Function at 0x140207180
Capabilities:
Create directory
Delete file
Download url
Get common file path
Receive data
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xa58
mov dword [rsp + 0x30], 0
lea rdx, [0x1403fb31c]
mov rcx, qword [rsp + 0xa80]
call fcn.140189e00
mov byte [rsp + 0x3c], al
movzx eax, byte [rsp + 0x3c]
test eax, eax
je 0x14020734a
lea rax, [rsp + 0x940]
mov rdi, rax
xor eax, eax
mov ecx, 0x104
rep stosb byte [rdi], al
lea rdx, [rsp + 0x940]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
test eax, eax
jne 0x1402072d3
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x568], rax
movzx edx, byte [rsp + 0x58]
mov rcx, qword [rsp + 0x568]
call fcn.14005b2a0
nop
lea rax, [0x1403fb31d]
mov qword [rsp + 0x570], rax
mov qword [rsp + 0xe8], 0xffffffffffffffff
inc qword [rsp + 0xe8]
mov rax, qword [rsp + 0x570]
mov rcx, qword [rsp + 0xe8]
cmp byte [rax + rcx], 0
jne 0x140207237
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x578], rax
mov rax, qword [rsp + 0x578]
mov qword [rsp + 0x278], rax
mov r8, qword [rsp + 0x278]
lea rdx, [0x1403fb31d]
mov rcx, qword [rsp + 0xa70]
call fcn.14005d120
nop
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
lea rax, [rsp + 0x940]
mov qword [rsp + 0x280], rax
mov qword [rsp + 0xf0], 0xffffffffffffffff
inc qword [rsp + 0xf0]
mov rax, qword [rsp + 0x280]
mov rcx, qword [rsp + 0xf0]
cmp byte [rax + rcx], 0
jne 0x1402072ef
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0x288], rax
mov rax, qword [rsp + 0x288]
mov qword [rsp + 0x290], rax
mov r8, qword [rsp + 0x290]
lea rdx, [rsp + 0x940]
mov rcx, qword [rsp + 0xa80]
call fcn.140078f20
mov rax, qword [rsp + 0xa80]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x298], rax
mov rax, qword [rsp + 0x298]
dec rax
mov qword [rsp + 0x2a8], rax
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x180]
cmp qword [rax + 0x18], 0xf
jbe 0x1402073aa
mov dword [rsp + 0x78], 1
jmp 0x1402073b2
mov dword [rsp + 0x78], 0
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0x3d]
test eax, eax
je 0x1402073e7
mov rax, qword [rsp + 0x180]
mov rax, qword [rax]
mov qword [rsp + 0x2a0], rax
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x2a8]
mov rcx, qword [rsp + 0x2b0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x2b8], rax
mov rax, qword [rsp + 0x2b8]
movsx eax, byte [rax]
cmp eax, 0x5c
je 0x14020749a
lea rax, [0x1403fb320]
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0xf8], 0xffffffffffffffff
inc qword [rsp + 0xf8]
mov rax, qword [rsp + 0x2c0]
mov rcx, qword [rsp + 0xf8]
cmp byte [rax + rcx], 0
jne 0x140207440
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rsp + 0x2c8]
mov qword [rsp + 0x2d0], rax
mov r8, qword [rsp + 0x2d0]
lea rdx, [0x1403fb320]
mov rcx, qword [rsp + 0xa80]
call fcn.140078b80
mov rax, qword [rsp + 0xa80]
mov rcx, rax
call fcn.140077080
mov qword [rsp + 0x2d8], rax
xor edx, edx
mov rcx, qword [rsp + 0x2d8]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x1402075b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1402075b5
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x2e0], rax
