Function at 0x1800b8c30
Capabilities:
Create thread
Inject thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x3e8]
sub rsp, 0x4c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1801023b0]
xor rax, rsp
mov qword [rbp + 0x390], rax
mov r8d, 0x104
lea rdx, [rbp + 0x280]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor r13d, r13d
mov qword [rbp + 0xe8], r13
mov qword [rbp + 0xf8], r13
mov qword [rbp + 0x100], 0xf
mov byte [rbp + 0xe8], r13b
lea rax, [rbp + 0x280]
mov r12, 0xffffffffffffffff
mov r8, r12
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r13b
jne 0x1800b8cc0
lea rdx, [rbp + 0x280]
lea rcx, [rbp + 0xe8]
call fcn.18000b010
nop
lea rbx, [rbp + 0xe8]
mov rsi, qword [rbp + 0xe8]
mov r14, qword [rbp + 0x100]
cmp r14, 0x10
cmovae rbx, rsi
mov rdi, qword [rbp + 0xf8]
test rdi, rdi
je 0x1800b8d7d
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x180]
call sub.VCRUNTIME140.dll_memset
lea rcx, [0x1800e0c6c]
lea rdx, [0x1800e0c6e]
nop dword [rax + rax]
movzx eax, byte [rcx]
mov byte [rbp + rax + 0x180], 1
inc rcx
cmp rcx, rdx
jne 0x1800b8d30
lea rax, [rdi - 1]
mov r8, r12
cmp rax, r12
cmovb r8, rax
add r8, rbx
movzx eax, byte [r8]
cmp byte [rbp + rax + 0x180], 0
jne 0x1800b8d78
cmp r8, rbx
je 0x1800b8d7d
dec r8
movzx eax, byte [r8]
cmp byte [rbp + rax + 0x180], 0
je 0x1800b8d62
sub r8, rbx
jmp 0x1800b8d80
mov r8, r12
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], 0xf
cmp rdi, r8
cmovb r8, rdi
lea rdx, [rbp + 0xe8]
cmp r14, 0x10
cmovae rdx, rsi
lea rcx, [rbp + 0x20]
call fcn.18000b010
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1800b8df0
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8deb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b908f
call fcn.1800c2c74
movups xmm6, xmmword [rbp + 0x20]
movups xmmword [rbp + 0xe8], xmm6
movups xmm7, xmmword [rbp + 0x30]
movups xmmword [rbp + 0xf8], xmm7
lea rdx, [0x1800e0c6c]
lea rcx, [rbp + 0xe8]
call fcn.1800ae050
mov r8, rax
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], 0xf
movq rax, xmm7
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0xe8]
movq rcx, xmm6
psrldq xmm7, 8
movq rax, xmm7
cmp rax, 0x10
cmovae rdx, rcx
lea rcx, [rbp + 0x40]
call fcn.18000b010
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1800b8ea0
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8e9b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b908f
call fcn.1800c2c74
movups xmm6, xmmword [rbp + 0x40]
movups xmmword [rbp + 0xe8], xmm6
movups xmm7, xmmword [rbp + 0x50]
movups xmmword [rbp + 0xf8], xmm7
lea rdx, [0x1800e0c6c]
lea rcx, [rbp + 0xe8]
call fcn.1800ae050
mov r8, rax
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], 0xf
movq rax, xmm7
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp + 0xe8]
movq rcx, xmm6
psrldq xmm7, 8
movq rax, xmm7
cmp rax, 0x10
cmovae rdx, rcx
lea rcx, [rsp + 0x68]
call fcn.18000b010
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1800b8f53
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b8f4e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b908f
call fcn.1800c2c74
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [rbp + 0xe8], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [rbp + 0xf8], xmm1
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
movq rsi, xmm1
sub rax, rsi
cmp rax, 0x12
jb 0x1800b98f0
lea r15, [rbp + 0xe8]
cmp qword [rbp - 0x80], 0x10
cmovae r15, qword [rsp + 0x68]
mov qword [rbp - 0x38], r13
lea r14, [rsi + 0x12]
mov edi, 0xf
lea rbx, [rbp - 0x38]
cmp r14, rdi
jbe 0x1800b9025
mov rdi, r14
or rdi, 0xf
cmp rdi, rcx
jbe 0x1800b8fc3
mov rdi, rcx
jmp 0x1800b8fcf
mov eax, 0x16
cmp rdi, rax
cmovb rdi, rax
mov rcx, rdi
add rcx, 1
cmovb rcx, r12
cmp rcx, 0x1000
jb 0x1800b900f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b98f6
mov rcx, rax
call fcn.1800c28b8
test rax, rax
je 0x1800b908f
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x1800b9021
test rcx, rcx
je 0x1800b901e
call fcn.1800c28b8
mov rbx, rax
jmp 0x1800b9021
mov rbx, r13
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], rdi
mov r8, rsi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
movups xmm0, xmmword [str.ContentCoreMods_]
movups xmmword [rsi + rbx], xmm0
movzx eax, word [0x1800e2190]
mov word [rsi + rbx + 0x10], ax
