Function at 0x1400016ec
Capabilities:
Query environment variable

Disassembly:
push rbp
push rbx
sub rsp, 0x238
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x1d0], rcx
mov qword [rbp + 0x1d8], rdx
mov dword [rbp + 0x1e0], r8d
mov dword [rbp + 0x1e8], r9d
lea rax, [rbp - 0x31]
mov rcx, rax
call fcn.140079680
lea rax, str.USERPROFILE
mov rcx, rax
call sym.getenv
mov rdx, rax
lea rcx, [rbp - 0x31]
lea rax, [rbp - 0x60]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp - 0x31]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp - 0x60]
lea rdx, str.AppDataLocalTempSystem.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.operator_char_const_
lea rax, [rbp - 0x60]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov qword [rbp - 8], rax
lea rdx, [rbp - 8]
lea rax, [rbp - 0x30]
mov r8d, 2
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_char_const__std::filesystem::__cxx11.path__char_const_const__std::filesystem::__cxx11::path::format_
lea rax, [rbp - 0x30]
mov rcx, rax
call method.std::filesystem.remove_std::filesystem::__cxx11::path_const_
lea rax, [rbp - 0x30]
mov rcx, rax
call fcn.1400aaba0
lea rax, [rbp - 0x60]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x28]
mov rax, rbp
mov r8d, 2
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_char_const__std::filesystem::__cxx11.path__char_const_const__std::filesystem::__cxx11::path::format_
lea rax, [rbp + 0x30]
mov r8d, 2
lea rdx, str.scapegoat.exe
mov rcx, rax
call method.std::filesystem::__cxx11::path::path_char__14___std::filesystem::__cxx11.path__char_const_____14___std::filesystem::__cxx11::path::format_
mov rdx, rbp
lea rax, [rbp + 0x30]
mov r8d, 2
mov rcx, rax
call method.std::filesystem.copy_file_std::filesystem::__cxx11::path_const__std::filesystem::__cxx11::path_const__std::filesystem::copy_options_
lea rax, [rbp + 0x30]
mov rcx, rax
call fcn.1400aaba0
mov rax, rbp
mov rcx, rax
call fcn.1400aaba0
lea rax, [rbp + 0x90]
mov edx, dword [rbp + 0x1e8]
mov rcx, rax
call method.std::__cxx11.to_string_int_
lea rax, [rbp + 0xf0]
mov edx, dword [rbp + 0x1e0]
mov rcx, rax
call method.std::__cxx11.to_string_int_
lea rax, [rbp + 0x190]
lea rdx, [rbp - 0x60]
lea r8, str._showm__
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__char_const_
lea rax, [rbp + 0x170]
lea rdx, [rbp + 0x190]
mov r8, qword [rbp + 0x1d0]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x150]
lea rdx, [rbp + 0x170]
lea r8, [0x14010f0ae]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x130]
mov rcx, qword [rbp + 0x1d8]
lea rdx, [rbp + 0x150]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x110]
lea rdx, [rbp + 0x130]
lea r8, [0x14010f0b2]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0xd0]
lea rcx, [rbp + 0xf0]
lea rdx, [rbp + 0x110]
mov r8, rcx
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std::allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
lea rax, [rbp + 0xb0]
lea rdx, [rbp + 0xd0]
lea r8, [0x14010f0b5]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x70]
lea rcx, [rbp + 0x90]
lea rdx, [rbp + 0xb0]
mov r8, rcx
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std::allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
lea rax, [rbp + 0x70]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov qword [rbp + 0x68], rax
lea rdx, [rbp + 0x68]
lea rax, [rbp + 0x60]
mov r8, rdx
mov rdx, qword [0x1401139e0]
mov rcx, rax
call method.std::thread.thread_int____char_const___char_const__void__int____char_const___char_const_
lea rax, [rbp + 0x60]
mov rcx, rax
call method.std::thread.thread__
lea rax, [rbp + 0x70]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0xb0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0xd0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x110]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x130]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x150]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x170]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x190]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0xf0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x90]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x60]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x140001b44
add rsp, 0x238
pop rbx
pop rbp
ret