movzx edx, byte [rsp + 0x59]
mov rcx, qword [rsp + 0x2e0]
call fcn.14005b2a0
nop
lea rax, [0x1403fb31e]
mov qword [rsp + 0x2e8], rax
mov qword [rsp + 0xe0], 0xffffffffffffffff
inc qword [rsp + 0xe0]
mov rax, qword [rsp + 0x2e8]
mov rcx, qword [rsp + 0xe0]
cmp byte [rax + rcx], 0
jne 0x140207519
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0x2f0]
mov qword [rsp + 0x2f8], rax
mov r8, qword [rsp + 0x2f8]
lea rdx, [0x1403fb31e]
mov rcx, qword [rsp + 0xa70]
call fcn.14005d120
nop
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, Ordinal_41
mov rdx, qword [rsp + 0xa78]
lea rcx, [rsp + 0x600]
call fcn.140098860
nop
lea rdx, [rsp + 0x750]
lea rcx, [rsp + 0x600]
call fcn.140209de0
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x1e0]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x1e0]
add rax, qword [rcx + 8]
mov qword [rsp + 0x110], rax
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x600]
call fcn.140209a20
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0x300]
mov rcx, rax
call fcn.14006f300
mov rdx, qword [rsp + 0x110]
lea rcx, [rsp + 0xa8]
call fcn.140206ec0
nop
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x308], rax
mov rax, qword [rsp + 0x308]
mov qword [rsp + 0x310], rax
mov rax, qword [rsp + 0x310]
mov qword [rsp + 0x318], rax
mov r8, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x318]
lea rcx, [rsp + 0x600]
call fcn.140209870
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x1e8]
mov rax, qword [rax]
movsxd rax, dword [rax + 4]
mov rcx, qword [rsp + 0x1e8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x320], rax
mov rax, qword [rsp + 0x320]
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x168], eax
mov eax, dword [rsp + 0x168]
and eax, 6
test eax, eax
je 0x140207704
mov byte [rsp + 0x34], 1
jmp 0x140207709
mov byte [rsp + 0x34], 0
movzx eax, byte [rsp + 0x34]
mov byte [rsp + 0x3e], al
movzx eax, byte [rsp + 0x3e]
mov byte [rsp + 0x3f], al
movzx eax, byte [rsp + 0x3f]
test eax, eax
jne 0x140207733
cmp qword [rsp + 0x110], 0
jne 0x140207847
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x328], rax
movzx edx, byte [rsp + 0x5a]
mov rcx, qword [rsp + 0x328]
call fcn.14005b2a0
nop
lea rax, [0x1403fb31f]
mov qword [rsp + 0x330], rax
mov qword [rsp + 0x108], 0xffffffffffffffff
inc qword [rsp + 0x108]
mov rax, qword [rsp + 0x330]
mov rcx, qword [rsp + 0x108]
cmp byte [rax + rcx], 0
jne 0x14020777c
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x338], rax
mov rax, qword [rsp + 0x338]
mov qword [rsp + 0x340], rax
mov r8, qword [rsp + 0x340]
lea rdx, [0x1403fb31f]
mov rcx, qword [rsp + 0xa70]
call fcn.14005d120
nop
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0b60
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
lea rax, [rsp + 0x64]
lea rcx, [0x1403fb330]
mov rdi, rax
mov rsi, rcx
mov ecx, 5
rep movsb byte [rdi], byte [rsi]
mov eax, 1
imul rax, rax, 4
movsx eax, byte [rsp + rax + 0x64]
test eax, eax
je 0x14020787c
mov dword [rsp + 0x7c], 1
jmp 0x140207884
mov dword [rsp + 0x7c], 0
movzx eax, byte [rsp + 0x7c]
test eax, eax
je 0x1402078e0
