Function at 0x14004a1d0
Capabilities:
Check if file exists
Create process on windows

Disassembly:
push rbp
push rbx
push rdi
push r13
push r15
lea rbp, [rsp - 0x420]
sub rsp, 0x520
mov rax, qword [0x140277eb8]
xor rax, rsp
mov qword [rbp + 0x400], rax
mov rbx, rdx
mov qword [rbp - 0x60], rdx
mov r13, rcx
lea rdx, str.nv_agent_path
lea rcx, [rbp - 0x58]
mov r15, r8
call fcn.140005020
mov rcx, qword [r13]
lea r8, [rbp - 0x58]
lea rdx, [rbp - 0x78]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x50]
lea rdi, [0x140208820]
mov qword [rbp - 0x58], rdi
test rcx, rcx
je 0x14004a254
cmp byte [rbp - 0x48], 0
je 0x14004a254
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x50]
mov edx, SafeArrayPutElement
call fcn.140156f20
lea rdx, str.nv_agent
lea rcx, [rbp - 0x40]
call fcn.140005020
mov rcx, qword [r13]
lea r8, [rbp - 0x40]
lea rdx, [rsp + 0x70]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x38]
mov qword [rbp - 0x40], rdi
test rcx, rcx
je 0x14004a29d
cmp byte [rbp - 0x30], 0
je 0x14004a29d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x38]
mov edx, SafeArrayPutElement
call fcn.140156f20
lea rdx, str.nv_agent_plugin_path
lea rcx, [rbp - 0x28]
call fcn.140005020
mov rcx, qword [r13]
lea r8, [rbp - 0x28]
lea rdx, [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x20]
mov qword [rbp - 0x28], rdi
test rcx, rcx
je 0x14004a2e6
cmp byte [rbp - 0x18], 0
je 0x14004a2e6
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x20]
mov edx, SafeArrayPutElement
call fcn.140156f20
mov rdx, qword [rbx + 0x188]
mov qword [rsp + 0x568], rsi
test rdx, rdx
je 0x14004a336
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a336
mov rdx, qword [rdx]
lea rcx, [rbp + 0xc0]
xor esi, esi
mov qword [rbp + 0xd8], 7
mov qword [rbp + 0xd0], rsi
mov word [rbp + 0xc0], si
call fcn.1400258a0
mov rdx, qword [rbx + 0x188]
jmp 0x14004a351
xor esi, esi
mov qword [rbp + 0xd8], 7
mov qword [rbp + 0xd0], rsi
mov word [rbp + 0xc0], si
test rdx, rdx
je 0x14004a389
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a389
mov rdx, qword [rdx]
lea rcx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], si
call fcn.1400258a0
jmp 0x14004a3a2
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], si
mov rdx, qword [rbp - 0x70]
mov qword [rsp + 0x518], r12
mov qword [rsp + 0x510], r14
test rdx, rdx
je 0x14004a7b5
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a7b5
mov rdx, qword [rdx]
lea rcx, [rbp + 0x1c0]
movdqa xmm0, xmmword [0x14020b430]
movdqu xmmword [rbp + 0x1d0], xmm0
mov word [rbp + 0x1c0], si
call fcn.1400258a0
mov r8, qword [rbp + 0x1d8]
mov ebx, 0x5c
mov rdx, qword [rbp + 0x1d0]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004a440
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x1d0], rcx
lea rax, [rbp + 0x1c0]
cmovae rax, qword [rbp + 0x1c0]
mov word [rax + rdx*2], bx
mov word [rax + rcx*2], si
lea rax, [rbp + 0x1c0]
jmp 0x14004a466
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020bc44]
lea rcx, [rbp + 0x1c0]
lea edx, [r8 + 1]
call fcn.140037d80
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x200]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
movq r14, xmm0
mov word [rax], si
movq r8, xmm1
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
mov rax, rdx
movups xmmword [rbp + 0x200], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 8
movdqu xmmword [rbp + 0x210], xmm1
cmovae r9, r14
sub rax, rcx
cmp r8, rax
ja 0x14004a503
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
cmovae rbx, qword [rbp + 0xc0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], si
mov ebx, 0x5c
jmp 0x14004a52f
lfence
mov rdx, qword [rbp + 0x210]
lea rcx, [rbp + 0xc0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r12, qword [rbp + 0x218]
