Function at 0x140003fd0
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov r14, r9
mov rsi, r8
mov rbx, rdx
mov rbp, rcx
call fcn.140002060
mov rdx, rbx
mov rcx, rax
mov rdi, rax
call fcn.140002490
lea rdx, [0x140004a40]
mov rcx, rdi
call fcn.140002470
mov rdx, rbp
mov rcx, rdi
call fcn.140002480
mov rdx, rsi
mov rcx, rdi
call fcn.1400023f0
mov rcx, rdi
call fcn.140002120
cmp byte [rdi + 0x18], 0
jne 0x140003f96
lea rbx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
mov edx, 0x5c
mov rcx, rbx
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x140003f76
mov edx, 0x5c
mov rcx, rbx
call sub.VCRUNTIME140.dll_strrchr
lea rbx, [rax + 1]
mov rcx, rdi
call fcn.140002050
mov r9, rax
lea rcx, str.Failed_to_dowload_a_file:__s
mov r8d, 0x81
mov rdx, rbx
call fcn.140002580
mov rcx, rdi
call fcn.140001f80
mov r8, r14
mov rdx, rsi
mov rcx, rbp
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r14
jmp 0x140003fd0
push rbp
push rbx
push rsi
push r12
push r13
push r14
lea rbp, [rsp - 0x25b8]
mov eax, 0x26b8
call fcn.1400073d0
sub rsp, rax
mov rax, qword [0x140017de8]
xor rax, rsp
mov qword [rbp + 0x25a0], rax
mov rbx, rdx
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
mov edx, 0x5c
mov r12, r8
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x140004032
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x140004039
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
mov r9, rbx
lea rcx, str.Extracting___s_...
mov r8d, 0x1b
mov rdx, rax
call fcn.1400024a0
mov rcx, rbx
call fcn.1400060c0
mov rsi, rax
test rax, rax
jne 0x1400040a5
lea edx, [rax + 0x5c]
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x140004089
lea edx, [rsi + 0x5c]
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x140004090
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
mov r8d, 0x1f
lea rcx, str.Couldnt_find_a_file_
mov rdx, rax
call fcn.140002580
lea rdx, [rsp + 0x40]
mov rcx, rsi
call fcn.140005f60
test eax, eax
je 0x1400040fe
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x1400040e2
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x1400040e9
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
mov r8d, 0x23
lea rcx, str.Doesnt_seem_to_be_a_zip_file...
mov rdx, rax
call fcn.140002580
xor r13d, r13d
mov qword [rsp + 0x26f0], rdi
mov r14d, r13d
mov qword [rsp + 0x26b0], r15
cmp dword [rsp + 0x40], r13d
jbe 0x140004563
lea r15, [rbp + 0x3a0]
nop word [rax + rax]
mov dword [rsp + 0x38], r13d
lea r8, [rbp + 0x3a0]
mov qword [rsp + 0x30], r13
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x28], r13d
mov r9d, 0x200
mov rcx, rsi
mov qword [rsp + 0x20], r13
call fcn.140005e70
test eax, eax
je 0x1400041aa
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x14000418e
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x140004195
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
mov r8d, 0x2d
lea rcx, str.Could_not_read_file_info.
