Function at 0x14002ab80
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Read file on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x1e8
movaps xmmword [rsp + 0x1d0], xmm6
mov qword [rsp + 0x230], rcx
mov qword [rsp + 0x238], rdx
mov dword [rsp + 0x54], r8d
mov qword [rsp + 0x248], r9
movsxd rcx, dword [rsp + 0x260]
call fcn.14008e9d0
call fcn.14008e3b0
mov rdx, qword [rsp + 0x230]
lea rcx, [rsp + 0x230]
call fcn.14008e660
lea rcx, [rsp + 0x238]
mov rdx, qword [rsp + 0x238]
call fcn.14008e660
lea rcx, [rsp + 0x250]
mov rdx, qword [rsp + 0x250]
call fcn.14008e660
lea rcx, [rsp + 0x258]
mov rdx, qword [rsp + 0x258]
call fcn.14008e660
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x90], 0
lea r15, [rsp + 0x88]
lea rbx, [0x140192f00]
mov rdx, rbx
mov rcx, r15
call fcn.14008e8e0
lea rdi, [rsp + 0x90]
mov rdx, rbx
mov rcx, rdi
call fcn.14008e8e0
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov ecx, eax
call fcn.140068a18
call fcn.14008e5d0
mov rsi, rax
call fcn.14008e480
mov edx, eax
mov rcx, rsi
call fcn.14007e4d0
call fcn.14008e480
lea rcx, [rsp + 0x80]
mov edx, eax
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
mov rcx, qword [rsp + 0x80]
call fcn.14008e870
lea rbp, str.wget.dat
mov rcx, rbp
call fcn.14008e870
call fcn.14008e5d0
mov rcx, rax
call fcn.14007e354
mov rsi, rax
call fcn.14008e4f0
cmp rsi, 0x64
jg 0x14002ad58
call fcn.14008e420
call fcn.14008e420
mov rcx, qword [rsp + 0x80]
call fcn.14008e870
lea rcx, str.xh.dat
call fcn.14008e870
call fcn.14008e5d0
mov rcx, rax
call fcn.14007e354
mov rsi, rax
call fcn.14008e4f0
cmp rsi, 0x64
jle 0x14002aeb8
lea rsi, [0x14015f72c]
mov rdx, rsi
mov rcx, rdi
call fcn.14008e8e0
jmp 0x14002ad6e
lea rdx, str.wget
mov rcx, rdi
call fcn.14008e8e0
lea rsi, [0x14015f72c]
mov qword [rsp + 0x98], 0
lea rcx, [rsp + 0x98]
mov rdx, qword [rsp + 0x90]
call fcn.14008e660
mov rdx, rsi
mov rcx, qword [rsp + 0x98]
call fcn.14008e730
test eax, eax
jne 0x14002af30
lea rdx, str.aria2
mov rcx, qword [rsp + 0x98]
call fcn.14008e730
test eax, eax
jne 0x14002bb48
lea rdx, str.wget
mov rcx, qword [rsp + 0x98]
call fcn.14008e730
test eax, eax
jne 0x14002c368
mov r8d, gethostname
lea rdx, str.NO_SE_HA_ENCONTRADO_archivo_WGET.dat_r_n_r_nDownload_from_SeoSoftware.info__r_n_r_n_Download_and_copy_it_to_the_main_executable_folder_
lea rcx, str.WGET_NO_ENCONTRADO
call fcn.14004a3e8
cmp rax, 6
jne 0x14002bf2e
lea rcx, str.https:__seosoftware.info_.soft_varios_wget.dat
call fcn.14006845c
call fcn.14008e420
call fcn.14008e420
lea rcx, str.This_software_will_now_close._Reopen_it_when_WGET.dat_is_in_the_main_executable_folder._r_n_
call fcn.14008e870
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov ecx, eax
call fcn.140068a18
call fcn.14008e5d0
mov rbx, rax
call fcn.14008e480
mov edx, eax
mov rcx, rbx
call fcn.14007e4d0
call fcn.14008e480
lea rcx, [0x140167368]
call fcn.14008e870
call fcn.14008e700
call fcn.14008e5d0
mov rdx, rax
mov r8d, 0x40
lea rcx, str.Closing_Program
call fcn.14004a3e8
call fcn.14008e4f0
call fcn.140023f00
mov rcx, qword [0x140192da8]
call sub.KERNEL32.dll_HeapDestroy
movsxd rcx, dword [0x140192db0]
call sub.KERNEL32.dll_ExitProcess
call fcn.14008e420
call fcn.14008e420
mov rcx, qword [rsp + 0x80]
call fcn.14008e870
lea rcx, str.aria2.dat
call fcn.14008e870
call fcn.14008e5d0
mov rcx, rax
call fcn.14007e354
mov rsi, rax
call fcn.14008e4f0
cmp rsi, 0x64
jle 0x14002af18
lea rdx, str.aria2
mov rcx, rdi
call fcn.14008e8e0
lea rsi, [0x14015f72c]
jmp 0x14002ad6e
mov rdx, rbx
mov rcx, rdi
call fcn.14008e8e0
lea rsi, [0x14015f72c]
jmp 0x14002ad6e
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov rdx, qword [rsp + 0x230]
mov qword [rsp + 0xa0], rdx
mov rdx, qword [rsp + 0x238]
mov qword [rsp + 0xa8], rdx
mov rdx, qword [rsp + 0x250]
mov qword [rsp + 0xb0], rdx
mov rdx, qword [rsp + 0x258]
mov qword [rsp + 0xb8], rdx
movsxd rcx, eax
call fcn.14008e9d0
call fcn.14008e3b0
lea rcx, [rsp + 0xa0]
mov rdx, qword [rsp + 0xa0]
call fcn.14008e660
lea rcx, [rsp + 0xa8]
mov rdx, qword [rsp + 0xa8]
call fcn.14008e660
lea rcx, [rsp + 0xb0]
mov rdx, qword [rsp + 0xb0]
call fcn.14008e660
lea rcx, [rsp + 0xb8]
mov rdx, qword [rsp + 0xb8]
call fcn.14008e660
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0x120], 0
mov qword [rsp + 0x128], 0
mov qword [rsp + 0x130], 0
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], 0
lea rdi, [rsp + 0x160]
mov qword [rsp + 0x58], rdi
mov ecx, reloc.WS2_32.dll_listen
xor eax, eax
rep stosq qword [rdi], rax
mov dword [rsp + 0x74], 0
mov qword [rsp + 0xd8], 0
mov qword [rsp + 0xe0], 0
mov qword [rsp + 0xe8], 0
mov dword [rsp + 0x78], 0
mov dword [rsp + 0x7c], 0
mov qword [rsp + 0x140], 0
mov qword [rsp + 0x148], 0
mov qword [rsp + 0x150], 0
lea r14, [rsp + 0xe8]
mov rdx, rbx
mov rcx, r14
call fcn.14008e8e0
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov rdx, qword [rsp + 0xa0]
mov qword [rsp + 0xf0], rdx
lea r13, str.tamfichero
mov qword [rsp + 0x110], r13
movsxd rcx, eax
call fcn.14008e9d0
call fcn.14008e3b0
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0xf0]
call fcn.14008e660
lea rcx, [rsp + 0x110]
mov rdx, qword [rsp + 0x110]
call fcn.14008e660
mov qword [rsp + 0xf8], 0
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x108], 0
lea rax, [rsp + 0x108]
mov qword [rsp + 0x60], rax
mov rdx, rbx
mov rcx, rax
call fcn.14008e8e0
mov ecx, 0x1000
call fcn.14008dc50
mov r12, rax
call fcn.14008e420
lea rcx, str.___headers
call fcn.14008e870
mov rcx, qword [rsp + 0xf0]
call fcn.14008e870
call fcn.14008e480
lea rcx, [rsp + 0x100]
mov edx, eax
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov ecx, eax
call fcn.140068a18
call fcn.14008e5d0
mov rsi, rax
call fcn.14008e480
mov edx, eax
mov rcx, rsi
call fcn.14007e4d0
lea rcx, str.XH.dat
call fcn.14008e870
call fcn.14008e5d0
mov rcx, rax
mov r9d, 0x2e
lea r8, [0x140192f00]
mov rdx, qword [rsp + 0x100]
call fcn.140068498
mov rsi, rax
call fcn.14008e4f0
test rsi, rsi
jne 0x14002b348
call fcn.14008e420
mov rcx, qword [rsp + 0x108]
call fcn.14008e870
call fcn.14008e5d0
mov rcx, qword [rsp + 0xf8]
call fcn.14008e6d0
xor ecx, ecx
call fcn.14008e6d0
mov rcx, qword [rsp + 0x100]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xf0]
call fcn.14008e6d0
xor ecx, ecx
call fcn.14008e6d0
xor ecx, ecx
call fcn.14008e6d0
mov rcx, qword [rsp + 0x110]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x108]
call fcn.14008e6d0
call fcn.14008e5d0
mov rcx, rax
call fcn.14008ac90
mov rsi, rax
call fcn.14008e4f0
test rsi, rsi
jne 0x14002b618
cmp byte [rsp + 0x54], 1
je 0x14002baa8
call fcn.14008e420
mov rcx, qword [rsp + 0xe8]
call fcn.14008e870
call fcn.14008e5d0
mov rcx, qword [rsp + 0xc0]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xc8]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xa0]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xd0]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xd8]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xa8]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xe0]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xb0]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xb8]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xe8]
jmp 0x14002bf1a
mov rcx, rsi
call fcn.140068aa4
test rax, rax
je 0x14002b212
lea rdi, [rsp + 0xf8]
lea rax, [rsp + 0x118]
mov qword [rsp + 0x68], rax
jmp 0x14002b3d7
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0xf8]
call fcn.14008aa70
call fcn.14008e5d0
mov rcx, rax
mov r8d, 1
lea rdx, str.content_length:
call fcn.14008ab40
mov rbp, rax
call fcn.14008e4f0
test rbp, rbp
jne 0x14002b4d0
nop
mov rcx, qword [rsp + 0x118]
call fcn.14008e6d0
call fcn.14008e3b0
call fcn.140003d00
mov rcx, rsi
call fcn.140068b30
test rax, rax
je 0x14002b608
mov rdx, rbx
mov rcx, rdi
call fcn.14008e8e0
mov rcx, rsi
call fcn.140068b98
test rax, rax
je 0x14002b3cd
mov r8, rax
mov rdx, r12
mov rcx, rsi
call fcn.140068c74
mov rbp, rax
test rax, rax
je 0x14002b3cd
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
mov r8d, 0x42
mov rdx, rbp
mov rcx, r12
call fcn.14008d9f0
call fcn.14008e5d0
mov rbp, rax
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008b4a0
call fcn.14008e480
mov edx, eax
mov rcx, rdi
call fcn.14008e790
mov qword [rsp + 0x118], 0
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x68]
call fcn.14008e660
mov rdx, r13
mov rcx, qword [rsp + 0x118]
call fcn.14008e730
test eax, eax
jne 0x14002b370
call fcn.14008e420
mov rcx, qword [rsp + 0xf8]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0x60]
call fcn.14008e790
jmp 0x14002b3c0
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0xf8]
call fcn.14008aa70
call fcn.14008e5d0
mov rcx, rax
mov r8d, 1
lea rdx, str.content_length:
call fcn.14008ab40
mov rbp, rax
call fcn.14008e4f0
call fcn.14008e480
mov r8d, eax
mov rdx, rbp
mov rcx, qword [rsp + 0xf8]
call fcn.14008a910
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0x60]
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
lea r8, [0x140166fc0]
mov edx, 2
mov rcx, qword [rsp + 0x108]
call fcn.14008b5c0
call fcn.14008e5d0
mov rbp, rax
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008b4a0
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0x60]
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
mov rcx, qword [rsp + 0x108]
call fcn.14008ac90
mov rbp, rax
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008ae50
call fcn.14008e5d0
mov rbp, rax
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008b4a0
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0x60]
call fcn.14008e790
jmp 0x14002b3c0
mov rcx, rsi
call fcn.140068c50
jmp 0x14002b212
call fcn.14008e420
lea rcx, str.xh.dat___download
call fcn.14008e870
mov rcx, qword [rsp + 0xa0]
call fcn.14008e870
call fcn.14008e480
lea rcx, [rsp + 0xd0]
mov edx, eax
call fcn.14008e790
mov dword [rsp + 0x120], DispInvoke
mov qword [rsp + 0x128], 0
mov dword [rsp + 0x130], 1
lea rdi, [rsp + 0x120]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x74]
xor r9d, r9d
mov r8, rdi
call sub.KERNEL32.dll_CreatePipe
test rax, rax
je 0x14002b29d
mov dword [rsp + 0x160], WSASetLastError
mov dword [rsp + 0x19c], 0x101
xor eax, eax
mov word [rsp + 0x1a0], ax
movsxd rax, dword [rsp + 0x78]
mov qword [rsp + 0x1b8], rax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0x420
mov qword [rsp + 0x20], 1
mov r9, rdi
mov r8, rdi
mov rdx, qword [rsp + 0xd0]
xor ecx, ecx
call sub.KERNEL32.dll_CreateProcessW
test rax, rax
je 0x14002b29d
movsxd rcx, dword [rsp + 0x78]
call sub.KERNEL32.dll_CloseHandle
mov ecx, 0x800
call fcn.14008dc50
mov rbp, rax
mov rdx, qword [rsp + 0xa8]
mov rcx, 0xffffffffffffffff
call fcn.14007f500
mov r13, rax
mov rcx, rax
call fcn.14007f860
test rax, rax
je 0x14002ba55
lea rax, [rsp + 0x7c]
xor edi, edi