mov r14, qword [rbp + 0x200]
cmp r12, 8
jb 0x14004a56a
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14004a562
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b5bc
mov rcx, r14
call fcn.140156f20
mov rdx, qword [rbp + 0x1d8]
cmp rdx, 8
jb 0x14004a5b0
mov rcx, qword [rbp + 0x1c0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a5ab
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b5bc
call fcn.140156f20
mov rdx, qword [rbp - 0x70]
test rdx, rdx
je 0x14004a5ea
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a5ea
mov rdx, qword [rdx]
lea rcx, [rbp + 0x180]
movdqa xmm0, xmmword [0x14020b430]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], si
call fcn.1400258a0
jmp 0x14004a601
movdqa xmm0, xmmword [0x14020b430]
movdqu xmmword [rbp + 0x190], xmm0
mov word [rbp + 0x180], si
mov r8, qword [rbp + 0x198]
mov rdx, qword [rbp + 0x190]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004a64a
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x190], rcx
lea rax, [rbp + 0x180]
cmovae rax, qword [rbp + 0x180]
mov word [rax + rdx*2], bx
mov word [rax + rcx*2], si
lea rax, [rbp + 0x180]
jmp 0x14004a670
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020bc44]
lea rcx, [rbp + 0x180]
lea edx, [r8 + 1]
call fcn.140037d80
movups xmm0, xmmword [rax]
lea r9, [rbp + 0x220]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
movq r14, xmm0
mov word [rax], si
movq r8, xmm1
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0xf0]
mov rax, rdx
movups xmmword [rbp + 0x220], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r12, xmm0
cmp r12, 8
movdqu xmmword [rbp + 0x230], xmm1
cmovae r9, r14
sub rax, rcx
cmp r8, rax
ja 0x14004a708
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rdi
cmovae rbx, qword [rbp + 0xe0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], si
jmp 0x14004a734
lfence
mov rdx, qword [rbp + 0x230]
lea rcx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r12, qword [rbp + 0x238]
mov r14, qword [rbp + 0x220]
cmp r12, 8
jb 0x14004a76f
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14004a767
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b5c2
mov rcx, r14
call fcn.140156f20
mov rdx, qword [rbp + 0x198]
cmp rdx, 8
jb 0x14004a7b5
mov rcx, qword [rbp + 0x180]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004a7b0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b5c2
call fcn.140156f20
mov rdx, qword [rsp + 0x78]
test rdx, rdx
je 0x14004a80d
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a80d
movdqa xmm0, xmmword [0x14020b430]
lea rcx, [rbp + 0x140]
mov rdx, qword [rdx]
movdqu xmmword [rbp + 0x150], xmm0
mov word [rbp + 0x140], si
call fcn.1400258a0
mov r12, qword [rbp + 0x158]
lea r9, [rbp + 0x140]
mov r14, qword [rbp + 0x140]
cmp r12, 8
cmovae r9, r14
jmp 0x14004a839
movdqa xmm0, xmmword [0x14020b430]
lea r9, [rbp + 0x140]
movdqu xmmword [rbp + 0x150], xmm0
mov r12, qword [rbp + 0x158]
mov word [rbp + 0x140], si
mov r14, qword [rbp + 0x140]
mov rdx, qword [rbp + 0xd8]
mov rcx, qword [rbp + 0xd0]
mov rax, rdx
mov r8, qword [rbp + 0x150]
sub rax, rcx
cmp r8, rax
ja 0x14004a88c
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xc0]
mov qword [rbp + 0xd0], rdi
cmovae rbx, qword [rbp + 0xc0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], si
jmp 0x14004a8b8
lfence
mov rdx, qword [rbp + 0x150]
lea rcx, [rbp + 0xc0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r12, qword [rbp + 0x158]
mov r14, qword [rbp + 0x140]
cmp r12, 8
jb 0x14004a8f3
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14004a8eb
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b5c8
mov rcx, r14
call fcn.140156f20
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14004a94b
