Function at 0x180036810
Capabilities:
Create process on windows
Set current directory

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x248
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x1c0], 0xfffffffffffffffe
movzx eax, byte [0x183972ff8]
mov edx, 9
xor ecx, ecx
call fcn.18002b2e0
test rax, rax
je 0x18003757d
mov rsi, rax
movabs rax, 0x696e6e69772f3a43
mov qword [rsi], rax
mov byte [rsi + 8], 0x74
lea rdx, [0x180076c0d]
lea rcx, [rbp + 0x20]
mov r8d, 0x11
call fcn.18001c150
mov rcx, qword [rbp + 0x20]
mov rdx, qword [rbp + 0x28]
cmp rcx, 2
jne 0x18003699a
mov ecx, 2
call fcn.180034ad0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x130], 1
mov qword [rbp + 0x138], 0
lea rcx, [rbp + 0x128]
mov r8d, 0x38e9bf3
xor edx, edx
call fcn.18006bd50
mov rdi, qword [rbp + 0x138]
mov rcx, qword [rbp + 0x130]
add rcx, rdi
lea rdx, [0x180076c1e]
mov r8d, 0x38e9bf3
call sub.VCRUNTIME140.dll_memcpy
add rdi, 0x38e9bf3
mov qword [rbp + 0x138], rdi
mov qword [rbp + 0x30], rdi
movups xmm0, xmmword [rbp + 0x128]
movaps xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0x38], 0
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x20]
mov r9d, 9
mov r8, rsi
call fcn.18002f220
movabs rax, 0x8000000000000002
cmp qword [rbp + 0x178], rax
je 0x18003699f
movups xmm0, xmmword [rbp + 0x158]
movups xmm1, xmmword [rbp + 0x168]
movups xmm2, xmmword [rbp + 0x178]
movups xmm3, xmmword [rbp + 0x188]
movaps xmmword [rbp + 0x50], xmm3
movaps xmmword [rbp + 0x40], xmm2
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x20], xmm0
lea rax, [0x183960820]
mov qword [rsp + 0x20], rax
lea rcx, [0x183962d38]
lea r9, fcn.180037d10
lea r8, [rbp + 0x20]
mov edx, 0x2b
call fcn.18006a130
jmp 0x1800376b6
call fcn.180034ad0
movzx eax, byte [0x183972ff8]
mov edx, 0x13
xor ecx, ecx
call fcn.18002b2e0
test rax, rax
je 0x180037591
movups xmm0, xmmword [0x183960838]
movups xmmword [rax], xmm0
mov dword [rax + 0xf], 0x6578652e
mov qword [rbp + 0x20], 0x13
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], 0x13
mov byte [rbp + 0x38], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 8
mov qword [rbp + 0x50], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xb8], 0
mov word [rbp + 0xc0], 0
movabs rax, 0x8000000000000000
mov qword [rbp + 0x58], rax
mov dword [rbp + 0xe4], 0
mov word [rbp + 0xe0], 0
mov word [rbp + 0xe8], 0
mov dword [rbp + 0x78], 6
mov dword [rbp + 0x88], 6
mov dword [rbp + 0x98], 6
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xd8], 0
movzx eax, byte [0x183972ff8]
mov edx, 2
xor ecx, ecx
call fcn.18002b2e0
test rax, rax
je 0x1800375a5
lea rdi, [rbp + 0x40]
mov qword [rbp + 0x1b0], rax
mov word [rax], 0x632d
mov rcx, rdi
call fcn.18002efe0
mov rax, qword [rbp + 0x48]
mov qword [rax], 0
mov qword [rax + 8], 2
mov rcx, qword [rbp + 0x1b0]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 2
mov byte [rax + 0x20], 0
mov qword [rbp + 0x50], 1
movzx eax, byte [0x183972ff8]
mov edx, 0x1804
xor ecx, ecx
call fcn.18002b2e0
test rax, rax
je 0x1800375b9
lea rdx, [0x18396084b]
mov r8d, 0x1804
mov qword [rbp + 0x1b0], rax
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
cmp qword [rbp + 0x40], 1
