Function at 0x140043560
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push rbp
push rbx
push rdi
push r13
push r15
lea rbp, [rsp - 0x420]
sub rsp, 0x520
mov rax, qword [0x14026fe68]
xor rax, rsp
mov qword [rbp + 0x400], rax
mov rbx, rdx
mov qword [rbp - 0x60], rdx
mov r13, rcx
lea rdx, str.nv_agent_path
lea rcx, [rbp - 0x58]
mov r15, r8
call fcn.140004fc0
mov rcx, qword [r13]
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x78]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x50]
lea rdi, [0x140201800]
mov qword [rbp - 0x58], rdi
test rcx, rcx
je 0x1400435e4
cmp byte [rbp - 0x48], 0
je 0x1400435e4
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x50]
mov edx, SafeArrayPutElement
call fcn.14014f3b8
lea rdx, str.nv_agent
lea rcx, [rbp - 0x40]
call fcn.140004fc0
mov rcx, qword [r13]
lea r8, [rbp - 0x40]
lea rdx, [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x38]
mov qword [rbp - 0x40], rdi
test rcx, rcx
je 0x14004362d
cmp byte [rbp - 0x30], 0
je 0x14004362d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x38]
mov edx, SafeArrayPutElement
call fcn.14014f3b8
lea rdx, str.nv_agent_plugin_path
lea rcx, [rbp - 0x28]
call fcn.140004fc0
mov rcx, qword [r13]
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x20]
mov qword [rbp - 0x28], rdi
test rcx, rcx
je 0x140043676
cmp byte [rbp - 0x18], 0
je 0x140043676
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x20]
mov edx, SafeArrayPutElement
call fcn.14014f3b8
mov rdx, qword [rbx + 0x188]
mov qword [rsp + 0x568], rsi
test rdx, rdx
je 0x1400436c6
mov r8, qword [rdx + 8]
test r8, r8
je 0x1400436c6
mov rdx, qword [rdx]
lea rcx, [rbp + 0xc0]
xor esi, esi
mov qword [rbp + 0xd8], 7
mov qword [rbp + 0xd0], rsi
mov word [rbp + 0xc0], si
call fcn.140025540
mov rdx, qword [rbx + 0x188]
jmp 0x1400436e1
xor esi, esi
mov qword [rbp + 0xd8], 7
mov qword [rbp + 0xd0], rsi
mov word [rbp + 0xc0], si
test rdx, rdx
je 0x140043719
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043719
mov rdx, qword [rdx]
lea rcx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], si
call fcn.140025540
jmp 0x140043732
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], si
mov rdx, qword [rbp - 0x70]
mov qword [rsp + 0x518], r12
mov qword [rsp + 0x510], r14
test rdx, rdx
je 0x140043b45
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043b45
mov rdx, qword [rdx]
lea rcx, [rbp + 0x1c0]
movdqa xmm0, xmmword [0x140204350]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1c0], si
call fcn.140025540
mov r8, qword [rbp + 0x1d8]
mov ebx, 0x5c
mov rdx, qword [rbp + 0x1d0]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x1400437d0
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x1d0], rcx
lea rax, [rbp + 0x1c0]
cmovae rax, qword [rbp + 0x1c0]
mov word [rax + rdx*2], bx
mov word [rax + rcx*2], si
lea rax, [rbp + 0x1c0]
jmp 0x1400437f6
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x1402048fc]
lea rcx, [rbp + 0x1c0]
lea edx, [r8 + 1]
call fcn.1400365a0
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x200]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
movq r14, xmm0
mov word [rax], si
movq r8, xmm1
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
mov rax, rdx
movups xmmword [rbp + 0x200], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 8
movdqu xmmword [rbp + 0x210], xmm1
cmovae r9, r14
sub rax, rcx
cmp r8, rax
ja 0x140043893
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
cmovae rbx, qword [rbp + 0xc0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.14017f360
mov word [rbx + rdi*2], si
mov ebx, 0x5c
jmp 0x1400438bf
lfence
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0xc0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400365a0
mov r12, qword [rbp + 0x218]
mov r14, qword [rbp + 0x200]
cmp r12, 8
jb 0x1400438fa
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400438f2
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004494c
mov rcx, r14
call fcn.14014f3b8
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 8
jb 0x140043940
mov rcx, qword [rbp + 0x1c0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004393b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004494c
call fcn.14014f3b8
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x14004397a
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004397a
mov rdx, qword [rdx]
lea rcx, [rbp + 0x180]
movdqa xmm0, xmmword [0x140204350]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], si
call fcn.140025540
jmp 0x140043991
movdqa xmm0, xmmword [0x140204350]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], si
mov r8, qword [rbp + 0x198]
mov rdx, qword [rbp + 0x190]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x1400439da
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x190], rcx
lea rax, [rbp + 0x180]
cmovae rax, qword [rbp + 0x180]
mov word [rax + rdx*2], bx
mov word [rax + rcx*2], si
lea rax, [rbp + 0x180]