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004a94b
movdqa xmm0, xmmword [0x14020b430]
lea rcx, [rbp + 0x160]
mov rdx, qword [rdx]
movdqu xmmword [rbp + 0x170], xmm0
mov word [rbp + 0x160], si
call fcn.1400258a0
mov r12, qword [rbp + 0x178]
lea r9, [rbp + 0x160]
mov r14, qword [rbp + 0x160]
cmp r12, 8
cmovae r9, r14
jmp 0x14004a977
movdqa xmm0, xmmword [0x14020b430]
lea r9, [rbp + 0x160]
movdqu xmmword [rbp + 0x170], xmm0
mov r12, qword [rbp + 0x178]
mov word [rbp + 0x160], si
mov r14, qword [rbp + 0x160]
mov rdx, qword [rbp + 0xf8]
mov rcx, qword [rbp + 0xf0]
mov rax, rdx
mov r8, qword [rbp + 0x170]
sub rax, rcx
cmp r8, rax
ja 0x14004a9ca
lea rdi, [r8 + rcx]
cmp rdx, 8
lea rbx, [rbp + 0xe0]
mov qword [rbp + 0xf0], rdi
cmovae rbx, qword [rbp + 0xe0]
mov rdx, r9
add r8, r8
lea rcx, [rbx + rcx*2]
call fcn.140186ec0
mov word [rbx + rdi*2], si
jmp 0x14004a9f6
lfence
mov rdx, qword [rbp + 0x170]
lea rcx, [rbp + 0xe0]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r12, qword [rbp + 0x178]
mov r14, qword [rbp + 0x160]
cmp r12, 8
jb 0x14004aa31
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x14004aa29
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b5c8
mov rcx, r14
call fcn.140156f20
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x100]
movdqa xmm0, xmmword [0x14020b430]
inc rdx
movdqu xmmword [rbp + 0x110], xmm0
mov word [rbp + 0x100], si
call fcn.14004c1f0
mov r8, qword [rbp + 0x118]
mov r12d, 0x22
mov rdx, qword [rbp + 0x110]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004aaa7
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
cmovae rax, qword [rbp + 0x100]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
jmp 0x14004aacd
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020c1e8]
lea rcx, [rbp + 0x100]
lea edx, [r8 + 1]
call fcn.140037d80
cmp qword [rbp + 0xd8], 8
lea r9, [rbp + 0xc0]
mov rcx, qword [rbp + 0x118]
cmovae r9, qword [rbp + 0xc0]
mov rax, rcx
mov r14, qword [rbp + 0x110]
mov rdi, qword [rbp + 0xd0]
sub rax, r14
cmp rdi, rax
ja 0x14004ab3c
cmp rcx, 8
lea rax, [rdi + r14]
lea rbx, [rbp + 0x100]
mov qword [rbp + 0x110], rax
cmovae rbx, qword [rbp + 0x100]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + r14*2]
call fcn.140186ec0
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
jmp 0x14004ab5a
lfence
mov rdx, qword [rbp + 0xd0]
lea rcx, [rbp + 0x100]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r8, qword [rbp + 0x118]
mov rdx, qword [rbp + 0x110]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004aba4
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x110], rcx
lea rax, [rbp + 0x100]
cmovae rax, qword [rbp + 0x100]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x100]
jmp 0x14004abca
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020c1e8]
lea rcx, [rbp + 0x100]
lea edx, [r8 + 1]
call fcn.140037d80
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x118]
movups xmmword [rbp + 0x2a0], xmm0
movups xmmword [rbp + 0x2b0], xmm1
cmp rdx, 8
jb 0x14004ac34
mov rcx, qword [rbp + 0x100]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ac2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b5ce
call fcn.140156f20
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x120]
movdqa xmm0, xmmword [0x14020b430]
inc rdx
movdqu xmmword [rbp + 0x130], xmm0
mov word [rbp + 0x120], si
call fcn.14004c1f0
mov r8, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004aca4
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
cmovae rax, qword [rbp + 0x120]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
jmp 0x14004acca
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020c1e8]
lea rcx, [rbp + 0x120]
lea edx, [r8 + 1]