jne 0x180036b23
mov rcx, rdi
call fcn.18002efe0
mov rax, qword [rbp + 0x48]
mov qword [rax + 0x28], 0
mov qword [rax + 0x30], 0x1804
mov rcx, qword [rbp + 0x1b0]
mov qword [rax + 0x38], rcx
mov qword [rax + 0x40], 0x1804
mov byte [rax + 0x48], 0
mov qword [rbp + 0x50], 2
mov dword [rbp + 0x128], 3
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x20]
lea r8, [rbp + 0x128]
call fcn.18001d940
mov r13, qword [rbp + 0x158]
mov rax, qword [rbp + 0x168]
cmp rax, 2
je 0x180037064
mov r14, qword [rbp + 0x160]
movups xmm0, xmmword [rbp + 0x170]
movups xmmword [rbp - 0x38], xmm0
movups xmm0, xmmword [rbp + 0x180]
movups xmmword [rbp - 0x28], xmm0
mov rcx, qword [rbp + 0x190]
mov qword [rbp - 0x18], rcx
mov rcx, qword [rbp - 0x38]
mov qword [rbp - 0x40], 0
test rax, rax
je 0x180036bce
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x118], 1
mov qword [rbp + 0x120], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0x100], 1
mov qword [rbp + 0x108], 0
mov rdx, qword [rbp - 0x28]
test byte [rbp - 0x30], 1
mov qword [rbp - 0x30], 0
movzx eax, byte [rbp - 0x20]
mov rcx, qword [rbp - 0x18]
mov qword [rbp - 0x20], 0
je 0x180036c93
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1b0], r13
test al, 1
je 0x180036d05
mov qword [rbp + 0x1a8], rcx
mov byte [rbp + 0x1bf], 1
lea rcx, [rbp + 0x158]
lea r8, [rbp + 0x110]
call fcn.18002a8d0
mov rax, qword [rbp + 0x158]
mov r12, qword [rbp + 0x160]
cmp rax, 3
jne 0x180036d4e
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x180036fd3
test al, 1
je 0x180036fea
mov qword [rbp + 0x1a0], r14
mov qword [rbp + 0x1b0], r13
mov qword [rbp + 0x1a8], rcx
mov qword [rbp + 0x128], rcx
lea rcx, [rbp + 0x128]
lea rdx, [rbp + 0xf8]
call fcn.18001d220
test al, 1
je 0x180036d2e
mov qword [rbp + 0x158], rdx
lea rax, [0x180075058]
mov qword [rsp + 0x20], rax
lea rcx, [0x183962d38]
lea r9, fcn.180012c40
lea r8, [rbp + 0x158]
mov edx, 0x2b
call fcn.18006a130
jmp 0x1800376b6
mov qword [rbp + 0x1a8], rdx
mov qword [rbp + 0x128], rdx
lea rcx, [rbp + 0x128]
lea rdx, [rbp + 0x110]
call fcn.18001d220
test al, 1
jne 0x180037650
mov rcx, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13, qword [rbp + 0x1b0]
mov r14, qword [rbp + 0x1a0]
jmp 0x180036fea
movups xmm0, xmmword [rbp + 0x168]
movups xmm1, xmmword [rbp + 0x178]
movups xmmword [rbp + 0x10], xmm1
movups xmmword [rbp], xmm0
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], r12
lea rcx, [rbp + 0x158]
lea r8, [rbp + 0xf8]
mov rdx, qword [rbp + 0x1a8]
call fcn.18002a8d0
mov rax, qword [rbp + 0x158]
mov r12, qword [rbp + 0x160]
cmp rax, 3
je 0x180036fc3
movups xmm0, xmmword [rbp + 0x168]
movups xmm1, xmmword [rbp + 0x178]
movups xmmword [rbp + 0x148], xmm1
movups xmmword [rbp + 0x138], xmm0
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x130], r12
mov rax, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x150]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rcx
lea rdi, [rbp - 0x50]
mov r13, qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
lea rbx, [rbp + 0x158]
lea r14, [rbp + 0x128]
lea r15, [rbp - 0x10]
nop dword [rax + rax]
mov ecx, 2
mov rdx, rdi
xor r8d, r8d
mov r9d, 0xffffffff
call r13