mov dword [rsp + 0x44], 0
jmp 0x1402078a1
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 5
jge 0x1402078e0
movsxd rax, dword [rsp + 0x44]
movsx eax, byte [rsp + rax + 0x64]
mov dword [rsp + 0x16c], eax
mov eax, dword [rsp + 0x44]
cdq
mov ecx, gethostname
idiv ecx
mov eax, edx
add eax, 0x32
mov ecx, dword [rsp + 0x16c]
xor ecx, eax
mov eax, ecx
movsxd rcx, dword [rsp + 0x44]
mov byte [rsp + rcx + 0x64], al
jmp 0x140207897
lea rax, [rsp + 0x64]
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x348], rax
mov rax, qword [rsp + 0x348]
mov qword [rsp + 0x350], rax
mov rax, qword [rsp + 0x350]
mov qword [rsp + 0x358], rax
mov r8d, dword [rsp + 0x110]
mov rdx, qword [rsp + 0x358]
lea rcx, [rsp + 0x730]
call fcn.140209f40
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0x360]
mov qword [rsp + 0x368], rax
mov rax, qword [rsp + 0x368]
mov qword [rsp + 0x370], rax
mov rax, qword [rsp + 0xa80]
mov qword [rsp + 0x378], rax
mov r8, qword [rsp + 0x370]
mov rdx, qword [rsp + 0x378]
lea rcx, [rsp + 0x710]
call fcn.140206e70
mov qword [rsp + 0x380], rax
mov rax, qword [rsp + 0x380]
mov qword [rsp + 0x388], rax
mov rax, qword [rsp + 0x388]
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x118], 0xffffffffffffffff
inc qword [rsp + 0x118]
mov rax, qword [rsp + 0x390]
mov rcx, qword [rsp + 0x118]
cmp byte [rax + rcx], 0
jne 0x1402079d3
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0x398], rax
mov rax, qword [rsp + 0x398]
mov qword [rsp + 0x3a0], rax
mov r8, qword [rsp + 0x3a0]
mov rdx, qword [rsp + 0x1f0]
mov rcx, qword [rsp + 0x3a8]
call fcn.140078b80
mov qword [rsp + 0x3b0], rax
mov rdx, qword [rsp + 0x3b0]
lea rcx, [rsp + 0x238]
call fcn.14006f5a0
mov eax, dword [rsp + 0x30]
or eax, 4
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x710]
call fcn.140078080
nop
lea rcx, [rsp + 0x730]
call fcn.140078080
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x3b8], rax
mov rax, qword [rsp + 0x3b8]
mov qword [rsp + 0x3c0], rax
mov rax, qword [rsp + 0x3c0]
mov qword [rsp + 0x3d8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x3c8], rax
mov rax, qword [rsp + 0x3c8]
mov qword [rsp + 0x3d0], rax
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x3e0], rax
mov rax, qword [rsp + 0x3d8]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x3e0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
add rax, 4
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x138], 0
mov qword [rsp + 0x130], 0
mov dword [rsp + 0x54], 0
mov rax, qword [rsp + 0x188]
movzx eax, word [rax]
cmp eax, 0x8664
jne 0x140207b52
mov rax, qword [rsp + 0x98]
add rax, 0x18
mov qword [rsp + 0x138], rax
jmp 0x140207ca7
mov rax, qword [rsp + 0x188]
movzx eax, word [rax]
cmp eax, 0x14c
jne 0x140207b85
mov rax, qword [rsp + 0x98]
add rax, 0x18
mov qword [rsp + 0x130], rax
mov dword [rsp + 0x54], 1
jmp 0x140207ca7
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x3e8], rax
movzx edx, byte [rsp + 0x5b]
mov rcx, qword [rsp + 0x3e8]
call fcn.14005b2a0
nop
lea rax, [0x1403fb322]
mov qword [rsp + 0x3f0], rax
mov qword [rsp + 0x120], 0xffffffffffffffff
inc qword [rsp + 0x120]