call fcn.140037d80
cmp qword [rbp + 0xf8], 8
lea r9, [rbp + 0xe0]
mov rcx, qword [rbp + 0x138]
cmovae r9, qword [rbp + 0xe0]
mov rax, rcx
mov r14, qword [rbp + 0x130]
mov rdi, qword [rbp + 0xf0]
sub rax, r14
cmp rdi, rax
ja 0x14004ad39
cmp rcx, 8
lea rax, [r14 + rdi]
lea rbx, [rbp + 0x120]
mov qword [rbp + 0x130], rax
cmovae rbx, qword [rbp + 0x120]
lea r8, [rdi + rdi]
mov rdx, r9
lea rcx, [rbx + r14*2]
call fcn.140186ec0
lea rax, [r14 + rdi]
mov word [rbx + rax*2], si
jmp 0x14004ad57
lfence
mov rdx, qword [rbp + 0xf0]
lea rcx, [rbp + 0x120]
xor r8d, r8d
mov qword [rsp + 0x20], rdx
call fcn.140037d80
mov r8, qword [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x14004ada1
lea rcx, [rdx + 1]
cmp r8, 8
mov qword [rbp + 0x130], rcx
lea rax, [rbp + 0x120]
cmovae rax, qword [rbp + 0x120]
mov word [rax + rdx*2], r12w
mov word [rax + rcx*2], si
lea rax, [rbp + 0x120]
jmp 0x14004adc7
lfence
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x14020c1e8]
lea rcx, [rbp + 0x120]
lea edx, [r8 + 1]
call fcn.140037d80
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
mov rdx, qword [rbp + 0x138]
movups xmmword [rbp + 0x300], xmm0
movups xmmword [rbp + 0x310], xmm1
cmp rdx, 8
jb 0x14004ae31
mov rcx, qword [rbp + 0x120]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ae2c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004b5b6
call fcn.140156f20
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
cmovae rcx, qword [rbp + 0xc0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14004b000
test r15, r15
je 0x14004b4b8
lea r8d, [rax + 0x26]
mov dword [r15], 0x80f31101
lea rdx, str.The_path_to_the_agent_does_not_exist.
lea rcx, [r15 + 8]
call fcn.140013b20
lea rdx, [rbp + 0x320]
lea rcx, [rbp - 0x78]
call fcn.140010490
mov r9d, 6
lea r8, str.path:
xor edx, edx
mov rcx, rax
call fcn.1400159d0
mov r8d, 9
lea rdx, str.__agent:
lea rcx, [rbp + 0x2e0]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x2e0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x2f0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140013730
lea rdx, [rbp + 0x340]
lea rcx, [rsp + 0x70]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x240], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x250], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
call fcn.140010490
mov rdx, qword [rbp + 0x258]
mov rcx, rax
mov r9, qword [rbp + 0x250]
mov r8, qword [rax + 0x10]
mov rax, rdx
sub rax, r9
cmp r8, rax
jbe 0x14004af5b
mov rax, qword [rcx + 0x18]
sub rax, r8
cmp rax, r9
jb 0x14004af5b
cmp rdx, 0x10
lea r8, [rbp + 0x240]
cmovae r8, qword [rbp + 0x240]
xor edx, edx
call fcn.1400159d0
jmp 0x14004af74
cmp qword [rcx + 0x18], 0x10
jb 0x14004af65
mov rcx, qword [rcx]
mov rdx, rcx
lea rcx, [rbp + 0x240]
call fcn.140013730
movups xmm1, xmmword [rax + 0x10]
lea rdx, [rbp + 0x1e0]
movups xmm0, xmmword [rax]
mov byte [rax], 0
lea rcx, [r15 + 8]
movups xmmword [rbp + 0x1f0], xmm1
cmp qword [rbp + 0x1f8], 0x10
mov r8, qword [rbp + 0x1f0]
movups xmmword [rbp + 0x1e0], xmm0
cmovae rdx, qword [rbp + 0x1e0]
mov qword [rax + 0x18], 0xf
mov qword [rax + 0x10], rsi
call fcn.140013730
lea rcx, [rbp + 0x1e0]
call fcn.140007490
lea rcx, [rbp + 0x240]
call fcn.140007490
lea rcx, [rbp + 0x2e0]
call fcn.140007490
lea rcx, [rbp + 0x320]
call fcn.140007490
lea rcx, [rbp + 0x340]
call fcn.140007490
jmp 0x14004b4b8
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x14004b052
cmp qword [rax + 8], 0
je 0x14004b052
cmp qword [rbp + 0xf8], 8
lea rcx, [rbp + 0xe0]
cmovae rcx, qword [rbp + 0xe0]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x14004b052
test r15, r15
je 0x14004b4b8
mov dword [r15], 0x80f31102
lea r8d, [rax + 0x27]
lea rdx, str.The_path_to_the_plugins_does_not_exist.
