Function at 0x1400114c9
Capabilities:
Download url
Execute command
Receive data

Disassembly:
jmp 0x14001e070
push rbp
push rdi
sub rsp, 0x458
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0xaa
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14003d040]
xor rax, rbp
mov qword [rbp + 0x410], rax
lea rcx, [0x140045122]
call fcn.140011d61
nop
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0x264]
call fcn.14001c540
mov rcx, rax
call fcn.140011a3c
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.140011604
nop
lea rcx, [rbp + 0x2f8]
call fcn.140011c6c
mov qword [rbp + 0x3e8], rax
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x3f0], rax
mov rax, qword [rbp + 0x3f0]
mov qword [rbp + 0x3f8], rax
lea rdx, [rbp + 0x338]
mov rcx, qword [rbp + 0x3f8]
call fcn.140011244
mov qword [rbp + 0x400], rax
mov rax, qword [rbp + 0x400]
mov qword [rbp + 0x408], rax
lea r8, str.python_installer.exe
mov rdx, qword [rbp + 0x408]
lea rcx, [rbp + 0x48]
call fcn.140011c5d
nop
lea rcx, [rbp + 0x338]
call fcn.14001128a
nop
lea rcx, [rbp + 0x2f8]
call fcn.140011c58
nop
lea rdx, str.Downloading_Python_installer_from
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001119f
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.140011bfe
mov qword [rbp + 0x3e8], rax
lea rdx, [0x140011087]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x48]
call fcn.14001115e
mov qword [rbp + 0x3e8], rax
lea rcx, [rbp + 8]
call fcn.14001115e
mov qword [rbp + 0x3f0], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, qword [rbp + 0x3e8]
mov rdx, qword [rbp + 0x3f0]
xor ecx, ecx
call fcn.140011307
mov dword [rbp + 0x84], eax
cmp dword [rbp + 0x84], 0
jl 0x14001e2f3
lea rdx, str.Python_installer_downloaded_successfully.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001119f
mov qword [rbp + 0x3e8], rax
lea rdx, [0x140011087]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea r8, [rbp + 0x48]
lea rdx, [0x1400368e4]
lea rcx, [rbp + 0x378]
call fcn.14001109b
mov qword [rbp + 0x3e8], rax
mov rax, qword [rbp + 0x3e8]
mov qword [rbp + 0x3f0], rax
lea r8, str.___quiet_InstallAllUsers1_PrependPath1
mov rdx, qword [rbp + 0x3f0]
lea rcx, [rbp + 0xa8]
call fcn.140011c5d
nop
lea rcx, [rbp + 0x378]
call fcn.14001128a
nop
lea rcx, [rbp + 0xa8]
call fcn.14001115e
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_system]
nop
lea rdx, str.Python_installation_initiated.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001119f
mov qword [rbp + 0x3e8], rax
lea rdx, [0x140011087]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
xor r8d, r8d
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x3b8]
call fcn.140011a9b
nop
lea rcx, [rbp + 0x3b8]
call fcn.140011b31
nop
lea rcx, [rbp + 0x3b8]
call fcn.140011c58
nop
lea rcx, [rbp + 0xa8]
call fcn.14001128a
nop
jmp 0x14001e322
lea rdx, str.Failed_to_download_Python_installer.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001119f
mov qword [rbp + 0x3e8], rax
lea rdx, [0x140011087]
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x48]
call fcn.14001128a
nop
lea rcx, [rbp + 8]
call fcn.14001128a
nop
lea rcx, [rbp - 0x30]
lea rdx, [0x140034cf0]
call fcn.140011b13
mov rcx, qword [rbp + 0x410]
xor rcx, rbp
call fcn.140011681
lea rsp, [rbp + 0x428]
pop rdi
pop rbp
ret