mov rax, qword [rsp + 0x3f0]
mov rcx, qword [rsp + 0x120]
cmp byte [rax + rcx], 0
jne 0x140207bce
mov rax, qword [rsp + 0x120]
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0x400], rax
mov r8, qword [rsp + 0x400]
lea rdx, [0x1403fb322]
mov rcx, qword [rsp + 0xa70]
call fcn.14005d120
nop
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x238]
call fcn.140078080
nop
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0b60
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
cmp dword [rsp + 0x54], 0
je 0x140207cc2
mov rax, qword [rsp + 0x130]
mov eax, dword [rax + 0x38]
mov dword [rsp + 0x80], eax
jmp 0x140207cd4
mov rax, qword [rsp + 0x138]
mov eax, dword [rax + 0x38]
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x170], eax
mov eax, dword [rsp + 0x170]
mov ecx, eax
call fcn.1403c0d24
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jne 0x140207e23
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x408], rax
movzx edx, byte [rsp + 0x5c]
mov rcx, qword [rsp + 0x408]
call fcn.14005b2a0
nop
lea rax, [0x1403fb323]
mov qword [rsp + 0x410], rax
mov qword [rsp + 0x128], 0xffffffffffffffff
inc qword [rsp + 0x128]
mov rax, qword [rsp + 0x410]
mov rcx, qword [rsp + 0x128]
cmp byte [rax + rcx], 0
jne 0x140207d4a
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x418], rax
mov rax, qword [rsp + 0x418]
mov qword [rsp + 0x420], rax
mov r8, qword [rsp + 0x420]
lea rdx, [0x1403fb323]
mov rcx, qword [rsp + 0xa70]
call fcn.14005d120
nop
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x238]
call fcn.140078080
nop
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0b60
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
cmp dword [rsp + 0x54], 0
je 0x140207e3e
mov rax, qword [rsp + 0x130]
mov eax, dword [rax + 0x3c]
mov dword [rsp + 0x84], eax
jmp 0x140207e50
mov rax, qword [rsp + 0x138]
mov eax, dword [rax + 0x3c]
mov dword [rsp + 0x84], eax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x428], rax
mov rax, qword [rsp + 0x428]
mov qword [rsp + 0x430], rax
mov rax, qword [rsp + 0x430]
mov qword [rsp + 0x438], rax
mov eax, dword [rsp + 0x84]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x438]
mov ecx, eax
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x98]
movzx eax, word [rax + 0x14]
mov rcx, qword [rsp + 0x98]
lea rax, [rcx + rax + 0x18]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x60], 0
jmp 0x140207ed8
mov eax, dword [rsp + 0x60]
inc eax
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x70]
add rax, 0x28
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x188]
movzx eax, word [rax + 2]
cmp dword [rsp + 0x60], eax
je 0x140207f65
mov rax, qword [rsp + 0x70]
cmp dword [rax + 0x10], 0
je 0x140207f60
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x440], rax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x448], rax
mov rax, qword [rsp + 0x448]
mov qword [rsp + 0x450], rax
mov rax, qword [rsp + 0x70]
mov eax, dword [rax + 0x10]
mov rcx, qword [rsp + 0x70]
mov ecx, dword [rcx + 0x14]
mov rdx, qword [rsp + 0x450]
add rdx, rcx
mov rcx, rdx
mov rdx, qword [rsp + 0x70]
