Function at 0x140001af0
Capabilities:
Terminate process

Disassembly:
sub rsp, 0x48
lea rcx, str.urlmon.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
je 0x140001b27
lea rdx, str.URLDownloadToFileW
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140007028], rax
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov qword [0x140007008], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x140007018], rax
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x140007010], rax
mov dword [rsp + 0x28], 0
lea rdx, [rsp + 0x28]
mov rcx, qword [0x140007010]
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
cmp eax, 1
jne 0x140001ba0
mov eax, dword [rsp + 0x28]
and eax, 0xffffffbf
mov dword [rsp + 0x28], eax
mov edx, dword [rsp + 0x28]
mov rcx, qword [0x140007010]
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov edx, 1
lea rcx, [0x140001fe0]
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
mov byte [rsp + 0x20], 0
call fcn.140002060
cmp qword [0x140007008], 0
je 0x140001bd0
cmp qword [0x140007008], 0xffffffffffffffff
jne 0x140001be1
lea rcx, str.ERROR:_couldnt_create_heap__n
call fcn.140003770
jmp 0x140001da1
cmp qword [0x140007018], 0
je 0x140001bf5
cmp qword [0x140007018], 0xffffffffffffffff
jne 0x140001c06
lea rcx, str.ERROR:_couldnt_get_a_valid_StdOutputHandle_n
call fcn.140003770
jmp 0x140001da1
cmp qword [rsp + 0x38], 0
jne 0x140001c1f
lea rcx, str.ERROR:_couldnt_find_the_library__urlmon.dll___n
call fcn.140003770
jmp 0x140001da1
cmp qword [0x140007028], 0
jne 0x140001c3a
lea rcx, str.ERROR:_couldnt_find_the_function__URLDownloadToFileW__inside_the_library__urlmon.dll__n
call fcn.140003770
jmp 0x140001da1
call fcn.140003bb0
call fcn.140002060
lea rcx, str._nChecking_Requirements..._n
call fcn.140003770
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140002fe0
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x30], 9
mov dword [rsp + 0x2c], 0
jmp 0x140001c87
mov eax, dword [rsp + 0x2c]
inc eax
mov dword [rsp + 0x2c], eax
cmp dword [rsp + 0x2c], 9
jae 0x140001d91
mov eax, dword [rsp + 0x2c]
lea rcx, [0x140005338]
mov eax, dword [rcx + rax*4]
mov dword [rsp + 0x24], eax
xor edx, edx
mov ecx, dword [rsp + 0x24]
call fcn.140001930
movzx eax, al
test eax, eax
jne 0x140001cec
lea rcx, [0x140004ca8]
call fcn.140003770
mov ecx, dword [rsp + 0x24]
call fcn.140001f20
mov rcx, rax
call fcn.140003770
lea rcx, str.__X86__n
call fcn.140003770
xor edx, edx
mov ecx, dword [rsp + 0x24]
call fcn.1400012c0
jmp 0x140001d15
lea rcx, [0x1400051f8]
call fcn.140003770
mov ecx, dword [rsp + 0x24]
call fcn.140001f20
mov rcx, rax
call fcn.140003770
lea rcx, str.__X86__has_already_been_installed._n
call fcn.140003770
mov edx, 1
mov ecx, dword [rsp + 0x24]
call fcn.140001930
movzx eax, al
test eax, eax
jne 0x140001d63
lea rcx, str._nDownloading
call fcn.140003770
mov ecx, dword [rsp + 0x24]
call fcn.140001f20
mov rcx, rax
call fcn.140003770
lea rcx, str.__X64__n
call fcn.140003770
mov edx, 1
mov ecx, dword [rsp + 0x24]
call fcn.1400012c0
jmp 0x140001d8c
lea rcx, str.Version
call fcn.140003770
mov ecx, dword [rsp + 0x24]
call fcn.140001f20
mov rcx, rax
call fcn.140003770
lea rcx, str.__X64__has_already_been_installed._n
call fcn.140003770
jmp 0x140001c7d
call fcn.140002080
mov ecx, 0xfa0
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
cmp qword [0x140007008], 0
je 0x140001dc8
cmp qword [0x140007008], 0xffffffffffffffff
je 0x140001dc8
mov rcx, qword [0x140007008]
call qword [sym.imp.KERNEL32.dll_HeapDestroy]
mov qword [0x140007028], 0
cmp qword [rsp + 0x38], 0
je 0x140001de6
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]