jmp 0x140043a00
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x1402048fc]
lea rcx, [rbp + 0x180]
lea edx, [r8 + 1]
call fcn.1400365a0
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x220]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
movq r14, xmm0
mov word [rax], si
movq r8, xmm1
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0xf0]
mov rax, rdx
movups xmmword [rbp + 0x220], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 8
movdqu xmmword [rbp + 0x230], xmm1
cmovae r9, r14
sub rax, rcx
cmp r8, rax
ja 0x140043a98
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rdi
cmovae rbx, qword [rbp + 0xe0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.14017f360
mov word [rbx + rdi*2], si
jmp 0x140043ac4
lfence
mov rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400365a0
mov r12, qword [rbp + 0x238]
mov r14, qword [rbp + 0x220]
cmp r12, 8
jb 0x140043aff
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140043af7
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044952
mov rcx, r14
call fcn.14014f3b8
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x140043b45
mov rcx, qword [rbp + 0x180]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043b40
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044952
call fcn.14014f3b8
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x140043b9d
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043b9d
movdqa xmm0, xmmword [0x140204350]
lea rcx, [rbp + 0x140]
mov rdx, qword [rdx]
movdqu xmmword [rbp + 0x150], xmm0
mov word [rbp + 0x140], si
call fcn.140025540
mov r12, qword [rbp + 0x158]
lea r9, [rbp + 0x140]
mov r14, qword [rbp + 0x140]
cmp r12, 8
cmovae r9, r14
jmp 0x140043bc9
movdqa xmm0, xmmword [0x140204350]
lea r9, [rbp + 0x140]
movdqu xmmword [rbp + 0x150], xmm0
mov r12, qword [rbp + 0x158]
mov word [rbp + 0x140], si
mov r14, qword [rbp + 0x140]
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
mov rax, rdx
mov r8, qword [rbp + 0x150]
sub rax, rcx
cmp r8, rax
ja 0x140043c1c
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
cmovae rbx, qword [rbp + 0xc0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.14017f360
mov word [rbx + rdi*2], si
jmp 0x140043c48
lfence
mov rdx, qword [rbp + 0x150]
lea rcx, [rbp + 0xc0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400365a0
mov r12, qword [rbp + 0x158]
mov r14, qword [rbp + 0x140]
cmp r12, 8
jb 0x140043c83
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140043c7b
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044958
mov rcx, r14
call fcn.14014f3b8
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140043cdb
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043cdb
movdqa xmm0, xmmword [0x140204350]
lea rcx, [rbp + 0x160]
mov rdx, qword [rdx]
movdqu xmmword [rbp + 0x170], xmm0
mov word [rbp + 0x160], si
call fcn.140025540
mov r12, qword [rbp + 0x178]
lea r9, [rbp + 0x160]
mov r14, qword [rbp + 0x160]
cmp r12, 8
cmovae r9, r14
jmp 0x140043d07
movdqa xmm0, xmmword [0x140204350]
lea r9, [rbp + 0x160]
movdqu xmmword [rbp + 0x170], xmm0
mov r12, qword [rbp + 0x178]
mov word [rbp + 0x160], si
mov r14, qword [rbp + 0x160]
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0xf0]
mov rax, rdx
mov r8, qword [rbp + 0x170]
sub rax, rcx
cmp r8, rax
ja 0x140043d5a
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rdi
cmovae rbx, qword [rbp + 0xe0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.14017f360
mov word [rbx + rdi*2], si
jmp 0x140043d86
lfence
mov rdx, qword [rbp + 0x170]
lea rcx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400365a0
mov r12, qword [rbp + 0x178]
mov r14, qword [rbp + 0x160]
cmp r12, 8
jb 0x140043dc1
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140043db9
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044958
mov rcx, r14
call fcn.14014f3b8
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x100]
movdqa xmm0, xmmword [0x140204350]
inc rdx
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x100], si
call fcn.1400454f0
mov r8, qword [rbp + 0x118]
mov r12d, 0x22
mov rdx, qword [rbp + 0x110]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140043e37
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
cmovae rax, qword [rbp + 0x100]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
jmp 0x140043e5d
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x140204ec0]
lea rcx, [rbp + 0x100]
lea edx, [r8 + 1]
call fcn.1400365a0
cmp qword [rbp + 0xd8], 8
lea r9, [rbp + 0xc0]
mov rcx, qword [rbp + 0x118]
cmovae r9, qword [rbp + 0xc0]
mov rax, rcx
mov r14, qword [rbp + 0x110]
mov rdi, qword [rbp + 0xd0]
sub rax, r14
cmp rdi, rax
ja 0x140043ecc
cmp rcx, 8
lea rax, [rdi + r14]
lea rbx, [rbp + 0x100]
mov qword [rbp + 0x110], rax
cmovae rbx, qword [rbp + 0x100]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + r14*2]
call fcn.14017f360
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
jmp 0x140043eea