cmp eax, 1
je 0x180036e68
test eax, eax
jne 0x180036fa6
mov rax, qword [rbp - 0x10]
test rax, rax
je 0x180036edc
cmp eax, 1
jne 0x180036ebf
mov rdx, qword [rbp]
mov rcx, qword [rbp + 0x10]
mov dword [rbp + 0x158], 0
mov r8, rbx
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
je 0x180036f06
mov eax, dword [rbp + 0x158]
jmp 0x180036ec3
mov rax, qword [rbp + 0x128]
test rax, rax
je 0x180036f60
cmp eax, 2
jne 0x180036e89
mov rax, qword [rbp + 0x130]
jmp 0x180036f45
mov rdx, qword [rbp + 0x138]
mov rcx, qword [rbp + 0x148]
mov dword [rbp + 0x158], 0
mov r8, rbx
mov r9d, 1
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
je 0x180036f24
mov eax, dword [rbp + 0x158]
jmp 0x180036f45
mov rax, qword [rbp - 8]
mov qword [rbp - 0x10], 0
mov rcx, qword [rbp + 8]
add qword [rcx + 0x10], rax
test rax, rax
je 0x180036f95
mov rcx, rbx
mov rdx, r15
call fcn.18002aba0
cmp byte [rbp + 0x158], 0
jne 0x180036f8c
test byte [rbp + 0x159], 1
jne 0x180036e00
jmp 0x180036f95
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x26
je 0x180036f3f
mov r12d, eax
mov eax, 0
cmp r12d, 0x6d
je 0x180036ec3
jmp 0x180036faf
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x26
je 0x180036f43
mov r12d, eax
mov eax, 0
cmp r12d, 0x6d
je 0x180036f45
jmp 0x180036faf
xor eax, eax
jmp 0x180036ec3
xor eax, eax
mov qword [rbp + 0x128], 0
mov rcx, qword [rbp + 0x140]
add qword [rcx + 0x10], rax
test rax, rax
je 0x180036f81
mov rcx, rbx
mov rdx, r14
call fcn.18002aba0
cmp byte [rbp + 0x158], 0
jne 0x180036f8c
test byte [rbp + 0x159], 1
jne 0x180036e00
lea rcx, [rbp - 0x10]
call fcn.18002acb0
jmp 0x180036fa1
mov r12, qword [rbp + 0x160]
jmp 0x180036fb7
lea rcx, [rbp + 0x128]
call fcn.18002acb0
mov r12, rax
jmp 0x180036fb7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
shl r12, 0x20
or r12, 2
lea rcx, [rbp + 0x128]
call fcn.18002a9e0
mov byte [rbp + 0x1bf], 0
lea rcx, [rbp - 0x10]
call fcn.18002a9e0
mov r14, qword [rbp + 0x1a0]
test r12, r12
mov r13, qword [rbp + 0x1b0]
jne 0x180037684
mov rcx, r13
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1800374f4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp qword [rbp + 0xf8], 0
je 0x180037028
mov r8, qword [rbp + 0x100]
mov rcx, qword [0x183972f90]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
shl rdi, 0x20
cmp qword [rbp + 0x110], 0
je 0x18003704c
mov r8, qword [rbp + 0x118]
mov rcx, qword [0x183972f90]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
or rdi, 2
mov rbx, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call rbx
mov rcx, r14
call rbx
mov r13, rdi
mov eax, r13d
and eax, 3
cmp eax, 1
jne 0x1800370e6
lea rax, [r13 - 1]
mov qword [rbp + 0x1a0], rax
mov rax, qword [r13 - 1]
mov qword [rbp + 0x1b0], rax
mov rax, qword [r13 + 7]
mov qword [rbp + 0x1a8], rax
mov rax, qword [rax]
test rax, rax
je 0x1800370a1
mov rcx, qword [rbp + 0x1b0]
call rax
mov r8, qword [rbp + 0x1b0]
mov rax, qword [rbp + 0x1a8]
cmp qword [rax + 8], 0
je 0x1800370d0
cmp qword [rax + 0x10], 0x11
jb 0x1800370c1
mov r8, qword [r8 - 8]
mov rcx, qword [0x183972f90]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x183972f90]
xor edx, edx
mov r8, qword [rbp + 0x1a0]
