Function at 0x140005410
Capabilities:
Download url
Execute command
Receive data
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x20], rax
xor edi, edi
mov dword [rsp + 0x38], edi
lea rcx, [rbp - 0x40]
call fcn.140004a40
nop
mov r13, qword [rbp - 0x40]
cmp dword [rsp + 0x38], 5
je 0x140006093
lea rbx, [0x14000b687]
movabs r15, 0x7fffffffffffffff
mov r12, qword [rbp - 0x30]
nop word [rax + rax]
lea rdx, str._nSelect_an_option:_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, str.1._C_AIO_Fix_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, str.2._.NET_1026_Fix_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, str.3._Framework_DLL_Fix_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, str.4._Disable_Paging_File_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, str.5._Exit_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, [rsp + 0x38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rsp + 0x38]
sub ecx, 1
je 0x140005a57
sub ecx, 1
je 0x140005a2f
sub ecx, 1
je 0x140005629
sub ecx, 1
je 0x14000554c
cmp ecx, 1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
je 0x140005540
lea rdx, str.Invalid_option__please_try_again.
jmp 0x140005a3d
lea rdx, str.Exiting_program.
jmp 0x140005a3d
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 2
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x140005580
lea rdx, str.Failed_to_open_registry_key.
jmp 0x1400055b3
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], rbx
mov r9d, 1
xor r8d, r8d
lea rdx, str.PagingFiles
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x1400055e2
lea rdx, str.Failed_to_disable_paging_file_in_registry.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Failed_to_disable_paging_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
jmp 0x140005a3d
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea rcx, str.systempropertiesadvanced
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Paging_file_disabled._Please_restart_your_PC.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Paging_file_was_disabled_successfully.
jmp 0x140005a36
mov rsi, r15
sub rsi, r12
cmp rsi, 0x10
jb 0x14000615e
lea r15, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r15, r13
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
lea r14, [r12 + 0x10]
mov ebx, 0xf
lea rdi, [rbp - 0x60]
cmp r14, rbx
jbe 0x1400056f0
mov rbx, r14
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x140005695
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400056c5
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400056af
xor edi, edi
jmp 0x1400056ec
cmp rcx, 0x1000
jb 0x1400056e4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000614c
mov rcx, rax
call fcn.140009138
test rax, rax
je 0x1400060de
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400056ec
call fcn.140009138
mov rdi, rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], rbx
mov r8, r12
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.onnxruntime.dll]
movups xmmword [rdi + r12], xmm0
mov byte [rdi + r14], 0
cmp rsi, 0x1d
jb 0x140006158
lea r14, [rbp - 0x40]
cmp qword [rbp - 0x28], 0xf
cmova r14, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
lea rsi, [r12 + 0x1d]
mov ebx, 0xf
lea rdi, [rsp + 0x60]
movabs r15, 0x7fffffffffffffff
cmp rsi, rbx
jbe 0x1400057d7
mov rbx, rsi
or rbx, 0xf
cmp rbx, r15
jbe 0x14000577f
mov rbx, r15
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x1400057ab
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
je 0x1400057cf
cmp rcx, 0x1000
jb 0x1400057ca
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006152
mov rcx, rax
call fcn.140009138
test rax, rax
je 0x1400060d7
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400057d2
call fcn.140009138
mov rdi, rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rbx
mov r8, r12
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.Microsoft.ML.OnnxRuntime.dll]
movups xmmword [rdi + r12], xmm0
movsd xmm0, qword [0x14000bcc8]
movsd qword [rdi + r12 + 0x10], xmm0
mov eax, dword [0x14000bcd0]
mov dword [rdi + r12 + 0x18], eax
movzx eax, byte [0x14000bcd4]
mov byte [rdi + r12 + 0x1c], al
mov byte [rdi + rsi], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
mov r8d, 0x23
lea rdx, str.C:WindowsSystem32onnxruntime.dll
lea rcx, [rsp + 0x40]
call fcn.1400073b0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov r8d, 0x30
lea rdx, str.C:WindowsSystem32Microsoft.ML.OnnxRuntime.dll
lea rcx, [rbp - 0x80]
call fcn.1400073b0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.140004610
test al, al
je 0x1400058c0
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.140004610
test al, al
je 0x1400058c0
lea rdx, str.Framework_DLLs_replaced_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140005900
lea rdx, str.Attempting_to_schedule_DLL_replacement_on_next_reboot.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x60]
call fcn.140004d80
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.140004d80
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14000593b
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005936
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400060c9
call fcn.140009130
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140005988
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005983
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400060d0
call fcn.140009130
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400059d8
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400059d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400060d7
call fcn.140009130
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x78], 0xf
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140006081
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005a25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400060de
call fcn.140009130
jmp 0x140006081
lea rdx, str.Attempting_to_fix_.NET_1026_Error__Placeholder_.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140006088
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
mov r8d, 0x63
lea rdx, str.https:__github.com_abbodi1406_vcredist_releases_download_v0.61.0_VisualCppRedist_AIO_x86_x64_61.zip
lea rcx, [rbp - 0x60]
call fcn.1400073b0
nop
mov rax, r15
sub rax, r12
cmp rax, 0x18
jb 0x140006146
lea r14, [rbp - 0x40]
mov r15, qword [rbp - 0x28]
