Function at 0x14004a500
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push rbp
push rbx
push rdi
push r13
push r15
lea rbp, [rsp - 0x420]
sub rsp, 0x520
mov rax, qword [0x140278eb8]
xor rax, rsp
mov qword [rbp + 0x400], rax
mov rbx, rdx
mov qword [rbp - 0x60], rdx
mov r13, rcx
lea rdx, str.nv_agent_path
lea rcx, [rbp - 0x58]
mov r15, r8
call fcn.140005020
mov rcx, qword [r13]
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x78]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x50]
lea rdi, [0x140209820]
mov qword [rbp - 0x58], rdi
test rcx, rcx
je 0x14004a584
cmp byte [rbp - 0x48], 0
je 0x14004a584
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x50]
mov edx, SafeArrayPutElement
call fcn.1401574cc
lea rdx, str.nv_agent
lea rcx, [rbp - 0x40]
call fcn.140005020
mov rcx, qword [r13]
lea r8, [rbp - 0x40]
lea rdx, [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x38]
mov qword [rbp - 0x40], rdi
test rcx, rcx
je 0x14004a5cd
cmp byte [rbp - 0x30], 0
je 0x14004a5cd
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x38]
mov edx, SafeArrayPutElement
call fcn.1401574cc
lea rdx, str.nv_agent_plugin_path
lea rcx, [rbp - 0x28]
call fcn.140005020
mov rcx, qword [r13]
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x20]
mov qword [rbp - 0x28], rdi
test rcx, rcx
je 0x14004a616
cmp byte [rbp - 0x18], 0
je 0x14004a616
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x20]
mov edx, SafeArrayPutElement
call fcn.1401574cc
mov rdx, qword [rbx + 0x188]
mov qword [rsp + 0x568], rsi
test rdx, rdx
je 0x14004a666
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a666
mov rdx, qword [rdx]
lea rcx, [rbp + 0xc0]
xor esi, esi
mov qword [rbp + 0xd8], 7
mov qword [rbp + 0xd0], rsi
mov word [rbp + 0xc0], si
call fcn.1400258a0
mov rdx, qword [rbx + 0x188]
jmp 0x14004a681
xor esi, esi
mov qword [rbp + 0xd8], 7
mov qword [rbp + 0xd0], rsi
mov word [rbp + 0xc0], si
test rdx, rdx
je 0x14004a6b9
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a6b9
mov rdx, qword [rdx]
lea rcx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], si
call fcn.1400258a0
jmp 0x14004a6d2
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], si
mov rdx, qword [rbp - 0x70]
mov qword [rsp + 0x518], r12
mov qword [rsp + 0x510], r14
test rdx, rdx
je 0x14004aae5
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004aae5
mov rdx, qword [rdx]
lea rcx, [rbp + 0x1c0]
movdqa xmm0, xmmword [0x14020c430]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1c0], si
call fcn.1400258a0
mov r8, qword [rbp + 0x1d8]
mov ebx, 0x5c
mov rdx, qword [rbp + 0x1d0]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004a770
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x1d0], rcx
lea rax, [rbp + 0x1c0]
cmovae rax, qword [rbp + 0x1c0]
mov word [rax + rdx*2], bx
mov word [rax + rcx*2], si
lea rax, [rbp + 0x1c0]
jmp 0x14004a796
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020cbec]
lea rcx, [rbp + 0x1c0]
lea edx, [r8 + 1]
call fcn.140037d80
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x200]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
movq r14, xmm0
mov word [rax], si
movq r8, xmm1
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
mov rax, rdx
movups xmmword [rbp + 0x200], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 8
movdqu xmmword [rbp + 0x210], xmm1
cmovae r9, r14
sub rax, rcx
cmp r8, rax
ja 0x14004a833
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
cmovae rbx, qword [rbp + 0xc0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.140187470
mov word [rbx + rdi*2], si
mov ebx, 0x5c
jmp 0x14004a85f
lfence
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0xc0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r12, qword [rbp + 0x218]
mov r14, qword [rbp + 0x200]
cmp r12, 8
jb 0x14004a89a
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14004a892
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b8ec
mov rcx, r14
call fcn.1401574cc
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 8
jb 0x14004a8e0
mov rcx, qword [rbp + 0x1c0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a8db
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b8ec
call fcn.1401574cc
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x14004a91a
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a91a
mov rdx, qword [rdx]
lea rcx, [rbp + 0x180]
movdqa xmm0, xmmword [0x14020c430]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], si
call fcn.1400258a0
jmp 0x14004a931
movdqa xmm0, xmmword [0x14020c430]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], si
mov r8, qword [rbp + 0x198]
mov rdx, qword [rbp + 0x190]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004a97a
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x190], rcx
lea rax, [rbp + 0x180]
cmovae rax, qword [rbp + 0x180]
mov word [rax + rdx*2], bx
mov word [rax + rcx*2], si
lea rax, [rbp + 0x180]
