Function at 0x140001122
Capabilities:
Download url
Receive data

Disassembly:
jmp 0x14000f8f0
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x178
mov rax, qword [0x140110040]
xor rax, rsp
mov qword [rsp + 0x160], rax
xor r8d, r8d
mov dl, 0x2a
mov rcx, qword [rsp + 0x188]
call fcn.140003936
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0xffffffffffffffff
je 0x14000f972
lea r9, [0x1400eb1b4]
mov r8d, 1
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x188]
call fcn.140005bcd
mov rax, qword [rsp + 0x30]
inc rax
mov r8, rax
mov dl, 0x2a
mov rcx, qword [rsp + 0x188]
call fcn.140003936
mov qword [rsp + 0x30], rax
jmp 0x14000f92a
xor r8d, r8d
mov dl, 0x40
mov rcx, qword [rsp + 0x188]
call fcn.140003936
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0xffffffffffffffff
je 0x14000f9d1
lea r9, [0x1400eb1b8]
mov r8d, 1
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x188]
call fcn.140005bcd
mov rax, qword [rsp + 0x30]
inc rax
mov r8, rax
mov dl, 0x40
mov rcx, qword [rsp + 0x188]
call fcn.140003936
mov qword [rsp + 0x30], rax
jmp 0x14000f989
xor r8d, r8d
mov dl, 0x25
mov rcx, qword [rsp + 0x188]
call fcn.140003936
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0xffffffffffffffff
je 0x14000fa30
lea r9, [0x1400eb1bc]
mov r8d, 1
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x188]
call fcn.140005bcd
mov rax, qword [rsp + 0x30]
inc rax
mov r8, rax
mov dl, 0x25
mov rcx, qword [rsp + 0x188]
call fcn.140003936
mov qword [rsp + 0x30], rax
jmp 0x14000f9e8
xor r8d, r8d
lea rdx, [0x1400eb1c0]
mov rcx, qword [rsp + 0x188]
call fcn.140002c6b
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0xffffffffffffffff
je 0x14000fa73
lea r9, [0x1400eb1c8]
mov r8d, 5
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x188]
call fcn.140005bcd
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
call fcn.1400011b8
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x40]
call fcn.14000133e
mov qword [rsp + 0x50], rax
jmp 0x14000faad
mov rax, qword [rsp + 0x38]
inc rax
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x50]
cmp qword [rsp + 0x38], rax
je 0x14000fad9
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
movzx ecx, byte [rax]
call fcn.140005eca
mov rcx, qword [rsp + 0x48]
mov byte [rcx], al
jmp 0x14000faa0
mov rcx, qword [rsp + 0x188]
call fcn.140001758
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.140004903
lea rcx, [rsp + 0x60]
call fcn.1400054e8
lea rdx, [0x1400eb1d0]
lea rcx, [rsp + 0x60]
call fcn.14000372e
mov r8, 0xffffffffffffffff
lea rdx, [0x1400eb1d4]
lea rcx, [rsp + 0x80]
call fcn.14000410b
inc rax
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x80]
call fcn.14000212b
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000540c
lea rcx, [rsp + 0xc0]
call fcn.1400051c3
lea rcx, [rsp + 0xe0]
call fcn.140003990
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xe0]
call fcn.140005191
lea rcx, [rsp + 0x60]
call fcn.140002a7c
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x80]
call fcn.140002a7c
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rsp + 0x58]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call sub.urlmon.dll_URLDownloadToFileW
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x180]
call fcn.14000582b
lea rcx, [rsp + 0xa0]
call fcn.140001e74
lea rcx, [rsp + 0xe0]
call fcn.14000198d
lea rcx, [rsp + 0x60]
call fcn.1400051c3
lea rcx, [rsp + 0x80]
call fcn.1400051c3
mov rcx, qword [rsp + 0x188]
call fcn.140001e74
mov rax, qword [rsp + 0x180]
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.140003521
add rsp, 0x178
ret