo rax, r13
mov rcx, rax
call fcn.140087a3c
mov rbx, rax
test rdi, rdi
je 0x14000e954
test rax, rax
je 0x14000e954
lea r8, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae r8, qword [rbp + 0x490]
lea rdx, [0x1400cb334]
mov rcx, rdi
call qword [sym.imp.USER32.dll_wsprintfW]
cmp byte [rsi + 0x60], 0
je 0x14000e4be
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x270], xmm0
xor r15d, r15d
mov word [rbp + 0x260], r15w
lea r8d, [r15 + 1]
lea rdx, [0x1400ca38c]
lea rcx, [rbp + 0x260]
call fcn.1400039c0
nop
mov esi, dword [rbp - 0x80]
or esi, 8
mov dword [rsp + 0x70], esi
lea rax, [rbp + 0x590]
mov r8, r13
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14000e460
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0x260]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 8], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
mov esi, dword [rbp - 0x40]
or esi, 0x8018
lea rax, [rbp - 8]
cmp qword [rbp + 0x10], 8
cmovae rax, qword [rbp - 8]
jmp 0x14000e4d2
lea rax, [rsi + 0x20]
cmp qword [rax + 0x18], 8
jb 0x14000e4cc
mov rax, qword [rax]
mov esi, dword [rbp - 0x80]
xor r15d, r15d
lea r9, [rbp + 0x4e8]
cmp qword [rbp + 0x500], 8
cmovae r9, qword [rbp + 0x4e8]
mov r12, qword [rbp - 0x78]
mov r8, r12
cmp qword [r12 + 0x18], 8
jb 0x14000e4fc
mov r8, qword [r12]
mov qword [rsp + 0x20], rax
lea rdx, str._s_s_s
mov rcx, rbx
call qword [sym.imp.USER32.dll_wsprintfW]
test sil, 0x10
je 0x14000e56e
and esi, 0xffffffef
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x14000e55c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
mov r8d, 0x1000
cmp rdx, r8
jb 0x14000e557
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f484
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], r15w
test sil, 8
mov esi, 0x1000
je 0x14000e5bb
mov rdx, qword [rbp + 0x278]
cmp rdx, 8
jb 0x14000e5bb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, rsi
jb 0x14000e5b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f48a
call fcn.14003dc60
mov r9, rbx
mov r8, rdi
lea rdx, str.Unzipping_file_from__s_to__s
mov rcx, r14
call fcn.14000f4e0
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], r15w
mov r8, r13
nop dword [rax + rax]
inc r8
cmp word [rbx + r8*2], 0
jne 0x14000e5f0
mov rdx, rbx
lea rcx, [rbp + 0x280]
call fcn.1400039c0
nop
lea rdx, [rbp + 0x280]
call fcn.14000f7f0
mov r15d, eax
mov rdx, qword [rbp + 0x298]
cmp rdx, 8
jb 0x14000e65c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, rsi
jb 0x14000e657
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f490
call fcn.14003dc60
test r15d, r15d
jns 0x14000e680
lea rcx, [r14 + 0x10]
mov r8d, 0x24
lea rdx, str.Download_CreateDirectoryRecursively2
call fcn.1400039c0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
lea rax, [rbp + 0x400]
mov qword [rsp + 0x20], rax
lea r9, [0x1400b1c80]
xor edx, edx
lea r8d, [rdx + 1]
lea rcx, [0x1400b1c90]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
mov r15d, eax
test eax, eax
jns 0x14000e6cc
lea rcx, [r14 + 0x10]
mov r8d, 0x19
lea rdx, str.Download_CoCreateInstance
call fcn.1400039c0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
mov esi, 8
mov word [rbp - 0x60], si
mov qword [rbp - 0x58], rdi
movups xmm0, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x20], xmm0
movsd xmm1, qword [rbp - 0x50]
movsd qword [rbp + 0x30], xmm1
mov rcx, qword [rbp + 0x400]
mov rax, qword [rcx]
lea r8, [rbp + 0x418]
lea rdx, [rbp + 0x20]
call qword [rax + 0x48]
mov r15d, eax
test eax, eax
jns 0x14000e727
lea rcx, [r14 + 0x10]
lea r8d, [rsi + 0x1d]
lea rdx, str.Download_pISD__NameSpace_with_srcPath
call fcn.1400039c0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
cmp qword [rbp + 0x418], 0
jne 0x14000e756
lea rcx, [r14 + 0x10]
mov r8d, 0x25
lea rdx, str.Download_CheckZippedFile_with_srcFile
call fcn.1400039c0
mov r15d, 0xa0810007
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
mov word [rbp - 0x60], si
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x350], xmm0
movsd xmm1, qword [rbp - 0x50]
movsd qword [rbp + 0x360], xmm1
mov rcx, qword [rbp + 0x400]
mov rax, qword [rcx]
lea r8, [rbp + 0x410]
lea rdx, [rbp + 0x350]
call qword [rax + 0x48]
mov r15d, eax
test eax, eax
jns 0x14000e7b7
lea rcx, [r14 + 0x10]
mov r8d, 0x25
lea rdx, str.Download_pISD__NameSpace_with_dstPath