movsd xmm6, qword [0x14011e1c8]
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r14
mov r14, rax
jmp 0x14002b7fc
call fcn.14008e420
mov rcx, qword [rsp + 0xb0]
call fcn.14008e870
lea rcx, [0x140167544]
call fcn.14008e870
mov rcx, qword [rsp + 0xc8]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, r12
call fcn.14008e790
jmp 0x14002b9a3
mov rcx, qword [rsp + 0x248]
call fcn.14006f53c
test rax, rax
jne 0x14002ba00
call fcn.14008e420
mov rcx, qword [rsp + 0xc8]
call fcn.14008e870
call fcn.14008e480
lea rcx, [rsp + 0xd8]
mov edx, eax
call fcn.14008e790
movsxd rcx, dword [rsp + 0x74]
mov qword [rsp + 0x20], 0
mov r9, r14
mov r8d, 0x800
mov rdx, rbp
call sub.KERNEL32.dll_ReadFile
test rax, rax
je 0x14002ba20
mov eax, dword [rsp + 0x7c]
test eax, eax
je 0x14002ba20
mov eax, dword [rsp + 0x7c]
add edi, eax
movsxd r8, dword [rsp + 0x7c]
mov rdx, rbp
mov rcx, r13
call fcn.14007ff40
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
movsxd rdx, dword [rsp + 0x7c]
mov r9d, eax
mov r8d, 0x42
mov rcx, rbp
call fcn.14008d9f0
call fcn.14008e5d0
mov r12, rax
call fcn.14008e480
mov edx, eax
mov rcx, r12
call fcn.14008b4a0
call fcn.14008e480
lea r15, [rsp + 0xc0]
mov edx, eax
mov rcx, r15
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
movsxd rcx, edi
mov edx, eax
call fcn.14008ae50
call fcn.14008e5d0
mov r12, rax
call fcn.14008e480
mov edx, eax
mov rcx, r12
call fcn.14008b4a0
call fcn.14008e480
mov edx, eax
mov rcx, r15
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
pxor xmm0, xmm0
cvtsi2sd xmm0, edi
mulsd xmm0, xmm6
pxor xmm1, xmm1
cvtsi2sd xmm1, rsi
divsd xmm0, xmm1
call fcn.14008e320
mov r12, rax
call fcn.14008e480
mov edx, eax
mov rcx, r12
call fcn.14008ae50
lea rcx, [0x1401673aa]
call fcn.14008e870
call fcn.14008e480
lea rcx, [rsp + 0xc8]
mov edx, eax
call fcn.14008e790
mov rdx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd8]
call fcn.14008e730
test eax, eax
jne 0x14002b7d6
call fcn.14008e420
mov rcx, qword [rsp + 0xc8]
call fcn.14008e870
call fcn.14008e480
lea r12, [rsp + 0xe0]
mov edx, eax
mov rcx, r12
call fcn.14008e790
mov rax, qword [rsp + 0xb0]
test rax, rax
je 0x14002b9a3
cmp word [rax], 0
jne 0x14002b780
mov rax, qword [rsp + 0xb8]
test rax, rax
je 0x14002b7c0
cmp word [rax], 0
je 0x14002b7c0
call fcn.14008e420
mov rcx, qword [rsp + 0xe0]
call fcn.14008e870
lea rcx, [0x140167544]
call fcn.14008e870
mov rcx, qword [rsp + 0xb8]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, r12
call fcn.14008e790
jmp 0x14002b7c0
mov rdx, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0x248]
call fcn.14006f5a8
jmp 0x14002b7d6
mov r15, qword [rsp + 0x58]
mov r14, qword [rsp + 0x60]
mov rcx, r13
call fcn.14007fa10
mov rdx, qword [rsp + 0xc8]
lea rcx, str.100_
call fcn.14008e730
test eax, eax
jne 0x14002ba90
mov rdx, rbx
mov rcx, r14
call fcn.14008e8e0
mov rcx, rbp
call fcn.14008d9d0
mov rcx, qword [rsp + 0x148]
call sub.KERNEL32.dll_CloseHandle
mov rcx, qword [rsp + 0x140]
call sub.KERNEL32.dll_CloseHandle
movsxd rcx, dword [rsp + 0x74]
call sub.KERNEL32.dll_CloseHandle
jmp 0x14002b29d
lea rdx, [0x14015619a]
mov rcx, r14
call fcn.14008e8e0
jmp 0x14002ba55
mov rdx, qword [rsp + 0xe8]
lea rcx, [0x14015619a]
call fcn.14008e730
test eax, eax
je 0x14002b2a8
mov rdx, rbx
mov rcx, r14
call fcn.14008e8e0
mov rdx, qword [rsp + 0xa8]
mov rcx, 0xffffffffffffffff
call fcn.14007f750
mov rbx, rax
mov rcx, rax
call fcn.14007f860
test rax, rax
je 0x14002b2a8
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
mov r8d, 0x10000
mov edx, 2
mov rcx, rbx
call fcn.14007fc90
call fcn.14008e480
mov edx, eax
