Function at 0x180004330
Capabilities:
Delete file
Download url
Hash data using sha256
Receive data
Set file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push r13
push r14
push r15
sub rsp, 0x330
mov rax, qword [0x18000d040]
xor rax, rsp
mov qword [rsp + 0x320], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x288], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x298], xmm1
mov r8d, 0x41
lea rdx, str.https:__cdn.jsdelivr.net_gh_TheFalloutOf76_TeamsJack_data_TJ_info
lea rcx, [rsp + 0x288]
call fcn.180006bf0
nop
mov r14, qword [0x18000d9c8]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 7
jb 0x180004db4
lea r12, [0x18000d9b8]
cmp qword [0x18000d9d0], 0xf
cmova r12, qword [0x18000d9b8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x230], xmm1
lea r15, [r14 + 7]
mov ebx, 0xf
lea rdi, [rsp + 0x220]
mov r13d, 0x16
cmp r15, rbx
jbe 0x1800044ac
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x180004423
mov rbx, rcx
movabs rsi, 0x8000000000000000
lea rax, [rsi + 0x27]
jmp 0x180004469
cmp rbx, r13
cmovb rbx, r13
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x180004449
xor edi, edi
movabs rsi, 0x8000000000000000
mov qword [rsp + 0x220], rdi
jmp 0x1800044b6
cmp rcx, 0x1000
jb 0x180004490
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180004db9
movabs rsi, 0x8000000000000000
mov rcx, rax
call fcn.1800070d4
test rax, rax
je 0x180004d11
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov qword [rsp + 0x220], rdi
jmp 0x1800044b6
call fcn.1800070d4
mov rdi, rax
movabs rsi, 0x8000000000000000
mov qword [rsp + 0x220], rax
jmp 0x1800044b6
movabs rsi, 0x8000000000000000
mov qword [rsp + 0x230], r15
mov qword [rsp + 0x238], rbx
mov r8, r14
mov rdx, r12
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [str.TJ_info]
mov dword [rdi + r14], eax
movzx eax, word [0x18000957c]
mov word [rdi + r14 + 4], ax
movzx eax, byte [0x18000957e]
mov byte [rdi + r14 + 6], al
mov byte [rdi + r15], 0
lea rax, [rsp + 0x260]
mov qword [rsp + 0x30], rax
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x260]
call fcn.180006080
mov rbx, rax
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x240]
call fcn.180006080
mov rdi, rax
mov r8, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x180004547
mov r8, qword [rbx]
mov rdx, rdi
cmp qword [rax + 0x18], 0xf
jbe 0x180004554
mov rdx, qword [rax]
xor r15d, r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov r14d, eax
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x1800045a0
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x18000459b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800045ff
mov rcx, r8
call fcn.1800070a0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], 0xf
mov byte [rdi], r15b
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1800045e5
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x1800045e0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800045ff
mov rcx, r8
call fcn.1800070a0
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r15b
test r14d, r14d
jne 0x180004dbf
jmp 0x180004606
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rcx, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rcx, qword [rsp + 0x220]
mov edx, 2
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0xf0]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0xf0]
call fcn.180006480
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0xf0], rax
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0xec], edx
cmp qword [rsp + 0x180], 0
je 0x180004de2
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
mov qword [rsp + 0x250], r15
mov qword [rsp + 0x258], 0xf
mov byte [rsp + 0x240], 0
movups xmmword [rsp + 0x260], xmm0
mov qword [rsp + 0x270], r15
mov qword [rsp + 0x278], 0xf
mov byte [rsp + 0x260], 0
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xf0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0xf0]
call fcn.180006e80
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xf0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0xf0]
call fcn.180006e80
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r14, qword [rsp + 0x250]
sub rax, r14
cmp rax, 9
jb 0x180004e0b
lea rax, [rsp + 0x240]
mov r12, qword [rsp + 0x240]
cmp qword [rsp + 0x258], 0xf
cmova rax, r12
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x210], xmm1
lea r15, [r14 + 9]
mov ebx, 0xf
lea rdi, [rsp + 0x200]
cmp r15, rbx
jbe 0x18000484a
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x180004808
mov rbx, rcx
add rsi, 0x27
mov rcx, rsi
call fcn.1800070d4
test rax, rax
je 0x180004a77
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000483d
cmp rbx, 0x16
cmovb rbx, r13
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x18000481d
xor edi, edi
jmp 0x180004842
cmp rcx, 0x1000
jb 0x180004835
lea rsi, [rcx + 0x27]
cmp rsi, rcx
jbe 0x180004e10
jmp 0x1800047e9
call fcn.1800070d4
mov rdi, rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x200], rdi
mov qword [rsp + 0x210], r15
mov qword [rsp + 0x218], rbx
mov r8, r14
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.lichade69]
movsd qword [r14 + rdi], xmm0
movzx eax, byte [0x1800095c8]
mov byte [r14 + rdi + 8], al
mov byte [rdi + r15], 0
mov qword [rsp + 0x2b0], 0
xor ecx, ecx
mov qword [rsp + 0x2b8], rcx
mov dword [rsp + 0x300], 0x6a09e667
mov dword [rsp + 0x304], 0xbb67ae85
mov dword [rsp + 0x308], 0x3c6ef372
mov dword [rsp + 0x30c], 0xa54ff53a
mov dword [rsp + 0x310], 0x510e527f
mov dword [rsp + 0x314], 0x9b05688c
mov dword [rsp + 0x318], 0x1f83d9ab
mov dword [rsp + 0x31c], 0x5be0cd19
lea rbx, [rsp + 0x200]
cmp qword [rsp + 0x218], 0xf
cmova rbx, qword [rsp + 0x200]
mov rdi, qword [rsp + 0x210]
test rdi, rdi
je 0x180004987
