Function at 0x14001a940
Capabilities:
Execute command

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x170
mov rax, qword [0x14011d080]
xor rax, rsp
mov qword [rsp + 0x168], rax
mov r14, r8
mov rsi, rcx
xor r12d, r12d
mov r8, qword [rdx + 0x10]
movabs r13, 0x7fffffffffffffff
mov rax, r13
sub rax, r8
cmp rax, 1
jb 0x14001b00b
cmp qword [rdx + 0x18], 0x10
jb 0x14001a996
mov rdx, qword [rdx]
mov qword [rsp + 0x30], 1
lea rax, [0x1400fdeb8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r8
mov r9, rdx
lea rcx, [rsp + 0xe0]
call fcn.140047af0
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x14001a9ce
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rsp + 0xe0]
call fcn.140041080
xorps xmm0, xmm0
movups xmmword [rsp + 0x128], xmm0
mov qword [rsp + 0x138], r12
mov qword [rsp + 0x140], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x128], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x138], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0xf8]
cmp rdx, 0x10
jb 0x14001aa66
inc rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001aa61
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001aa61
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
movdqa xmm0, xmmword [0x140106b70]
movdqu xmmword [rsp + 0xf0], xmm0
mov byte [rsp + 0xe0], 0
xor r15b, r15b
nop dword [rax]
nop word [rax + rax]
mov rdi, qword [rsp + 0x138]
lea rbx, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rbx, qword [rsp + 0x128]
call fcn.1400e5e24
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xd8], rdi
lea r8, [rsp + 0xd0]
mov edx, eax
lea rcx, [rsp + 0x60]
call fcn.14000fd10
nop
lea rcx, [rsp + 0x60]
call fcn.140010f30
movzx ebx, al
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x14001ab2e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ab29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ab29
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
test bl, bl
jne 0x14001afa1
test r15b, r15b
jne 0x14001af91
mov r15b, 1
mov rcx, qword [r14 + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 0xe
jb 0x14001b011
mov rax, r14
cmp qword [r14 + 0x18], 0x10
jb 0x14001ab63
mov rax, qword [r14]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], reloc.WS2_32.dll_ntohl
lea r9, str.curl___silent
lea rcx, [rsp + 0x108]
call fcn.140047af0
nop
mov r8d, recv
lea rdx, str.___output__
lea rcx, [rsp + 0x108]
call fcn.140041080
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0xb8], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0xa0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xb0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rdx, qword [rsp + 0x128]
mov r8, qword [rsp + 0x138]
lea rcx, [rsp + 0xa0]
call fcn.140041080
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x90], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, recv
lea rdx, str.___nul_2_1
lea rcx, [rsp + 0x80]
call fcn.140041080
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14001acf9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001acf4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001acf4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x98]
cmp rdx, 0x10
jb 0x14001ad52
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ad4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ad4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x80], 0
mov rdx, qword [rsp + 0xb8]
cmp rdx, 0x10
jb 0x14001adb4
inc rdx
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001adaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001adaf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0xb8], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0xa0], 0
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x14001ae16
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ae11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001ae11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
mov rcx, qword [rsi + 0x10]
mov rax, r13
sub rax, rcx
cmp rax, 8
jb 0x14001b016
mov rax, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x14001ae37
mov rax, qword [rsi]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 8
lea r9, str.Arquivo
lea rcx, [rsp + 0x60]
call fcn.140047af0
nop
mov r8d, 9
lea rdx, str._baixado.
lea rcx, [rsp + 0x60]
call fcn.140041080
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
mov qword [rsp + 0x158], r12
mov qword [rsp + 0x160], r12
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x148], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x158], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x14001aef4
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001aeef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001aeef
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0x10
cmovae rdx, qword [rsp + 0x148]
mov r8, qword [rsp + 0x158]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004a2f0
lea rdx, [0x1400447b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
inc dword [0x140169c04]
mov rdx, qword [rsp + 0x160]
cmp rdx, 0x10
jb 0x14001af91
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001af8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001af8c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14001aa90
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x14001afe8
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001afe2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001afe2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400e69f4
nop
mov rcx, qword [rsp + 0x168]
xor rcx, rsp
call fcn.1400e6990
add rsp, 0x170
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.140001fe0
nop
call fcn.140001fe0
call fcn.140001fe0
int3