Function at 0x1400019c0
Capabilities:
Create process on windows
Delete file
Read file on windows
Write and execute a file
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc60]
sub rsp, 0xd60
mov rax, qword [0x14002a040]
xor rax, rsp
mov qword [rbp + 0xc50], rax
mov r14, rdx
mov qword [rbp + 0x9c0], rdx
mov ebx, ecx
xor esi, esi
mov r8d, 0x104
lea rdx, [rbp + 0xa40]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp ebx, 3
jne 0x140001b72
mov rdx, qword [r14 + 0x10]
lea rcx, [rbp - 0x38]
call fcn.140002260
nop
mov rdx, qword [r14 + 8]
lea rcx, [rbp - 0x78]
call fcn.140002260
nop
call fcn.14000c5e8
mov rdi, rax
lea rbx, [rbp - 0x38]
cmp qword [rbp - 0x20], 7
cmova rbx, qword [rbp - 0x38]
mov dword [rax], esi
lea r8d, [rsi + 0xa]
lea rdx, [rbp + 0x9c8]
mov rcx, rbx
call fcn.140009d28
movsxd rsi, eax
cmp rbx, qword [rbp + 0x9c8]
je 0x14000218d
cmp dword [rdi], 0x22
je 0x14000219a
call fcn.14000c5e8
mov rdi, rax
lea rbx, [rbp - 0x78]
cmp qword [rbp - 0x60], 7
cmova rbx, qword [rbp - 0x78]
xor r15d, r15d
mov dword [rax], r15d
lea r8d, [r15 + 0xa]
lea rdx, [rbp + 0x9c0]
mov rcx, rbx
call fcn.140009d28
cmp rbx, qword [rbp + 0x9c0]
je 0x1400021a7
cmp dword [rdi], 0x22
je 0x1400021b4
mov r9, rsi
movsxd r8, eax
mov rcx, qword [r14]
call fcn.1400015c0
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x140001b18
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400021c1
call fcn.1400031ec
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], r15w
mov rdx, qword [rbp - 0x20]
cmp rdx, 7
jbe 0x140001eb5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400021c7
call fcn.1400031ec
jmp 0x140001eb5
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
mov qword [rsp + 0x40], rax
mov r9d, 2
xor r8d, r8d
lea edx, [r9 - 6]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x9d8]
mov r8d, 4
lea rdx, [rbp + 0x9d4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rbp + 0x9d4]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x9d8]
mov r8d, 0x9a4
lea rdi, [0x14002aab0]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov r12d, esi
cmp dword [0x14002b420], esi
jle 0x140001ea3
lea rax, [0x14002b410]
mov qword [rbp + 0x9c8], rax
lea r13, [0x14002b424]
cmp byte [rax], 0
jne 0x140001ee7
movsxd rax, r12d
imul r15, rax, 0xc8
add r15, rdi
mov r8, r15
lea rcx, [rsp + 0x48]
call fcn.1400023a0
cmp qword [rax + 0x18], 7
jbe 0x140001c63
mov rax, qword [rax]
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x40000000
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140001ccd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001cc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400021cd
call fcn.1400031ec
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], si
lea rcx, [rbp + 0x10]
mov rdx, rdi
mov r8d, 0x9a4
call fcn.14001c670
mov esi, dword [r13]
mov ebx, esi
mov ecx, esi
call fcn.1400031f4
mov rdi, rax
mov qword [rsp + 0x20], 0
lea r9, [rbp + 0x9d0]
mov r8d, esi
mov rdx, rax
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_ReadFile]
xor r8d, r8d
mov ecx, r8d
test esi, esi
je 0x140001dcd
mov r9d, dword [rbp + 0x97c]
cmp rbx, 0x40
jb 0x140001db8
mov eax, ebx
cqo
and edx, 0x3f
add rax, rdx
and eax, 0x3f
sub rax, rdx
mov edx, ebx
sub rdx, rax
movsx eax, r9b
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
lea rax, [rdi + 0x20]
nop dword [rax]
movdqu xmm0, xmmword [rax - 0x20]
psubb xmm0, xmm2
movdqu xmmword [rax - 0x20], xmm0
movdqu xmm0, xmmword [rax - 0x10]
psubb xmm0, xmm2
movdqu xmmword [rax - 0x10], xmm0
movdqu xmm1, xmmword [rax]
psubb xmm1, xmm2
movdqu xmmword [rax], xmm1
movdqu xmm0, xmmword [rax + 0x10]
psubb xmm0, xmm2
movdqu xmmword [rax + 0x10], xmm0
add rcx, 0x40
lea rax, [rax + 0x40]
cmp rcx, rdx
jl 0x140001d70
cmp rcx, rbx
jge 0x140001dcd
lea rax, [rcx + rdi]
sub rbx, rcx
nop
sub byte [rax], r9b
