Function at 0x1401ac3b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
sub rsp, 0x700
mov rax, qword [0x14028b7c8]
xor rax, rsp
mov qword [rsp + 0x6e0], rax
or r9d, 0xffffffff
lea rax, [rsp + 0x2e0]
lea r8, [rsp + 0x60]
lea edx, [r9 + 2]
xor ecx, ecx
mov dword [rsp + 0x28], 0x200
mov byte [rsp + 0x60], 0x68
mov byte [rsp + 0x61], 0x74
mov byte [rsp + 0x62], 0x74
mov byte [rsp + 0x63], 0x70
mov byte [rsp + 0x64], 0x73
mov byte [rsp + 0x65], 0x3a
mov byte [rsp + 0x66], 0x2f
mov byte [rsp + 0x67], 0x2f
mov byte [rsp + 0x68], 0x64
mov byte [rsp + 0x69], 0x6f
mov byte [rsp + 0x6a], 0x77
mov byte [rsp + 0x6b], 0x6e
mov byte [rsp + 0x6c], 0x6c
mov byte [rsp + 0x6d], 0x6f
mov byte [rsp + 0x6e], 0x61
mov byte [rsp + 0x6f], 0x64
mov byte [rsp + 0x70], 0x2e
mov byte [rsp + 0x71], 0x63
mov byte [rsp + 0x72], 0x70
mov byte [rsp + 0x73], 0x75
mov byte [rsp + 0x74], 0x69
mov byte [rsp + 0x75], 0x64
mov byte [rsp + 0x76], 0x2e
mov byte [rsp + 0x77], 0x63
mov byte [rsp + 0x78], 0x6f
mov byte [rsp + 0x79], 0x6d
mov byte [rsp + 0x7a], 0x2f
mov byte [rsp + 0x7b], 0x63
mov byte [rsp + 0x7c], 0x70
mov byte [rsp + 0x7d], 0x75
mov byte [rsp + 0x7e], 0x69
mov byte [rsp + 0x7f], 0x64
mov byte [rsp + 0x80], 0x2e
mov byte [rsp + 0x81], 0x76
mov byte [rsp + 0x82], 0x65
mov byte [rsp + 0x83], 0x72
mov byte [rsp + 0x84], 0
mov byte [rsp + 0x38], 0x5b
mov byte [rsp + 0x39], 0x43
mov byte [rsp + 0x3a], 0x50
mov byte [rsp + 0x3b], 0x55
mov byte [rsp + 0x3c], 0x49
mov byte [rsp + 0x3d], 0x44
mov byte [rsp + 0x3e], 0x5f
mov byte [rsp + 0x3f], 0x56
mov byte [rsp + 0x40], 0x45
mov byte [rsp + 0x41], 0x52
mov byte [rsp + 0x42], 0x5d
mov byte [rsp + 0x43], 0
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rcx, str.wininet.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rbp, rax
test rax, rax
je 0x1401ac824
mov qword [rsp + 0x710], rbx
mov qword [rsp + 0x718], rsi
lea rdx, str.InternetOpenW
mov rcx, rax
mov qword [rsp + 0x720], rdi
mov qword [rsp + 0x728], r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.InternetOpenUrlW
mov rcx, rbp
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.InternetReadFile
mov rcx, rbp
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.InternetCloseHandle
mov rcx, rbp
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
test rsi, rsi
je 0x1401ac7fb
test rdi, rdi
je 0x1401ac7fb
test rbx, rbx
je 0x1401ac7fb
test rax, rax
je 0x1401ac7fb
mov qword [rsp + 0x6f8], r13
lea rcx, [0x140224a20]
mov qword [rsp + 0x6f0], r14
xor r14d, r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], r14d
call rsi
mov r13, rax
test rax, rax
je 0x1401ac7eb
lea rdx, [rsp + 0x2e0]
or r9d, 0xffffffff
xor r8d, r8d
mov rcx, rax
