Function at 0x140006ab0
Capabilities:
Check if file exists
Create http request
Enumerate files on windows
Get file attributes

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x550]
sub rsp, 0x650
movaps xmmword [rsp + 0x640], xmm6
mov rax, qword [0x14004a100]
xor rax, rsp
mov qword [rbp + 0x530], rax
mov r13, rdx
xor r12d, r12d
lea r8, [0x140042d78]
mov rdx, rcx
lea rcx, [rbp + 0xb8]
call fcn.14000c720
nop
lea rcx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 7
cmova rcx, qword [rbp + 0xb8]
lea rdx, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov rdi, rax
mov qword [rsp + 0x50], rax
cmp rax, 0xffffffffffffffff
jne 0x140006b76
lea rdx, str.Chyba_pri_otevreni_slozky.
lea rcx, [0x14004ba70]
call fcn.14000c2a0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000d980
movzx edx, ax
mov rcx, rbx
call fcn.14000d7d0
mov rcx, rbx
call fcn.14000d670
jmp 0x140007b1a
mov bl, 1
lea rsi, str.anim
lea r14, str.audio
lea r15, str.data
nop dword [rax]
movdqa xmm6, xmmword [0x1400433e0]
cmp word [rbp + 0x10c], 0x2e
je 0x140006d35
lea rcx, [rbp + 0x10c]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x140006d35
test al, 0x10
je 0x140006d35
mov rcx, r12
lea rdx, [rbp + 0x10c]
nop
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [rsi + rcx*2 - 2]
jne 0x140006be9
cmp rcx, 5
jne 0x140006bd0
jmp 0x140006d35
mov rcx, r12
lea rdx, [rbp + 0x10c]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r14 + rcx*2 - 2]
jne 0x140006c1a
cmp rcx, 6
jne 0x140006c00
jmp 0x140006d35
mov rcx, r12
lea rdx, [rbp + 0x10c]
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r15 + rcx*2 - 2]
jne 0x140006c4a
cmp rcx, 5
jne 0x140006c30
jmp 0x140006d35
mov rcx, r12
lea rdx, [rbp + 0x10c]
lea r8, str.models
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x140006c7a
cmp rcx, 7
jne 0x140006c60
jmp 0x140006d35
mov rcx, r12
lea rdx, [rbp + 0x10c]
lea r8, str.movies
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x140006caa
cmp rcx, 7
jne 0x140006c90
jmp 0x140006d35
mov rcx, r12
lea rdx, [rbp + 0x10c]
lea r8, str.ReadMe
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x140006cd7
cmp rcx, 7
jne 0x140006cc0
jmp 0x140006d35
mov rcx, r12
lea rdx, [rbp + 0x10c]
lea r8, str.text
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x140006d07
cmp rcx, 5
jne 0x140006cf0
jmp 0x140006d35
mov rcx, r12
lea rdx, [rbp + 0x10c]
lea r8, str.SAMP
nop dword [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r8 + rcx*2 - 2]
jne 0x140006d52
cmp rcx, 5
jne 0x140006d20
lea rdx, [rbp + 0xe0]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x140006b90
jmp 0x1400076b1
lea rcx, [rbp + 0x78]
call fcn.140002fe0
nop
cmp qword [rbp + 0x88], 0
je 0x140007671
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rbp + 0x10c]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140006d90
lea rdx, [rbp + 0x10c]
lea rcx, [rbp - 0x28]
call fcn.14000cb20
nop
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 8]
call fcn.140002e30
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0xa
jb 0x140006e54
lea rax, [r8 + 0xa]
mov qword [rbx + 0x10], rax
mov rsi, rbx
cmp rcx, 0xf
jbe 0x140006de8
mov rsi, qword [rbx]
lea rax, [0x140042dc2]
mov r12d, 0xa
lea r15, str.Detekce:
cmp rax, rsi
jbe 0x140006e1c
lea rax, [rsi + r8]
cmp r15, rax
ja 0x140006e1c
cmp rsi, r15
ja 0x140006e14
xor r14d, r14d
jmp 0x140006e1f
mov r14, rsi
sub r14, r15
jmp 0x140006e1f
mov r14, r12
lea rcx, [rsi + 0xa]
inc r8
mov rdx, rsi
call fcn.1400340f0
mov r8, r14
mov rdx, r15
mov rcx, rsi
call fcn.1400340f0
lea rcx, [rsi + r14]
sub r12, r14
lea rdx, [r15 + 0xa]
add rdx, r14
mov r8, r12
call fcn.1400340f0
jmp 0x140006e79
mov r12d, 0xa
mov qword [rsp + 0x28], r12
lea r15, str.Detekce:
mov qword [rsp + 0x20], r15
mov edx, r12d
mov rcx, rbx
call fcn.14000e320
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x58], xmm1
xor r12d, r12d
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r12b
mov r8d, 0x14
lea rdx, str._Verejna_IP_adresa:
lea rcx, [rbp - 0x68]
call fcn.14000bc00
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
lea rcx, [rsp + 0x78]
call fcn.14000bc00
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], r12
mov qword [rbp + 0x50], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], r12b
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140006f79
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007b94
call fcn.140011680
movdqu xmmword [rbp - 0x78], xmm6
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140006fbe