jmp 0x14004a9a0
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020cbec]
lea rcx, [rbp + 0x180]
lea edx, [r8 + 1]
call fcn.140037d80
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x220]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
movq r14, xmm0
mov word [rax], si
movq r8, xmm1
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0xf0]
mov rax, rdx
movups xmmword [rbp + 0x220], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 8
movdqu xmmword [rbp + 0x230], xmm1
cmovae r9, r14
sub rax, rcx
cmp r8, rax
ja 0x14004aa38
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rdi
cmovae rbx, qword [rbp + 0xe0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.140187470
mov word [rbx + rdi*2], si
jmp 0x14004aa64
lfence
mov rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r12, qword [rbp + 0x238]
mov r14, qword [rbp + 0x220]
cmp r12, 8
jb 0x14004aa9f
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14004aa97
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b8f2
mov rcx, r14
call fcn.1401574cc
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x14004aae5
mov rcx, qword [rbp + 0x180]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004aae0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b8f2
call fcn.1401574cc
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x14004ab3d
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004ab3d
movdqa xmm0, xmmword [0x14020c430]
lea rcx, [rbp + 0x140]
mov rdx, qword [rdx]
movdqu xmmword [rbp + 0x150], xmm0
mov word [rbp + 0x140], si
call fcn.1400258a0
mov r12, qword [rbp + 0x158]
lea r9, [rbp + 0x140]
mov r14, qword [rbp + 0x140]
cmp r12, 8
cmovae r9, r14
jmp 0x14004ab69
movdqa xmm0, xmmword [0x14020c430]
lea r9, [rbp + 0x140]
movdqu xmmword [rbp + 0x150], xmm0
mov r12, qword [rbp + 0x158]
mov word [rbp + 0x140], si
mov r14, qword [rbp + 0x140]
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
mov rax, rdx
mov r8, qword [rbp + 0x150]
sub rax, rcx
cmp r8, rax
ja 0x14004abbc
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
cmovae rbx, qword [rbp + 0xc0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.140187470
mov word [rbx + rdi*2], si
jmp 0x14004abe8
lfence
mov rdx, qword [rbp + 0x150]
lea rcx, [rbp + 0xc0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r12, qword [rbp + 0x158]
mov r14, qword [rbp + 0x140]
cmp r12, 8
jb 0x14004ac23
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14004ac1b
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b8f8
mov rcx, r14
call fcn.1401574cc
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14004ac7b
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004ac7b
movdqa xmm0, xmmword [0x14020c430]
lea rcx, [rbp + 0x160]
mov rdx, qword [rdx]
movdqu xmmword [rbp + 0x170], xmm0
mov word [rbp + 0x160], si
call fcn.1400258a0
mov r12, qword [rbp + 0x178]
lea r9, [rbp + 0x160]
mov r14, qword [rbp + 0x160]
cmp r12, 8
cmovae r9, r14
jmp 0x14004aca7
movdqa xmm0, xmmword [0x14020c430]
lea r9, [rbp + 0x160]
movdqu xmmword [rbp + 0x170], xmm0
mov r12, qword [rbp + 0x178]
mov word [rbp + 0x160], si
mov r14, qword [rbp + 0x160]
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0xf0]
mov rax, rdx
mov r8, qword [rbp + 0x170]
sub rax, rcx
cmp r8, rax
ja 0x14004acfa
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rdi
cmovae rbx, qword [rbp + 0xe0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.140187470
mov word [rbx + rdi*2], si
jmp 0x14004ad26
lfence
mov rdx, qword [rbp + 0x170]
lea rcx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r12, qword [rbp + 0x178]
mov r14, qword [rbp + 0x160]
cmp r12, 8
jb 0x14004ad61
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14004ad59
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b8f8
mov rcx, r14
call fcn.1401574cc
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x100]
movdqa xmm0, xmmword [0x14020c430]
inc rdx
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x100], si
call fcn.14004c490
mov r8, qword [rbp + 0x118]
mov r12d, 0x22
mov rdx, qword [rbp + 0x110]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004add7
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
cmovae rax, qword [rbp + 0x100]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
jmp 0x14004adfd
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020d1b0]
lea rcx, [rbp + 0x100]
lea edx, [r8 + 1]
call fcn.140037d80
cmp qword [rbp + 0xd8], 8
lea r9, [rbp + 0xc0]
mov rcx, qword [rbp + 0x118]
cmovae r9, qword [rbp + 0xc0]
mov rax, rcx
mov r14, qword [rbp + 0x110]
mov rdi, qword [rbp + 0xd0]
sub rax, r14
cmp rdi, rax
ja 0x14004ae6c
cmp rcx, 8
lea rax, [rdi + r14]
lea rbx, [rbp + 0x100]
mov qword [rbp + 0x110], rax
cmovae rbx, qword [rbp + 0x100]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + r14*2]
call fcn.140187470
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
jmp 0x14004ae8a