call fcn.1400039c0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
cmp qword [rbp + 0x410], 0
jne 0x14000e7e6
lea rcx, [r14 + 0x10]
mov r8d, 0x25
lea rdx, str.Download_CheckZippedFile_with_dstFile
call fcn.1400039c0
mov r15d, 0xa0810007
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
mov rcx, qword [rbp + 0x418]
mov rax, qword [rcx]
lea rdx, [rbp + 0x408]
call qword [rax + 0x58]
mov r15d, eax
test eax, eax
jns 0x14000e820
lea rcx, [r14 + 0x10]
mov r8d, 0x1b
lea rdx, str.Download_pZippedFile__Items
call fcn.1400039c0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
mov rcx, qword [rbp + 0x408]
mov rax, qword [rcx]
lea rdx, [rbp + 0x510]
call qword [rax + 0x38]
mov r15d, eax
test eax, eax
jns 0x14000e85a
lea rcx, [r14 + 0x10]
mov r8d, 0x20
lea rdx, str.Download_pFilesInside__get_Count
call fcn.1400039c0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
cmp dword [rbp + 0x510], 0
jle 0x14000e939
mov rcx, qword [rbp + 0x408]
mov rax, qword [rcx]
lea r8, [rbp + 0x3f8]
lea rdx, [0x1400b1ca0]
call qword [rax]
mov r15d, eax
test eax, eax
jns 0x14000e8a7
lea rcx, [r14 + 0x10]
mov r8d, 0x25
lea rdx, str.Download_pFilesInside__QueryInterface
call fcn.1400039c0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
mov eax, 9
mov word [rbp + 0x20], ax
mov rax, qword [rbp + 0x3f8]
mov qword [rbp + 0x28], rax
mov eax, 3
mov word [rbp - 0x60], ax
mov dword [rbp - 0x58], 0x614
movups xmm0, xmmword [rbp - 0x60]
movaps xmmword [rbp + 0x310], xmm0
movsd xmm1, qword [rbp - 0x50]
movsd qword [rbp + 0x320], xmm1
movups xmm0, xmmword [rbp + 0x20]
movaps xmmword [rbp + 0x2f0], xmm0
movsd xmm1, qword [rbp + 0x30]
movsd qword [rbp + 0x300], xmm1
mov rcx, qword [rbp + 0x410]
mov rax, qword [rcx]
lea r8, [rbp + 0x310]
lea rdx, [rbp + 0x2f0]
call qword [rax + 0x78]
mov r15d, eax
test eax, eax
jns 0x14000e939
lea rcx, [r14 + 0x10]
mov r8d, 0x1f
lea rdx, str.Download_pDestination__CopyHere
call fcn.1400039c0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
mov r9, rbx
mov r8, rdi
lea rdx, str.Upzipped_file_from__s_to__s
mov rcx, r14
call fcn.14000f4e0
mov rsi, qword [rbp - 0x78]
jmp 0x14000e970
mov r8d, setsockopt
lea rdx, str.Download_CheckMemory
lea rcx, [r14 + 0x10]
call fcn.1400039c0
mov r15d, 0xa0810004
mov rcx, qword [rbp + 0x3f8]
test rcx, rcx
je 0x14000e982
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x408]
test rcx, rcx
je 0x14000e994
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x410]
test rcx, rcx
je 0x14000e9a6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x418]
test rcx, rcx
je 0x14000e9b8
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x400]
test rcx, rcx
je 0x14000e9ca
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test rdi, rdi
je 0x14000e9d7
mov rcx, rdi
call fcn.14008b244
test rbx, rbx
je 0x14000e9e4
mov rcx, rbx
call fcn.14008b244
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
mov r12, r13
test r15d, r15d
js 0x14000dfea
xor ebx, ebx
jmp 0x14000e9fd
mov r13, r12
lea rdi, [r14 + 0x278]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
inc dword [rdi + 0x28]
cmp byte [rsi + 0x60], 0
je 0x14000ed11
cmp byte [rsi + 0x61], 0
jne 0x14000eab0
lea r8, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae r8, qword [rbp + 0x490]
lea rdx, str.Downloaded_file__s
mov rcx, r14
call fcn.14000f4e0
lea r8, [rsi + 0x20]
lea rcx, [r14 + 0x30]
lea rdx, [rbp + 0x330]
call fcn.14001ebb0
mov rcx, qword [rbp + 0x330]
add rcx, 0x30
lea rax, [rbp + 0x490]
cmp rcx, rax
je 0x14000f18b
lea rdx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae rdx, qword [rbp + 0x490]
mov r8, qword [rbp + 0x4a0]
call fcn.1400039c0
dec dword [rdi + 0x28]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov r12, r13
jmp 0x14000dfea
lea r8, [0x1400ca38c]
mov rdx, rsi
lea rcx, [rbp + 0x3b8]
call fcn.1400040b0
nop
lea rdx, [rbp + 0x4e8]
cmp qword [rbp + 0x500], 8
cmovae rdx, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f8]
mov rcx, rax
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x70], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
mov r8d, 1
lea rdx, [0x1400ca38c]
lea rcx, [rbp + 0x60]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x90], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
lea rax, [rbp + 0x590]
mov r8, r13
inc r8
cmp word [rax + r8*2], 0
jne 0x14000eb62