lfence
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x100]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400365a0
mov r8, qword [rbp + 0x118]
mov rdx, qword [rbp + 0x110]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140043f34
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
cmovae rax, qword [rbp + 0x100]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x100]
jmp 0x140043f5a
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x140204ec0]
lea rcx, [rbp + 0x100]
lea edx, [r8 + 1]
call fcn.1400365a0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x118]
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm1
cmp rdx, 8
jb 0x140043fc4
mov rcx, qword [rbp + 0x100]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043fbf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004495e
call fcn.14014f3b8
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x120]
movdqa xmm0, xmmword [0x140204350]
inc rdx
movdqu xmmword [rbp + 0x130], xmm0
mov word [rbp + 0x120], si
call fcn.1400454f0
mov r8, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140044034
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
cmovae rax, qword [rbp + 0x120]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
jmp 0x14004405a
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x140204ec0]
lea rcx, [rbp + 0x120]
lea edx, [r8 + 1]
call fcn.1400365a0
cmp qword [rbp + 0xf8], 8
lea r9, [rbp + 0xe0]
mov rcx, qword [rbp + 0x138]
cmovae r9, qword [rbp + 0xe0]
mov rax, rcx
mov r14, qword [rbp + 0x130]
mov rdi, qword [rbp + 0xf0]
sub rax, r14
cmp rdi, rax
ja 0x1400440c9
cmp rcx, 8
lea rax, [r14 + rdi]
lea rbx, [rbp + 0x120]
mov qword [rbp + 0x130], rax
cmovae rbx, qword [rbp + 0x120]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + r14*2]
call fcn.14017f360
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
jmp 0x1400440e7
lfence
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x120]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400365a0
mov r8, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140044131
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
cmovae rax, qword [rbp + 0x120]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x120]
jmp 0x140044157
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x140204ec0]
lea rcx, [rbp + 0x120]
lea edx, [r8 + 1]
call fcn.1400365a0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x138]
movups xmmword [rbp + 0x300], xmm0
movups xmmword [rbp + 0x310], xmm1
cmp rdx, 8
jb 0x1400441c1
mov rcx, qword [rbp + 0x120]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400441bc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044946
call fcn.14014f3b8
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
cmovae rcx, qword [rbp + 0xc0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140044390
test r15, r15
je 0x140044848
lea r8d, [rax + 0x26]
mov dword [r15], 0x80f31101
lea rdx, str.The_path_to_the_agent_does_not_exist.
lea rcx, [r15 + 8]
call fcn.1400137c0
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 0x78]
call fcn.140010130
mov r9d, 6
lea r8, str.path:
xor edx, edx
mov rcx, rax
call fcn.140015670
mov r8d, 9
lea rdx, str.__agent:
lea rcx, [rbp + 0x2e0]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2f0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1400133d0
lea rdx, [rbp + 0x340]
lea rcx, [rsp + 0x70]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x250], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140010130
mov rdx, qword [rbp + 0x258]
mov rcx, rax
mov r9, qword [rbp + 0x250]
mov r8, qword [rax + 0x10]
mov rax, rdx
sub rax, r9
cmp r8, rax
jbe 0x1400442eb
mov rax, qword [rcx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x1400442eb
cmp rdx, 0x10
lea r8, [rbp + 0x240]
cmovae r8, qword [rbp + 0x240]
xor edx, edx
call fcn.140015670
jmp 0x140044304
cmp qword [rcx + 0x18], 0x10
jb 0x1400442f5
mov rcx, qword [rcx]
mov rdx, rcx
lea rcx, [rbp + 0x240]
call fcn.1400133d0
movups xmm1, xmmword [rax + 0x10]
lea rdx, [rbp + 0x1e0]
movups xmm0, xmmword [rax]
mov byte [rax], 0
lea rcx, [r15 + 8]
movups xmmword [rbp + 0x1f0], xmm1
cmp qword [rbp + 0x1f8], 0x10
mov r8, qword [rbp + 0x1f0]
movups xmmword [rbp + 0x1e0], xmm0
cmovae rdx, qword [rbp + 0x1e0]
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rsi
call fcn.1400133d0
lea rcx, [rbp + 0x1e0]
call fcn.140007410
lea rcx, [rbp + 0x240]
call fcn.140007410
lea rcx, [rbp + 0x2e0]
call fcn.140007410
lea rcx, [rbp + 0x320]
call fcn.140007410
lea rcx, [rbp + 0x340]
call fcn.140007410
jmp 0x140044848
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x1400443e2
cmp qword [rax + 8], 0
je 0x1400443e2
cmp qword [rbp + 0xf8], 8
lea rcx, [rbp + 0xe0]
cmovae rcx, qword [rbp + 0xe0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1400443e2
test r15, r15
je 0x140044848
mov dword [r15], 0x80f31102
lea r8d, [rax + 0x27]
lea rdx, str.The_path_to_the_plugins_does_not_exist.
