Function at 0x180327540
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x220]
sub rsp, 0x320
mov rax, qword [0x18054e100]
xor rax, rsp
mov qword [rbp + 0x218], rax
xor r12d, r12d
lea edx, [r12 + 1]
lea rcx, [rsp + 0x60]
call fcn.180077390
nop
lea rcx, [rbp + 0x130]
call fcn.1803006b0
nop
lea r8d, [r12 + 0xc]
lea rdx, str._ffmpeg_.exe
mov rcx, rax
call fcn.18006a3c0
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r12
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm1
mov qword [rax + 0x10], r12
mov r13d, 0xf
mov qword [rax + 0x18], r13
mov byte [rax], r12b
lea rdx, [rbp + 0x70]
cmp qword [rbp + 0x88], r13
cmova rdx, qword [rbp + 0x70]
lea r9d, [r12 + 0x40]
lea r8d, [r12 + 1]
lea rcx, [rsp + 0x60]
call fcn.180077210
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, r13
jbe 0x180327646
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180327641
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180327e6c
call fcn.180357650
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r13
mov byte [rbp + 0x70], 0
lea rcx, [rbp + 0x130]
call fcn.18006b8d0
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
mov esi, 2
test byte [rsp + rcx + 0x70], 6
jne 0x180327d3d
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], 1
mov qword [rbp + 0x108], r13
movzx eax, word [0x180460e04]
mov byte [rbp + 0xf0], al
mov byte [rbp + 0xf1], 0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], 1
mov qword [rbp + 0xa8], r13
movzx eax, word [0x1804a69cc]
mov byte [rbp + 0x90], al
mov byte [rbp + 0x91], 0
lea rcx, [rbp + 0x1f0]
call fcn.1803006b0
nop
lea rdx, [rbp + 0xf0]
lea r8d, [rsi - 1]
mov rcx, rax
call fcn.18006a3c0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x150], xmm0
movups xmm0, xmmword [rax + 0x10]
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rbp + 0x160], xmm0
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r13
mov byte [rax], 0
lea rcx, [rbp + 0x1f0]
call fcn.18006b8d0
movabs rbx, 0x7fffffffffffffff
lea rax, [rbx - 1]
mov rcx, qword [rsp + 0x48]
cmp rax, rcx
jb 0x180327e72
lea r9, [rbp + 0x90]
lea rax, [rbp + 0x150]
cmp qword [rbp + 0x168], 0xf
cmova rax, qword [rbp + 0x150]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 1
lea rcx, [rbp + 0x130]
call fcn.18006a4c0
nop
mov rax, rbx
mov rcx, qword [rbp + 0x140]
sub rax, rcx
cmp rax, 0xb
jb 0x180327e78
lea r9, [rbp + 0x130]
cmp qword [rbp + 0x148], 0xf
cmova r9, qword [rbp + 0x130]
mov qword [rsp + 0x30], 0xb
lea rax, str.ffmpeg_.exe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x1d0]
call fcn.18006a4c0
nop
mov rax, rbx
mov rcx, qword [rbp + 0x1e0]
sub rax, rcx
mov rdx, qword [rbp + 0xa0]
cmp rax, rdx
jb 0x180327e7e
lea r9, [rbp + 0x1d0]
cmp qword [rbp + 0x1e8], 0xf
cmova r9, qword [rbp + 0x1d0]
lea rax, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0xf
cmova rax, qword [rbp + 0x90]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x1b0]
call fcn.18006a4c0
nop
mov rax, rbx
mov rcx, qword [rbp + 0x1c0]
sub rax, rcx
cmp rax, 0xb
jb 0x180327e84
lea r9, [rbp + 0x1b0]
cmp qword [rbp + 0x1c8], 0xf
cmova r9, qword [rbp + 0x1b0]
mov qword [rsp + 0x30], 0xb
lea rax, str._ffmpeg.exe
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rbp + 0x190]
call fcn.18006a4c0
nop
mov rax, rbx
mov rcx, qword [rbp + 0x1a0]
sub rax, rcx
cmp rax, 7
jb 0x180327e8a
lea rax, [rbp + 0x190]
cmp qword [rbp + 0x1a8], 0xf
cmova rax, qword [rbp + 0x190]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 7
lea r9, str.rename
lea rcx, [rbp + 0x170]
call fcn.18006a4c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x70], xmm0
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r13
lea ecx, [rsi + 0x1e]
call fcn.180357684
mov rdx, rax
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x80], 0x1b
mov qword [rbp + 0x88], 0x1f
movups xmm0, xmmword [str.c:windows_system32cmd.exe]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x180503968]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x180503970]
mov word [rax + 0x18], cx
movzx eax, byte [0x180503972]
mov byte [rdx + 0x1a], al
mov byte [rdx + 0x1b], 0
mov rcx, qword [rbp + 0x180]
sub rbx, rcx
cmp rbx, 8
jb 0x180327e90
lea rax, [rbp + 0x170]
cmp qword [rbp + 0x188], 0xf
cmova rax, qword [rbp + 0x170]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 8
lea r9, str._cmd__c
lea rcx, [rbp + 0xd0]
call fcn.18006a4c0
nop
mov edi, dword [rbp + 0x80]