mov byte [rbx + r14], 0
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1800b909b
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9096
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b9096
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c2c74
movups xmm0, xmmword [rbp - 0x38]
movups xmmword [rbp + 0xe8], xmm0
movups xmm6, xmmword [rbp - 0x28]
movups xmmword [rbp + 0xf8], xmm6
lea rbx, [rbp + 0xe8]
movq rcx, xmm0
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rbx, rcx
call fcn.1800be110
mov qword [rbp - 0x10], rbx
movq qword [rbp - 8], xmm6
lea r8, [rbp - 0x10]
mov edx, eax
lea rcx, [rbp + 0x80]
call fcn.1800ab8b0
nop
lea rcx, [rbp + 0x80]
call fcn.1800acc60
test al, al
sete bl
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x1800b914e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9149
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b9149
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c2c74
test bl, bl
je 0x1800b91f3
mov rdi, qword [rbp + 0xf8]
lea rbx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rbx, qword [rbp + 0xe8]
call fcn.1800be110
mov qword [rbp], rbx
mov qword [rbp + 8], rdi
lea r8, [rbp]
mov edx, eax
lea rcx, [rbp - 0x78]
call fcn.1800ab8b0
nop
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rcx, qword [rbp - 0x78]
call fcn.1800be370
shr rax, 0x20
test eax, eax
jne 0x1800b98fc
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x1800b91f3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b91ee
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b91ee
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c2c74
mov rdi, qword [rbp + 0xf8]
lea rbx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rbx, qword [rbp + 0xe8]
call fcn.1800be110
mov qword [rbp + 0x10], rbx
mov qword [rbp + 0x18], rdi
lea r8, [rbp + 0x10]
mov edx, eax
lea rcx, [rbp + 0x60]
call fcn.1800ab8b0
nop
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x110], xmm0
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x110]
call fcn.1800ae400
test eax, eax
jne 0x1800b990f
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x1800b9294
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b928f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b928f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800c2c74
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov r14, qword [rbp + 0x118]
test r14, r14
je 0x1800b92b6
lock inc dword [r14 + 8]
mov r14, qword [rbp + 0x118]
movaps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x140], xmm0
test r14, r14
je 0x1800b92d6
lock inc dword [r14 + 8]
mov r14, qword [rbp + 0x118]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
test r14, r14
je 0x1800b9329
mov eax, r12d
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x1800b9322
mov rbx, qword [rbp + 0x118]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r12d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1800b9322
mov r14, qword [rbp + 0x118]
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 8]
jmp 0x1800b9329
mov r14, qword [rbp + 0x118]
cmp qword [rbp + 0x110], 0
je 0x1800b97c4
lea r15, str..dll
mov rax, qword [rbp + 0x140]
nop word [rax + rax]
lea rdi, [rax + 0x20]
lea rdx, [rbp + 0xa8]
mov rcx, rdi
call fcn.1800abe00
nop
lea rdx, [rbp - 0x58]
mov rcx, rax
call fcn.1800ae150
lea rdx, [rbp - 0x58]
mov r8, qword [rbp - 0x58]
mov r9, qword [rbp - 0x40]
cmp r9, 0x10
cmovae rdx, r8
cmp qword [rbp - 0x48], 4
jne 0x1800b93b6
mov rcx, r13
nop
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r15 + rcx - 1]
jne 0x1800b93a9
cmp rcx, 4
jne 0x1800b9390
mov eax, r13d
jmp 0x1800b93ae
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1800b93b6
mov bl, 1
jmp 0x1800b93b8
xor bl, bl
cmp r9, 0x10
jb 0x1800b93ef
lea rdx, [r9 + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x1800b93e7
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b9888
mov rcx, r8
call fcn.1800c2c74
mov qword [rbp - 0x48], r13
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x1800b9445
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9440
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b988f
call fcn.1800c2c74
test bl, bl
je 0x1800b97a8
mov rdx, rdi
lea rcx, [rbp + 0x150]
call fcn.18000a290
nop
lea rdx, [rbp + 0x150]
cmp qword [rbp + 0x168], 8