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp qword [rbp + 0x20], 0
je 0x180037100
mov r8, qword [rbp + 0x28]
mov rcx, qword [0x183972f90]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [rbp + 0x48]
mov rbx, qword [rbp + 0x50]
add rdi, 0x10
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
sub rbx, 1
jae 0x18003712a
jmp 0x18003714a
add rdi, 0x28
sub rbx, 1
jb 0x18003714a
cmp qword [rdi - 8], 0
je 0x180037120
mov r8, qword [rdi]
mov rcx, qword [0x183972f90]
xor edx, edx
call r14
add rdi, 0x28
sub rbx, 1
jae 0x18003712a
cmp qword [rbp + 0x40], 0
je 0x180037164
mov r8, qword [rbp + 0x48]
mov rcx, qword [0x183972f90]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [rbp + 0xa8]
test rcx, rcx
je 0x1800371b7
mov rdx, qword [rbp + 0xb0]
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x168], rcx
mov qword [rbp + 0x170], rdx
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x188], rcx
mov qword [rbp + 0x190], rdx
mov ecx, 1
jmp 0x1800371bb
xor ecx, ecx
xor eax, eax
mov qword [rbp + 0x158], rcx
mov qword [rbp + 0x178], rcx
mov qword [rbp + 0x198], rax
lea rdi, [rbp + 0x128]
lea rbx, [rbp + 0x158]
nop
mov rcx, rdi
mov rdx, rbx
call fcn.180001560
mov r15, qword [rbp + 0x128]
test r15, r15
je 0x180037266
mov r12, qword [rbp + 0x138]
imul rax, r12, 0x38
lea r13, [r15 + rax]
add r13, 0x168
cmp qword [r15 + rax + 0x168], 0
je 0x180037228
mov r8, qword [r13 + 8]
mov rcx, qword [0x183972f90]
xor edx, edx
call r14
cmp qword [r13 + 0x20], 0
je 0x18003723f
mov r8, qword [r13 + 0x28]
mov rcx, qword [0x183972f90]
xor edx, edx
call r14
shl r12, 5
mov rax, qword [r15 + r12]
neg rax
jo 0x1800371e0
jae 0x1800371e0
add r15, r12
mov r8, qword [r15 + 8]
mov rcx, qword [0x183972f90]
xor edx, edx
call r14
jmp 0x1800371e0
mov rax, qword [rbp + 0x58]
neg rax
jo 0x180037284
jae 0x180037284
mov r8, qword [rbp + 0x60]
mov rcx, qword [0x183972f90]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [rbp + 0x78]
cmp eax, 4
jb 0x18003729e
cmp eax, 6
je 0x18003729e
mov rcx, qword [rbp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x88]
cmp eax, 4
jb 0x1800372bb
cmp eax, 6
je 0x1800372bb
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x98]
cmp eax, 4
jb 0x1800372d8
cmp eax, 6
je 0x1800372d8
mov rcx, qword [rbp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xc8]
call fcn.180001e70
lea rax, [0x180076c04]
mov qword [rbp + 0x20], rax
lea rax, [0x180076c0d]
mov qword [rbp + 0x28], rax
mov word [rbp + 0x30], 0
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x20]
call fcn.180023610
mov rbx, qword [rbp + 0x168]
cmp rbx, qword [rbp + 0x158]
jne 0x18003732c
lea rcx, [rbp + 0x158]
call fcn.1800175b0
mov rdi, qword [rbp + 0x160]
mov word [rdi + rbx*2], 0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
test eax, eax
je 0x1800374d1
xor ebx, ebx
cmp qword [rbp + 0x158], 0
je 0x180037368
mov rcx, qword [0x183972f90]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, ebx
and eax, 3
cmp eax, 1
jne 0x1800373e9
lea rax, [rbx - 1]
mov qword [rbp + 0x1a8], rax
mov rax, qword [rbx - 1]
mov qword [rbp + 0x1b0], rax
mov rax, qword [rbx + 7]
mov qword [rbp + 0x1a0], rax
mov rax, qword [rax]
test rax, rax
