Function at 0x1400024a0
Capabilities:
Delete file
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x3b0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140087080]
xor rax, rsp
mov qword [rbp + 0x360], rax
xor esi, esi
mov dword [rbp + 0x10], esi
call fcn.140007a40
lea rcx, [0x140088090]
call fcn.1400148e0
movabs r15, 0x40f99f3b7dc9dea5
movabs r14, 0x28eeda9a95d9a3d6
cmp byte [0x1400882a8], sil
jne 0x14000259e
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs r12, 0x338ceb5a099afeaf
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp], rax
movabs r13, 0x28eeda9a95d983ec
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], r15
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2e8], rax
movdqa xmm0, xmmword [rbp]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp], xmm0
lea rdx, [rbp]
call fcn.140004d20
mov rcx, rax
lea rdx, [0x1400882b0]
call fcn.1400050f0
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
movabs rax, 0x1bcd778509191e3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x69bb9dd4d48f8e82
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0xb21143065e16bc5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x69ef11d8bda888da
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movabs rdi, 0x4e6d58792ecc2f97
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
movabs rbx, 0x69ef11d8bda88888
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x60], ymm1
lea rcx, [rbp + 0x60]
vzeroupper
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x48f1973375c1d6ad
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x4687befbfa95abde
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x4e6d58790eec0ff0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x310], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x318], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x60], ymm1
lea rdx, [rbp + 0x60]
vzeroupper
call fcn.140004d20
lea rdx, [0x140004f00]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
movabs rax, 0x6cc9aa1b18adb1c8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
movabs rax, 0x28eeda9a95d996e7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movdqa xmm0, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x2e0], xmm0
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movabs rax, 0x40f99f3b7dbab2c6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movdqa xmm0, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x2e0], xmm0
lea rcx, [rbp + 0x2e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Color_0B
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xorps xmm0, xmm0
movups xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], 0xa
mov qword [rbp + 0xb8], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.C:Key.ini]
movsd qword [rbp + 0xa0], xmm0
movzx eax, word [0x14007c248]
mov word [rbp + 0xa8], ax
mov byte [rbp + 0xaa], sil
lea rcx, [0x140088090]
call fcn.1400148e0
movabs r12, 0x338ceb5a099afeaf
movabs r13, 0x28eeda9a95d983ec
lea rbx, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rsi
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x80], 0
lea rcx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rcx, qword [rbp + 0xa0]
lea rdx, [0x14007c24c]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rdi, rax
test rax, rax
je 0x140002cfb
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x1d0]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rbx, qword [rbp + 0xa0]
lea rax, [0x140000000]
lea rax, [rax + 0x7c4fc]
mov qword [rbp + 0x1d0], rax
lea rcx, [rbp + 0x280]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or dword [rbp + 0x10], 2
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1d0], rax
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x1cc], edx
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x1e0], rax
mov byte [rbp + 0x25c], 0
mov byte [rbp + 0x251], 0
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x260], rsi
mov rax, qword [0x140088028]
mov qword [rbp + 0x254], rax
mov qword [rbp + 0x248], rsi
mov r8d, 1
mov rdx, rbx
lea rcx, [rbp + 0x1e0]
call fcn.1400048c0
test rax, rax
jne 0x140002a08
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x1d0]
call fcn.140005a10
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x3690eb583ce9d4af
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x4797fafdfbb0d7b7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x224d3c1541ec5de2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x2cf74abd3cdebe1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x3985ac0746efa65c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rdx, 0xe8771fe637cb307a
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
movabs rax, 0x4e6d58792ecc2f97
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
movabs rax, 0x69ef11d8bda88888
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
movabs rax, 0x3985ac0766d5df39
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x320]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqa xmm0, xmmword [rbp + 0x40]
vxorps xmm0, xmm0, xmmword [rbp + 0x340]
vmovdqa xmmword [rbp + 0x40], xmm0
lea rdx, [rbp + 0x20]
vzeroupper
call fcn.140004d20
lea rcx, [rbp + 0x1e0]
call fcn.140004800
test rax, rax
jne 0x140002bb7
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 0xf
cmova rdx, qword [rbp + 0x60]
mov r8, qword [rbp + 0x70]
lea rcx, [rbp + 0x80]
call fcn.140004a00
lea rcx, [0x140088090]
call fcn.140011790
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140002c26
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003284
call fcn.14006a4b4
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1d0], rax
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx + 0x1cc], edx
lea rbx, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0x1e0], rbx
cmp qword [rbp + 0x260], 0
je 0x140002cb9
lea rcx, [rbp + 0x250]
mov rax, qword [rbp + 0x1f8]
cmp qword [rax], rcx
jne 0x140002cb9
mov rdx, qword [rbp + 0x270]
mov rcx, qword [rbp + 0x268]
mov qword [rax], rcx
mov rax, qword [rbp + 0x218]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rbp + 0x230]
mov dword [rax], edx
cmp byte [rbp + 0x25c], 0
je 0x140002cce
lea rcx, [rbp + 0x1e0]
call fcn.140004800
lea rcx, [rbp + 0x1e0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0x1e8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_istream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x280]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x140002e28
lea rcx, reloc.WLDAP32.dll_Ordinal_32