jmp 0x14004483f
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x50], esi
cmovae rcx, qword [rbp + 0xc0]
call fcn.14009d350
test eax, eax
je 0x140044826
cmp dword [rsp + 0x50], 0
je 0x140044826
cmp qword [rbp + 0x2b8], 8
lea rdi, [rbp + 0x2a0]
mov r14, qword [rbp + 0x2b0]
cmovae rdi, qword [rbp + 0x2a0]
cmp r14, 8
jae 0x140044455
movups xmm0, xmmword [rdi]
mov qword [rbp + 0x1b8], 7
movups xmmword [rbp + 0x1a0], xmm0
jmp 0x1400444b3
movabs rax, 0x7ffffffffffffffe
movabs rdx, 0x7fffffffffffffff
mov r8, 0xffffffffffffffff
mov rbx, r14
or rbx, 7
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, rdx
lea rcx, [rax + rax]
cmova rcx, r8
call fcn.140002c20
lea r8, [r14*2 + 2]
mov qword [rbp + 0x1a0], rax
mov rdx, rdi
mov rcx, rax
call fcn.14017f360
mov qword [rbp + 0x1b8], rbx
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x1b0], r14
test rax, rax
je 0x14004450e
cmp qword [rax + 8], 0
je 0x14004450e
lea r8, [rbp + 0x300]
lea rdx, str.__d
lea rcx, [rbp + 0x360]
call fcn.1400412a0
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x1400444f2
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x1a0]
call fcn.14003ab80
lea rcx, [rbp + 0x360]
call fcn.140025390
lea rdx, str.nv_agent_options
lea rcx, [rbp + 8]
call fcn.140004fc0
mov rcx, qword [r13]
lea rdx, [rbp + 8]
mov rax, qword [rcx]
call qword [rax + 0x58]
lea rcx, [rbp + 8]
movzx ebx, al
call fcn.140006fe0
test bl, bl
je 0x140044658
lea rdx, str.nv_agent_options
lea rcx, [rbp + 0x20]
call fcn.140004fc0
mov rcx, qword [r13]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x60]
lea rcx, [rbp + 0x20]
call fcn.140006fe0
mov rdx, qword [rbp + 0x40]
test rdx, rdx
je 0x1400445a5
mov r8, qword [rdx + 8]
test r8, r8
je 0x1400445a5
mov rdx, qword [rdx]
lea rcx, [rbp + 0x260]
movdqa xmm0, xmmword [0x140204350]
movdqu xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], si
call fcn.140025540
jmp 0x1400445bc
movdqa xmm0, xmmword [0x140204350]
movdqu xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], si
lea r8, [0x140204fa4]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x3a0]
call fcn.1400411f0
mov rdx, rax
lea r8, [rbp + 0x260]
lea rcx, [rbp + 0x380]
call fcn.140040ff0
mov rbx, rax
lea rax, [rbp + 0x1a0]
cmp rax, rbx
je 0x14004462b
lea rcx, [rbp + 0x1a0]
call fcn.140025390
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
lea rcx, [rbp + 0x380]
call fcn.140025390
lea rcx, [rbp + 0x3a0]
call fcn.140025390
lea rcx, [rbp + 0x260]
call fcn.140025390
lea rcx, [rbp + 0x38]
call fcn.140006fe0
mov rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0x50], 0x68
mov dword [rbp + 0xb4], eax
movups xmmword [rbp + 0x54], xmm0
movups xmmword [rbp + 0x64], xmm0
movups xmmword [rbp + 0x74], xmm0
movups xmmword [rbp + 0x84], xmm0
movups xmmword [rbp + 0x94], xmm0
movups xmmword [rbp + 0xa4], xmm0
test rdx, rdx
je 0x1400446c5
mov r8, qword [rdx + 8]
test r8, r8
je 0x1400446c5
mov rdx, qword [rdx]
lea rcx, [rbp + 0x280]
movdqa xmm0, xmmword [0x140204350]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], si
call fcn.140025540