lea r8, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova r8, qword [rbp + 0x70]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, esi
mul rbx
mov rsi, 0xffffffffffffffff
cmovo rax, rsi
mov rcx, rax
call fcn.180357d9c
mov r14, rax
lea r8, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova r8, qword [rbp + 0x70]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
mov qword [rbp + 0x120], r12
mov qword [rbp + 0x128], r12
mov r8, rsi
nop word [rax + rax]
inc r8
cmp word [r14 + r8*2], 0
jne 0x180327a40
mov rdx, r14
lea rcx, [rbp + 0x110]
call fcn.18008a510
mov rcx, r14
call fcn.180357650
nop
lea r15, [rbp + 0x110]
cmp qword [rbp + 0x128], 7
cmova r15, qword [rbp + 0x110]
mov edi, dword [rbp + 0xe0]
lea r8, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova r8, qword [rbp + 0xd0]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rbx, eax
mov eax, 2
mul rbx
cmovo rax, rsi
mov rcx, rax
call fcn.180357d9c
mov r14, rax
lea r8, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova r8, qword [rbp + 0xd0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 1]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], r12
nop
inc rsi
cmp word [r14 + rsi*2], 0
jne 0x180327b10
mov r8, rsi
mov rdx, r14
lea rcx, [rbp + 0xb0]
call fcn.18008a510
mov rcx, r14
call fcn.180357650
lea r9, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 7
cmova r9, qword [rbp + 0xb0]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
mov r8, r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp + 0xc8]
cmp rdx, 7
jbe 0x180327bae
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180327ba9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180327e96
call fcn.180357650
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], r12w
lea rcx, [rbp + 0x110]
call fcn.18008cc80
nop
lea rcx, [rbp + 0xd0]
call fcn.18006b8d0
nop
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x180327c20
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180327c1b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180327e9c
call fcn.180357650
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r13
mov byte [rbp + 0x70], 0
lea rcx, [rbp + 0x170]
call fcn.18006b8d0
nop
lea rcx, [rbp + 0x190]
call fcn.18006b8d0
nop
lea rcx, [rbp + 0x1b0]
call fcn.18006b8d0
nop
lea rcx, [rbp + 0x1d0]
call fcn.18006b8d0
nop
lea rcx, [rbp + 0x130]
call fcn.18006b8d0
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 0xf
jbe 0x180327cb5
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180327caf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180327ea2
call fcn.180357650
nop
mov rdx, qword [rbp + 0xa8]
cmp rdx, 0xf
jbe 0x180327cf7
inc rdx
mov rcx, qword [rbp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180327cf1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180327ea8
call fcn.180357650
nop
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x180327d38
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180327d33
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180327eae
call fcn.180357650
mov esi, 2
lea rcx, [rsp + 0x70]
call fcn.180078e10
test rax, rax
jne 0x180327d78
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx - 0x58], 0
cmovne eax, esi
or eax, dword [rsp + rcx + 0x70]
and eax, 0x17
mov dword [rsp + rcx + 0x70], eax
and eax, dword [rsp + rcx + 0x74]
jne 0x180327e16
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rsp + rcx + 0x5c], edx
lea rcx, [rsp + 0x70]
call fcn.180077160
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x60], rax
mov rax, qword [rsp + 0x60]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x5c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x10], rax
lea rcx, [rbp + 0x10]
call fcn.1803379ec
nop
xor eax, eax
mov rcx, qword [rbp + 0x218]
xor rcx, rsp
call fcn.180357630
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test al, 4
je 0x180327e23
lea rbx, str.ios_base::badbit_set
jmp 0x180327e37
test al, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x48]
call fcn.18008ba60
mov r8, rax
mov rdx, rbx
lea rcx, [rbp + 0x1f0]
call fcn.18008b850
lea rdx, [0x18054c8c8]
lea rcx, [rbp + 0x1f0]
call fcn.180359a20
nop
call fcn.18035e820
nop
call fcn.18006b090
nop
call fcn.18006b090
nop
call fcn.18006b090
nop
call fcn.18006b090
nop
call fcn.18006b090
nop
call fcn.18006b090
nop
call fcn.18035e820
nop
call fcn.18035e820
nop
call fcn.18035e820
nop
call fcn.18035e820
nop
call fcn.18035e820
int3