Function at 0x10075ef0
Capabilities:
Check if file exists
Download url
Encode data using xor
Receive data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x598
mov eax, dword [0x100e41c4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x1022f920]
push esi
push edi
test eax, eax
jne 0x1007603e
call fcn.10075c00
mov edx, 0x5a
xor ecx, ecx
mov al, byte [ecx + 0x100d5480]
xor al, dl
mov byte [ebp + ecx - 0x124], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x12
jb 0x10075f31
push 0x101e6d7e
lea eax, [ebp - 0x124]
mov byte [ebp - 0x112], 0
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.1003a9e0
add esp, 0xc
lea ecx, [ebp - 0x590]
call fcn.100018a0
push ecx
lea eax, [ebp - 0x594]
push eax
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x590]
call fcn.10001af0
cmp dword [ebp - 0x594], 0x1f7f505f
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
jne 0x10075fb2
lea eax, [ebp - 0x110]
push eax
call esi
test eax, eax
jne 0x1007601c
lea eax, [ebp - 0x110]
push eax
call esi
test eax, eax
je 0x10075fce
lea eax, [ebp - 0x110]
push eax
call fcn.1009e0a0
add esp, 4
mov edx, 0xce
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ecx + 0x100d5494]
xor al, dl
mov byte [ebp + ecx - 0x190], al
inc ecx
lea eax, [edx + 1]
movzx edx, al
cmp ecx, 0x3d
jb 0x10075fe0
push 0
push 0
lea eax, [ebp - 0x110]
mov byte [ebp - 0x153], 0
push eax
lea eax, [ebp - 0x190]
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
push 0x101e6efc
push 0x101e6ef8
mov edx, 0x101ef144
lea ecx, [ebp - 0x110]
call fcn.1004cde0
mov eax, dword [0x1022f920]
add esp, 8
cmp eax, 1
jne 0x10076390
cmp byte [0x101e70b9], 0
jne 0x1007606f
cmp byte [0x101e70b5], 0
jne 0x1007606f
cmp byte [0x101e70b6], 0
jne 0x1007606f
cmp byte [0x101e70b8], 0
je 0x10076390
xor eax, eax
cmp byte [0x101e70b4], 1
sete al
cmp byte [0x101eeec5], 0
mov dword [0x101eecc8], eax
je 0x10076099
cmp dword [0x101eec4c], 0
jne 0x100760a7
call fcn.1002d1a0
jmp 0x100760a7
cmp dword [0x101eec90], 0
jne 0x100760a7
call fcn.1002dce0
call fcn.1002eac0
call fcn.1000c2a0
mov ecx, dword [0x101eec48]
test ecx, ecx
jne 0x100760d8
push 0xe89
push 0x100ca27c
push str.GImGui___0___No_current_context._Did_you_call_ImGui::CreateContext___and_ImGui::SetCurrentContext_____
call fcn.1009dd6d
mov ecx, dword [0x101eec48]
add esp, 0xc
cmp dword [ecx + 0x3fd8], 0
lea edi, [ecx + 0x3fd8]
lea esi, [ecx + 8]
jg 0x10076107
push 0x709
push str.f:3_supper_tools_bandicam_bdcam_2024_srcclientiantihackd3dhook_imguiimguiimgui.h
push str.i___0__i___Size
call fcn.1009dd6d
mov ecx, dword [0x101eec48]
add esp, 0xc
cmp dword [edi], 0
mov eax, dword [edi + 8]
mov eax, dword [eax]
movss xmm0, dword [eax + 0xc]
movss dword [0x101ef148], xmm0
jg 0x1007613b
push 0x709
push str.f:3_supper_tools_bandicam_bdcam_2024_srcclientiantihackd3dhook_imguiimguiimgui.h
push str.i___0__i___Size
call fcn.1009dd6d
mov ecx, dword [0x101eec48]
add esp, 0xc
mov eax, dword [edi + 8]
mov eax, dword [eax]
movss xmm0, dword [eax + 0x10]
or dword [ecx + 0x3f14], 0x40
mov dword [ecx + 0x3f68], 0x3f000000
cmp byte [0x101e70c0], 0
movss dword [0x101eeff0], xmm0
je 0x10076176
cmp byte [0x101e70b4], 0
je 0x10076176
mov byte [esi + 0x50], 1
jmp 0x1007617a
mov byte [esi + 0x50], 0
cmp byte [0x101e70b6], 0
jne 0x100761db
cmp byte [0x101e70b8], 0
jne 0x100761db
cmp byte [0x101e70b5], 0
jne 0x100761a2
cmp byte [0x101e70b9], 0
je 0x10076352
cmp byte [0x101e7586], 0
setne al
mov byte [esi + 0x50], al
cmp byte [0x101e70b5], 0
mov byte [0x101e7586], 0
je 0x100761c4
call fcn.1005a5b0
cmp byte [0x101e70b9], 0
je 0x10076352
call fcn.10072280
jmp 0x10076352
cmp byte [0x101e70ba], 1
jne 0x10076330
mov eax, 0x100d54d4
lea ecx, [ebp - 0x120]
sub eax, 0x27026bb0
push eax
call fcn.1007ee80
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call edi
test eax, eax
je 0x1007634d
call fcn.10059c40
push 0x834d28de
lea ecx, [ebp - 0x150]
mov word [0x101e717f], 0x101
call fcn.1007ef50
mov esi, eax
lea ecx, [ebp - 0x11c]
mov eax, 0x100d54fc
sub eax, 0x7ae9cc4c
push eax
mov dword [ebp - 0x594], eax
call fcn.1007eec0
push esi
push eax
call edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
xorps xmm0, xmm0
mov word [ebp - 0x114], 0
mov esi, eax
movq qword [ebp - 0x11c], xmm0
mov byte [ebp - 0x112], 0
movaps xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x140], 0
mov word [ebp - 0x13c], 0
call fcn.10081f20
push 0x101eef14
mov edx, 0x1003fa70
mov ecx, esi
call fcn.10081f60
mov ecx, esi
call fcn.10082100
push 0x7a36237c
lea ecx, [ebp - 0x150]
call fcn.1007ef90
push dword [ebp - 0x594]
lea ecx, [ebp - 0x11c]
mov esi, eax
call fcn.1007eec0
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call edi
xorps xmm0, xmm0
mov word [ebp - 0x114], 0
mov esi, eax
movq qword [ebp - 0x11c], xmm0
mov byte [ebp - 0x112], 0
movaps xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x140], 0
mov word [ebp - 0x13c], 0
call fcn.10081f20
push 0x101eef14
mov edx, 0x1003fa70
mov ecx, esi
call fcn.10081f60
mov ecx, esi
call fcn.10082100
jmp 0x10076352
cmp dword [0x101eefd0], 0
je 0x1007634d
cmp byte [0x101e7586], 0
setne al
mov byte [esi + 0x50], al
mov byte [0x101e7586], 0
call fcn.1006dd60
call fcn.1000d9c0
call fcn.1000dcb0
cmp byte [0x101eeec5], 0
je 0x10076384
call fcn.1000ae10
mov ecx, eax
call fcn.1002cdd0
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1008d9f1
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.1000ae10
mov ecx, eax
call fcn.1002d330
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.1008d9f1
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret