Function at 0x1400058a0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1330]
mov eax, 0x1430
call fcn.14002fbc0
sub rsp, rax
mov rax, qword [0x140076000]
xor rax, rsp
mov qword [rbp + 0x1320], rax
mov rbx, r8
mov qword [rbp - 0x80], rbx
mov r12, rdx
xor esi, esi
mov edi, esi
mov dword [rsp + 0x70], esi
mov dword [rsp + 0x78], esi
mov dword [rbp + 0x178], esi
cmp qword [rcx + 0x18], 0xf
jbe 0x1400058fc
mov rcx, qword [rcx]
lea r8, [rbp + 0x178]
mov edx, 0x10
call fcn.14000e9e0
mov r13, rax
test rax, rax
je 0x140006ce8
lea rcx, [rbp + 0x80]
call fcn.14000d6a0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x120], xmm1
mov qword [rbp + 0x130], rsi
mov r15, rsi
xor edx, edx
mov rcx, r13
call fcn.14000c510
test rax, rax
je 0x140005fb0
nop dword [rax]
lea r9, [rbp + 0x80]
xor r8d, r8d
mov rdx, r15
mov rcx, r13
call fcn.14000ed20
test eax, eax
jne 0x140005f9a
mov r9, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000597a
mov r9, qword [rbx]
xor r8d, r8d
mov rdx, r15
mov rcx, r13
call fcn.14000ec50
mov r14, rax
test rax, rax
je 0x140005f9a
xorps xmm0, xmm0
movups xmmword [rbp + 0xc0], xmm0
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], rsi
mov rdx, qword [rbp + 0x88]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x1400059c0
lea rcx, [rbp + 0xc0]
call fcn.14000aac0
nop
mov edx, 5
lea rcx, [rsp + 0x50]
call fcn.140004290
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 7
jb 0x140005a8c
lea rax, [r8 + 7]
mov qword [rbx + 0x10], rax
mov rdi, rbx
cmp rcx, 0xf
jbe 0x140005a15
mov rdi, qword [rbx]
lea rax, [0x14006bd6f]
cmp rax, rdi
jbe 0x140005a3e
lea rax, [rdi + r8]
lea rcx, str.Windows
cmp rcx, rax
ja 0x140005a3e
cmp rdi, rcx
jbe 0x140005a43
mov rsi, rdi
sub rsi, rcx
jmp 0x140005a43
mov esi, 7
lea rcx, [rdi + 7]
inc r8
mov rdx, rdi
call fcn.140058190
mov r8, rsi
lea rdx, str.Windows
mov rcx, rdi
call fcn.140058190
lea rcx, [rdi + rsi]
mov r8d, 7
sub r8, rsi
lea rdx, str.Windows
add rdx, 7
add rdx, rsi
call fcn.140058190
mov edi, dword [rsp + 0x70]
xor esi, esi
jmp 0x140005aa5
mov qword [rsp + 0x28], 7
mov edx, 7
mov rcx, rbx
call fcn.14000bf70
mov rbx, rax
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x100], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x110], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
bts edi, 0x14
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140005b0a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b05
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d18
call fcn.14002f840
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rcx, qword [r12 + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 1
jb 0x140006d85
mov r9, r12
cmp qword [r12 + 0x18], 0xf
jbe 0x140005b48
mov r9, qword [r12]
mov qword [rsp + 0x30], 1
lea rax, [0x14006bd70]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x138]
call fcn.14000b770
bts edi, 0x16
lea rdx, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova rdx, qword [rbp + 0x100]
mov r8, qword [rbp + 0x110]
lea rcx, [rbp + 0x138]
call fcn.1400092d0
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xf0], rsi
mov qword [rbp + 0xf8], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf0], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 0x15
mov dword [rsp + 0x70], edi
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x140005c21
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d1e
call fcn.14002f840
mov qword [rbp + 0x148], rsi
mov qword [rbp + 0x150], 0xf
mov byte [rbp + 0x138], 0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1a0]
call fcn.140058830
lea rdx, [rbp + 0xe0]
cmp qword [rbp + 0xf8], 0xf
cmova rdx, qword [rbp + 0xe0]
mov r8d, 0x20
lea rcx, [rbp + 0x1a0]
call fcn.140009070
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rbx, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1a0], rbx
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x19c], edx
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
test byte [rbp + rcx + 0x1b0], 6
mov rcx, r14
je 0x140005d51
call fcn.14000d5e0
nop
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x1a0], rbx
