Function at 0x1400434b0
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push rbp
push rbx
push rdi
push r13
push r15
lea rbp, [rsp - 0x420]
sub rsp, 0x520
mov rax, qword [0x14026de28]
xor rax, rsp
mov qword [rbp + 0x400], rax
mov rbx, rdx
mov qword [rbp - 0x60], rdx
mov r13, rcx
lea rdx, str.nv_agent_path
lea rcx, [rbp - 0x58]
mov r15, r8
call fcn.140004f60
mov rcx, qword [r13]
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x78]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x50]
lea rdi, [0x1401ff7f0]
mov qword [rbp - 0x58], rdi
test rcx, rcx
je 0x140043534
cmp byte [rbp - 0x48], 0
je 0x140043534
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x50]
mov edx, SafeArrayPutElement
call fcn.14014e088
lea rdx, str.nv_agent
lea rcx, [rbp - 0x40]
call fcn.140004f60
mov rcx, qword [r13]
lea r8, [rbp - 0x40]
lea rdx, [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x38]
mov qword [rbp - 0x40], rdi
test rcx, rcx
je 0x14004357d
cmp byte [rbp - 0x30], 0
je 0x14004357d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x38]
mov edx, SafeArrayPutElement
call fcn.14014e088
lea rdx, str.nv_agent_plugin_path
lea rcx, [rbp - 0x28]
call fcn.140004f60
mov rcx, qword [r13]
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x20]
mov qword [rbp - 0x28], rdi
test rcx, rcx
je 0x1400435c6
cmp byte [rbp - 0x18], 0
je 0x1400435c6
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x20]
mov edx, SafeArrayPutElement
call fcn.14014e088
mov rdx, qword [rbx + 0x188]
mov qword [rsp + 0x568], rsi
test rdx, rdx
je 0x140043616
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043616
mov rdx, qword [rdx]
lea rcx, [rbp + 0xc0]
xor esi, esi
mov qword [rbp + 0xd8], 7
mov qword [rbp + 0xd0], rsi
mov word [rbp + 0xc0], si
call fcn.140025490
mov rdx, qword [rbx + 0x188]
jmp 0x140043631
xor esi, esi
mov qword [rbp + 0xd8], 7
mov qword [rbp + 0xd0], rsi
mov word [rbp + 0xc0], si
test rdx, rdx
je 0x140043669
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043669
mov rdx, qword [rdx]
lea rcx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], si
call fcn.140025490
jmp 0x140043682
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], si
mov rdx, qword [rbp - 0x70]
mov qword [rsp + 0x518], r12
mov qword [rsp + 0x510], r14
test rdx, rdx
je 0x140043a95
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043a95
mov rdx, qword [rdx]
lea rcx, [rbp + 0x1c0]
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1c0], si
call fcn.140025490
mov r8, qword [rbp + 0x1d8]
mov ebx, 0x5c
mov rdx, qword [rbp + 0x1d0]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140043720
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x1d0], rcx
lea rax, [rbp + 0x1c0]
cmovae rax, qword [rbp + 0x1c0]
mov word [rax + rdx*2], bx
mov word [rax + rcx*2], si
lea rax, [rbp + 0x1c0]
jmp 0x140043746
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020288c]
lea rcx, [rbp + 0x1c0]
lea edx, [r8 + 1]
call fcn.1400364f0
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x200]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
movq r14, xmm0
mov word [rax], si
movq r8, xmm1
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
mov rax, rdx
movups xmmword [rbp + 0x200], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 8
movdqu xmmword [rbp + 0x210], xmm1
cmovae r9, r14
sub rax, rcx
cmp r8, rax
ja 0x1400437e3
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
cmovae rbx, qword [rbp + 0xc0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.14017e030
mov word [rbx + rdi*2], si
mov ebx, 0x5c
jmp 0x14004380f
lfence
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0xc0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400364f0
mov r12, qword [rbp + 0x218]
mov r14, qword [rbp + 0x200]
cmp r12, 8
jb 0x14004384a
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140043842
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004489c
mov rcx, r14
call fcn.14014e088
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 8
jb 0x140043890
mov rcx, qword [rbp + 0x1c0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004388b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004489c
call fcn.14014e088
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x1400438ca