mov edx, dword [rdx + 0xc]
mov rdi, qword [rsp + 0x48]
add rdi, rdx
mov rdx, rdi
mov rdi, rdx
mov rsi, rcx
mov ecx, eax
rep movsb byte [rdi], byte [rsi]
jmp 0x140207ec0
mov qword [rsp + 0x140], 0
cmp dword [rsp + 0x54], 0
je 0x140207f98
mov eax, 8
imul rax, rax, 6
mov rcx, qword [rsp + 0x130]
lea rax, [rcx + rax + 0x60]
mov qword [rsp + 0x140], rax
jmp 0x140207fb6
mov eax, 8
imul rax, rax, 6
mov rcx, qword [rsp + 0x138]
lea rax, [rcx + rax + 0x70]
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x140]
mov eax, dword [rax]
mov rcx, qword [rsp + 0x48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0x140]
cmp dword [rax + 4], 0
je 0x140207ff3
mov rax, qword [rsp + 0x1f8]
cmp dword [rax + 0xc], 2
je 0x14020811f
mov rcx, qword [rsp + 0x48]
call fcn.1403bc0a4
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x458], rax
movzx edx, byte [rsp + 0x5d]
mov rcx, qword [rsp + 0x458]
call fcn.14005b2a0
nop
lea rax, [0x1403fb324]
mov qword [rsp + 0x460], rax
mov qword [rsp + 0x148], 0xffffffffffffffff
inc qword [rsp + 0x148]
mov rax, qword [rsp + 0x460]
mov rcx, qword [rsp + 0x148]
cmp byte [rax + rcx], 0
jne 0x140208046
mov rax, qword [rsp + 0x148]
mov qword [rsp + 0x468], rax
mov rax, qword [rsp + 0x468]
mov qword [rsp + 0x470], rax
mov r8, qword [rsp + 0x470]
lea rdx, [0x1403fb324]
mov rcx, qword [rsp + 0xa70]
call fcn.14005d120
nop
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x238]
call fcn.140078080
nop
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0b60
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
mov rax, qword [rsp + 0x1f8]
mov eax, dword [rax + 0x14]
mov rcx, qword [rsp + 0x48]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0xa0]
cmp dword [rax], 0x53445352
je 0x1402082ae
mov rcx, qword [rsp + 0x48]
call fcn.1403bc0a4
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0xa70]
mov qword [rsp + 0x478], rax
movzx edx, byte [rsp + 0x5e]
mov rcx, qword [rsp + 0x478]
call fcn.14005b2a0
nop
lea rax, [0x1403fb325]
mov qword [rsp + 0x480], rax
mov qword [rsp + 0x100], 0xffffffffffffffff
inc qword [rsp + 0x100]
mov rax, qword [rsp + 0x480]
mov rcx, qword [rsp + 0x100]
cmp byte [rax + rcx], 0
jne 0x1402081a4
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x488], rax
mov rax, qword [rsp + 0x488]
mov qword [rsp + 0x490], rax
mov r8, qword [rsp + 0x490]
lea rdx, [0x1403fb325]
mov rcx, qword [rsp + 0xa70]
call fcn.14005d120
nop
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x238]
call fcn.140078080
nop
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x190]
lea rcx, vtable.std::basic_ios_char__struct_std::char_traits_char__.0
mov qword [rax], rcx
mov rax, qword [rsp + 0x190]
lea rcx, vtable.std::ios_base.0
mov qword [rax], rcx
mov rcx, qword [rsp + 0x190]
call fcn.1403a590c
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
lea rax, [rsp + 0x238]
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x198]
cmp qword [rax + 0x18], 0xf
jbe 0x1402082ea
mov dword [rsp + 0x88], 1
jmp 0x1402082f5
mov dword [rsp + 0x88], 0
movzx eax, byte [rsp + 0x88]
mov byte [rsp + 0x40], al
movzx eax, byte [rsp + 0x40]