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x19c], edx
lea rcx, [rbp + 0x1a8]
call fcn.140008370
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1a0], rax
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x19c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x248], rax
lea rcx, [rbp + 0x248]
call fcn.14002ef50
nop
jmp 0x140005eb9
mov r8d, 0x1000
lea rdx, [rbp + 0x320]
call fcn.14000d6d0
test rax, rax
jle 0x140005da0
nop dword [rax + rax]
mov r8, rax
lea rdx, [rbp + 0x320]
lea rcx, [rbp + 0x1a0]
call fcn.140008610
mov r8d, 0x1000
lea rdx, [rbp + 0x320]
mov rcx, r14
call fcn.14000d6d0
test rax, rax
jg 0x140005d70
lea rcx, [rbp + 0x1a8]
call fcn.140008f30
test rax, rax
jne 0x140005df0
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x1e8], 0
mov edx, 2
cmovne eax, edx
or eax, dword [rbp + rcx + 0x1b0]
and eax, 0x17
mov dword [rbp + rcx + 0x1b0], eax
and eax, dword [rbp + rcx + 0x1b4]
jne 0x140006d24
mov rcx, r14
call fcn.14000d5e0
mov rax, qword [rbp + 0x128]
cmp rax, qword [rbp + 0x130]
je 0x140005e21
lea rdx, [rbp + 0xe0]
mov rcx, rax
call fcn.1400088d0
add qword [rbp + 0x128], 0x20
jmp 0x140005e38
lea r8, [rbp + 0xe0]
mov rdx, rax
lea rcx, [rbp + 0x120]
call fcn.14000bc90
nop
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x1a0], rbx
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x19c], edx
lea rcx, [rbp + 0x1a8]
call fcn.140008370
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1a0], rax
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x19c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x248], rax
lea rcx, [rbp + 0x248]
call fcn.14002ef50
nop
mov rdx, qword [rbp + 0xf8]
cmp rdx, 0xf
jbe 0x140005efa
inc rdx
mov rcx, qword [rbp + 0xe0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140005ef5
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d73
call fcn.14002f840
mov byte [rbp + 0xe0], 0
mov qword [rbp + 0xf8], 0xf
mov qword [rbp + 0xf0], rsi
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140005f55
inc rdx
mov rcx, qword [rbp + 0x100]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140005f4f
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d79
call fcn.14002f840
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 0xf
jbe 0x140005f96
inc rdx
mov rcx, qword [rbp + 0xc0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140005f91
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d7f
call fcn.14002f840
mov rbx, qword [rbp - 0x80]
inc r15
xor edx, edx
mov rcx, r13
call fcn.14000c510
cmp r15, rax
jb 0x140005950
mov rcx, r13
call fcn.14000cf70
mov r13, qword [rbp + 0x120]
mov rax, qword [rbp + 0x128]
mov qword [rbp - 0x80], rax
cmp r13, rax
je 0x140006c97
mov r12d, dword [rsp + 0x70]
nop dword [rax + rax]
mov rdi, qword [r13 + 0x10]
mov rbx, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x140005ff2
mov rbx, qword [r13]
call fcn.14002d8d8
mov qword [rbp + 0x50], rbx
mov qword [rbp + 0x58], rdi
lea r8, [rbp + 0x50]
mov edx, eax
lea rcx, [rbp - 0x38]
call fcn.140002050
or r12d, 0xc00
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 7
cmova rcx, qword [rbp - 0x38]
mov rax, qword [rbp - 0x28]
lea r11, [rcx + rax*2]
mov r10, r11
mov rdx, r11
call fcn.1400021c0
cmp rax, r11
je 0x14000607b
nop dword [rax + rax]
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14000604f
cmp cx, 0x2f
jne 0x140006058
add rax, 2
cmp rax, r11
jne 0x140006040
cmp rax, r11
je 0x14000607b
nop dword [rax]
lea rdx, [r10 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14000607b
cmp cx, 0x2f
je 0x14000607b
mov r10, rdx
cmp rax, rdx
jne 0x140006060
mov qword [rbp + 0x60], r10
sub r11, r10
sar r11, 1
mov qword [rbp + 0x68], r11
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0xc0]
call fcn.14000b890
bts r12d, 0xc
lea rsi, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 7
cmova rsi, qword [rbp + 0xc0]
mov rdi, qword [rbp + 0xd0]
call fcn.14002d8d8
mov r14d, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xor r15d, r15d
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], r15b
bts r12d, 0x10
mov dword [rsp + 0x78], r12d