mov r8, qword [rdx + 8]
test r8, r8
je 0x1400438ca
mov rdx, qword [rdx]
lea rcx, [rbp + 0x180]
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], si
call fcn.140025490
jmp 0x1400438e1
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], si
mov r8, qword [rbp + 0x198]
mov rdx, qword [rbp + 0x190]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004392a
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x190], rcx
lea rax, [rbp + 0x180]
cmovae rax, qword [rbp + 0x180]
mov word [rax + rdx*2], bx
mov word [rax + rcx*2], si
lea rax, [rbp + 0x180]
jmp 0x140043950
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020288c]
lea rcx, [rbp + 0x180]
lea edx, [r8 + 1]
call fcn.1400364f0
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x220]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
movq r14, xmm0
mov word [rax], si
movq r8, xmm1
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0xf0]
mov rax, rdx
movups xmmword [rbp + 0x220], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 8
movdqu xmmword [rbp + 0x230], xmm1
cmovae r9, r14
sub rax, rcx
cmp r8, rax
ja 0x1400439e8
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rdi
cmovae rbx, qword [rbp + 0xe0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.14017e030
mov word [rbx + rdi*2], si
jmp 0x140043a14
lfence
mov rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400364f0
mov r12, qword [rbp + 0x238]
mov r14, qword [rbp + 0x220]
cmp r12, 8
jb 0x140043a4f
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140043a47
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400448a2
mov rcx, r14
call fcn.14014e088
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x140043a95
mov rcx, qword [rbp + 0x180]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043a90
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400448a2
call fcn.14014e088
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x140043aed
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043aed
movdqa xmm0, xmmword [0x1402022e0]
lea rcx, [rbp + 0x140]
mov rdx, qword [rdx]
movdqu xmmword [rbp + 0x150], xmm0
mov word [rbp + 0x140], si
call fcn.140025490
mov r12, qword [rbp + 0x158]
lea r9, [rbp + 0x140]
mov r14, qword [rbp + 0x140]
cmp r12, 8
cmovae r9, r14
jmp 0x140043b19
movdqa xmm0, xmmword [0x1402022e0]
lea r9, [rbp + 0x140]
movdqu xmmword [rbp + 0x150], xmm0
mov r12, qword [rbp + 0x158]
mov word [rbp + 0x140], si
mov r14, qword [rbp + 0x140]
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
mov rax, rdx
mov r8, qword [rbp + 0x150]
sub rax, rcx
cmp r8, rax
ja 0x140043b6c
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
cmovae rbx, qword [rbp + 0xc0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.14017e030
mov word [rbx + rdi*2], si
jmp 0x140043b98
lfence
mov rdx, qword [rbp + 0x150]
lea rcx, [rbp + 0xc0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400364f0
mov r12, qword [rbp + 0x158]
mov r14, qword [rbp + 0x140]
cmp r12, 8
jb 0x140043bd3
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140043bcb
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400448a8
mov rcx, r14
call fcn.14014e088
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140043c2b
mov r8, qword [rdx + 8]
test r8, r8
je 0x140043c2b
movdqa xmm0, xmmword [0x1402022e0]
lea rcx, [rbp + 0x160]
mov rdx, qword [rdx]
movdqu xmmword [rbp + 0x170], xmm0
mov word [rbp + 0x160], si
call fcn.140025490
mov r12, qword [rbp + 0x178]
lea r9, [rbp + 0x160]
mov r14, qword [rbp + 0x160]
cmp r12, 8
cmovae r9, r14
jmp 0x140043c57
movdqa xmm0, xmmword [0x1402022e0]
lea r9, [rbp + 0x160]
movdqu xmmword [rbp + 0x170], xmm0
mov r12, qword [rbp + 0x178]
mov word [rbp + 0x160], si
mov r14, qword [rbp + 0x160]
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0xf0]
mov rax, rdx
mov r8, qword [rbp + 0x170]
sub rax, rcx
cmp r8, rax
ja 0x140043caa
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rdi
cmovae rbx, qword [rbp + 0xe0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.14017e030
mov word [rbx + rdi*2], si
jmp 0x140043cd6
lfence
mov rdx, qword [rbp + 0x170]
lea rcx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400364f0
mov r12, qword [rbp + 0x178]
mov r14, qword [rbp + 0x160]
cmp r12, 8