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], 0x80000001
call rdi
mov rsi, rax
test rax, rax
je 0x1401ac7df
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x2e0]
mov r8d, 0x200
mov rcx, rax
call rbx
test eax, eax
je 0x1401ac7d7
mov edx, dword [rsp + 0x30]
test edx, edx
je 0x1401ac7d7
or rcx, 0xffffffffffffffff
xor eax, eax
lea rdi, [rsp + 0x2e0]
mov word [rsp + rdx*2 + 0x2e0], r14w
repne scasb al, byte [rdi]
lea rdi, [rsp + 0x38]
not rcx
lea r8, [rcx - 1]
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
not rcx
dec rcx
cmp ecx, r8d
jg 0x1401ac7d7
movsxd rcx, ecx
mov rdx, r14
test rcx, rcx
jle 0x1401ac69a
nop word [rax + rax]
movzx eax, byte [rsp + rdx + 0x38]
cmp byte [rsp + rdx + 0x2e0], al
jne 0x1401ac7d7
inc rdx
cmp rdx, rcx
jl 0x1401ac680
mov rdi, r14
mov rcx, r14
movsxd rbx, r8d
test r8d, r8d
jle 0x1401ac7d7
nop dword [rax]
movzx eax, byte [rsp + rdi + 0x2e0]
cmp al, 0x3b
je 0x1401ac6d0
cmp al, 0xd
je 0x1401ac708
cmp al, 0xa
je 0x1401ac708
mov byte [rsp + rcx + 0x260], al
inc rcx
jmp 0x1401ac708
mov byte [rsp + rcx + 0x260], r14b
lea rdx, [0x140224a2c]
lea rcx, [rsp + 0x260]
call fcn.140158078
test rax, rax
jne 0x1401ac71b
lea rdx, str.hwmonitor
lea rcx, [rsp + 0x260]
call fcn.140158078
mov rcx, r14
inc rdi
cmp rdi, rbx
jl 0x1401ac6b0
mov rcx, rsi
call r12
jmp 0x1401ac7e5
lea rax, [0x1402a1544]
lea r9, [0x1402a153c]
lea r8, [0x1402a1538]
mov qword [rsp + 0x28], rax
lea rax, [0x1402a1540]
lea rdx, str.cpuz_d._d._d._d
lea rcx, [rsp + 0x260]
mov qword [rsp + 0x20], rax
call fcn.1401581b0
cmp eax, 4
jne 0x1401ac7d7
mov r8, qword [0x1402a14e8]
mov eax, dword [r8]
lea ecx, [rax + rax*4]
mov eax, dword [r8 + 4]
lea ecx, [rax + rcx*2]
mov eax, dword [r8 + 8]
lea edx, [rcx + rcx*4]
lea ecx, [rax + rdx*2]
mov eax, dword [r8 + 0xc]
lea edx, [rcx + rcx*4]
lea edi, [rax + rdx*2]
mov eax, dword [0x1402a1538]
lea ecx, [rax + rax*4]
mov eax, dword [0x1402a153c]
lea ecx, [rax + rcx*2]
mov eax, dword [0x1402a1540]
lea edx, [rcx + rcx*4]
lea ecx, [rax + rdx*2]
mov eax, dword [0x1402a1544]
lea edx, [rcx + rcx*4]
lea ecx, [rax + rdx*2]
cmp ecx, edi
jle 0x1401ac7d7
mov rax, qword [0x1402a0ba0]
test rax, rax
je 0x1401ac7d7
mov rcx, qword [rax + 0x40]
test rcx, rcx
je 0x1401ac7d7
lea r9, [0x1402a1538]
mov edx, 0x42b
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rsi
call r12
jmp 0x1401ac7e5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, r13
call r12
mov r13, qword [rsp + 0x6f8]
mov r14, qword [rsp + 0x6f0]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r12, qword [rsp + 0x728]
mov rdi, qword [rsp + 0x720]
mov rsi, qword [rsp + 0x718]
mov rbx, qword [rsp + 0x710]
mov rcx, qword [rsp + 0x6e0]
xor rcx, rsp
call fcn.140156fd0
add rsp, 0x700
pop rbp
ret