test rdi, rdi
je 0x140006163
cmp rdi, 0x7fffffff
ja 0x140006da5
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8d, edi
mov rdx, rsi
mov ecx, eax
call fcn.14002d948
mov rbx, rax
mov qword [rsp + 0x70], rax
shr rax, 0x20
test eax, eax
jne 0x140006d9b
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rbp - 0x58]
call fcn.14000b4e0
lea r9, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova r9, qword [rbp - 0x58]
mov dword [rsp + 0x20], ebx
mov r8d, edi
mov rdx, rsi
mov ecx, r14d
call fcn.14002d948
mov qword [rsp + 0x70], rax
shr rax, 0x20
test eax, eax
jne 0x140006d91
btr r12d, 0x10
or r12d, 0xe000
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], r15
mov r8d, 0x2f
lea rdx, str._Plfurvriw_Zlqgrzv_VwduwPhqx_Surjudpv_Vwduwxs_
lea rcx, [rbp]
call fcn.14000aac0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov rdx, r15
mov qword [rbp - 0x68], rdx
mov r8d, 0xf
mov qword [rbp - 0x60], r8
mov byte [rbp - 0x78], dl
bts r12d, 0x11
mov dword [rsp + 0x78], r12d
lea rbx, [rbp]
mov r14, qword [rbp + 0x18]
cmp r14, r8
seta r15b
mov rsi, qword [rbp]
cmova rbx, rsi
lea rcx, [rbp]
test r15b, r15b
cmovne rcx, rsi
mov rdi, qword [rbp + 0x10]
add rdi, rcx
cmp rbx, rdi
je 0x14000623f
nop dword [rax + rax]
movzx r9d, byte [rbx]
sub r9b, 3
cmp rdx, r8
jae 0x14000621d
lea rax, [rdx + 1]
mov qword [rbp - 0x68], rax
lea rax, [rbp - 0x78]
cmp r8, 0xf
cmova rax, qword [rbp - 0x78]
mov byte [rax + rdx], r9b
mov byte [rax + rdx + 1], 0
jmp 0x14000622d
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x78]
call fcn.14000ae20
inc rbx
cmp rbx, rdi
je 0x14000623f
mov r8, qword [rbp - 0x60]
mov rdx, qword [rbp - 0x68]
jmp 0x1400061f0
lea rcx, str.APPDATA
call fcn.140038888
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor ecx, ecx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rcx
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], cl
jne 0x140006266
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.14000aac0
nop
lea r9, [rbp - 0x78]
lea r8, [rsp + 0x50]
lea rcx, [rbp + 0x20]
call fcn.14000b580
bts r12d, 0x12
mov dword [rsp + 0x78], r12d
lea r9, [rbp - 0x58]
lea r8, [rbp + 0x20]
lea rcx, [rbp + 0x100]
call fcn.14000b580
bts r12d, 0x13
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400062ee
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006dab
call fcn.14002f840
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000632b
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006326
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006db1
call fcn.14002f840
btr r12d, 0x11
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x14000636c
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006366
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006db7
call fcn.14002f840
nop
test r15b, r15b
je 0x1400063a3
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x14000639a
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006dbd
mov rcx, rsi
call fcn.14002f840
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x1400063de
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006dc3
call fcn.14002f840
xor esi, esi
mov qword [rbp - 0x48], rsi
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], sil
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x140006436
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006431
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006dc9
call fcn.14002f840
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], si
mov rdx, qword [rbp - 0x20]
cmp rdx, 7
jbe 0x14000648f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000648a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006dcf
call fcn.14002f840
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], si
mov rcx, qword [r13 + 0x10]
movabs r15, 0x7fffffffffffffff
mov rax, r15
sub rax, rcx
cmp rax, 0x14
jb 0x140006d12
mov rax, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x1400064cb
mov rax, qword [r13]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x14
lea r9, str._echo_off_nstart_____
lea rcx, [rsp + 0x50]
call fcn.14000b770
or r12d, 1
mov r8d, 1
