Function at 0x14001d4d4
Capabilities:
Move file

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x60]
sub rsp, 0x160
mov rax, qword [0x140070070]
xor rax, rsp
mov qword [rbp + 0x50], rax
mov rsi, r8
mov r14, rdx
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], r8
call fcn.1400064a8
mov rcx, rax
test rax, rax
je 0x14001d756
mov rax, qword [rax]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x20], rbx
lea rcx, str.HDHDHKAKAHJEIEJMDEJKEOMXKIOWOKKXKSJDD
call fcn.1400328d0
mov r8, rax
lea rcx, [rsp + 0x40]
call fcn.14002b4ac
mov rax, qword [rsi]
movsxd rdi, dword [rax - 0x10]
lea rcx, [rdi + 1]
call fcn.14003941c
mov r15, rax
test rax, rax
je 0x14001d6c1
mov rcx, qword [rsi]
cmp dword [rcx - 8], 1
jle 0x14001d579
mov edx, dword [rcx - 0x10]
mov rcx, rsi
call fcn.14000dc38
mov r9d, edi
mov r8, r15
mov rdx, qword [rsi]
lea rcx, [rsp + 0x40]
call fcn.14002b524
mov rcx, qword [rsi]
test rcx, rcx
jne 0x14001d598
xor eax, eax
jmp 0x14001d5a9
movsxd rdx, dword [rcx - 0xc]
call fcn.140031ee8
test eax, eax
js 0x14001d74b
mov rcx, qword [rsi]
cmp eax, dword [rcx - 0xc]
jg 0x14001d74b
mov dword [rcx - 0x10], eax
mov ecx, eax
mov rax, qword [rsi]
mov byte [rcx + rax], 0
mov byte [rdi + r15], 0
mov r8, rdi
mov rdx, r15
lea rcx, [rsp + 0x30]
call fcn.140021354
nop
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14000d760
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
or edi, 0xffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001d607
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, r15
call fcn.140032990
call fcn.1400064a8
mov rcx, rax
test rax, rax
je 0x14001d761
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x28], rax
mov rdx, qword [rsp + 0x20]
lea rcx, [rsp + 0x28]
call fcn.140025954
mov rbx, qword [rsp + 0x28]
mov r8, rbx
lea rdx, str.encrypted_text_s
lea rcx, [0x14005f6f0]
call fcn.140025b7c
lea rdx, [rsp + 0x20]
mov rcx, r14
call fcn.14000d848
nop
lea rdx, [rbx - 0x18]
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001d682
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsp + 0x20]
add rdx, 0xffffffffffffffe8
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001d6a2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001d720
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
jmp 0x14001d720
lea rdx, str.Malloc_failed_when_encypting_
lea rcx, [0x14005f6f0]
call fcn.140025b7c
lea rdx, [0x140061042]
mov rcx, r14
call fcn.140015e60
nop
lea rdx, [rbx - 0x18]
or edi, 0xffffffff
mov eax, edi
lock xadd dword [rdx + 0x10], eax
add eax, edi
test eax, eax
jg 0x14001d702
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rsi]
sub rdx, 0x18
mov ecx, edi
lock xadd dword [rdx + 0x10], ecx
add ecx, edi
test ecx, ecx
jg 0x14001d720
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov rax, r14
mov rcx, qword [rbp + 0x50]
xor rcx, rsp
call fcn.14002b930
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov ecx, 0x80070057
call fcn.140006280
nop
mov ecx, 0x80004005
call fcn.140006280
nop
mov ecx, 0x80004005
call fcn.140006280
int3