mov rcx, r14
call fcn.14008e790
mov rcx, rbx
call fcn.14007fa10
mov rcx, qword [rsp + 0xa8]
call fcn.14007e914
jmp 0x14002b2a8
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov rdx, qword [rsp + 0x230]
mov qword [rsp + 0xe0], rdx
mov rdx, qword [rsp + 0x238]
mov qword [rsp + 0xe8], rdx
mov rdx, qword [rsp + 0x250]
mov qword [rsp + 0xf0], rdx
mov rdx, qword [rsp + 0x258]
mov qword [rsp + 0xf8], rdx
movsxd rcx, eax
call fcn.14008e9d0
call fcn.14008e3b0
lea rcx, [rsp + 0xe0]
mov rdx, qword [rsp + 0xe0]
call fcn.14008e660
lea rcx, [rsp + 0xe8]
mov rdx, qword [rsp + 0xe8]
call fcn.14008e660
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0xf0]
call fcn.14008e660
lea rcx, [rsp + 0xf8]
mov rdx, qword [rsp + 0xf8]
call fcn.14008e660
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x108], 0
mov qword [rsp + 0x110], 0
mov qword [rsp + 0x118], 0
mov qword [rsp + 0x120], 0
mov qword [rsp + 0x140], 0
mov qword [rsp + 0x160], 0
lea rax, [rsp + 0x160]
mov qword [rsp + 0x58], rax
mov rdx, rbx
mov rcx, rax
call fcn.14008e8e0
mov ecx, 0x1000
call fcn.14008dc50
mov rdi, rax
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0xe8]
call fcn.14007e4d0
call fcn.14008e480
lea rsi, [rsp + 0x120]
mov edx, eax
mov rcx, rsi
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
lea r8, [0x1401672e6]
lea rdx, [0x14016683c]
mov rcx, qword [rsp + 0x120]
call fcn.14008b080
call fcn.14008e480
mov edx, eax
mov rcx, rsi
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0xe8]
call fcn.14007e248
call fcn.14008e480
lea rcx, [rsp + 0x118]
mov edx, eax
call fcn.14008e790
lea rsi, [rsp + 0x110]
lea rdx, str.__file_allocationnone___allow_overwrite
mov rcx, rsi
call fcn.14008e8e0
call fcn.14008e420
mov rcx, qword [rsp + 0x110]
call fcn.14008e870
lea rcx, str.__d__
call fcn.14008e870
mov rcx, qword [rsp + 0x120]
call fcn.14008e870
lea rbp, [0x14016747c]
mov rcx, rbp
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, rsi
call fcn.14008e790
call fcn.14008e420
mov rcx, qword [rsp + 0x110]
call fcn.14008e870
lea rcx, str.__o__
call fcn.14008e870
mov rcx, qword [rsp + 0x118]
call fcn.14008e870
mov rcx, rbp
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, rsi
call fcn.14008e790
call fcn.14008e420
mov rcx, qword [rsp + 0x110]
call fcn.14008e870
lea r13, [0x140167544]
mov rcx, r13
call fcn.14008e870
mov rcx, qword [rsp + 0xe0]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, rsi
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov ecx, eax
call fcn.140068a18
call fcn.14008e5d0
mov rsi, rax
call fcn.14008e480
mov edx, eax
mov rcx, rsi
call fcn.14007e4d0
lea rcx, str.aria2.dat
call fcn.14008e870
call fcn.14008e5d0
mov rcx, rax
mov r9d, 0x2e
lea r8, [0x140192f00]
mov rdx, qword [rsp + 0x110]
call fcn.140068498
mov rsi, rax
call fcn.14008e4f0
test rsi, rsi
jne 0x14002bfd0
cmp byte [rsp + 0x54], 1
je 0x14002c2d0
call fcn.14008e420
mov rcx, qword [rsp + 0x160]
call fcn.14008e870
call fcn.14008e5d0
mov rcx, qword [rsp + 0x100]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x108]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x110]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xe0]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x118]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x120]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xe8]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x140]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xf0]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xf8]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x160]
call fcn.14008e6d0
call fcn.14008e480
