Function at 0x140048d20
Capabilities:
Execute command
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xc0
xor r12d, r12d
mov qword [rcx + 8], 0x28
mov qword [rcx], r12
mov rbx, rcx
mov qword [rcx + 0x10], r12
mov edx, 6
mov qword [rcx + 0x18], r12
mov qword [rcx + 0x20], r12
mov qword [rcx + 0x28], r12
mov qword [rcx + 0x30], r12
mov qword [rcx + 0x38], r12
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
call fcn.140048a60
movabs rsi, 0x7ccc3de14ff0d6ca
movabs r14, 0x552203d6f875a94f
mov qword [rbp + 0xf], rsi
movabs rdi, 0x1c55c91f98f14438
mov qword [rbp - 9], r14
movabs r15, 0x224702d08d3da6f9
mov qword [rbp - 1], rdi
mov qword [rbp + 7], r15
test eax, eax
je 0x140048e49
mov qword [rbp - 0x31], rsi
movabs rcx, 0x265166b59b34e01a
mov qword [rbp - 0x49], rcx
mov edx, eax
movabs rcx, 0x3c6fbb70ea832118
mov qword [rbp - 0x41], rcx
movabs rcx, 0x224d5ae8bd18dec9
movdqa xmm0, xmmword [rbp - 0x49]
xorps xmm0, xmmword [rbp - 9]
mov qword [rbp - 0x39], rcx
lea rcx, [rbp - 0x49]
movdqa xmm1, xmmword [rbp - 0x39]
xorps xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x39], xmm1
movdqa xmmword [rbp - 0x49], xmm0
call fcn.140001570
mov qword [rbp - 1], rdi
lea rcx, [rbp - 9]
movabs rax, 0x55220393ab20e81f
mov qword [rbp - 0x49], r14
mov qword [rbp - 9], rax
movdqa xmm0, xmmword [rbp - 9]
mov qword [rbp - 0x41], rdi
xorps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp - 9], xmm0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movabs rax, 0x557e03f8f829a913
mov qword [rsp + 0x30], r12
mov qword [rbp - 0x49], rax
lea rcx, [rbp - 0x49]
movabs rax, 0x1c06c94a98a24479
mov dword [rsp + 0x28], 0x80
mov qword [rbp - 0x41], rax
xor r9d, r9d
movdqa xmm0, xmmword [rbp - 0x49]
movabs rax, 0x2214029f8d74a6bb
xorps xmm0, xmmword [rbp - 9]
xor r8d, r8d
mov qword [rbp - 0x39], rax
mov edx, 0xc0000000
movabs rax, 0x7ccc3de14fbfd683
movdqa xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x31], rax
movdqa xmm1, xmmword [rbp - 0x39]
xorps xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x39], xmm1
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbx], rax
mov qword [rbp - 9], r14
mov qword [rbp - 1], rdi
mov qword [rbp + 7], r15
mov qword [rbp + 0xf], rsi
cmp rax, 0xffffffffffffffff
je 0x140048f83
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x49]
movabs rax, 0x3e4162b4d8288214
mov qword [rbp - 0x49], rax
movabs rax, 0x723aaa3ffc9f2115
mov qword [rbp - 0x41], rax
movabs rax, 0x2296db9f95ec397
movdqa xmm0, xmmword [rbp - 0x49]
xorps xmm0, xmmword [rbp - 9]
mov qword [rbp - 0x39], rax
movabs rax, 0x7ccc3de16fcab2a3
mov qword [rbp - 0x31], rax
movdqa xmm1, xmmword [rbp - 0x39]
xorps xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x39], xmm1
movdqa xmmword [rbp - 0x49], xmm0
call fcn.1400105d0
mov rdx, qword [rbx]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x1400107b0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r11, [rsp + 0xc0]
mov rax, rbx
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
movabs rcx, 0x83ba75ed789651ae
lea rdx, [rbp - 0x49]
mov qword [rbp - 0x11], rcx
movabs rax, 0x394b6290d8288414
mov qword [rbp - 0x49], rax
movabs rax, 0x6c3ae970ecd1205d
mov qword [rbp - 0x41], rax
movabs rax, 0x4c2861f0ec1dc89c
movdqa xmm0, xmmword [rbp - 0x49]
xorps xmm0, xmmword [rbp - 9]
mov qword [rbp - 0x39], rax
movabs rax, 0x5ca252883b93b3a4
mov qword [rbp - 0x31], rax
movabs rax, 0x7eddbdaa76348e37
movdqa xmm1, xmmword [rbp - 0x39]
xorps xmm1, xmmword [rbp + 7]
mov qword [rbp - 0x29], rax
movabs rax, 0x8dc900de88428fdd
mov qword [rbp - 0x21], rax
movabs rax, 0xe7f0826cf237f9ec
mov qword [rbp - 0x19], rax
movabs rax, 0x1cfdd8c20214e143
mov qword [rbp + 0x17], rax
movabs rax, 0xadad6ebba529ecbc
mov qword [rbp + 0x1f], rax
movabs rax, 0xe7f0826cf237f9cd
movdqa xmmword [rbp - 0x49], xmm0
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x39], xmm1
movdqa xmm1, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp + 0x27], rax
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 0x19], xmm1
movdqa xmmword [rbp - 0x29], xmm0
call fcn.1400105d0
lea rdx, [0x1400107b0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor edx, edx
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_SleepEx]
call fcn.14004a430
int3