Function at 0x1401165e0
Capabilities:
Download url
Receive data

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140204480]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r15, rdx
mov rsi, rcx
mov qword [rsp + 0x78], rcx
mov qword [rbp - 0x80], rdx
xor r12d, r12d
lea r8, str.LOCALAPPDATA
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll__dupenv_s]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov rdx, qword [rsp + 0x70]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140116660
lea rcx, [rsp + 0x50]
call fcn.1400ef310
nop
mov r8d, reloc.WS2_32.dll_setsockopt
lea rdx, str.Growtopiainterface_
lea rcx, [rsp + 0x50]
call fcn.140008360
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1401166ca
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rsp + 0x30]
call fcn.140008360
movups xmm6, xmmword [rax]
movups xmmword [rbp + 0x10], xmm6
movups xmm7, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm7
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rsp + 0x30]
call fcn.140008300
nop
lea rcx, [rsp + 0x50]
call fcn.140008300
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x60], r12
lea r14, [rbp + 0x10]
movq rcx, xmm6
movdqa xmm0, xmm7
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova r14, rcx
movabs rbx, 0x7fffffffffffffff
movq rdi, xmm7
cmp rdi, rbx
ja 0x14011690c
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
cmp rdi, 0xf
ja 0x140116770
mov qword [rbp - 0x68], rdi
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x78], xmm0
jmp 0x140116805
mov rax, rdi
or rax, 0xf
cmp rax, rbx
jbe 0x1401167a8
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140183940
mov rcx, rax
test rax, rax
je 0x1401167d3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1401167e9
mov rbx, rax
mov ecx, reloc.WS2_32.dll_shutdown
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1401167da
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140116912
jmp 0x14011678a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1401167e6
call fcn.140183940
jmp 0x1401167e9
mov rax, r12
mov qword [rbp - 0x78], rax
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], rbx
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
mov rdx, r15
lea rcx, [rbp - 0x58]
call fcn.1400081e0
nop
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova rdx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x48]
add r8, rdx
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova rdx, qword [rbp - 0x58]
lea rcx, [rbp - 0x18]
call fcn.1400ebee0
nop
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], 0xf
cmova rdx, qword [rbp - 0x78]
mov r8, qword [rbp - 0x68]
add r8, rdx
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], 0xf
cmova rdx, qword [rbp - 0x78]
lea rcx, [rbp - 0x38]
call fcn.1400ebee0
lea rdx, [rbp - 0x18]
cmp qword [rbp], 7
cmova rdx, qword [rbp - 0x18]
lea r8, [rbp - 0x38]
cmp qword [rbp - 0x20], 7
cmova r8, qword [rbp - 0x38]
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
lea rcx, [rbp - 0x38]
call fcn.1400e5dd0
nop
lea rcx, [rbp - 0x18]
call fcn.1400e5dd0
nop
lea rcx, [rbp - 0x58]
call fcn.140008300
nop
lea rcx, [rbp - 0x78]
call fcn.140008300
nop
lea rcx, [rbp + 0x10]
call fcn.140008300
nop
mov rcx, rsi
call fcn.140008300
nop
mov rcx, r15
call fcn.140008300
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140183920
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1400068b0
nop
call fcn.140006810
int3