lea rdx, [0x14006bdb0]
lea rcx, [rsp + 0x50]
call fcn.1400092d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rsi
mov qword [rbp + 0x198], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x180], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x190], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
or r12d, 2
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140006587
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006582
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006dd5
call fcn.14002f840
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rax, r15
mov rcx, qword [rbp + 0x110]
sub rax, rcx
cmp rax, 4
jb 0x140006e68
lea r9, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova r9, qword [rbp + 0x100]
mov qword [rsp + 0x30], 4
lea r14, str..bat
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x138]
call fcn.14000b770
or r12d, 4
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1a0]
call fcn.140058830
lea rdx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova rdx, qword [rbp + 0x138]
mov ebx, 2
mov r8d, ebx
lea rcx, [rbp + 0x1a0]
call fcn.140009070
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1a0], rax
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x19c], edx
lea rdx, [rbp + 0x180]
cmp qword [rbp + 0x198], 0xf
cmova rdx, qword [rbp + 0x180]
mov r8, qword [rbp + 0x190]
lea rcx, [rbp + 0x1a0]
call fcn.14000b9e0
lea rcx, [rbp + 0x1a8]
call fcn.140008f30
test rax, rax
jne 0x1400066da
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x1e8], 0
cmovne eax, ebx
or eax, dword [rbp + rcx + 0x1b0]
and eax, 0x17
mov dword [rbp + rcx + 0x1b0], eax
mov edx, dword [rbp + rcx + 0x1b4]
and edx, eax
jne 0x140006ddb
mov rax, r15
mov rcx, qword [rbp + 0x110]
sub rax, rcx
cmp rax, 4
jb 0x140006e62
lea r9, [rbp + 0x100]
cmp qword [rbp + 0x118], 0xf
cmova r9, qword [rbp + 0x100]
mov qword [rsp + 0x30], 4
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x50]
call fcn.14000b770
or r12d, 8
mov rdi, qword [rsp + 0x60]
lea rbx, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova rbx, qword [rsp + 0x50]
call fcn.14002d8d8
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], rdi
lea r8, [rbp + 0x70]
mov edx, eax
lea rcx, [rbp - 0x78]
call fcn.140002050
or r12d, 0x30
mov rdi, qword [rbp + 0x148]
lea rbx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova rbx, qword [rbp + 0x138]
call fcn.14002d8d8
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rdi
lea r8, [rbp - 0x10]
mov edx, eax
lea rcx, [rbp + 0xc0]
call fcn.140002050
or r12d, 0xc0
lea rdx, [rbp - 0x78]
lea rcx, [rbp + 0xc0]
call fcn.140004020
nop
mov rdx, qword [rbp + 0xd8]
cmp rdx, 7
jbe 0x1400067fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400067f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e2c
call fcn.14002f840
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], si
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x140006853
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000684e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e32
call fcn.14002f840
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], si
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400068a0
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000689b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e38
call fcn.14002f840
mov dword [rbp + 0x2b0], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x2b8], xmm0
movups xmmword [rbp + 0x2c8], xmm0
movups xmmword [rbp + 0x2d8], xmm0
movups xmmword [rbp + 0x2e8], xmm0
movups xmmword [rbp + 0x2f8], xmm0
movups xmmword [rbp + 0x308], xmm0
mov dword [rbp + 0x2ec], 1
mov word [rbp + 0x2f0], si
mov rcx, qword [r13 + 0x10]
mov rax, r15
sub rax, rcx
cmp rax, 0xc
jb 0x140006e5c
mov rax, r13
cmp qword [r13 + 0x18], 0xf
jbe 0x14000690a
mov rax, qword [r13]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0xc
lea r9, str.cmd.exe__C__
lea rcx, [rsp + 0x50]
call fcn.14000b770
bts r12d, 8
mov r8d, 1
lea rdx, [0x14006bdb0]
lea rcx, [rsp + 0x50]
call fcn.1400092d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], rsi