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [0x14007c228]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x14007c224]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004d20
mov rcx, rax
lea rdx, str._n__________n
call fcn.140004d20
mov rcx, rax
call fcn.140004f20
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x2e9cfc5211e9d4af
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x8d4a3fffef9c6a5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs r8, 0x4e6d58792ecc2f97
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rdx, 0x69ef11d8bda88888
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x320], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x328], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x330], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x338], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x320]
vmovdqa ymmword [rbp + 0x60], ymm1
lea rdx, [rbp + 0x60]
vzeroupper
call fcn.140004d20
lea rcx, [0x140088090]
call fcn.140011790
lea rdx, [rbp + 0x80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140005110
lea rcx, [0x140088090]
call fcn.140011790
call fcn.140007a40
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xc0]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x140000000]
lea rax, [rax + 0x7c4f0]
mov qword [rbp + 0xc0], rax
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or dword [rbp + 0x10], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0xc0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xbc], edx
lea rcx, [rbp + 0xc8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
mov qword [rbp + 0xc8], rbx
mov byte [rbp + 0x144], 0
mov byte [rbp + 0x139], 0
lea rcx, [rbp + 0xc8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x148], rsi
mov rax, qword [0x140088028]
mov qword [rbp + 0x13c], rax
mov qword [rbp + 0x130], rsi
lea rdx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rdx, qword [rbp + 0xa0]
mov r8d, 2
lea rcx, [rbp + 0xc8]
call fcn.1400048c0
xor r8d, r8d
test rax, rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xc0]
je 0x140002f4b
add rcx, rax
xor edx, edx
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool____ptr64]
jmp 0x140002f59
add rcx, rax
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
cmova rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
lea rcx, [rbp + 0xc0]
call fcn.140005850
lea rcx, [rbp + 0xc8]
call fcn.140004800
test rax, rax
jne 0x140002fb7
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xc0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], rsi
mov rdi, qword [rbp + 0x90]
lea rsi, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
cmova rsi, qword [rbp + 0x80]
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x14000346b
cmp rdi, 0xf
ja 0x140003015
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x60], xmm0
jmp 0x1400030ad
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x140003034
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x140003064
cmp rbx, 0x16
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000304e
xor eax, eax
jmp 0x14000308b
cmp rcx, 0x1000
jb 0x140003086
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003465
mov rcx, rax
call fcn.14006a230
mov rcx, rax
test rax, rax
je 0x14000328b
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000308b
call fcn.14006a230
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rbx, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
lea rdx, [rbp + 0x60]
lea rcx, [0x140088090]
call fcn.140015ed0
cmp byte [0x1400882a8], 0
jne 0x140003299
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x2e0], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x2e8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x300], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x308], rax
movdqa xmm0, xmmword [rbp + 0x2e0]
xorps xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x2e0], xmm0
lea rdx, [rbp + 0x2e0]
call fcn.140004d20
lea rdx, [0x1400882b0]
cmp qword [0x1400882c8], 0xf
cmova rdx, qword [0x1400882b0]
mov r8, qword [0x1400882c0]
mov rcx, rax
call fcn.140005850
mov ecx, 0x2bc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rcx, qword [rbp + 0xa0]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xbc], edx
mov qword [rbp + 0xc8], rbx
cmp qword [rbp + 0x148], 0
je 0x1400031fb
lea rcx, [rbp + 0x138]
mov rax, qword [rbp + 0xe0]
cmp qword [rax], rcx
jne 0x1400031fb
mov rdx, qword [rbp + 0x158]
mov rcx, qword [rbp + 0x150]
mov qword [rax], rcx
mov rax, qword [rbp + 0x100]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rbp + 0x118]
mov dword [rax], edx
cmp byte [rbp + 0x144], 0
je 0x140003210
lea rcx, [rbp + 0xc8]
call fcn.140004800
lea rcx, [rbp + 0xc8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
mov esi, 0
jbe 0x140002886
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000327a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003292
call fcn.14006a4b4
jmp 0x140002886
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
lea rcx, [0x140088090]
call fcn.140011790
call fcn.140007a40
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140088090]
call fcn.140011790
call fcn.140007a40
lea rcx, [0x14007c3b0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xc0], rax
mov rax, qword [rbp + 0xc0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xbc], edx
mov qword [rbp + 0xc8], rbx
cmp qword [rbp + 0x148], 0
je 0x140003350
lea rcx, [rbp + 0x138]
mov rax, qword [rbp + 0xe0]
cmp qword [rax], rcx
jne 0x140003350
mov rdx, qword [rbp + 0x158]
mov rcx, qword [rbp + 0x150]
mov qword [rax], rcx
mov rax, qword [rbp + 0x100]
mov qword [rax], rcx
sub edx, ecx
mov rax, qword [rbp + 0x118]
mov dword [rax], edx
cmp byte [rbp + 0x144], 0
je 0x140003365
lea rcx, [rbp + 0xc8]
call fcn.140004800
lea rcx, [rbp + 0xc8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rbp + 0xd0]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x168]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x1400033d2
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400033cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006a4b4
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x140003433
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000342e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000342e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006a4b4
xor eax, eax
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.14006a210
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001890
nop
call fcn.140001930
int3