Function at 0x180064040
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2d0
mov rax, qword [0x18018a280]
xor rax, rsp
mov qword [rsp + 0x2c0], rax
mov r12, r9
mov rbx, rdx
mov qword [rsp + 0x120], rdx
mov rdi, qword [rsp + 0x320]
mov rsi, qword [rsp + 0x328]
xor r13d, r13d
cmp qword [rdi + 0x28], r13
jne 0x1800640c1
cmp dword [rdi + 0x60], 5
jne 0x1800640c1
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], r13
mov r8d, Ordinal_26
lea rdx, str.____ftable_url_is_empty.
mov rcx, rbx
call fcn.1800053d0
jmp 0x18006474c
mov rax, qword [rdi + 8]
cmp qword [rdi], rax
jne 0x1800640f8
cmp dword [rdi + 0x60], 6
jne 0x1800640f8
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
mov qword [rdx + 0x10], r13
mov qword [rdx + 0x18], r13
mov r8d, Ordinal_34
lea rdx, str.____ftable_binary_data_is_empty
mov rcx, rbx
call fcn.1800053d0
jmp 0x18006474c
lea rdx, [rdi + 0x38]
lea rcx, [rsp + 0x88]
call fcn.180005720
mov r14, rax
lea rcx, [rsp + 0x68]
call fcn.1800054d0
mov rdx, rax
lea rax, [0x18016f698]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], 8
lea rcx, [0x1801917c0]
cmp qword [0x1801917d8], 7
cmova rcx, qword [0x1801917c0]
mov qword [rsp + 0xf0], rcx
mov rax, qword [0x1801917d0]
mov qword [rsp + 0xf8], rax
movups xmm0, xmmword [rsp + 0xf0]
movups xmmword [rsp + 0x158], xmm0
movabs r15, 0xc000000000000000
mov qword [rsp + 0x140], r15
mov rcx, rdx
cmp qword [rdx + 0x18], 7
jbe 0x18006418b
mov rcx, qword [rdx]
mov rax, qword [rdx + 0x10]
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rax
movups xmm0, xmmword [rsp + 0xf0]
movups xmmword [rsp + 0x168], xmm0
movabs rax, 0xc000000000000010
mov qword [rsp + 0x148], rax
mov rcx, r14
cmp qword [r14 + 0x18], 7
jbe 0x1800641ce
mov rcx, qword [r14]
mov rax, qword [r14 + 0x10]
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xf8], rax
movups xmm0, xmmword [rsp + 0xf0]
movups xmmword [rsp + 0x178], xmm0
movabs rax, 0xc000000000000020
mov qword [rsp + 0x150], rax
mov qword [rsp + 0xf0], 3
lea rax, [rsp + 0x140]
mov qword [rsp + 0xf8], rax
movaps xmm0, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0xf0], xmm0
movaps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm1
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x100]
call fcn.18000d1f0
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 7
jbe 0x18006429c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064297
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180065029
call fcn.18008ed30
movdqa xmm0, xmmword [0x18016fc30]
movdqu xmmword [rsp + 0x78], xmm0
mov word [rsp + 0x68], r13w
mov rdx, qword [rsp + 0xa0]
cmp rdx, 7
jbe 0x180064300
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800642f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006502f
call fcn.18008ed30
movdqa xmm0, xmmword [0x18016fc30]
movdqu xmmword [rsp + 0x98], xmm0
mov word [rsp + 0x88], r13w
mov eax, dword [rdi + 0x60]
cmp eax, 5
jne 0x1800646ca
lea rdx, [rdi + 0x18]
lea r8, [rsp + 0x100]
lea rcx, [rsp + 0x140]
call fcn.18002a3c0
nop
cmp byte [rsp + 0x160], 0
jne 0x18006467e
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rdx, qword [rsp + 0x100]
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], r13
mov r8, qword [rsp + 0x110]
lea rcx, [rsp + 0xd0]
call fcn.18000acd0
nop
mov r8d, 3
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xf0]
call fcn.180021d40
movsd xmm0, qword [rax]
movsd qword [rsp + 0x50], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0xf0], ecx
lea rax, [0x18018b270]
mov qword [rsp + 0xf8], rax
movaps xmm0, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0xf0], xmm0
mov eax, dword [rsp + 0x50]
test eax, eax
je 0x180064434
cmp eax, 1
setne dil
mov rdx, qword [rsp + 0xe8]
cmp rdx, 7
jbe 0x180064446
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064441
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180065035
jmp 0x180064441
xor dil, dil
test ecx, ecx
jne 0x18006503b
jmp 0x1800643ef
call fcn.18008ed30
test dil, dil
je 0x180064511
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rdx, qword [rsp + 0x100]
xorps xmm0, xmm0
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], r13
