Function at 0x140041f00
Capabilities:
Delete file
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
mov rbp, rsp
sub rsp, 0x50
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Cleaning_Old_Files
lea rcx, [0x1401ad028]
call fcn.140045270
lea rcx, str.C:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.D:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.E:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.F:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.G:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.Z:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.U:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.I:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.M:Program_FilesTxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.C:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.D:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.E:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.F:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.G:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.Z:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.U:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.I:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rcx, str.M:TxGameAssistantAppMarketdsound.dll
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.Downloading_Files
lea rcx, [0x1401ad028]
call fcn.140045270
xor edi, edi
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
lea r8d, [rdi + 0x38]
lea rdx, str.C:Program_FilesTxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x14004208c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x14004208e
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400420cc
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400420c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400420c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x1400420ed
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.C:Program_FilesTxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, gethostname
lea rdx, str.D:Program_FilesTxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x140042140
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x140042142
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140042180
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004217b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004217b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x1400421a1
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.D:Program_FilesTxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, gethostname
lea rdx, str.E:Program_FilesTxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x1400421f4
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x1400421f6
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140042234
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004222f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004222f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x140042255
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.E:Program_FilesTxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, gethostname
lea rdx, str.F:Program_FilesTxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x1400422a8
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x1400422aa
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400422e8
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400422e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400422e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x140042309
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.F:Program_FilesTxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, gethostname
lea rdx, str.G:Program_FilesTxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x14004235c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x14004235e
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14004239c
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042397
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042397
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x1400423bd
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.G:Program_FilesTxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, gethostname
lea rdx, str.Z:Program_FilesTxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x140042410
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x140042412
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140042450
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004244b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004244b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x140042471
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.U:Program_FilesTxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, gethostname
lea rdx, str.I:Program_FilesTxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x1400424c4
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x1400424c6
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140042504
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400424ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400424ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x140042525
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.I:Program_FilesTxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, gethostname
lea rdx, str.M:Program_FilesTxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x140042578
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x14004257a
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400425b8
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400425b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400425b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x1400425d9
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.M:Program_FilesTxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_46
lea rdx, str.C:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x14004262c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x14004262e
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14004266c
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140042667
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140042667
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x14004268d
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.C:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_46
lea rdx, str.D:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x1400426e0
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x1400426e2
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x140042720
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004271b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004271b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x140042741
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.D:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_46
lea rdx, str.E:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x140042794
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x140042796
xor bl, bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x1400427d4
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400427cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400427cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a486c
test bl, bl
je 0x1400427f5
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.E:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_46
lea rdx, str.F:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x140042848
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x14004284a
xor bl, bl
mov r8, qword [rbp - 8]
cmp r8, 0x10
jb 0x140042864
inc r8
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140045600
test bl, bl
je 0x140042885
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.F:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_46
lea rdx, str.G:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x1400428d8
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x1400428da
xor bl, bl
mov r8, qword [rbp - 8]
cmp r8, 0x10
jb 0x1400428f4
inc r8
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140045600
test bl, bl
je 0x140042915
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.G:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_46
lea rdx, str.Z:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x140042968
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x14004296a
xor bl, bl
mov r8, qword [rbp - 8]
cmp r8, 0x10
jb 0x140042984
inc r8
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140045600
test bl, bl
je 0x1400429a5
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.Z:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_46
lea rdx, str.U:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x1400429f8
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov bl, 1
jmp 0x1400429fa
xor bl, bl
mov r8, qword [rbp - 8]
cmp r8, 0x10
jb 0x140042a14
inc r8
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp - 0x20]
call fcn.140045600
test bl, bl
je 0x140042a35
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.U:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov qword [rbp - 0x20], rdi
movdqa xmm0, xmmword [0x1400f44d0]
movdqu xmmword [rbp - 0x10], xmm0
mov r8d, Ordinal_46
lea rdx, str.I:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x140042aad
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rcx, [rbp - 0x20]
call fcn.140041590
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.I:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
jmp 0x140042ab6
lea rcx, [rbp - 0x20]
call fcn.140041590
mov qword [rbp - 0x20], rdi
movdqa xmm0, xmmword [0x1400f44d0]
movdqu xmmword [rbp - 0x10], xmm0
mov r8d, Ordinal_46
lea rdx, str.M:TxGameAssistantAppMarketAppMarket.exe
lea rcx, [rbp - 0x20]
call fcn.140045270
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
lea rdx, [0x1400f3330]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
test rax, rax
je 0x140042b3c
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rcx, [rbp - 0x20]
call fcn.140041590
mov qword [rsp + 0x20], rdi
xor r9d, r9d
lea r8, str.M:TxGameAssistantAppMarketdsound.dll
lea rdx, str.https:__cdn.discordapp.com_attachments_1219696928493801552_1235552297858367529_dsound.dll_ex6634c93fis663377bfhm7f7e00f1efd2c7e623e1f17b4eed6aaea9f9a718ff7a8c9edd1659aacf832ee8
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x50
pop rbp
ret
lea rcx, [rbp - 0x20]
call fcn.140041590
mov rbx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x50
pop rbp
ret