jb 0x140043d11
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140043d09
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400448a8
mov rcx, r14
call fcn.14014e088
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x100]
movdqa xmm0, xmmword [0x1402022e0]
inc rdx
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x100], si
call fcn.140045440
mov r8, qword [rbp + 0x118]
mov r12d, 0x22
mov rdx, qword [rbp + 0x110]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140043d87
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
cmovae rax, qword [rbp + 0x100]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
jmp 0x140043dad
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x140202e50]
lea rcx, [rbp + 0x100]
lea edx, [r8 + 1]
call fcn.1400364f0
cmp qword [rbp + 0xd8], 8
lea r9, [rbp + 0xc0]
mov rcx, qword [rbp + 0x118]
cmovae r9, qword [rbp + 0xc0]
mov rax, rcx
mov r14, qword [rbp + 0x110]
mov rdi, qword [rbp + 0xd0]
sub rax, r14
cmp rdi, rax
ja 0x140043e1c
cmp rcx, 8
lea rax, [rdi + r14]
lea rbx, [rbp + 0x100]
mov qword [rbp + 0x110], rax
cmovae rbx, qword [rbp + 0x100]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + r14*2]
call fcn.14017e030
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
jmp 0x140043e3a
lfence
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x100]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400364f0
mov r8, qword [rbp + 0x118]
mov rdx, qword [rbp + 0x110]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140043e84
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
cmovae rax, qword [rbp + 0x100]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x100]
jmp 0x140043eaa
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x140202e50]
lea rcx, [rbp + 0x100]
lea edx, [r8 + 1]
call fcn.1400364f0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x118]
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm1
cmp rdx, 8
jb 0x140043f14
mov rcx, qword [rbp + 0x100]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140043f0f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400448ae
call fcn.14014e088
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x120]
movdqa xmm0, xmmword [0x1402022e0]
inc rdx
movdqu xmmword [rbp + 0x130], xmm0
mov word [rbp + 0x120], si
call fcn.140045440
mov r8, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140043f84
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
cmovae rax, qword [rbp + 0x120]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
jmp 0x140043faa
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x140202e50]
lea rcx, [rbp + 0x120]
lea edx, [r8 + 1]
call fcn.1400364f0
cmp qword [rbp + 0xf8], 8
lea r9, [rbp + 0xe0]
mov rcx, qword [rbp + 0x138]
cmovae r9, qword [rbp + 0xe0]
mov rax, rcx
mov r14, qword [rbp + 0x130]
mov rdi, qword [rbp + 0xf0]
sub rax, r14
cmp rdi, rax
ja 0x140044019
cmp rcx, 8
lea rax, [r14 + rdi]
lea rbx, [rbp + 0x120]
mov qword [rbp + 0x130], rax
cmovae rbx, qword [rbp + 0x120]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + r14*2]
call fcn.14017e030
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
jmp 0x140044037
lfence
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x120]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.1400364f0
mov r8, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140044081
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
cmovae rax, qword [rbp + 0x120]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x120]
jmp 0x1400440a7
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x140202e50]
lea rcx, [rbp + 0x120]
lea edx, [r8 + 1]
call fcn.1400364f0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x138]
movups xmmword [rbp + 0x300], xmm0
movups xmmword [rbp + 0x310], xmm1
cmp rdx, 8
jb 0x140044111
mov rcx, qword [rbp + 0x120]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004410c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140044896
call fcn.14014e088
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
cmovae rcx, qword [rbp + 0xc0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x1400442e0
test r15, r15
je 0x140044798
lea r8d, [rax + 0x26]
mov dword [r15], 0x80f31101
lea rdx, str.The_path_to_the_agent_does_not_exist.