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006fb9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007b9a
call fcn.140011680
movdqu xmmword [rbp - 0x58], xmm6
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140007002
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ffd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007ba0
call fcn.140011680
movdqu xmmword [rbp + 8], xmm6
mov byte [rbp - 8], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 7
jbe 0x14000704b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007046
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007ba6
call fcn.140011680
movdqa xmm0, xmmword [0x1400433d0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r12w
mov rdx, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x14000706b
mov rdx, qword [r13]
lea rcx, [rbp + 0x38]
mov rbx, qword [rbp + 0x38]
mov rsi, qword [rbp + 0x50]
cmp rsi, 0xf
cmova rcx, rbx
mov r14, qword [rbp + 0x48]
cmp r14, qword [r13 + 0x10]
jne 0x1400070a7
test r14, r14
je 0x140007635
mov r8, r14
call fcn.140034bd0
test eax, eax
sete al
test al, al
jne 0x140007635
cmp dword [0x14004d440], 1
jne 0x1400071c3
lea r8, [rbp + 0x38]
cmp rsi, 0xf
cmova r8, rbx
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9d, r14d
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.14000c9f0
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rcx, qword [rsp + 0x30]
lea r8, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova r8, qword [rbp + 0x38]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rcx
mov r9d, dword [rbp + 0x48]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
lea rcx, [0x14004ba70]
call fcn.14000dda0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000d980
movzx edx, ax
mov rcx, rbx
call fcn.14000d7d0
mov rcx, rbx
call fcn.14000d670
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x1400071c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400071be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bac
call fcn.140011680
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8d, 0xc
lea rdx, str.FolderDetect
lea rcx, [rsp + 0x58]
call fcn.14000cc50
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa8], xmm1
lea rax, [rbp + 0x10c]
nop dword [rax + rax]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140007210
mov r8, rdi
lea rdx, [rbp + 0x10c]
lea rcx, [rbp + 0x98]
call fcn.14000cb20
nop
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0x18]
call fcn.140002e30
mov rdi, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0xe
jb 0x1400072dc
lea rax, [r8 + 0xe]
mov qword [rdi + 0x10], rax
mov rbx, rdi
cmp rcx, 0xf
jbe 0x140007270
mov rbx, qword [rdi]
lea rax, [0x140042de6]
mov r15d, 0xe
lea r14, str.DetekceSlozka
cmp rax, rbx
jbe 0x1400072a4
lea rax, [r8 + rbx]
cmp r14, rax
ja 0x1400072a4
cmp rbx, r14
ja 0x14000729c
mov rsi, r12
jmp 0x1400072a7
mov rsi, rbx
sub rsi, r14
jmp 0x1400072a7
mov rsi, r15
lea rcx, [rbx + 0xe]
inc r8
mov rdx, rbx
call fcn.1400340f0
mov r8, rsi
mov rdx, r14
mov rcx, rbx
call fcn.1400340f0
lea rcx, [rbx + rsi]
sub r15, rsi
lea rdx, [r14 + 0xe]
add rdx, rsi
mov r8, r15
call fcn.1400340f0
jmp 0x140007301
mov r15d, 0xe
mov qword [rsp + 0x28], r15
lea r14, str.DetekceSlozka
mov qword [rsp + 0x20], r14
mov edx, r15d
mov rcx, rdi
call fcn.14000e320
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
xor r8d, r8d
lea rdx, [0x140042410]
lea rcx, [rbp - 0x48]
call fcn.14000bc00
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rcx, qword [rsp + 0x58]
lea rax, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rax, qword [rbp + 0x78]
lea r9, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r9, qword [rsp + 0x30]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r8, str.https:__zoofxpawn.hys.cz_AC_SCAN_Detections_detekce.php_text_sip_styp_s
mov edx, 0x200
lea rcx, [rbp + 0x330]
call fcn.1400016f0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.DataSender
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rdi, rax
test rax, rax
jne 0x140007428
lea rdx, str.Chyba_pri_inicializaci_WinINet.
lea rcx, [0x14004b8e0]
call fcn.14000bfb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000be00
movzx edx, al
mov rcx, rbx
call fcn.14000db10
mov rcx, rbx
call fcn.14000d670
jmp 0x14000749f
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x330]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
test rax, rax
jne 0x14000748c
lea rdx, str.Chyba_pri_pripojeni_k_serveru.