jmp 0x1400446dc
movdqa xmm0, xmmword [0x140204350]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], si
mov rcx, qword [rbp - 0x60]
lea rdx, [rbp + 0x3e0]
add rcx, 0x180
call fcn.140031b00
mov rdx, rax
lea r8, [rbp + 0x280]
lea rcx, [rbp + 0x3c0]
call fcn.140040ff0
mov rdx, rax
lea r8, [0x1402048fc]
lea rcx, [rbp + 0x2c0]
call fcn.140041180
lea rcx, [rbp + 0x3c0]
call fcn.140025390
lea rcx, [rbp + 0x3e0]
call fcn.140025390
lea rcx, [rbp + 0x280]
call fcn.140025390
xor eax, eax
lea r8, [rbp - 0x10]
cmp qword [rbp + 0x2d8], 8
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x48], r8
lea rcx, [rbp + 0xc0]
mov qword [rbp], rax
lea r8, [rbp + 0x50]
mov qword [rsp + 0x40], r8
lea rax, [rbp + 0x2c0]
cmovae rax, qword [rbp + 0x2c0]
xorps xmm0, xmm0
cmp qword [rbp + 0x1b8], 8
mov qword [rsp + 0x38], rax
cmovae rdx, qword [rbp + 0x1a0]
cmp qword [rbp + 0xd8], 8
mov qword [rsp + 0x30], rsi
cmovae rcx, qword [rbp + 0xc0]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], 0x8000000
movups xmmword [rbp - 0x10], xmm0
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 1
je 0x1400447f6
test r15, r15
je 0x1400447f2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [r15 + 8]
mov r8d, 0x1d
lea rdx, str.Unable_to_create_the_process.
mov dword [r15], eax
call fcn.1400137c0
xor bl, bl
jmp 0x14004480c
mov rcx, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
lea rcx, [rbp + 0x2c0]
call fcn.140025390
lea rcx, [rbp + 0x1a0]
call fcn.140025390
jmp 0x14004484a
test r15, r15
je 0x140044848
mov dword [r15], 0x80f31103
lea rdx, str.The_agent_binary_is_either_unsigned_or_the_signature_could_not_be_verified.
mov r8d, 0x4b
lea rcx, [r15 + 8]
call fcn.1400137c0
xor bl, bl
lea rcx, [rbp + 0x300]
call fcn.140025390
lea rcx, [rbp + 0x2a0]
call fcn.140025390
lea rcx, [rbp + 0xe0]
call fcn.140025390
lea rcx, [rbp + 0xc0]
call fcn.140025390
mov rcx, qword [rsp + 0x60]
lea rdi, [0x140201800]
mov qword [rsp + 0x58], rdi
test rcx, rcx
je 0x1400448b5
cmp byte [rsp + 0x68], 0
je 0x1400448ab
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x60]
mov edx, SafeArrayPutElement
call fcn.14014f3b8
mov qword [rsp + 0x60], rsi
mov byte [rsp + 0x68], 0
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x70], rdi
test rcx, rcx
je 0x1400448e7
cmp byte [rbp - 0x80], 0
je 0x1400448de
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x78]
mov edx, SafeArrayPutElement
call fcn.14014f3b8
mov qword [rsp + 0x78], rsi
mov byte [rbp - 0x80], 0
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x78], rdi
test rcx, rcx
je 0x14004490d
cmp byte [rbp - 0x68], 0
je 0x14004490d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x70]
mov edx, SafeArrayPutElement
call fcn.14014f3b8
mov r14, qword [rsp + 0x510]
movzx eax, bl
mov r12, qword [rsp + 0x518]
mov rsi, qword [rsp + 0x568]
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.14014f460
add rsp, 0x520
pop r15
pop r13
pop rdi
pop rbx
pop rbp
ret
call fcn.14018d87c
int3
call fcn.14018d87c
int3
call fcn.14018d87c
int3
call fcn.14018d87c
int3
call fcn.14018d87c
int3