mov edx, eax
mov rcx, r15
call fcn.14008e790
mov rcx, qword [rsp + 0x98]
call fcn.14008e6d0
call fcn.14008e420
mov rcx, qword [rsp + 0x88]
call fcn.14008e870
call fcn.14008e5d0
mov rcx, qword [rsp + 0x230]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x238]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x80]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x250]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x258]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x88]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x90]
call fcn.14008e6d0
nop
movaps xmm6, xmmword [rsp + 0x1d0]
add rsp, 0x1e8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rsi
call fcn.140068aa4
test rax, rax
je 0x14002be6e
lea r12, [rsp + 0x100]
lea rbp, [rsp + 0x108]
jmp 0x14002c05a
call fcn.14008e420
mov rcx, qword [rsp + 0xf0]
call fcn.14008e870
mov rcx, r13
call fcn.14008e870
mov rcx, qword [rsp + 0x108]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, r14
call fcn.14008e790
jmp 0x14002c211
mov rcx, qword [rsp + 0x248]
call fcn.14006f53c
test rax, rax
jne 0x14002c270
nop
call fcn.14008e3b0
call fcn.140003d00
mov rcx, rsi
call fcn.140068b30
test rax, rax
je 0x14002c290
mov rdx, rbx
mov rcx, r12
call fcn.14008e8e0
mov rdx, rbx
mov rcx, rbp
call fcn.14008e8e0
mov rcx, rsi
call fcn.140068b98
test rax, rax
je 0x14002c050
mov r8, rax
mov rdx, rdi
mov rcx, rsi
call fcn.140068c74
mov r14, rax
test rax, rax
je 0x14002c050
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
mov r8d, 0x42
mov rdx, r14
mov rcx, rdi
call fcn.14008d9f0
call fcn.14008e5d0
mov r14, rax
call fcn.14008e480
mov edx, eax
mov rcx, r14
call fcn.14008b4a0
call fcn.14008e480
mov edx, eax
mov rcx, r12
call fcn.14008e790
lea rdx, str.___CN:
mov rcx, qword [rsp + 0x100]
call fcn.14008ab00
test rax, rax
je 0x14002c050
call fcn.14008e420
call fcn.14008e420
lea rdx, str.___CN:
mov rcx, qword [rsp + 0x100]
call fcn.14008ab00
mov r14, rax
call fcn.14008e480
lea rdx, [r14 - 5]
mov r8d, eax
mov rcx, qword [rsp + 0x100]
call fcn.14008a910
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
lea r8, [0x14016736c]
mov edx, 2
mov rcx, qword [rsp + 0x108]
call fcn.14008b5c0
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
lea r8, [0x140167368]
mov edx, 1
mov rcx, qword [rsp + 0x108]
call fcn.14008b5c0
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008e790
call fcn.14008e420
mov rcx, qword [rsp + 0x108]
call fcn.14008e870
call fcn.14008e480
lea r14, [rsp + 0x140]
mov edx, eax
mov rcx, r14
call fcn.14008e790
mov rax, qword [rsp + 0xf0]
test rax, rax
je 0x14002c211
cmp word [rax], 0
jne 0x14002bff8
mov rax, qword [rsp + 0xf8]
test rax, rax
je 0x14002c038
cmp word [rax], 0
je 0x14002c038
call fcn.14008e420
mov rcx, qword [rsp + 0x140]
call fcn.14008e870
mov rcx, r13
call fcn.14008e870
mov rcx, qword [rsp + 0xf8]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, r14
call fcn.14008e790
jmp 0x14002c038
mov rdx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x248]
call fcn.14006f5a8
jmp 0x14002c050
mov rcx, rsi
call fcn.140068c50
test rax, rax
je 0x14002c2b0
mov rdx, rbx
mov rcx, qword [rsp + 0x58]
call fcn.14008e8e0
jmp 0x14002be6e
lea rdx, [0x14015619a]
mov rcx, qword [rsp + 0x58]
call fcn.14008e8e0
jmp 0x14002be6e
mov rdx, qword [rsp + 0x160]
lea rcx, [0x14015619a]
call fcn.14008e730
test eax, eax
je 0x14002be79
mov rdx, rbx
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.14008e8e0
mov rdx, qword [rsp + 0xe8]
mov rcx, 0xffffffffffffffff
call fcn.14007f750
mov rbx, rax
mov rcx, rax
call fcn.14007f860
test rax, rax
je 0x14002be79