mov rdx, rax
call fcn.140002580
lea rcx, [rbp + 0x3a0]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
cmp byte [rcx + rax + 1], r13b
lea rax, [rax + 1]
jne 0x1400041c0
movzx ecx, byte [rax + r15 - 1]
cmp cl, 0x2f
je 0x140004476
cmp cl, 0x5c
je 0x140004476
lea rax, [rbp + 0x3a0]
mov r9, r12
lea r8, str._s_s
mov qword [rsp + 0x20], rax
mov edx, 0x200
lea rcx, [rbp + 0x1a0]
call fcn.140001df0
lea rax, [rbp + 0x1a0]
mov rdx, 0xffffffffffffffff
mov rbx, r13
nop dword [rax + rax]
inc rdx
cmp byte [rax + rdx], bl
jne 0x140004220
mov rax, r13
test rdx, rdx
je 0x14000424d
movzx ecx, byte [rbp + rax + 0x1a0]
cmp cl, 0x5c
je 0x140004242
cmp cl, 0x2f
jne 0x140004245
mov rbx, rax
inc rax
cmp rax, rdx
jb 0x140004230
lea r9, [rbp + 0x1a0]
mov edx, 0x200
lea r8, [0x1400098ec]
lea rcx, [rbp - 0x60]
call fcn.140001df0
cmp rbx, 0x200
jae 0x14000459b
mov edx, 0x5c
mov byte [rbp + rbx - 0x60], r13b
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x1400042a7
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x1400042ae
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
lea r9, [rbp - 0x60]
mov r8d, 0x4d
mov rdx, rax
lea rcx, str.BaseDir:__s
call fcn.1400024a0
lea rcx, [rbp - 0x60]
call fcn.1400032d0
test al, al
jne 0x1400042dd
lea rcx, [rbp - 0x60]
call fcn.1400032f0
mov rcx, rsi
call fcn.1400060d0
test eax, eax
je 0x140004338
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x140004315
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x14000431c
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
lea r9, [rbp + 0x3a0]
mov r8d, 0x52
mov rdx, rax
lea rcx, str.Couldnt_open_zip_file___s_
call fcn.140002580
lea rdx, [0x140009a10]
lea rcx, [rbp + 0x1a0]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rdi, rax
test rax, rax
jne 0x1400043a0
lea edx, [rax + 0x5c]
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x14000437c
lea edx, [rdi + 0x5c]
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x140004383
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
lea r9, [rbp + 0x1a0]
mov r8d, 0x56
mov rdx, rax
lea rcx, str.Failed_to_open__s
call fcn.140002580
nop
mov r8d, 0x2000
lea rdx, [rbp + 0x5a0]
mov rcx, rsi
call fcn.140006bb0
movsxd rbx, eax
test eax, eax
js 0x1400043d9
jle 0x140004424
mov rdx, rbx
lea rcx, [rbp + 0x5a0]
mov r9, rdi
mov r8d, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
jmp 0x1400043a0
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x140004405
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x14000440c
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
mov r9d, ebx
lea rcx, str.Failed_to_read:_code__d
mov r8d, 0x5d
mov rdx, rax
call fcn.140002580
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x140004459
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x140004460
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
lea r9, [rbp + 0x1a0]
mov r8d, 0x66
lea rcx, str.File__s
jmp 0x1400044e7
lea rax, [rbp + 0x3a0]
mov r9, r12
lea r8, str._s_s
mov qword [rsp + 0x20], rax
mov edx, 0x200
lea rcx, [rbp - 0x60]
call fcn.140001df0
lea rcx, [rbp - 0x60]
call fcn.1400032f0
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x1400044cf
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x1400044d6
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
lea r9, [rbp - 0x60]
mov r8d, 0x38
lea rcx, str.Dir__s
mov rdx, rax
call fcn.1400024a0
mov rcx, rsi
call fcn.140005db0
lea eax, [r14 + 1]
mov r14d, eax
cmp eax, dword [rsp + 0x40]
jae 0x140004558
mov rcx, rsi
call fcn.140006000
test eax, eax
je 0x140004558
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
test rax, rax
je 0x14000453c
mov edx, 0x5c
lea rcx, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
call sub.VCRUNTIME140.dll_strrchr
inc rax
jmp 0x140004543
lea rax, str.C:UsershanderDocumentsdisaster_launcher_task_install.c
mov r8d, WSAStartup
lea rcx, str.Couldnt_read_next_file
mov rdx, rax
call fcn.140002580
cmp r14d, dword [rsp + 0x40]
jb 0x140004130
mov rcx, rsi
call fcn.140005d60
mov r15, qword [rsp + 0x26b0]
mov rdi, qword [rsp + 0x26f0]
mov rcx, qword [rbp + 0x25a0]
xor rcx, rsp
call fcn.140007100
add rsp, 0x26b8
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret
call fcn.140007228
int3