je 0x1800373a4
mov rcx, qword [rbp + 0x1b0]
call rax
mov r8, qword [rbp + 0x1b0]
mov rax, qword [rbp + 0x1a0]
cmp qword [rax + 8], 0
je 0x1800373d3
cmp qword [rax + 0x10], 0x11
jb 0x1800373c4
mov r8, qword [r8 - 8]
mov rcx, qword [0x183972f90]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x183972f90]
xor edx, edx
mov r8, qword [rbp + 0x1a8]
call qword [sym.imp.KERNEL32.dll_HeapFree]
lea rdx, [0x18396204f]
lea rcx, [rbp + 0x158]
mov r8d, 4
call fcn.180002110
xor eax, eax
cmp rax, qword [rbp + 0x158]
jno 0x1800375cd
mov rdi, qword [rbp + 0x160]
mov r14, qword [rbp + 0x168]
lea rdx, [0x183962080]
lea rcx, [rbp + 0x158]
mov r8d, 7
call fcn.180002110
xor eax, eax
cmp rax, qword [rbp + 0x158]
jno 0x180037610
mov rbx, qword [rbp + 0x160]
mov r15, qword [rbp + 0x168]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor ecx, ecx
mov rdx, rdi
mov r8, rbx
xor r9d, r9d
call sub.SHELL32.dll_ShellExecuteA
mov byte [rbx], 0
test r15, r15
je 0x180037490
mov rcx, qword [0x183972f90]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov byte [rdi], 0
test r14, r14
je 0x1800374aa
mov rcx, qword [0x183972f90]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x183972f90]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop
add rsp, 0x248
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
shl rbx, 0x20
or rbx, 2
cmp qword [rbp + 0x158], 0
jne 0x180037356
jmp 0x180037368
mov dword [rbp + 0x158], 0
lea rdx, [rbp + 0x158]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
je 0x180037000
mov r12, r14
mov r14, qword [rbp + 0x110]
mov rdi, qword [rbp + 0x118]
mov rbx, qword [rbp + 0xf8]
mov rax, qword [rbp + 0x100]
mov qword [rbp + 0x1a0], rax
mov r15, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call r15
mov rcx, r12
call r15
test r14, r14
je 0x18003756f
neg r14
jo 0x180037061
mov rcx, qword [0x183972f90]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
test rbx, rbx
jne 0x1800370d0
jmp 0x1800370e6
mov ecx, 1
mov edx, 9
call fcn.180069c60
jmp 0x1800376b6
mov ecx, 1
mov edx, 0x13
call fcn.180069c60
jmp 0x1800376b6
mov ecx, 1
mov edx, 2
call fcn.180069c60
jmp 0x1800376b6
mov ecx, 1
mov edx, 0x1804
call fcn.180069c60
jmp 0x1800376b6
movups xmm0, xmmword [rbp + 0x158]
movups xmm1, xmmword [rbp + 0x168]
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x20], xmm0
lea rax, [0x183962068]
mov qword [rsp + 0x20], rax
lea rcx, [0x183962053]
lea r9, [0x180076b90]
lea r8, [rbp + 0x20]
mov edx, 0x13
call fcn.18006a130
jmp 0x1800376b6
movups xmm0, xmmword [rbp + 0x158]
movups xmm1, xmmword [rbp + 0x168]
movaps xmmword [rbp + 0x30], xmm1
movaps xmmword [rbp + 0x20], xmm0
lea rax, [0x183962088]
mov qword [rsp + 0x20], rax
lea rcx, [0x183962053]
lea r9, [0x180076b90]
lea r8, [rbp + 0x20]
mov edx, 0x13
call fcn.18006a130
jmp 0x1800376b6
mov qword [rbp + 0x158], rdx
lea rax, [0x180075070]
mov qword [rsp + 0x20], rax
lea rcx, [0x183962d38]
lea r9, fcn.180012c40
lea r8, [rbp + 0x158]
mov edx, 0x2b
call fcn.18006a130
jmp 0x1800376b6
mov qword [rbp + 0x158], r12
lea rax, [0x180075088]
mov qword [rsp + 0x20], rax
lea rcx, [0x183962d38]
lea r9, fcn.180012c40
lea r8, [rbp + 0x158]
mov edx, 0x2b
call fcn.18006a130
ud2