mov qword [rsp + 0xe8], r13
mov r8, qword [rsp + 0x110]
lea rcx, [rsp + 0xd0]
call fcn.18000acd0
nop
lea rcx, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 7
cmova rcx, qword [rsp + 0xd0]
call fcn.18008d9fc
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x180065058
mov rdx, qword [rsp + 0xe8]
cmp rdx, 7
jbe 0x180064511
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006450b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180065071
call fcn.18008ed30
nop
jmp 0x180064525
lea rax, str.____handle_downloads:_
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], Ordinal_26
lea rax, [rsp + 0x140]
cmp qword [rsp + 0x158], 0xf
cmova rax, qword [rsp + 0x140]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0xf8], rax
movups xmm0, xmmword [rsp + 0xf0]
movups xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xf0], 1
lea rax, [rsp + 0xd0]
mov qword [rsp + 0xf8], rax
movaps xmm0, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0xf0], xmm0
movaps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm1
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.1800197e0
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 0xf
jbe 0x180064615
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064610
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006507d
call fcn.18008ed30
movdqa xmm0, xmmword [0x18016fc40]
movdqu xmmword [rsp + 0x150], xmm0
mov byte [rsp + 0x140], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180065077
jmp 0x180064747
mov rdx, qword [rsp + 0x158]
cmp rdx, 0xf
jbe 0x1800649ea
inc rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800646c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18006507d
call fcn.18008ed30
jmp 0x1800649ea
cmp eax, 6
jne 0x1800649ea
mov rax, qword [rdi + 8]
cmp qword [rdi], rax
jne 0x18006477c
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
mov r8d, Ordinal_26
lea rdx, str.____Binary_data_is_empty.
mov rcx, rbx
call fcn.1800053d0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180065083
call fcn.18008ed30
mov rax, rbx
mov rcx, qword [rsp + 0x2c0]
xor rcx, rsp
call fcn.18008ed10
lea r11, [rsp + 0x2d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x1b0]
call fcn.1800c4f50
lea rdx, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rdx, qword [rsp + 0x100]
lea rcx, [rsp + 0x1b0]
call fcn.180026410
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1b0], r14
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ac], edx
cmp qword [rsp + 0x238], 0
jne 0x1800648f7
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
mov r8d, Ordinal_34
lea rdx, str.____Fstream_file_can_not_open.
mov rcx, rbx
call fcn.1800053d0
nop
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x1b0], r14
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ac], edx
lea rcx, [rsp + 0x1b8]
call fcn.180025ab0
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1b0], rax
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x1ac], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x258], rax
lea rcx, [rsp + 0x258]
call fcn.18008c880
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180065083
jmp 0x180064747
mov rdx, qword [rdi]
mov r8, qword [rdi + 8]
sub r8, rdx
lea rcx, [rsp + 0x1b0]
call fcn.180025c50
lea rcx, [rsp + 0x1b8]
call fcn.180026310
test rax, rax
jne 0x180064962
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
mov eax, 6
mov edx, 2
cmp qword [rsp + rcx + 0x1f8], 0
cmovne eax, edx
or eax, dword [rsp + rcx + 0x1c0]
and eax, 0x17
mov dword [rsp + rcx + 0x1c0], eax
mov edx, dword [rsp + rcx + 0x1c4]
and edx, eax
jne 0x180065089
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x1b0], r14
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ac], edx
lea rcx, [rsp + 0x1b8]
call fcn.180025ab0
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1b0], rax
mov rax, qword [rsp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x1ac], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x258], rax
lea rcx, [rsp + 0x258]
call fcn.18008c880
nop
mov eax, dword [rdi + 0x58]
cmp eax, 2
jne 0x180064a66
mov r8d, Ordinal_26
lea rdx, str.___Download_completed.