test eax, eax
je 0x14020832d
mov rax, qword [rsp + 0x198]
mov rax, qword [rax]
mov qword [rsp + 0x498], rax
mov rax, qword [rsp + 0x498]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x200]
mov qword [rsp + 0x4a0], rax
mov rax, qword [rsp + 0x4a0]
mov qword [rsp + 0x4a8], rax
mov rcx, qword [rsp + 0x4a8]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rax, [rsp + 0x870]
mov rdi, rax
xor eax, eax
mov ecx, reloc.WLDAP32.dll_Ordinal_200
rep stosb byte [rdi], al
mov rax, qword [rsp + 0xa0]
add rax, 4
mov r8d, 0x64
lea rdx, [rsp + 0x870]
mov rcx, rax
call qword [sym.imp.ole32.dll_StringFromGUID2]
test eax, eax
jne 0x140208472
mov rcx, qword [rsp + 0x48]
call fcn.1403bc0a4
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, [0x1403fb326]
mov rcx, qword [rsp + 0xa70]
call fcn.14006f790
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x238]
call fcn.140078080
nop
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1a0]
lea rcx, vtable.std::basic_ios_char__struct_std::char_traits_char__.0
mov qword [rax], rcx
mov rax, qword [rsp + 0x1a0]
lea rcx, vtable.std::ios_base.0
mov qword [rax], rcx
mov rcx, qword [rsp + 0x1a0]
call fcn.1403a590c
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
lea rax, [rsp + 0x590]
mov rdi, rax
xor eax, eax
mov ecx, 0x64
rep stosb byte [rdi], al
mov qword [rsp + 0x1b0], 0
mov qword [rsp + 0x20], 0x64
lea r9, [rsp + 0x870]
mov r8d, 0x64
lea rdx, [rsp + 0x590]
lea rcx, [rsp + 0x1b0]
call fcn.1403c3580
mov dword [rsp + 0x174], eax
cmp dword [rsp + 0x174], 0
jne 0x1402084de
cmp qword [rsp + 0x1b0], 0
jne 0x1402085b6
mov rcx, qword [rsp + 0x48]
call fcn.1403bc0a4
mov ecx, reloc.WLDAP32.dll_Ordinal_50
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rdx, [0x1403fb327]
mov rcx, qword [rsp + 0xa70]
call fcn.14006f790
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x238]
call fcn.140078080
nop
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x1a8], rax
mov rax, qword [rsp + 0x1a8]
lea rcx, vtable.std::basic_ios_char__struct_std::char_traits_char__.0
mov qword [rax], rcx
mov rax, qword [rsp + 0x1a8]
lea rcx, vtable.std::ios_base.0
mov qword [rax], rcx
mov rcx, qword [rsp + 0x1a8]
call fcn.1403a590c
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
lea rax, [rsp + 0x770]
mov rdi, rax
xor eax, eax
mov ecx, 0x100
rep stosb byte [rdi], al
mov dword [rsp + 0x38], 0
jmp 0x1402085de
mov eax, dword [rsp + 0x38]
inc eax
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
cmp rax, qword [rsp + 0x1b0]
je 0x1402086b0
mov eax, dword [rsp + 0x38]
movsx eax, byte [rsp + rax + 0x590]
cmp eax, 0x30
jl 0x140208612
mov eax, dword [rsp + 0x38]
movsx eax, byte [rsp + rax + 0x590]
cmp eax, 0x39
jle 0x140208656
mov eax, dword [rsp + 0x38]
movsx eax, byte [rsp + rax + 0x590]
cmp eax, 0x41
jl 0x140208634
mov eax, dword [rsp + 0x38]
movsx eax, byte [rsp + rax + 0x590]
cmp eax, 0x46
jle 0x140208656
mov eax, dword [rsp + 0x38]
movsx eax, byte [rsp + rax + 0x590]
cmp eax, 0x61
jl 0x1402086ab
mov eax, dword [rsp + 0x38]
movsx eax, byte [rsp + rax + 0x590]
cmp eax, 0x66
jg 0x1402086ab