mov qword [rbp + 0x170], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x158], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x168], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts r12d, 9
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400069c8
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400069c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e3e
call fcn.14002f840
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
lea rdx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rdx, qword [rbp + 0x158]
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140006a89
lea rdx, str.Failed_to_execute:
call fcn.14000a060
lea rdx, [rbp + 0x158]
cmp qword [rbp + 0x170], 0xf
cmova rdx, qword [rbp + 0x158]
mov r8, qword [rbp + 0x168]
mov rcx, rax
call fcn.14000b9e0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140009a80
movzx edx, al
mov rcx, rbx
call fcn.14000b330
mov rcx, rbx
call fcn.1400095e0
jmp 0x140006aa4
mov rcx, qword [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rdx, qword [rbp + 0x170]
cmp rdx, 0xf
jbe 0x140006ae5
inc rdx
mov rcx, qword [rbp + 0x158]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ae0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e44
call fcn.14002f840
mov qword [rbp + 0x168], rsi
mov qword [rbp + 0x170], 0xf
mov byte [rbp + 0x158], 0
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1a0], rax
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x19c], edx
lea rcx, [rbp + 0x1a8]
call fcn.140008370
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1a0], rax
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x19c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x248], rax
lea rcx, [rbp + 0x248]
call fcn.14002ef50
nop
mov rdx, qword [rbp + 0x150]
cmp rdx, 0xf
jbe 0x140006bc7
inc rdx
mov rcx, qword [rbp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006bc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e4a
call fcn.14002f840
mov qword [rbp + 0x148], rsi
mov qword [rbp + 0x150], 0xf
mov byte [rbp + 0x138], 0
mov rdx, qword [rbp + 0x198]
cmp rdx, 0xf
jbe 0x140006c21
inc rdx
mov rcx, qword [rbp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e50
call fcn.14002f840
mov qword [rbp + 0x190], rsi
mov qword [rbp + 0x198], 0xf
mov byte [rbp + 0x180], 0
mov rdx, qword [rbp + 0x118]
cmp rdx, 0xf
jbe 0x140006c7b
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006c76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006e56
call fcn.14002f840
add r13, 0x20
cmp r13, qword [rbp - 0x80]
jne 0x140005fe0
mov rax, qword [rbp + 0x128]
mov r13, qword [rbp + 0x120]
test r13, r13
je 0x140006ce6
mov rdx, rax
mov rcx, r13
call fcn.14000abc0
mov rdx, qword [rbp + 0x130]
mov rcx, qword [rbp + 0x120]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ce1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006d8b
call fcn.14002f840
mov al, 1
mov rcx, qword [rbp + 0x1320]
xor rcx, rsp
call fcn.14002f820
mov rbx, qword [rsp + 0x1488]
add rsp, 0x1430
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400012e0
nop
call fcn.140038478
nop
call fcn.140038478
nop
test al, 4
je 0x140006d31
lea rbx, str.ios_base::badbit_set
jmp 0x140006d45
test dl, al
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp - 0x10]
call fcn.1400013d0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.140001ef0
lea rdx, [0x140073660]
lea rcx, [rbp + 0x20]
call fcn.140031640
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.1400012e0
nop
call fcn.140038478
nop
mov ecx, dword [rsp + 0x74]
call fcn.140001a70
int3
mov ecx, dword [rsp + 0x74]
call fcn.140001a70
int3
call fcn.140001710
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
test dl, 4
je 0x140006de9
lea rbx, str.ios_base::badbit_set
jmp 0x140006dfe
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp - 0x10]
call fcn.1400013d0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.140001ef0
lea rdx, [0x140073660]
lea rcx, [rbp + 0x20]
call fcn.140031640
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.140038478
nop
call fcn.1400012e0
int3
call fcn.1400012e0
nop
call fcn.1400012e0
int3