jmp 0x14004b4af
cmp qword [rbp + 0xd8], 8
lea rcx, [rbp + 0xc0]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x50], esi
cmovae rcx, qword [rbp + 0xc0]
call fcn.1400a0dd0
test eax, eax
je 0x14004b496
cmp dword [rsp + 0x50], 0
je 0x14004b496
cmp qword [rbp + 0x2b8], 8
lea rdi, [rbp + 0x2a0]
mov r14, qword [rbp + 0x2b0]
cmovae rdi, qword [rbp + 0x2a0]
cmp r14, 8
jae 0x14004b0c5
movups xmm0, xmmword [rdi]
mov qword [rbp + 0x1b8], 7
movups xmmword [rbp + 0x1a0], xmm0
jmp 0x14004b123
movabs rax, 0x7ffffffffffffffe
movabs rdx, 0x7fffffffffffffff
mov r8, 0xffffffffffffffff
mov rbx, r14
or rbx, 7
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, rdx
lea rcx, [rax + rax]
cmova rcx, r8
call fcn.140002c80
lea r8, [r14*2 + 2]
mov qword [rbp + 0x1a0], rax
mov rdx, rdi
mov rcx, rax
call fcn.140186ec0
mov qword [rbp + 0x1b8], rbx
mov rax, qword [rsp + 0x60]
mov qword [rbp + 0x1b0], r14
test rax, rax
je 0x14004b17e
cmp qword [rax + 8], 0
je 0x14004b17e
lea r8, [rbp + 0x300]
lea rdx, str.__d
lea rcx, [rbp + 0x360]
call fcn.1400482a0
mov rdx, rax
cmp qword [rax + 0x18], 8
jb 0x14004b162
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x1a0]
call fcn.14003c360
lea rcx, [rbp + 0x360]
call fcn.1400256f0
lea rdx, str.nv_agent_options
lea rcx, [rbp + 8]
call fcn.140005020
mov rcx, qword [r13]
lea rdx, [rbp + 8]
mov rax, qword [rcx]
call qword [rax + 0x58]
lea rcx, [rbp + 8]
movzx ebx, al
call fcn.140007060
test bl, bl
je 0x14004b2c8
lea rdx, str.nv_agent_options
lea rcx, [rbp + 0x20]
call fcn.140005020
mov rcx, qword [r13]
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x38]
mov rax, qword [rcx]
call qword [rax + 0x60]
lea rcx, [rbp + 0x20]
call fcn.140007060
mov rdx, qword [rbp + 0x40]
test rdx, rdx
je 0x14004b215
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004b215
mov rdx, qword [rdx]
lea rcx, [rbp + 0x260]
movdqa xmm0, xmmword [0x14020b430]
movdqu xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], si
call fcn.1400258a0
jmp 0x14004b22c
movdqa xmm0, xmmword [0x14020b430]
movdqu xmmword [rbp + 0x270], xmm0
mov word [rbp + 0x260], si
lea r8, [0x14020c2d4]
lea rdx, [rbp + 0x1a0]
lea rcx, [rbp + 0x3a0]
call fcn.1400481f0
mov rdx, rax
lea r8, [rbp + 0x260]
lea rcx, [rbp + 0x380]
call fcn.140047ff0
mov rbx, rax
lea rax, [rbp + 0x1a0]
cmp rax, rbx
je 0x14004b29b
lea rcx, [rbp + 0x1a0]
call fcn.1400256f0
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x1a0], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x1b0], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
lea rcx, [rbp + 0x380]
call fcn.1400256f0
lea rcx, [rbp + 0x3a0]
call fcn.1400256f0
lea rcx, [rbp + 0x260]
call fcn.1400256f0
lea rcx, [rbp + 0x38]
call fcn.140007060
mov rdx, qword [rbp - 0x70]
xorps xmm0, xmm0
xor eax, eax
mov dword [rbp + 0x50], 0x68
mov dword [rbp + 0xb4], eax
movups xmmword [rbp + 0x54], xmm0
movups xmmword [rbp + 0x64], xmm0
movups xmmword [rbp + 0x74], xmm0
movups xmmword [rbp + 0x84], xmm0
movups xmmword [rbp + 0x94], xmm0
movups xmmword [rbp + 0xa4], xmm0
test rdx, rdx
je 0x14004b335
mov r8, qword [rdx + 8]
test r8, r8
je 0x14004b335
mov rdx, qword [rdx]
lea rcx, [rbp + 0x280]