mov eax, dword [rsp + 0x38]
lea rcx, [rsp + 0x770]
mov qword [rsp + 0x4b0], rcx
mov qword [rsp + 0x150], 0xffffffffffffffff
inc qword [rsp + 0x150]
mov rcx, qword [rsp + 0x4b0]
mov rdx, qword [rsp + 0x150]
cmp byte [rcx + rdx], 0
jne 0x140208676
mov rcx, qword [rsp + 0x150]
movzx eax, byte [rsp + rax + 0x590]
mov byte [rsp + rcx + 0x770], al
jmp 0x1402085d4
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 3
rep stosb byte [rdi], al
mov rax, qword [rsp + 0xa0]
mov eax, dword [rax + 0x14]
mov dword [rsp + 0x178], eax
mov r9d, 0xa
mov r8d, 3
lea rdx, [rsp + 0x50]
mov ecx, dword [rsp + 0x178]
call fcn.1403c3034
mov rdx, qword [rsp + 0xa88]
lea rcx, [rsp + 0x258]
call fcn.14006f650
nop
mov rax, qword [rsp + 0xa0]
add rax, 0x18
mov qword [rsp + 0x208], rax
mov rax, qword [rsp + 0x208]
mov qword [rsp + 0x4b8], rax
mov qword [rsp + 0x158], 0xffffffffffffffff
inc qword [rsp + 0x158]
mov rax, qword [rsp + 0x4b8]
mov rcx, qword [rsp + 0x158]
cmp byte [rax + rcx], 0
jne 0x140208736
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x4c0], rax
mov rax, qword [rsp + 0x4c0]
mov qword [rsp + 0x4c8], rax
mov r8, qword [rsp + 0x4c8]
mov rdx, qword [rsp + 0x208]
lea rcx, [rsp + 0x258]
call fcn.140078b80
lea rax, [0x1403fb328]
mov qword [rsp + 0x4d0], rax
mov qword [rsp + 0x160], 0xffffffffffffffff
inc qword [rsp + 0x160]
mov rax, qword [rsp + 0x4d0]
mov rcx, qword [rsp + 0x160]
cmp byte [rax + rcx], 0
jne 0x1402087ac
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x4d8], rax
mov rax, qword [rsp + 0x4d8]
mov qword [rsp + 0x4e0], rax
mov r8, qword [rsp + 0x4e0]
lea rdx, [0x1403fb328]
lea rcx, [rsp + 0x258]
call fcn.140078b80
lea rax, [rsp + 0x770]
mov qword [rsp + 0x4e8], rax
mov qword [rsp + 0xc0], 0xffffffffffffffff
inc qword [rsp + 0xc0]
mov rax, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0xc0]
cmp byte [rax + rcx], 0
jne 0x140208822
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x4f0], rax
mov rax, qword [rsp + 0x4f0]
mov qword [rsp + 0x4f8], rax
mov r8, qword [rsp + 0x4f8]
lea rdx, [rsp + 0x770]
lea rcx, [rsp + 0x258]
call fcn.140078b80
lea rax, [rsp + 0x50]
mov qword [rsp + 0x500], rax
mov qword [rsp + 0xc8], 0xffffffffffffffff
inc qword [rsp + 0xc8]
mov rax, qword [rsp + 0x500]
mov rcx, qword [rsp + 0xc8]
cmp byte [rax + rcx], 0
jne 0x140208896
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x508], rax
mov rax, qword [rsp + 0x508]
mov qword [rsp + 0x510], rax
mov r8, qword [rsp + 0x510]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x258]
call fcn.140078b80
lea rax, [0x1403fb32c]
mov qword [rsp + 0x518], rax
mov qword [rsp + 0xd0], 0xffffffffffffffff
inc qword [rsp + 0xd0]
mov rax, qword [rsp + 0x518]
mov rcx, qword [rsp + 0xd0]
cmp byte [rax + rcx], 0
jne 0x140208909
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x520], rax
mov rax, qword [rsp + 0x520]
mov qword [rsp + 0x528], rax
mov r8, qword [rsp + 0x528]
lea rdx, [0x1403fb32c]
lea rcx, [rsp + 0x258]
call fcn.140078b80
mov rax, qword [rsp + 0xa0]
add rax, 0x18
mov qword [rsp + 0x210], rax
mov rax, qword [rsp + 0x210]
mov qword [rsp + 0x530], rax