lfence
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x100]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r8, qword [rbp + 0x118]
mov rdx, qword [rbp + 0x110]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004aed4
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
cmovae rax, qword [rbp + 0x100]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x100]
jmp 0x14004aefa
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020d1b0]
lea rcx, [rbp + 0x100]
lea edx, [r8 + 1]
call fcn.140037d80
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x118]
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm1
cmp rdx, 8
jb 0x14004af64
mov rcx, qword [rbp + 0x100]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004af5f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b8fe
call fcn.1401574cc
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x120]
movdqa xmm0, xmmword [0x14020c430]
inc rdx
movdqu xmmword [rbp + 0x130], xmm0
mov word [rbp + 0x120], si
call fcn.14004c490
mov r8, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004afd4
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
cmovae rax, qword [rbp + 0x120]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
jmp 0x14004affa
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020d1b0]
lea rcx, [rbp + 0x120]
lea edx, [r8 + 1]
call fcn.140037d80
cmp qword [rbp + 0xf8], 8
lea r9, [rbp + 0xe0]
mov rcx, qword [rbp + 0x138]
cmovae r9, qword [rbp + 0xe0]
mov rax, rcx
mov r14, qword [rbp + 0x130]
mov rdi, qword [rbp + 0xf0]
sub rax, r14
cmp rdi, rax
ja 0x14004b069
cmp rcx, 8
lea rax, [r14 + rdi]
lea rbx, [rbp + 0x120]
mov qword [rbp + 0x130], rax
cmovae rbx, qword [rbp + 0x120]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + r14*2]
call fcn.140187470
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
jmp 0x14004b087
lfence
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x120]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r8, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004b0d1
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
cmovae rax, qword [rbp + 0x120]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x120]
jmp 0x14004b0f7
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020d1b0]
lea rcx, [rbp + 0x120]
lea edx, [r8 + 1]
call fcn.140037d80
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x138]
movups xmmword [rbp + 0x300], xmm0
movups xmmword [rbp + 0x310], xmm1
cmp rdx, 8
jb 0x14004b161
mov rcx, qword [rbp + 0x120]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004b15c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b8e6
call fcn.1401574cc
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
cmovae rcx, qword [rbp + 0xc0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14004b330
test r15, r15
je 0x14004b7e8
lea r8d, [rax + 0x26]
mov dword [r15], 0x80f31101
lea rdx, str.The_path_to_the_agent_does_not_exist.
lea rcx, [r15 + 8]
call fcn.140013b20
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 0x78]
call fcn.140010490
mov r9d, 6
lea r8, str.path:
xor edx, edx
mov rcx, rax
call fcn.1400159d0
mov r8d, 9
lea rdx, str.__agent:
lea rcx, [rbp + 0x2e0]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2f0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140013730
lea rdx, [rbp + 0x340]
lea rcx, [rsp + 0x70]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x250], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140010490
mov rdx, qword [rbp + 0x258]
mov rcx, rax
mov r9, qword [rbp + 0x250]
mov r8, qword [rax + 0x10]
mov rax, rdx
sub rax, r9
cmp r8, rax
jbe 0x14004b28b
mov rax, qword [rcx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x14004b28b
cmp rdx, 0x10
lea r8, [rbp + 0x240]
cmovae r8, qword [rbp + 0x240]
xor edx, edx
call fcn.1400159d0
jmp 0x14004b2a4
cmp qword [rcx + 0x18], 0x10
jb 0x14004b295
mov rcx, qword [rcx]
mov rdx, rcx
lea rcx, [rbp + 0x240]
call fcn.140013730
movups xmm1, xmmword [rax + 0x10]
lea rdx, [rbp + 0x1e0]
movups xmm0, xmmword [rax]
mov byte [rax], 0
lea rcx, [r15 + 8]
movups xmmword [rbp + 0x1f0], xmm1
cmp qword [rbp + 0x1f8], 0x10
mov r8, qword [rbp + 0x1f0]
movups xmmword [rbp + 0x1e0], xmm0
cmovae rdx, qword [rbp + 0x1e0]
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rsi
call fcn.140013730
lea rcx, [rbp + 0x1e0]
call fcn.140007490
lea rcx, [rbp + 0x240]
call fcn.140007490
lea rcx, [rbp + 0x2e0]
call fcn.140007490
lea rcx, [rbp + 0x320]
call fcn.140007490
lea rcx, [rbp + 0x340]
call fcn.140007490
jmp 0x14004b7e8
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x14004b382
cmp qword [rax + 8], 0
je 0x14004b382
cmp qword [rbp + 0xf8], 8
lea rcx, [rbp + 0xe0]
cmovae rcx, qword [rbp + 0xe0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14004b382
test r15, r15
je 0x14004b7e8
mov dword [r15], 0x80f31102
lea r8d, [rax + 0x27]
lea rdx, str.The_path_to_the_plugins_does_not_exist.