lea rcx, [0x14004b8e0]
call fcn.14000bfb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000be00
movzx edx, al
mov rcx, rbx
call fcn.14000db10
mov rcx, rbx
call fcn.14000d670
jmp 0x140007495
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400074dc
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400074d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bb2
call fcn.140011680
movdqu xmmword [rsp + 0x40], xmm6
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x140007522
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000751d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bb8
call fcn.140011680
movdqu xmmword [rbp - 0x38], xmm6
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140007566
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007561
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bbe
call fcn.140011680
movdqu xmmword [rbp + 0x28], xmm6
mov byte [rbp + 0x18], 0
mov rdx, qword [rbp + 0xb0]
cmp rdx, 7
jbe 0x1400075b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400075b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bc4
call fcn.140011680
movdqa xmm0, xmmword [0x1400433d0]
movdqu xmmword [rbp + 0xa8], xmm0
mov word [rbp + 0x98], r12w
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x14000760a
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007605
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bca
call fcn.140011680
lea rax, [rbp + 0x38]
cmp r13, rax
je 0x14000762d
lea rdx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0xf
cmova rdx, qword [rbp + 0x38]
mov r8, qword [rbp + 0x48]
mov rcx, r13
call fcn.14000baa0
mov rbx, qword [rbp + 0x38]
mov rsi, qword [rbp + 0x50]
cmp rsi, 0xf
jbe 0x14000766c
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140007664
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bd0
mov rcx, rbx
call fcn.140011680
mov rdi, qword [rsp + 0x50]
xor bl, bl
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x1400076b1
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400076ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bd6
call fcn.140011680
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
test bl, bl
je 0x140007b1a
lea rcx, [rbp + 0x98]
call fcn.140002fe0
nop
cmp qword [rbp + 0xa8], 0
je 0x140007ad8
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x70], r12
mov r8d, 0x26
lea rdx, str.Vse_je_v_poradku__slozka_je_v_poradku.
lea rcx, [rbp + 0x58]
call fcn.14000cc50
nop
mov rdx, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x140007711
mov rdx, qword [r13]
lea rcx, [rbp + 0x58]
mov rbx, qword [rbp + 0x58]
mov rdi, qword [rbp + 0x70]
cmp rdi, 0xf
cmova rcx, rbx
mov rsi, qword [rbp + 0x68]
cmp rsi, qword [r13 + 0x10]
jne 0x14000774d
test rsi, rsi
je 0x140007aa0
mov r8, rsi
call fcn.140034bd0
test eax, eax
sete al
test al, al
jne 0x140007aa0
cmp dword [0x14004d440], 1
jne 0x140007869
lea r8, [rbp + 0x58]
cmp rdi, 0xf
cmova r8, rbx
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r9d, esi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.14000c9f0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova r8, qword [rbp + 0x58]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdx
mov r9d, dword [rbp + 0x68]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rdx, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
lea rcx, [0x14004b7b0]
call fcn.14000dda0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000d980
movzx edx, ax
mov rcx, rbx
call fcn.14000d7d0
mov rcx, rbx
call fcn.14000d670
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x140007869
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007864
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bdc
call fcn.140011680
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8d, 0xc
lea rdx, str.FolderDetect
lea rcx, [rsp + 0x58]
call fcn.14000cc50
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x88], xmm1
mov r8d, 5
lea rdx, str.VseOk
lea rcx, [rbp + 0x78]
call fcn.14000cc50
nop
lea r10, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova r10, qword [rsp + 0x58]
lea rax, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rax, qword [rbp + 0x98]
lea r9, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova r9, qword [rbp + 0x78]
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x20], rax
lea r8, str.https:__zoofxpawn.hys.cz_AC_SCAN_Detections_detekce.php_text_sip_styp_s
mov edx, 0x200
lea rcx, [rbp + 0x330]
call fcn.1400016f0
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
mov edx, 1
lea rcx, str.DataSender
call qword [sym.imp.WININET.dll_InternetOpenW]
mov rdi, rax
test rax, rax
jne 0x140007977
lea rdx, str.Chyba_pri_inicializaci_WinINet.
lea rcx, [0x14004b8e0]
call fcn.14000bfb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000be00
movzx edx, al
mov rcx, rbx
call fcn.14000db10
mov rcx, rbx
call fcn.14000d670
jmp 0x1400079ee
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], 0x80000000
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x330]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
test rax, rax
jne 0x1400079db
lea rdx, str.Chyba_pri_pripojeni_k_serveru.
lea rcx, [0x14004b8e0]
call fcn.14000bfb0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.14000be00
movzx edx, al
mov rcx, rbx
call fcn.14000db10
mov rcx, rbx
call fcn.14000d670
jmp 0x1400079e4
mov rcx, rax
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
nop
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x140007a2c
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007a27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007be2
call fcn.140011680
movdqu xmmword [rbp + 0x88], xmm6
mov byte [rbp + 0x78], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x140007a75
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007a70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007be8
call fcn.140011680
lea rax, [rbp + 0x58]
cmp r13, rax
je 0x140007a98
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
mov rcx, r13
call fcn.14000baa0
mov rbx, qword [rbp + 0x58]
mov rdi, qword [rbp + 0x70]
cmp rdi, 0xf
jbe 0x140007ad8
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140007acf
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bee
mov rcx, rbx
call fcn.140011680
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140007b1a
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b14
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007bf4
call fcn.140011680
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 7
jbe 0x140007b5c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007b57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007b8e
call fcn.140011680
mov rcx, qword [rbp + 0x530]
xor rcx, rsp
call fcn.140011660
mov rbx, qword [rsp + 0x6a0]
movaps xmm6, xmmword [rsp + 0x640]
add rsp, 0x650
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
int3
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
nop
call fcn.14001ba50
int3