lea rdx, [rbp + 0x590]
lea rcx, [rbp + 0x80]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xf0], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
lea rdx, [rsi + 0x20]
lea r8, [rbp + 0xe0]
mov rcx, r14
call fcn.14000fe60
nop
mov rdx, qword [rbp + 0xf8]
mov esi, 0x1000
cmp rdx, 8
jb 0x14000ec0a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, rsi
jb 0x14000ec05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f496
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0xf0], xmm0
mov word [rbp + 0xe0], bx
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x14000ec63
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, rsi
jb 0x14000ec5e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f49c
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x90], xmm0
mov word [rbp + 0x80], bx
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x14000ecb6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, rsi
jb 0x14000ecb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4a2
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x70], xmm0
mov word [rbp + 0x60], bx
mov rdx, qword [rbp + 0x3d0]
cmp rdx, 8
jb 0x14000f18b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3b8]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f186
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f43c
jmp 0x14000f186
cmp byte [rsi + 0x61], 0
jne 0x14000eea8
lea r8, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae r8, qword [rbp + 0x490]
lea rdx, str.Downloaded_file__s
mov rcx, r14
call fcn.14000f4e0
lea rdx, [r14 + 0x70]
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x250], xmm0
mov word [rbp + 0x240], bx
mov r8, r13
nop
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000ed60
lea rcx, [rbp + 0x240]
call fcn.1400039c0
nop
lea rdx, [rsi + 0x20]
cmp qword [rsi + 0x38], 8
jb 0x14000ed87
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x30]
lea rcx, [rbp + 0x240]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x50], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
lea rcx, [r14 + 0x30]
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x340]
call fcn.14001ea60
mov rcx, qword [rbp + 0x340]
add rcx, 0x30
lea rax, [rbp + 0x490]
cmp rcx, rax
je 0x14000ee0c
lea rdx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae rdx, qword [rbp + 0x490]
mov r8, qword [rbp + 0x4a0]
call fcn.1400039c0
nop
mov rdx, qword [rbp + 0x58]
mov esi, 0x1000
cmp rdx, 8
jb 0x14000ee4d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, rsi
jb 0x14000ee48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4a8
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x50], xmm0
mov word [rbp + 0x40], bx
mov rdx, qword [rbp + 0x258]
cmp rdx, 8
jb 0x14000f18b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x240]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f186
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f442
jmp 0x14000f186
lea r8, [0x1400ca38c]
mov rdx, rsi
lea rcx, [rbp + 0x3d8]
call fcn.1400040b0
nop
lea rdx, [rbp + 0x4e8]
cmp qword [rbp + 0x500], 8
cmovae rdx, qword [rbp + 0x4e8]
mov r8, qword [rbp + 0x4f8]
mov rcx, rax
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1d0], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1d0], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
lea rdx, [rsi + 0x20]
cmp qword [rsi + 0x38], 8
jb 0x14000ef23
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x30]
lea rcx, [rbp + 0x1c0]
call fcn.140003b30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x1b0], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 7
mov word [rax], cx
lea rdx, [r14 + 0x70]
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], cx
mov r8, r13
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000ef82
lea rcx, [rbp + 0x180]
call fcn.1400039c0
nop
lea rdx, [rsi + 0x20]
cmp qword [rsi + 0x38], 8
jb 0x14000efa9
mov rdx, qword [rsi + 0x20]
mov r8, qword [rsi + 0x30]
lea rcx, [rbp + 0x180]
call fcn.140003b30
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2c0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2d0], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
lea r8, [rbp + 0x1a0]
lea rdx, [rbp + 0x2c0]
mov rcx, r14
call fcn.14000fe60
nop
mov rdx, qword [rbp + 0x2d8]
mov esi, 0x1000
cmp rdx, 8