cmp r15, 0xf
cmova r14, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rdi
lea rsi, [r12 + 0x18]
mov ebx, 0xf
lea rdi, [rsp + 0x40]
cmp rsi, rbx
jbe 0x140005b4c
mov rbx, rsi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x140005af0
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005b20
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140005b0a
xor edi, edi
jmp 0x140005b47
cmp rcx, 0x1000
jb 0x140005b3f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006164
mov rcx, rax
call fcn.140009138
test rax, rax
je 0x140006101
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005b47
call fcn.140009138
mov rdi, rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rbx
mov r8, r12
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.VisualCppRedist_AIO.zip]
movups xmmword [r12 + rdi], xmm0
movsd xmm0, qword [0x14000bbb8]
movsd qword [r12 + rdi + 0x10], xmm0
mov byte [rdi + rsi], 0
lea r14, [rbp - 0x40]
cmp r15, 0xf
cmova r14, r13
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
lea rsi, [r12 + 0xf]
mov ebx, 0xf
lea rdi, [rsp + 0x60]
cmp rsi, rbx
jbe 0x140005c3c
mov rbx, rsi
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x140005be4
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005c10
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
je 0x140005c34
cmp rcx, 0x1000
jb 0x140005c2f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000616a
mov rcx, rax
call fcn.140009138
test rax, rax
je 0x1400060fa
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005c37
call fcn.140009138
mov rdi, rax
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], rbx
mov r8, r12
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str.ExtractedFiles]
movsd qword [r12 + rdi], xmm0
mov eax, dword [0x14000bbd0]
mov dword [r12 + rdi + 8], eax
movzx eax, word [0x14000bbd4]
mov word [r12 + rdi + 0xc], ax
movzx eax, byte [0x14000bbd6]
mov byte [r12 + rdi + 0xe], al
mov byte [rdi + rsi], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r13, qword [rsp + 0x70]
sub rax, r13
cmp rax, 0x12
jb 0x140006176
lea r15, [rsp + 0x60]
mov rsi, qword [rsp + 0x78]
cmp rsi, 0xf
cmova r15, qword [rsp + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xor eax, eax
mov qword [rbp - 0x70], rax
mov qword [rbp - 0x68], rax
lea r14, [r13 + 0x12]
mov ebx, 0xf
lea rdi, [rbp - 0x80]
cmp r14, rbx
jbe 0x140005d56
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140005cff
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140005d2b
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
je 0x140005d4f
cmp rcx, 0x1000
jb 0x140005d4a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140006170
mov rcx, rax
call fcn.140009138
test rax, rax
je 0x1400060f3
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140005d52
call fcn.140009138
mov rdi, rax
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], rbx
mov r8, r13
mov rdx, r15
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str._vc_redist.x86.exe]
movups xmmword [rdi + r13], xmm0
movzx eax, word [0x14000bbe8]
mov word [rdi + r13 + 0x10], ax
mov byte [rdi + r14], 0
lea r8, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova r8, qword [rbp - 0x60]
add r8, qword [rbp - 0x50]
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 0xf
cmova rdx, qword [rbp - 0x60]
lea rcx, [rbp]
call fcn.140006900
nop
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r8, qword [rsp + 0x40]
add r8, qword [rsp + 0x50]
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova rdx, qword [rsp + 0x40]
lea rcx, [rbp - 0x20]
call fcn.140006900
lea r8, [rbp - 0x20]
cmp qword [rbp - 8], 7
cmova r8, qword [rbp - 0x20]
lea rdx, [rbp]
cmp qword [rbp + 0x18], 7
cmova rdx, qword [rbp]
xor edi, edi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
mov ebx, eax
mov rdx, qword [rbp - 8]
cmp rdx, 7
jbe 0x140005e54
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400060e5
call fcn.140009130
mov qword [rbp - 0x10], rdi
mov qword [rbp - 8], 7
mov word [rbp - 0x20], di
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x140005ea4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005e9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400060ec
call fcn.140009130
test ebx, ebx
jne 0x140005f3f
lea rdx, str.Downloaded_file_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.140004060
test al, al
je 0x140005f15
lea rdx, str.Extracted_files_successfully.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp - 0x80]
call fcn.1400043e0
mov rsi, qword [rsp + 0x78]
jmp 0x140005f63
lea rdx, str.Failed_to_extract_zip_file.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rsi, qword [rsp + 0x78]
jmp 0x140005f63
lea rdx, str.Download_failed.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400066e0
lea rdx, [0x1400068c0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140005f9e
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005f99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400060f3
call fcn.140009130
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
cmp rsi, 0xf
jbe 0x140005fe8
lea rdx, [rsi + 1]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005fe2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400060fa
call fcn.140009130
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140006025
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006020
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006101
call fcn.140009130
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140006073
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000606e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006108
call fcn.140009130
movabs r15, 0x7fffffffffffffff
mov r13, qword [rbp - 0x40]
lea rbx, [0x14000b687]
cmp dword [rsp + 0x38], 5
jne 0x140005480
mov rax, qword [rbp - 0x28]
cmp rax, 0xf
jbe 0x140006117
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x14000610f
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000610f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, r13
call fcn.140009130
xor eax, eax
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.140009110
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011a0
nop
call fcn.140001100
nop
call fcn.140001100
int3
call fcn.1400011a0
nop
call fcn.1400011a0
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.140001100
int3
call fcn.1400011a0
int3