jmp 0x14004b7df
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x50], esi
cmovae rcx, qword [rbp + 0xc0]
call fcn.1400a4950
test eax, eax
je 0x14004b7c6
cmp dword [rsp + 0x50], 0
je 0x14004b7c6
cmp qword [rbp + 0x2b8], 8
lea rdi, [rbp + 0x2a0]
mov r14, qword [rbp + 0x2b0]
cmovae rdi, qword [rbp + 0x2a0]
cmp r14, 8
jae 0x14004b3f5
movups xmm0, xmmword [rdi]
mov qword [rbp + 0x1b8], 7
movups xmmword [rbp + 0x1a0], xmm0
jmp 0x14004b453
movabs rax, 0x7ffffffffffffffe
movabs rdx, 0x7fffffffffffffff
mov r8, 0xffffffffffffffff
mov rbx, r14
or rbx, 7
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, rdx
lea rcx, [rax + rax]
cmova rcx, r8
call fcn.140002c80
lea r8, [r14*2 + 2]
mov qword [rbp + 0x1a0], rax
mov rdx, rdi
mov rcx, rax
call fcn.140187470
mov qword [rbp + 0x1b8], rbx
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x1b0], r14
test rax, rax
je 0x14004b4ae
cmp qword [rax + 8], 0
je 0x14004b4ae
lea r8, [rbp + 0x300]
lea rdx, str.__d
lea rcx, [rbp + 0x360]
call fcn.140048240
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14004b492
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x1a0]
call fcn.14003c360
lea rcx, [rbp + 0x360]
call fcn.1400256f0
lea rdx, str.nv_agent_options
lea rcx, [rbp + 8]
call fcn.140005020
mov rcx, qword [r13]
lea rdx, [rbp + 8]
mov rax, qword [rcx]
call qword [rax + 0x58]
lea rcx, [rbp + 8]
movzx ebx, al
call fcn.140007060
test bl, bl
je 0x14004b5f8
lea rdx, str.nv_agent_options
lea rcx, [rbp + 0x20]
call fcn.140005020
mov rcx, qword [r13]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x60]
lea rcx, [rbp + 0x20]
call fcn.140007060
mov rdx, qword [rbp + 0x40]
test rdx, rdx
je 0x14004b545
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004b545
mov rdx, qword [rdx]
lea rcx, [rbp + 0x260]
movdqa xmm0, xmmword [0x14020c430]
movdqu xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], si
call fcn.1400258a0
jmp 0x14004b55c
movdqa xmm0, xmmword [0x14020c430]
movdqu xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], si
lea r8, [0x14020d294]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x3a0]
call fcn.140048190
mov rdx, rax
lea r8, [rbp + 0x260]
lea rcx, [rbp + 0x380]
call fcn.140047f90
mov rbx, rax
lea rax, [rbp + 0x1a0]
cmp rax, rbx
je 0x14004b5cb
lea rcx, [rbp + 0x1a0]
call fcn.1400256f0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
lea rcx, [rbp + 0x380]
call fcn.1400256f0
lea rcx, [rbp + 0x3a0]
call fcn.1400256f0
lea rcx, [rbp + 0x260]
call fcn.1400256f0
lea rcx, [rbp + 0x38]
call fcn.140007060
mov rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0x50], 0x68
mov dword [rbp + 0xb4], eax
movups xmmword [rbp + 0x54], xmm0
movups xmmword [rbp + 0x64], xmm0
movups xmmword [rbp + 0x74], xmm0
movups xmmword [rbp + 0x84], xmm0
movups xmmword [rbp + 0x94], xmm0
movups xmmword [rbp + 0xa4], xmm0
test rdx, rdx
je 0x14004b665
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004b665
mov rdx, qword [rdx]
lea rcx, [rbp + 0x280]
movdqa xmm0, xmmword [0x14020c430]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], si
