Function at 0x14000dee0
Capabilities:
Download url
Receive data

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x148
mov rax, qword [0x140035038]
xor rax, rsp
mov qword [rsp + 0x130], rax
mov edx, 8
lea rcx, [rsp + 0x128]
call fcn.14000bbf0
lea rdx, str.https:__d74queuslupub.cloudfront.net_p.gif_guid_wsversion_wsevt_srcwatch_dogevt_actionsignal_eventdata_rid_:__ws_eng_time_wsnocache_ws
lea rcx, [rsp + 0x128]
call fcn.140005150
nop
xor ecx, ecx
call fcn.14000eb50
mov ecx, eax
call fcn.140019644
call fcn.140019618
cdq
mov ecx, 0x2dc6c0
idiv ecx
mov eax, edx
inc eax
mov dword [rsp + 0x40], eax
mov edx, 8
lea rcx, [rsp + 0x118]
call fcn.14000bbf0
lea rcx, [rsp + 0x118]
call fcn.140005210
nop
mov r8d, dword [rsp + 0x40]
lea rdx, [0x14002670c]
lea rcx, [rsp + 0x118]
call fcn.1400087f0
mov edx, 8
lea rcx, [rsp + 0x120]
call fcn.14000bbf0
lea rcx, [rsp + 0x120]
call fcn.140008d80
nop
mov edx, 8
lea rcx, [rsp + 0x110]
call fcn.14000bbf0
lea rcx, [rsp + 0x110]
call fcn.140005210
nop
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x160]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0x158]
mov rax, qword [rax]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x150]
mov rax, qword [rax]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xf8], rax
lea rcx, [rsp + 0x128]
call fcn.140002e10
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0xf0]
mov r8, qword [rsp + 0xf8]
mov rdx, qword [rsp + 0x100]
lea rcx, [rsp + 0x110]
call fcn.1400087f0
lea rcx, [rsp + 0x110]
call fcn.140002e10
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0x108]
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileW
mov dword [rsp + 0x44], eax
lea rcx, [rsp + 0x110]
call fcn.140006940
nop
lea rcx, [rsp + 0x120]
call fcn.140006940
nop
lea rcx, [rsp + 0x118]
call fcn.140006940
nop
lea rcx, [rsp + 0x128]
call fcn.140006940
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.1400103f0
add rsp, 0x148
ret