cmovae rdx, qword [rbp + 0x150]
mov rax, qword [rbp + 0x160]
lea rdi, [rdx + rax*2]
lea rbx, [rbp + 0x150]
cmovae rbx, qword [rbp + 0x150]
mov qword [rbp + 0x120], r13
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
mov rdx, rdi
sub rdx, rbx
sar rdx, 1
lea rcx, [rbp + 0x120]
call fcn.18000f270
lea rax, [rbp + 0x120]
mov qword [rbp + 0xa0], rax
cmp rbx, rdi
je 0x1800b9535
nop word [rax + rax]
movzx r9d, byte [rbx]
mov rcx, qword [rbp + 0x130]
mov rdx, qword [rbp + 0x138]
cmp rcx, rdx
jae 0x1800b9520
lea rax, [rcx + 1]
mov qword [rbp + 0x130], rax
lea rax, [rbp + 0x120]
cmp rdx, 0x10
cmovae rax, qword [rbp + 0x120]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1800b952c
lea rcx, [rbp + 0x120]
call fcn.18000e110
add rbx, 2
cmp rbx, rdi
jne 0x1800b94e0
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x60], r13
mov rdi, qword [rbp + 0x130]
lea rsi, [rbp + 0x120]
cmp qword [rbp + 0x138], 0x10
cmovae rsi, qword [rbp + 0x120]
cmp rdi, 0x10
jae 0x1800b957b
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x60], 0xf
jmp 0x1800b95f7
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800b95cf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1800b98ea
mov rcx, rax
call fcn.1800c28b8
mov rcx, rax
test rax, rax
je 0x1800b9896
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800b95de
test rcx, rcx
je 0x1800b95db
call fcn.1800c28b8
jmp 0x1800b95de
mov rax, r13
mov qword [rsp + 0x48], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x58], rdi
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__getpid]
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1800b96ca
cmp rax, 0xffffffffffffffff
je 0x1800b96c1
mov dword [rsp + 0x20], 4
xor edx, edx
mov r9d, 0x3000
mov r8d, 0x104
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
lea rcx, [rsp + 0x48]
mov rdx, qword [rsp + 0x48]
mov r10, qword [rsp + 0x60]
cmp r10, 0x10
cmovae rcx, rdx
mov r9, r12
inc r9
cmp byte [rcx + r9], 0
jne 0x1800b9664
inc r9
lea r8, [rsp + 0x48]
cmp r10, 0x10
cmovae r8, rdx
mov qword [rsp + 0x20], r13
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], rdi
mov r9, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test rax, rax
je 0x1800b96c1
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x1800b9708
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9702
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b9896
call fcn.1800c2c74
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x1800b9749
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b9744
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b989d
call fcn.1800c2c74
mov qword [rbp + 0x130], r13
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
mov rdx, qword [rbp + 0x168]
cmp rdx, 8
jb 0x1800b97a8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b97a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800b98a4
call fcn.1800c2c74
lea rcx, [rbp + 0x140]
call fcn.1800acb10
mov rax, qword [rbp + 0x140]
test rax, rax
jne 0x1800b9350
mov rcx, qword [rbp + 0x148]
test rcx, rcx
je 0x1800b980d
mov eax, r12d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1800b9806
mov rbx, qword [rbp + 0x148]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r12d
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1800b9806
mov rcx, qword [rbp + 0x148]
mov rax, qword [rcx]
call qword [rax + 8]
mov r14, qword [rbp + 0x118]
test r14, r14
je 0x1800b9849
mov eax, r12d
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x1800b9849
mov rbx, qword [rbp + 0x118]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], r12d
cmp r12d, 1
jne 0x1800b9849
mov rcx, qword [rbp + 0x118]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp + 0x100]
cmp rdx, 0x10
jb 0x1800b98b0
inc rdx
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800b98ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800b98ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1800c2c74
mov rcx, qword [rbp + 0x390]
xor rcx, rsp
call fcn.1800c2600
lea r11, [rsp + 0x4c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.180001270
nop
call fcn.180001310
int3
call fcn.180001270
nop
lea r8, [rbp - 0x78]
mov edx, eax
lea rcx, str.create_directory
call fcn.1800ac6b0
nop
lea r8, [rbp + 0x60]
mov edx, eax
lea rcx, str.directory_iterator::directory_iterator
call fcn.1800ac6b0
int3