call fcn.1400258a0
jmp 0x14004b67c
movdqa xmm0, xmmword [0x14020c430]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], si
mov rcx, qword [rbp - 0x60]
lea rdx, [rbp + 0x3e0]
add rcx, 0x180
call fcn.140032f00
mov rdx, rax
lea r8, [rbp + 0x280]
lea rcx, [rbp + 0x3c0]
call fcn.140047f90
mov rdx, rax
lea r8, [0x14020cbec]
lea rcx, [rbp + 0x2c0]
call fcn.140048120
lea rcx, [rbp + 0x3c0]
call fcn.1400256f0
lea rcx, [rbp + 0x3e0]
call fcn.1400256f0
lea rcx, [rbp + 0x280]
call fcn.1400256f0
xor eax, eax
lea r8, [rbp - 0x10]
cmp qword [rbp + 0x2d8], 8
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x48], r8
lea rcx, [rbp + 0xc0]
mov qword [rbp], rax
lea r8, [rbp + 0x50]
mov qword [rsp + 0x40], r8
lea rax, [rbp + 0x2c0]
cmovae rax, qword [rbp + 0x2c0]
xorps xmm0, xmm0
cmp qword [rbp + 0x1b8], 8
mov qword [rsp + 0x38], rax
cmovae rdx, qword [rbp + 0x1a0]
cmp qword [rbp + 0xd8], 8
mov qword [rsp + 0x30], rsi
cmovae rcx, qword [rbp + 0xc0]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], 0x8000000
movups xmmword [rbp - 0x10], xmm0
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 1
je 0x14004b796
test r15, r15
je 0x14004b792
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [r15 + 8]
mov r8d, 0x1d
lea rdx, str.Unable_to_create_the_process.
mov dword [r15], eax
call fcn.140013b20
xor bl, bl
jmp 0x14004b7ac
mov rcx, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
lea rcx, [rbp + 0x2c0]
call fcn.1400256f0
lea rcx, [rbp + 0x1a0]
call fcn.1400256f0
jmp 0x14004b7ea
test r15, r15
je 0x14004b7e8
mov dword [r15], 0x80f31103
lea rdx, str.The_agent_binary_is_either_unsigned_or_the_signature_could_not_be_verified.
mov r8d, 0x4b
lea rcx, [r15 + 8]
call fcn.140013b20
xor bl, bl
lea rcx, [rbp + 0x300]
call fcn.1400256f0
lea rcx, [rbp + 0x2a0]
call fcn.1400256f0
lea rcx, [rbp + 0xe0]
call fcn.1400256f0
lea rcx, [rbp + 0xc0]
call fcn.1400256f0
mov rcx, qword [rsp + 0x60]
lea rdi, [0x140209820]
mov qword [rsp + 0x58], rdi
test rcx, rcx
je 0x14004b855
cmp byte [rsp + 0x68], 0
je 0x14004b84b
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x60]
mov edx, SafeArrayPutElement
call fcn.1401574cc
mov qword [rsp + 0x60], rsi
mov byte [rsp + 0x68], 0
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x70], rdi
test rcx, rcx
je 0x14004b887
cmp byte [rbp - 0x80], 0
je 0x14004b87e
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x78]
mov edx, SafeArrayPutElement
call fcn.1401574cc
mov qword [rsp + 0x78], rsi
mov byte [rbp - 0x80], 0
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x78], rdi
test rcx, rcx
je 0x14004b8ad
cmp byte [rbp - 0x68], 0
je 0x14004b8ad
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x70]
mov edx, SafeArrayPutElement
call fcn.1401574cc
mov r14, qword [rsp + 0x510]
movzx eax, bl
mov r12, qword [rsp + 0x518]
mov rsi, qword [rsp + 0x568]
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.140157570
add rsp, 0x520
pop r15
pop r13
pop rdi
pop rbx
pop rbp
ret
call fcn.14019598c
int3
call fcn.14019598c
int3
call fcn.14019598c
int3
call fcn.14019598c
int3
call fcn.14019598c
int3