lea rax, [rax + 1]
sub rbx, 1
jne 0x140001dc0
mov qword [rsp + 0x20], r8
lea r9, [rbp + 0x9d0]
mov r8d, esi
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, r15
lea rcx, [rbp - 0x58]
call fcn.1400023a0
cmp qword [rax + 0x18], 7
jbe 0x140001e07
mov rax, qword [rax]
mov dword [rsp + 0x28], 5
xor esi, esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rax
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x140001e6b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400021d3
call fcn.1400031ec
lea rdi, [0x14002aab0]
mov r14, qword [rbp + 0x9c0]
mov rbx, qword [rsp + 0x40]
inc r12d
mov rax, qword [rbp + 0x9c8]
inc rax
mov qword [rbp + 0x9c8], rax
add r13, 4
cmp r12d, dword [0x14002b420]
jl 0x140001c36
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r14]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
mov rcx, qword [rbp + 0xc50]
xor rcx, rsp
call fcn.140002f50
lea r11, [rsp + 0xd60]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov r9d, 1
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFilePointer]
mov r9d, eax
lea r10, [rbp + 0xa0a]
nop word [rax + rax]
sub r10, 2
mov eax, 0xcccccccd
mul r9d
shr edx, 3
movzx ecx, dx
shl cx, 2
lea r8d, [rcx + rdx]
add r8w, r8w
sub r9w, r8w
add r9w, 0x30
mov word [r10], r9w
mov r9d, edx
test edx, edx
jne 0x140001f10
lea r8, [rbp + 0xa0a]
mov rdx, r10
lea rcx, [rbp - 0x58]
call fcn.140002750
nop
mov ecx, dword [r13]
lea r9, [rbp + 0xa3a]
sub r9, 2
mov eax, 0xcccccccd
mul ecx
shr edx, 3
movzx eax, dx
shl ax, 2
lea r8d, [rax + rdx]
add r8w, r8w
sub cx, r8w
add cx, 0x30
mov word [r9], cx
mov ecx, edx
test edx, edx
jne 0x140001f61
lea r8, [rbp + 0xa3a]
mov rdx, r9
lea rcx, [rsp + 0x68]
call fcn.140002750
nop
mov rdx, qword [rsp + 0x78]
mov r8, qword [rbp - 0x80]
mov rax, r8
sub rax, rdx
lea rcx, [rsp + 0x68]
cmp rax, 1
jb 0x140001fe8
lea rax, [rdx + 1]
mov qword [rsp + 0x78], rax
cmp r8, 7
cmova rcx, qword [rsp + 0x68]
mov eax, dword [0x140026b1c]
mov word [rcx + rdx*2], ax
mov word [rcx + rdx*2 + 2], si
lea rax, [rsp + 0x68]
jmp 0x140001ffb
mov qword [rsp + 0x20], 1
mov edx, 1
call fcn.1400028a0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea r9, [rbp - 0x58]
lea r8, [rbp - 0x18]
lea rcx, [rsp + 0x48]
call fcn.140002530
lea r9, [rsp + 0x48]
cmp qword [rsp + 0x60], 7
cmova r9, qword [rsp + 0x48]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
mov r8, qword [r14]
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rsp + 0x60]
cmp rdx, 7
jbe 0x140002099
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002094
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400021d9
call fcn.1400031ec
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], 7
mov word [rsp + 0x48], si
mov rdx, qword [rbp]
cmp rdx, 7
jbe 0x1400020ed
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400020e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400021df
call fcn.1400031ec
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 7
jbe 0x14000212a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002125
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002181
call fcn.1400031ec
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], si
mov rdx, qword [rbp - 0x40]
cmp rdx, 7
jbe 0x140001e7e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002177
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002187
call fcn.1400031ec
jmp 0x140001e7e
call fcn.14000cdac
nop
call fcn.14000cdac
nop
lea rcx, str.invalid_stoi_argument
call fcn.140002c5c
int3
lea rcx, str.stoi_argument_out_of_range
call fcn.140002ca4
int3
lea rcx, str.invalid_stoi_argument
call fcn.140002c5c
int3
lea rcx, str.stoi_argument_out_of_range
call fcn.140002ca4
nop
call fcn.14000cdac
nop
call fcn.14000cdac
int3
call fcn.14000cdac
int3
call fcn.14000cdac
nop
call fcn.14000cdac
nop
call fcn.14000cdac
int3