movdqa xmm0, xmmword [0x14020b430]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], si
call fcn.1400258a0
jmp 0x14004b34c
movdqa xmm0, xmmword [0x14020b430]
movdqu xmmword [rbp + 0x290], xmm0
mov word [rbp + 0x280], si
mov rcx, qword [rbp - 0x60]
lea rdx, [rbp + 0x3e0]
add rcx, 0x180
call fcn.140032f00
mov rdx, rax
lea r8, [rbp + 0x280]
lea rcx, [rbp + 0x3c0]
call fcn.140047ff0
mov rdx, rax
lea r8, [0x14020bc44]
lea rcx, [rbp + 0x2c0]
call fcn.140048180
lea rcx, [rbp + 0x3c0]
call fcn.1400256f0
lea rcx, [rbp + 0x3e0]
call fcn.1400256f0
lea rcx, [rbp + 0x280]
call fcn.1400256f0
xor eax, eax
lea r8, [rbp - 0x10]
cmp qword [rbp + 0x2d8], 8
lea rdx, [rbp + 0x1a0]
mov qword [rsp + 0x48], r8
lea rcx, [rbp + 0xc0]
mov qword [rbp], rax
lea r8, [rbp + 0x50]
mov qword [rsp + 0x40], r8
lea rax, [rbp + 0x2c0]
cmovae rax, qword [rbp + 0x2c0]
xorps xmm0, xmm0
cmp qword [rbp + 0x1b8], 8
mov qword [rsp + 0x38], rax
cmovae rdx, qword [rbp + 0x1a0]
cmp qword [rbp + 0xd8], 8
mov qword [rsp + 0x30], rsi
cmovae rcx, qword [rbp + 0xc0]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x28], 0x8000000
movups xmmword [rbp - 0x10], xmm0
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 1
je 0x14004b466
test r15, r15
je 0x14004b462
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, [r15 + 8]
mov r8d, 0x1d
lea rdx, str.Unable_to_create_the_process.
mov dword [r15], eax
call fcn.140013b20
xor bl, bl
jmp 0x14004b47c
mov rcx, qword [rbp - 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov bl, 1
lea rcx, [rbp + 0x2c0]
call fcn.1400256f0
lea rcx, [rbp + 0x1a0]
call fcn.1400256f0
jmp 0x14004b4ba
test r15, r15
je 0x14004b4b8
mov dword [r15], 0x80f31103
lea rdx, str.The_agent_binary_is_either_unsigned_or_the_signature_could_not_be_verified.
mov r8d, 0x4b
lea rcx, [r15 + 8]
call fcn.140013b20
xor bl, bl
lea rcx, [rbp + 0x300]
call fcn.1400256f0
lea rcx, [rbp + 0x2a0]
call fcn.1400256f0
lea rcx, [rbp + 0xe0]
call fcn.1400256f0
lea rcx, [rbp + 0xc0]
call fcn.1400256f0
mov rcx, qword [rsp + 0x60]
lea rdi, [0x140208820]
mov qword [rsp + 0x58], rdi
test rcx, rcx
je 0x14004b525
cmp byte [rsp + 0x68], 0
je 0x14004b51b
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x60]
mov edx, SafeArrayPutElement
call fcn.140156f20
mov qword [rsp + 0x60], rsi
mov byte [rsp + 0x68], 0
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x70], rdi
test rcx, rcx
je 0x14004b557
cmp byte [rbp - 0x80], 0
je 0x14004b54e
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rsp + 0x78]
mov edx, SafeArrayPutElement
call fcn.140156f20
mov qword [rsp + 0x78], rsi
mov byte [rbp - 0x80], 0
mov rcx, qword [rbp - 0x70]
mov qword [rbp - 0x78], rdi
test rcx, rcx
je 0x14004b57d
cmp byte [rbp - 0x68], 0
je 0x14004b57d
call sub.libcef.dll_cef_string_utf16_clear
mov rcx, qword [rbp - 0x70]
mov edx, SafeArrayPutElement
call fcn.140156f20
mov r14, qword [rsp + 0x510]
movzx eax, bl
mov r12, qword [rsp + 0x518]
mov rsi, qword [rsp + 0x568]
mov rcx, qword [rbp + 0x400]
xor rcx, rsp
call fcn.140156fc0
add rsp, 0x520
pop r15
pop r13
pop rdi
pop rbx
pop rbp
ret
call fcn.1401953dc
int3
call fcn.1401953dc
int3
call fcn.1401953dc
int3
call fcn.1401953dc
int3
call fcn.1401953dc
int3