lea rcx, [r15 + 8]
call fcn.140013760
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 0x78]
call fcn.1400100d0
mov r9d, 6
lea r8, str.path:
xor edx, edx
mov rcx, rax
call fcn.140015610
mov r8d, 9
lea rdx, str.__agent:
lea rcx, [rbp + 0x2e0]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2f0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140013370
lea rdx, [rbp + 0x340]
lea rcx, [rsp + 0x70]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x250], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.1400100d0
mov rdx, qword [rbp + 0x258]
mov rcx, rax
mov r9, qword [rbp + 0x250]
mov r8, qword [rax + 0x10]
mov rax, rdx
sub rax, r9
cmp r8, rax
jbe 0x14004423b
mov rax, qword [rcx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x14004423b
cmp rdx, 0x10
lea r8, [rbp + 0x240]
cmovae r8, qword [rbp + 0x240]
xor edx, edx
call fcn.140015610
jmp 0x140044254
cmp qword [rcx + 0x18], 0x10
jb 0x140044245
mov rcx, qword [rcx]
mov rdx, rcx
lea rcx, [rbp + 0x240]
call fcn.140013370
movups xmm1, xmmword [rax + 0x10]
lea rdx, [rbp + 0x1e0]
movups xmm0, xmmword [rax]
mov byte [rax], 0
lea rcx, [r15 + 8]
movups xmmword [rbp + 0x1f0], xmm1
cmp qword [rbp + 0x1f8], 0x10
mov r8, qword [rbp + 0x1f0]
movups xmmword [rbp + 0x1e0], xmm0
cmovae rdx, qword [rbp + 0x1e0]
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rsi
call fcn.140013370
lea rcx, [rbp + 0x1e0]
call fcn.1400073b0
lea rcx, [rbp + 0x240]
call fcn.1400073b0
lea rcx, [rbp + 0x2e0]
call fcn.1400073b0
lea rcx, [rbp + 0x320]
call fcn.1400073b0
lea rcx, [rbp + 0x340]
call fcn.1400073b0
jmp 0x140044798
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x140044332
cmp qword [rax + 8], 0
je 0x140044332
cmp qword [rbp + 0xf8], 8
lea rcx, [rbp + 0xe0]
cmovae rcx, qword [rbp + 0xe0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x140044332
test r15, r15
je 0x140044798
mov dword [r15], 0x80f31102
lea r8d, [rax + 0x27]
lea rdx, str.The_path_to_the_plugins_does_not_exist.
jmp 0x14004478f
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x50], esi
cmovae rcx, qword [rbp + 0xc0]
call fcn.14009d280
test eax, eax
je 0x140044776
cmp dword [rsp + 0x50], 0
je 0x140044776
cmp qword [rbp + 0x2b8], 8
lea rdi, [rbp + 0x2a0]
mov r14, qword [rbp + 0x2b0]
cmovae rdi, qword [rbp + 0x2a0]
cmp r14, 8
jae 0x1400443a5
movups xmm0, xmmword [rdi]
mov qword [rbp + 0x1b8], 7
movups xmmword [rbp + 0x1a0], xmm0
jmp 0x140044403
movabs rax, 0x7ffffffffffffffe
movabs rdx, 0x7fffffffffffffff
mov r8, 0xffffffffffffffff
mov rbx, r14
or rbx, 7
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, rdx
lea rcx, [rax + rax]
cmova rcx, r8
call fcn.140002bc0
lea r8, [r14*2 + 2]
mov qword [rbp + 0x1a0], rax
mov rdx, rdi
mov rcx, rax
call fcn.14017e030
mov qword [rbp + 0x1b8], rbx
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x1b0], r14
test rax, rax
je 0x14004445e
cmp qword [rax + 8], 0
je 0x14004445e
lea r8, [rbp + 0x300]
lea rdx, str.__d
lea rcx, [rbp + 0x360]
call fcn.1400411f0
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x140044442
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x1a0]
call fcn.14003aad0
lea rcx, [rbp + 0x360]
call fcn.1400252e0
lea rdx, str.nv_agent_options
lea rcx, [rbp + 8]
call fcn.140004f60
mov rcx, qword [r13]
lea rdx, [rbp + 8]
mov rax, qword [rcx]
call qword [rax + 0x58]
lea rcx, [rbp + 8]
movzx ebx, al
call fcn.140006f80
test bl, bl
je 0x1400445a8
lea rdx, str.nv_agent_options
lea rcx, [rbp + 0x20]
call fcn.140004f60
mov rcx, qword [r13]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x60]
lea rcx, [rbp + 0x20]
call fcn.140006f80
mov rdx, qword [rbp + 0x40]
test rdx, rdx
je 0x1400444f5
mov r8, qword [rdx + 8]
test r8, r8
je 0x1400444f5
mov rdx, qword [rdx]
lea rcx, [rbp + 0x260]
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], si
call fcn.140025490
jmp 0x14004450c
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], si
lea r8, [0x140202f34]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x3a0]