nop dword [rax]
cmp rdi, 0x40
jb 0x180004951
mov rdx, rbx
lea rcx, [rsp + 0x2b0]
call fcn.180001490
add rbx, 0x40
add qword [rsp + 0x2b0], 0x40
sub rdi, 0x40
mov rcx, qword [rsp + 0x2b8]
jmp 0x180004920
test rdi, rdi
je 0x180004987
nop word [rax + rax]
movzx eax, byte [rbx]
lea rbx, [rbx + 1]
mov byte [rsp + rcx + 0x2c0], al
mov rcx, qword [rsp + 0x2b8]
inc rcx
mov qword [rsp + 0x2b8], rcx
sub rdi, 1
jne 0x180004960
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x2b0]
call fcn.180003c00
lea rdx, [rsp + 0x260]
mov rdi, qword [rsp + 0x260]
mov r15, qword [rsp + 0x278]
cmp r15, 0xf
cmova rdx, rdi
lea rcx, [rsp + 0x40]
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x58]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rsp + 0x50]
cmp r8, qword [rsp + 0x270]
jne 0x1800049ed
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1800049ed
xor r14b, r14b
jmp 0x1800049f0
mov r14b, 1
cmp rsi, 0xf
jbe 0x180004a2a
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180004a22
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004a22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800070a0
movdqa xmm0, xmmword [0x1800097f0]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x180004a83
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004a7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004a7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800070a0
test r14b, r14b
jne 0x180004e15
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xf0]
add rcx, rax
xor r8d, r8d
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
xorps xmm0, xmm0
xor eax, eax
mov qword [rsp + 0x210], rax
movaps xmmword [rsp + 0x40], xmm0
movsd xmm0, qword [rsp + 0x210]
movsd qword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::seekg_class_std::fpos_struct__Mbstatet_____ptr64]
lea rdx, [0x180001470]
lea rcx, [rsp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [rsp + 0x280]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_long_unsigned___int64_____ptr64____ptr64]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
cmp rax, qword [rsp + 0x280]
jg 0x180004e53
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
mov qword [rsp + 0x210], 0
mov qword [rsp + 0x218], 0xf
mov byte [rsp + 0x200], 0
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0xf0]
call fcn.1800067b0
lea rdx, [0x18000d970]
cmp qword [0x18000d988], 0xf
cmova rdx, qword [0x18000d970]
lea rcx, [rsp + 0x200]
mov rbx, qword [rsp + 0x200]
mov rsi, qword [rsp + 0x218]
cmp rsi, 0xf
cmova rcx, rbx
mov r8, qword [rsp + 0x210]
cmp r8, qword [0x18000d980]
jne 0x180004e92
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180004e92
lea rcx, [rsp + 0x100]
call fcn.1800063c0
test rax, rax
jne 0x180004bee
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0xf0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, [rsp + 0x220]
cmp qword [rsp + 0x238], 0xf
cmova rcx, qword [rsp + 0x220]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
nop
cmp rsi, 0xf
jbe 0x180004c4a
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x180004c41
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004c41
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1800070a0
nop
cmp r15, 0xf
jbe 0x180004c85
lea rdx, [r15 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x180004c7c
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004c7c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1800070a0
nop
mov rax, qword [rsp + 0x258]
cmp rax, 0xf
jbe 0x180004cc9
lea rdx, [rax + 1]
mov rax, r12
cmp rdx, 0x1000
jb 0x180004cc0
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004cc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.1800070a0
nop
lea rcx, [rsp + 0xf0]
call fcn.180004ee0
nop
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x180004d1d
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004d18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004d18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800070a0
movdqa xmm0, xmmword [0x1800097f0]
movdqu xmmword [rsp + 0x230], xmm0
mov byte [rsp + 0x220], 0
mov rdx, qword [rsp + 0x2a0]
cmp rdx, 0xf
jbe 0x180004d7c
inc rdx
mov rcx, qword [rsp + 0x288]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004d77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180004d77
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800070a0
mov al, 1
jmp 0x180004d82
mov rcx, qword [rsp + 0x320]
xor rcx, rsp
call fcn.180007080
lea r11, [rsp + 0x330]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.180001390
call fcn.1800012f0
nop
lea rdx, str.failed_to_fetch_configuration
lea rcx, [rsp + 0x70]
call fcn.180001190
lea rdx, [0x18000ac60]
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rdx, str.failed_to_read_configuration
lea rcx, [rsp + 0x88]
call fcn.180001190
lea rdx, [0x18000ac60]
lea rcx, [rsp + 0x88]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
call fcn.180001390
call fcn.1800012f0
lea rcx, [rsp + 0x220]
call fcn.180006010
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, str.invalid_configuration
lea rcx, [rsp + 0xa0]
call fcn.180001190
lea rdx, [0x18000ac60]
lea rcx, [rsp + 0xa0]
call sub.VCRUNTIME140.dll__CxxThrowException
lea rcx, [rsp + 0x220]
call fcn.180006010
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, str.configuration_expired
lea rcx, [rsp + 0xb8]
call fcn.180001190
lea rdx, [0x18000ac60]
lea rcx, [rsp + 0xb8]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
lea rcx, [rsp + 0x220]
call fcn.180006010
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
lea rdx, str.outdated_version
lea rcx, [rsp + 0xd0]
call fcn.180001190
lea rdx, [0x18000ac60]
lea rcx, [rsp + 0xd0]
call sub.VCRUNTIME140.dll__CxxThrowException
int3