Function at 0x1400f71d0
Capabilities:
Create directory
Download url
Receive data

Disassembly:
sub rsp, 0x178
mov rax, qword [0x1403532b0]
xor rax, rsp
mov qword [rsp + 0x168], rax
lea rdx, str.C:WindowsFonts_bold.ttf
lea rcx, [rsp + 0x88]
call fcn.14000d520
nop
lea rcx, [rsp + 0x88]
call fcn.1400f6c50
movzx eax, al
test eax, eax
jne 0x1400f721c
mov dword [rsp + 0x38], 1
jmp 0x1400f7224
mov dword [rsp + 0x38], 0
movzx eax, byte [rsp + 0x38]
mov byte [rsp + 0x30], al
lea rcx, [rsp + 0x88]
call fcn.14000d410
movzx eax, byte [rsp + 0x30]
test eax, eax
je 0x1400f7269
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140320548]
lea rdx, str.https:__cdn.discordapp.com_attachments_1154866608796336182_1154866949059252296_bold.ttf
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov dword [rsp + 0x50], eax
lea rax, [0x1403204d8]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x138]
mov rcx, qword [rsp + 0x60]
call fcn.1400ebff0
test eax, eax
jne 0x1400f7295
mov dword [rsp + 0x3c], 1
jmp 0x1400f729d
mov dword [rsp + 0x3c], 0
cmp dword [rsp + 0x3c], 0
jne 0x1400f72b3
xor edx, edx
lea rcx, str.C:_Windows_Flags
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rdx, [0x140320620]
lea rcx, [rsp + 0xa8]
call fcn.14000d520
nop
lea rcx, [rsp + 0xa8]
call fcn.1400f6c50
movzx eax, al
test eax, eax
jne 0x1400f72e6
mov dword [rsp + 0x40], 1
jmp 0x1400f72ee
mov dword [rsp + 0x40], 0
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x31], al
lea rcx, [rsp + 0xa8]
call fcn.14000d410
movzx eax, byte [rsp + 0x31]
test eax, eax
je 0x1400f7333
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140320600]
lea rdx, str.https:__cdn.discordapp.com_attachments_1155801761056047166_1155832288765018132_Flags.zip
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov dword [rsp + 0x54], eax
lea rdx, str.C:WindowsFlagsG1.png
lea rcx, [rsp + 0xc8]
call fcn.14000d520
nop
lea rcx, [rsp + 0xc8]
call fcn.1400f6c50
movzx eax, al
test eax, eax
jne 0x1400f7366
mov dword [rsp + 0x44], 1
jmp 0x1400f736e
mov dword [rsp + 0x44], 0
movzx eax, byte [rsp + 0x44]
mov byte [rsp + 0x32], al
lea rcx, [rsp + 0xc8]
call fcn.14000d410
movzx eax, byte [rsp + 0x32]
test eax, eax
je 0x1400f7467
lea rcx, [0x1403206c0]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x68], rax
lea rcx, [0x140320688]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x70], rax
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
call fcn.1400f6ca0
mov edx, 8
lea rcx, [rsp + 0x130]
call fcn.140009d50
lea rdx, str.C:WindowsFlagsFlags.zip
lea rcx, [rsp + 0x130]
call fcn.1400ed110
nop
mov edx, 8
lea rcx, [rsp + 0x128]
call fcn.140009d50
lea rdx, str.C:WindowsFlags
lea rcx, [rsp + 0x128]
call fcn.1400ed110
nop
lea rcx, [rsp + 0x128]
call fcn.14000c170
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x130]
call fcn.14000c170
mov qword [rsp + 0x80], rax
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x80]
call fcn.1400f6ca0
nop
lea rcx, [rsp + 0x128]
call fcn.1400ed170
nop
lea rcx, [rsp + 0x130]
call fcn.1400ed170
lea rdx, str.C:Config1.ini
lea rcx, [rsp + 0xe8]
call fcn.14000d520
nop
lea rcx, [rsp + 0xe8]
call fcn.1400f6c50
movzx eax, al
test eax, eax
jne 0x1400f749a
mov dword [rsp + 0x48], 1
jmp 0x1400f74a2
mov dword [rsp + 0x48], 0
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x33], al
lea rcx, [rsp + 0xe8]
call fcn.14000d410
movzx eax, byte [rsp + 0x33]
test eax, eax
je 0x1400f74e7
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140320780]
lea rdx, str.https:__cdn.discordapp.com_attachments_1155801761056047166_1155839832174637087_Config1.ini
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov dword [rsp + 0x58], eax
lea rdx, [0x140320838]
lea rcx, [rsp + 0x108]
call fcn.14000d520
nop
lea rcx, [rsp + 0x108]
call fcn.1400f6c50
movzx eax, al
test eax, eax
jne 0x1400f751a
mov dword [rsp + 0x4c], 1
jmp 0x1400f7522
mov dword [rsp + 0x4c], 0
movzx eax, byte [rsp + 0x4c]
mov byte [rsp + 0x34], al
lea rcx, [rsp + 0x108]
call fcn.14000d410
movzx eax, byte [rsp + 0x34]
test eax, eax
je 0x1400f7567
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x140320828]
lea rdx, str.https:__cdn.discordapp.com_attachments_1155801761056047166_1155839832665366528_gui.ini
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov dword [rsp + 0x5c], eax
mov rcx, qword [rsp + 0x168]
xor rcx, rsp
call fcn.1401f7b40
add rsp, 0x178
ret