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x18], r13
mov qword [rbx + 0x10], r13
mov rcx, rbx
call fcn.1800053d0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180065023
jmp 0x180064747
test eax, eax
jne 0x180064f1c
mov eax, dword [rdi + 0x5c]
xorps xmm0, xmm0
cmp eax, 3
jne 0x180064ced
movups xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x120], 0
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x100]
call fcn.180022740
test al, al
jne 0x180064c1a
lea rax, str.____Process_as_user_can_not_created:_
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], Ordinal_47
lea rax, [rsp + 0x120]
cmp qword [rsp + 0x138], 0xf
cmova rax, qword [rsp + 0x120]
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0xf8], rax
movups xmm0, xmmword [rsp + 0xf0]
movups xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xf0], 1
lea rax, [rsp + 0xd0]
mov qword [rsp + 0xf8], rax
movaps xmm0, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0xf0], xmm0
movaps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm1
lea r8, [rsp + 0xf0]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call fcn.1800197e0
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 0xf
jbe 0x180064bae
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064ba9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800650e6
call fcn.18008ed30
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800650ec
jmp 0x180064747
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
mov r8d, Ordinal_45
lea rdx, str.___Process_created_as_user_successfully.
mov rcx, rbx
call fcn.1800053d0
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 0xf
jbe 0x180064c81
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064c7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800650e6
call fcn.18008ed30
mov qword [rsp + 0x130], r13
mov qword [rsp + 0x138], reloc.LIBPQ.dll_Ordinal_15
mov byte [rsp + 0x120], 0
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800650ec
jmp 0x180064747
cmp eax, 4
jne 0x180064f0a
xor eax, eax
movups xmmword [rsp + 0x144], xmm0
movups xmmword [rsp + 0x154], xmm0
movups xmmword [rsp + 0x164], xmm0
movups xmmword [rsp + 0x174], xmm0
movups xmmword [rsp + 0x184], xmm0
movups xmmword [rsp + 0x194], xmm0
mov dword [rsp + 0x1a4], eax
movups xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0x140], Ordinal_106
lea rcx, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova rcx, qword [rsp + 0x100]
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], r13d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x180064e7a
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.____Process_can_not_created_Error_code:_
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], Ordinal_47
mov dword [rsp + 0xf8], eax
movabs rax, 0x2000000000000000
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x50], 1
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm1
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x120]
mov rcx, rbx
call fcn.1800197e0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800650f2
jmp 0x180064747
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
mov r8d, Ordinal_45
lea rdx, str.___Process_created_default_successfully.
mov rcx, rbx
call fcn.1800053d0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800650f2
jmp 0x180064747
mov r8d, reloc.LIBPQ.dll_Ordinal_22
lea rdx, str.____Wrong_execute_code
jmp 0x180064a02
cmp eax, 1
jne 0x180064fb4
mov byte [r12], al
lea rax, [rsp + 0x100]
cmp rsi, rax
je 0x180064fa2
mov rdi, qword [rsp + 0x110]
lea r9, [rsp + 0x100]
cmp qword [rsp + 0x118], 7
cmova r9, qword [rsp + 0x100]
mov rax, qword [rsi + 0x18]
cmp rdi, rax
ja 0x180064f97
mov r14, rsi
cmp rax, 7
jbe 0x180064f6d
mov r14, qword [rsi]
mov qword [rsi + 0x10], rdi
lea r8, [rdi + rdi]
mov rdx, r9
mov rcx, r14
call fcn.1800c48b0
mov word [r14 + rdi*2], r13w
mov r8d, Ordinal_34
lea rdx, str.___Update_process_is_starting.
jmp 0x1800649ff
mov rdx, rdi
mov rcx, rsi
call fcn.180026cc0
mov r8d, Ordinal_34
lea rdx, str.___Update_process_is_starting.
jmp 0x1800649ff
xorps xmm0, xmm0
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], r13
mov r8d, reloc.LIBPQ.dll_Ordinal_22
lea rdx, str.____Wrong_command_code
mov rcx, rbx
call fcn.1800053d0
nop
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x18006474c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180064747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180064747
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0xf0]
lea rcx, [0x1801030d0]
call fcn.1800212b0
nop
shr rdx, 0x20
lea r8, [rsp + 0xd0]
lea rcx, str.remove
call fcn.18002baa0
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
test dl, 4
je 0x180065097
lea rbx, [0x1800ffb48]
jmp 0x1800650ac
test dl, 2
lea rbx, [0x1800ffb60]
lea rax, [0x1800ffb78]
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0xf0]
call fcn.180002eb0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0xa8]
call fcn.180003880
lea rdx, [0x180188038]
lea rcx, [rsp + 0xa8]
call fcn.1800913f8
nop
call fcn.1800a4178
nop
call fcn.1800a4178
int3
call fcn.1800a4178
int3