mov qword [rsp + 0xd8], 0xffffffffffffffff
inc qword [rsp + 0xd8]
mov rax, qword [rsp + 0x530]
mov rcx, qword [rsp + 0xd8]
cmp byte [rax + rcx], 0
jne 0x140208993
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x538], rax
mov rax, qword [rsp + 0x538]
mov qword [rsp + 0x540], rax
mov r8, qword [rsp + 0x540]
mov rdx, qword [rsp + 0x210]
lea rcx, [rsp + 0x258]
call fcn.140078b80
mov rax, qword [rsp + 0x588]
mov qword [rsp + 0x228], rax
lea rax, [rsp + 0x238]
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x1b8]
cmp qword [rax + 0x18], 0xf
jbe 0x140208a3a
mov dword [rsp + 0x8c], 1
jmp 0x140208a45
mov dword [rsp + 0x8c], 0
movzx eax, byte [rsp + 0x8c]
mov byte [rsp + 0x41], al
movzx eax, byte [rsp + 0x41]
test eax, eax
je 0x140208a7d
mov rax, qword [rsp + 0x1b8]
mov rax, qword [rax]
mov qword [rsp + 0x548], rax
mov rax, qword [rsp + 0x548]
mov qword [rsp + 0x218], rax
mov rax, qword [rsp + 0x218]
mov qword [rsp + 0x550], rax
mov rax, qword [rsp + 0x550]
mov qword [rsp + 0x228], rax
mov rax, qword [rsp + 0x580]
mov qword [rsp + 0x230], rax
lea rax, [rsp + 0x258]
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0x1c0]
cmp qword [rax + 0x18], 0xf
jbe 0x140208ae9
mov dword [rsp + 0x90], 1
jmp 0x140208af4
mov dword [rsp + 0x90], 0
movzx eax, byte [rsp + 0x90]
mov byte [rsp + 0x42], al
movzx eax, byte [rsp + 0x42]
test eax, eax
je 0x140208b2c
mov rax, qword [rsp + 0x1c0]
mov rax, qword [rax]
mov qword [rsp + 0x558], rax
mov rax, qword [rsp + 0x558]
mov qword [rsp + 0x220], rax
mov rax, qword [rsp + 0x220]
mov qword [rsp + 0x560], rax
mov rax, qword [rsp + 0x560]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rsp + 0x228]
mov rdx, qword [rsp + 0x230]
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileA
mov dword [rsp + 0x1d0], eax
cmp dword [rsp + 0x1d0], 0
jge 0x140208c2e
mov rcx, qword [rsp + 0x48]
call fcn.1403bc0a4
lea rdx, [0x1403fb32a]
mov rcx, qword [rsp + 0xa70]
call fcn.14006f790
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x258]
call fcn.140078080
nop
lea rcx, [rsp + 0x238]
call fcn.140078080
nop
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0b60
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
jmp 0x140208d05
mov rcx, qword [rsp + 0x48]
call fcn.1403bc0a4
lea rdx, [rsp + 0x238]
mov rcx, qword [rsp + 0xa70]
call fcn.14006f5a0
mov eax, dword [rsp + 0x30]
or eax, 1
mov dword [rsp + 0x30], eax
lea rcx, [rsp + 0x258]
call fcn.140078080
nop
lea rcx, [rsp + 0x238]
call fcn.140078080
nop
lea rcx, [rsp + 0xa8]
call fcn.140077b60
nop
lea rax, [rsp + 0x6b0]
mov rcx, rax
call fcn.1400a0a90
lea rax, [rsp + 0x6b0]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x1c8]
lea rcx, vtable.std::basic_ios_char__struct_std::char_traits_char__.0
mov qword [rax], rcx
mov rax, qword [rsp + 0x1c8]
lea rcx, vtable.std::ios_base.0
mov qword [rax], rcx
mov rcx, qword [rsp + 0x1c8]
call fcn.1403a590c
nop
mov rcx, qword [rsp + 0xa78]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa80]
call fcn.140078080
nop
mov rcx, qword [rsp + 0xa88]
call fcn.140078080
mov rax, qword [rsp + 0xa70]
add rsp, 0xa58
pop rdi
pop rsi
ret