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
mov r8d, 0x10000
mov edx, 2
mov rcx, rbx
call fcn.14007fc90
call fcn.14008e480
mov edx, eax
mov rcx, rdi
call fcn.14008e790
mov rcx, rbx
call fcn.14007fa10
jmp 0x14002be79
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov rdx, qword [rsp + 0x230]
mov qword [rsp + 0xf0], rdx
mov rdx, qword [rsp + 0x238]
mov qword [rsp + 0xf8], rdx
mov rdx, qword [rsp + 0x250]
mov qword [rsp + 0x100], rdx
mov rdx, qword [rsp + 0x258]
mov qword [rsp + 0x108], rdx
movsxd rcx, eax
call fcn.14008e9d0
call fcn.14008e3b0
lea rcx, [rsp + 0xf0]
mov rdx, qword [rsp + 0xf0]
call fcn.14008e660
lea rcx, [rsp + 0xf8]
mov rdx, qword [rsp + 0xf8]
call fcn.14008e660
lea rcx, [rsp + 0x100]
mov rdx, qword [rsp + 0x100]
call fcn.14008e660
lea rcx, [rsp + 0x108]
mov rdx, qword [rsp + 0x108]
call fcn.14008e660
mov qword [rsp + 0x110], 0
mov qword [rsp + 0x118], 0
mov qword [rsp + 0x120], 0
mov qword [rsp + 0x140], 0
mov qword [rsp + 0x160], 0
lea rax, [rsp + 0x160]
mov qword [rsp + 0x58], rax
mov rdx, rbx
mov rcx, rax
call fcn.14008e8e0
mov ecx, 0x1000
call fcn.14008dc50
mov rdi, rax
call fcn.14008e420
lea rcx, str._v__o____O__
call fcn.14008e870
mov rcx, qword [rsp + 0xf8]
call fcn.14008e870
lea rcx, [0x1401661f6]
call fcn.14008e870
mov rcx, qword [rsp + 0xf0]
call fcn.14008e870
call fcn.14008e480
lea rcx, [rsp + 0x120]
mov edx, eax
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov ecx, eax
call fcn.140068a18
call fcn.14008e5d0
mov rsi, rax
call fcn.14008e480
mov edx, eax
mov rcx, rsi
call fcn.14007e4d0
mov rcx, rbp
call fcn.14008e870
call fcn.14008e5d0
mov rcx, rax
mov r9d, 0x2e
lea r8, [0x140192f00]
mov rdx, qword [rsp + 0x120]
call fcn.140068498
mov rsi, rax
call fcn.14008e4f0
mov ecx, 0x64
call fcn.14007bc08
test rsi, rsi
jne 0x14002c5d0
cmp byte [rsp + 0x54], 1
je 0x14002ca80
call fcn.14008e420
mov rcx, qword [rsp + 0x160]
call fcn.14008e870
call fcn.14008e5d0
mov rcx, qword [rsp + 0x110]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x118]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x120]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xf0]
call fcn.14008e6d0
mov rcx, qword [rsp + 0xf8]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x140]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x100]
call fcn.14008e6d0
mov rcx, qword [rsp + 0x108]
jmp 0x14002bf0d
mov rcx, rsi
call fcn.140068aa4
test rax, rax
je 0x14002c545
lea r12, [rsp + 0x110]
lea rbp, [rsp + 0x118]
lea r13, [0x140162c54]
jmp 0x14002c6ca
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r8d, eax
mov edx, 3
mov rcx, qword [rsp + 0x118]
call fcn.14008a670
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008e790
jmp 0x14002c7e2
lea rdx, [0x14015619a]
mov rcx, qword [rsp + 0x58]
call fcn.14008e8e0
jmp 0x14002c837
call fcn.14008e420
mov rcx, qword [rsp + 0x100]
call fcn.14008e870
lea rcx, [0x140167544]
call fcn.14008e870
mov rcx, qword [rsp + 0x118]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, r14
call fcn.14008e790
jmp 0x14002c877
mov rcx, qword [rsp + 0x248]
call fcn.14006f53c
test rax, rax
jne 0x14002c8d8
nop word cs:[rax + rax]
call fcn.14008e3b0
call fcn.140003d00
mov rcx, rsi
call fcn.140068b30
test rax, rax
je 0x14002c8f8
mov rdx, rbx
mov rcx, r12
call fcn.14008e8e0
mov rdx, rbx
mov rcx, rbp
call fcn.14008e8e0
mov rcx, rsi
call fcn.140068b98
test rax, rax
je 0x14002c6c0
mov r8, rax
mov rdx, rdi
mov rcx, rsi
call fcn.140068c74
mov r14, rax
test rax, rax
je 0x14002c6c0
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
mov r8d, 0x42
mov rdx, r14
mov rcx, rdi