call fcn.140041140
mov rdx, rax
lea r8, [rbp + 0x260]
lea rcx, [rbp + 0x380]
call fcn.140040f40
mov rbx, rax
lea rax, [rbp + 0x1a0]
cmp rax, rbx
je 0x14004457b
lea rcx, [rbp + 0x1a0]
call fcn.1400252e0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
lea rcx, [rbp + 0x380]
call fcn.1400252e0
lea rcx, [rbp + 0x3a0]
call fcn.1400252e0
lea rcx, [rbp + 0x260]
call fcn.1400252e0
lea rcx, [rbp + 0x38]
call fcn.140006f80
mov rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0x50], 0x68
mov dword [rbp + 0xb4], eax
movups xmmword [rbp + 0x54], xmm0
movups xmmword [rbp + 0x64], xmm0
movups xmmword [rbp + 0x74], xmm0
movups xmmword [rbp + 0x84], xmm0
movups xmmword [rbp + 0x94], xmm0
movups xmmword [rbp + 0xa4], xmm0
test rdx, rdx
je 0x140044615
mov r8, qword [rdx + 8]
test r8, r8
je 0x140044615
mov rdx, qword [rdx]
lea rcx, [rbp + 0x280]
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], si
call fcn.140025490
jmp 0x14004462c
movdqa xmm0, xmmword [0x1402022e0]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], si
mov rcx, qword [rbp - 0x60]
lea rdx, [rbp + 0x3e0]
add rcx, 0x180
call fcn.140031a50
mov rdx, rax
lea r8, [rbp + 0x280]
lea rcx, [rbp + 0x3c0]
call fcn.140040f40
mov rdx, rax
lea r8, [0x14020288c]
lea rcx, [rbp + 0x2c0]
call fcn.1400410d0
lea rcx, [rbp + 0x3c0]
call fcn.1400252e0
lea rcx, [rbp + 0x3e0]
call fcn.1400252e0
lea rcx, [rbp + 0x280]
call fcn.1400252e0
xor eax, eax
lea r8, [rbp - 0x10]
cmp qword [rbp + 0x2d8], 8
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x48], r8
lea rcx, [rbp + 0xc0]
mov qword [rbp], rax
lea r8, [rbp + 0x50]
mov qword [rsp + 0x40], r8
lea rax, [rbp + 0x2c0]
cmovae rax, qword [rbp + 0x2c0]
xorps xmm0, xmm0
cmp qword [rbp + 0x1b8], 8
mov qword [rsp + 0x38], rax
cmovae rdx, qword [rbp + 0x1a0]
cmp qword [rbp + 0xd8], 8
mov qword [rsp + 0x30], rsi
cmovae rcx, qword [rbp + 0xc0]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], 0x8000000
movups xmmword [rbp - 0x10], xmm0
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 1
je 0x140044746
test r15, r15
je 0x140044742
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [r15 + 8]
mov r8d, 0x1d
lea rdx, str.Unable_to_create_the_process.
mov dword [r15], eax
call fcn.140013760
xor bl, bl
jmp 0x14004475c
mov rcx, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
lea rcx, [rbp + 0x2c0]
call fcn.1400252e0
lea rcx, [rbp + 0x1a0]
call fcn.1400252e0
jmp 0x14004479a
test r15, r15
je 0x140044798
mov dword [r15], 0x80f31103
lea rdx, str.The_agent_binary_is_either_unsigned_or_the_signature_could_not_be_verified.
mov r8d, 0x4b
lea rcx, [r15 + 8]
call fcn.140013760
xor bl, bl
lea rcx, [rbp + 0x300]
call fcn.1400252e0
lea rcx, [rbp + 0x2a0]
call fcn.1400252e0
lea rcx, [rbp + 0xe0]
call fcn.1400252e0
lea rcx, [rbp + 0xc0]
call fcn.1400252e0
mov rcx, qword [rsp + 0x60]
lea rdi, [0x1401ff7f0]
mov qword [rsp + 0x58], rdi
test rcx, rcx
je 0x140044805
cmp byte [rsp + 0x68], 0
je 0x1400447fb
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x60]
mov edx, SafeArrayPutElement
call fcn.14014e088
mov qword [rsp + 0x60], rsi
mov byte [rsp + 0x68], 0
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x70], rdi
test rcx, rcx
je 0x140044837
cmp byte [rbp - 0x80], 0
je 0x14004482e
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x78]
mov edx, SafeArrayPutElement
call fcn.14014e088
mov qword [rsp + 0x78], rsi
mov byte [rbp - 0x80], 0
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x78], rdi
test rcx, rcx
je 0x14004485d
cmp byte [rbp - 0x68], 0
je 0x14004485d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x70]
mov edx, SafeArrayPutElement
call fcn.14014e088
mov r14, qword [rsp + 0x510]
movzx eax, bl
mov r12, qword [rsp + 0x518]
mov rsi, qword [rsp + 0x568]
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.14014e130
add rsp, 0x520
pop r15
pop r13
pop rdi
pop rbx
pop rbp
ret
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3
call fcn.14018c54c
int3