jb 0x14000f03e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2c0]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f038
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4ae
call fcn.14003dc60
nop
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x14000f080
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f07b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4b4
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], bx
mov rdx, qword [rbp + 0x1b8]
cmp rdx, 8
jb 0x14000f0d9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1a0]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f0d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4ba
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x1b0], xmm0
mov word [rbp + 0x1a0], bx
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 8
jb 0x14000f132
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1c0]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f12d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4c0
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1c0], bx
mov rdx, qword [rbp + 0x3f0]
cmp rdx, 8
jb 0x14000f18b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3d8]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f186
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4c6
call fcn.14003dc60
dec dword [rdi + 0x28]
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov r12, r13
jmp 0x14000dfea
mov r8d, 0x1a
lea rdx, str.Download_CryptGetHashParam
mov rcx, qword [rbp - 0x68]
call fcn.1400039c0
jmp 0x14000db22
mov r8d, 0x18
lea rdx, str.Download_CryptCreateHash
mov rcx, qword [rbp - 0x68]
call fcn.1400039c0
jmp 0x14000db22
mov r8d, 0x1d
lea rdx, str.Download_CryptAcquireContextW
mov rcx, qword [rbp - 0x68]
call fcn.1400039c0
jmp 0x14000db22
mov r8d, setsockopt
lea rdx, str.Download_CreateFileW
mov rcx, qword [rbp - 0x68]
call fcn.1400039c0
jmp 0x14000db22
xor edi, edi
mov rcx, qword [rbp + 0x4e0]
test rcx, rcx
je 0x14000f228
xor edx, edx
call qword [sym.imp.api_ms_win_security_cryptoapi_l1_1_0.dll_CryptReleaseContext]
mov qword [rbp + 0x4e0], rdi
cmp r12, 0xffffffffffffffff
je 0x14000f237
mov rcx, r12
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test rbx, rbx
je 0x14000f245
mov rcx, rbx
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x14000f257
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov rax, qword [rbp - 0x30]
test rax, rax
je 0x14000f269
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov r12, qword [rbp - 0x78]
cmp byte [r12 + 0x61], 1
jne 0x14000f2b4
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae rcx, qword [rbp + 0x490]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x14000f2b4
lea rcx, [rbp + 0x490]
cmp qword [rbp + 0x4a8], 8
cmovae rcx, qword [rbp + 0x490]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
nop
mov rdx, qword [rbp + 0x500]
cmp rdx, 8
jb 0x14000f2f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x4e8]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f2f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4cc
call fcn.14003dc60
mov qword [rbp + 0x4f8], rdi
mov qword [rbp + 0x500], 7
mov word [rbp + 0x4e8], di
mov rdx, qword [rbp + 0x538]
cmp rdx, 8
jb 0x14000f351
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x520]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f34c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4d2
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x530], xmm0
mov word [rbp + 0x520], di
mov rdx, qword [rbp + 0x558]
cmp rdx, 8
jb 0x14000f3aa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x540]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f3a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f4d8
call fcn.14003dc60
movdqa xmm0, xmmword [0x1400cf7d0]
movdqu xmmword [rbp + 0x550], xmm0
mov word [rbp + 0x540], di
mov rdx, qword [rbp + 0x4a8]
cmp rdx, 8
jb 0x14000f3ff
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x490]
mov rax, rcx
cmp rdx, rsi
jb 0x14000f3fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f436
call fcn.14003dc60
mov eax, r15d
mov rcx, qword [rbp + 0x16d0]
xor rcx, rsp
call fcn.14003d6b0
lea r11, [rsp + 0x1800]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
int3
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
int3
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
nop
call fcn.1400875c4
int3