call fcn.14008d9f0
call fcn.14008e5d0
mov r14, rax
call fcn.14008e480
mov edx, eax
mov rcx, r14
call fcn.14008b4a0
call fcn.14008e480
mov edx, eax
mov rcx, r12
call fcn.14008e790
mov rdx, r13
mov rcx, qword [rsp + 0x110]
call fcn.14008ab00
test rax, rax
je 0x14002c6c0
mov rdx, r13
mov rcx, qword [rsp + 0x110]
call fcn.14008a530
mov r14, rax
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
lea r8, [0x1401673aa]
mov rdx, r14
mov rcx, qword [rsp + 0x110]
call fcn.14008b5c0
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008e790
mov rcx, qword [rsp + 0x118]
call fcn.14008a510
cmp rax, 3
jg 0x14002c600
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov edx, eax
mov rcx, qword [rsp + 0x118]
call fcn.14008b4a0
lea rcx, [0x1401673aa]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, rbp
call fcn.14008e790
mov rdx, qword [rsp + 0x118]
lea rcx, str.100_
call fcn.14008e730
test eax, eax
jne 0x14002c640
call fcn.14008e420
mov rcx, qword [rsp + 0x118]
call fcn.14008e870
call fcn.14008e480
lea r14, [rsp + 0x140]
mov edx, eax
mov rcx, r14
call fcn.14008e790
mov rax, qword [rsp + 0x100]
test rax, rax
je 0x14002c877
cmp word [rax], 0
jne 0x14002c660
mov rax, qword [rsp + 0x108]
test rax, rax
je 0x14002c6a0
cmp word [rax], 0
je 0x14002c6a0
call fcn.14008e420
mov rcx, qword [rsp + 0x140]
call fcn.14008e870
lea rcx, [0x140167544]
call fcn.14008e870
mov rcx, qword [rsp + 0x108]
call fcn.14008e870
call fcn.14008e480
mov edx, eax
mov rcx, r14
call fcn.14008e790
jmp 0x14002c6a0
mov rdx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x248]
call fcn.14006f5a8
jmp 0x14002c6c0
call fcn.14008e420
call fcn.14008e420
lea rcx, [0x14016738c]
call fcn.14008e870
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
lea r8, [0x1401672e6]
lea rdx, [0x14016683c]
mov rcx, qword [rsp + 0xf8]
call fcn.14008b080
call fcn.14008e480
lea rcx, str._saved__
call fcn.14008e870
call fcn.14008e700
call fcn.14008e5d0
mov rdx, rax
mov rcx, qword [rsp + 0x110]
call fcn.14008ab00
mov rsi, rax
call fcn.14008e4f0
test rsi, rsi
je 0x14002c545
call fcn.14008e420
call fcn.14008e420
lea rdi, str.saved__
mov rdx, rdi
mov rcx, qword [rsp + 0x110]
call fcn.14008ab00
mov rsi, rax
mov rcx, rdi
call fcn.14008a510
add rsi, rax
call fcn.14008e480
mov r8d, eax
mov rdx, rsi
mov rcx, qword [rsp + 0x110]
call fcn.14008a910
call fcn.14008e480
lea rcx, [rsp + 0x110]
mov edx, eax
call fcn.14008e790
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
lea r8, [0x1401672e6]
mov edx, 1
mov rcx, qword [rsp + 0x110]
call fcn.14008b5c0
call fcn.14008e5d0
mov rcx, rax
call fcn.14008ac90
mov rdi, rax
call fcn.14008e4f0
call fcn.14008e420
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
lea r8, [0x1401672e6]
mov edx, 2
mov rcx, qword [rsp + 0x110]
call fcn.14008b5c0
call fcn.14008e5d0
mov rcx, rax
call fcn.14008ac90
mov rsi, rax
call fcn.14008e4f0
cmp rdi, rsi
jne 0x14002c545
lea rdx, [0x14015619a]
mov rcx, qword [rsp + 0x58]
call fcn.14008e8e0
jmp 0x14002c545
mov rdx, qword [rsp + 0x160]
lea rcx, [0x14015619a]
call fcn.14008e730
test eax, eax
je 0x14002c550
mov rdx, rbx
mov rdi, qword [rsp + 0x58]
mov rcx, rdi
call fcn.14008e8e0
mov rdx, qword [rsp + 0xf8]
mov rcx, 0xffffffffffffffff
call fcn.14007f750
mov rbx, rax
mov rcx, rax
call fcn.14007f860
test rax, rax
je 0x14002c550
call fcn.14008e420
call fcn.14008e420
call fcn.14008e480
mov r9d, eax
mov r8d, 0x10000
mov edx, 2
mov rcx, rbx
call fcn.14007fc90
call fcn.14008e480
mov edx, eax
mov rcx, rdi
call fcn.14008e790
mov rcx, rbx
call fcn.14007fa10
mov rcx, qword [rsp + 0xf8]
call fcn.14007e914
jmp 0x14002c550