Function at 0x140004780
Capabilities:
Create process on windows
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2a8]
sub rsp, 0x3a8
xor r12d, r12d
mov dword [rsp + 0x20], r12d
lea rdi, vtable.CVolCommonBaseWithMemManager.0
mov qword [rbp + 0xb8], rdi
lea r13, vtable.CVolObject.0
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], r12
lea r14, vtable.CVolMem.0
mov qword [rbp + 0xb8], r14
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xe8], 0x40
lea r9d, [r12 + 0xa]
lea r8, [rbp + 0xb8]
mov edx, 0x1f4
lea rcx, [0x140040a00]
mov rax, qword [0x140040a00]
call qword [rax + 0x30]
mov qword [rbp + 0x80], rdi
mov qword [rbp + 0x80], r13
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], r12
mov qword [rbp + 0x80], r14
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xb0], 0x40
lea r9d, [r12 + 0xa]
lea r8, [rbp + 0x80]
mov edx, 0x1f5
lea rcx, [0x140040a00]
mov rax, qword [0x140040a00]
call qword [rax + 0x30]
mov qword [rbp + 0xf0], rdi
mov qword [rbp + 0xf0], r13
mov qword [rbp + 0xf8], r12
mov qword [rbp + 0x100], r12
lea rax, vtable.rg_n7331::rg_n19122.0
mov qword [rbp + 0xf0], rax
lea rax, [rbp + 0x108]
mov qword [rbp + 0x2f0], rax
mov qword [rbp + 0x108], rdi
mov qword [rbp + 0x108], r13
mov qword [rbp + 0x110], r12
mov qword [rbp + 0x118], r12
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r12
mov dword [rbp + 0x13c], 0x64000
lea rax, vtable.rg_n7331::rg_n18550.0
mov qword [rbp + 0x108], rax
lea rax, [rbp + 0x140]
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x140], rdi
mov qword [rbp + 0x140], r13
mov qword [rbp + 0x148], r12
mov qword [rbp + 0x150], r12
lea rdx, vtable.CWString.0
mov qword [rbp + 0x140], rdx
lea rax, [rbp + 0x160]
mov qword [rbp + 0x300], rax
mov qword [rbp + 0x160], rdi
mov qword [rbp + 0x160], r13
mov qword [rbp + 0x168], r12
mov qword [rbp + 0x170], r12
mov qword [rbp + 0x160], r14
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x190], 0x40
mov qword [rbp + 0x158], r12
mov qword [rbp + 0x190], 0xfe
mov qword [rbp - 0x20], rdi
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], r12
lea rcx, vtable.rg_n1::rg_n2366.0
mov qword [rbp - 0x20], rcx
lea rax, vtable.rg_n1::rg_n443.0
mov qword [rbp - 0x20], rax
lea rax, [rbp - 8]
mov qword [rbp + 0x308], rax
lea rax, [rbp - 8]
mov qword [rbp + 0x270], rax
mov qword [rbp - 8], rdi
mov qword [rbp - 8], r13
mov qword [rbp], r12
mov qword [rbp + 8], r12
mov qword [rbp - 8], r14
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x28], 0x40
mov qword [rbp + 0x28], 0x100
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x30], rcx
lea rax, vtable.rg_n1::rg_n336.0
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x48]
mov qword [rbp + 0x278], rax
lea rax, [rbp + 0x48]
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], r12
mov qword [rbp + 0x58], r12
mov qword [rbp + 0x48], r14
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x78], 0x40
mov qword [rbp + 0x78], 0x80
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x28], rdx
lea rax, [rsp + 0x48]
mov qword [rbp + 0x288], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x78], 0x40
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x78], 0xfe
lea rax, vtable.CWConstString.0
mov qword [rsp + 0x28], rax
lea rsi, str.360AlbumViewer64.exe
mov qword [rsp + 0x40], rsi
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x28]
call fcn.140005ff0
nop
lea rax, [rsp + 0x48]
mov qword [rbp + 0x290], rax
mov qword [rsp + 0x48], r14
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140004b1e
lea rcx, [rsp + 0x48]
call qword [method.CWString.virtual_24]
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x28], r13
mov rbx, r12
mov rcx, qword [rbp + 0x70]
test rcx, 0xfffffffffffffffc
jbe 0x140004bac
nop word [rax + rax]
mov rax, qword [rbp + 0x60]
test rcx, rcx
cmove rax, r12
mov eax, dword [rax + rbx*4]
test eax, eax
jne 0x140004b68
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rdi, rax
test rax, rax
je 0x140004b92
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc rbx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
shr rax, 2
cmp rbx, rax
jl 0x140004b50
lea rdi, vtable.CVolCommonBaseWithMemManager.0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
lea rax, vtable.CWString.0
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rbp + 0x2f8], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x78], 0x40
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x78], 0xfe
mov dword [rsp + 0x20], 1
lea rdx, [rsp + 0x28]
call fcn.140010880
mov r8, rsi
lea rdx, [rsp + 0x28]
lea rcx, [rbp - 0x80]
call fcn.140012530
nop
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140004c57
mov rbx, qword [rbp + 0xe0]
mov rax, rbx
mov rsi, qword [rbp + 0xd0]
jmp 0x140004c78
cmp qword [rax + 0x48], 0
je 0x140004cb9
mov rcx, qword [rax + 0x38]
mov rbx, qword [rbp + 0xe0]
mov rax, rbx
mov rsi, qword [rbp + 0xd0]
test rcx, rcx
je 0x140004cb9
cmp word [rcx], 0
je 0x140004cb9
test rax, rax
js 0x140004cb9
lea rdx, [0x140035ef4]
call fcn.14001c91c
mov rdi, rax
test rax, rax
je 0x140004cb2
mov r9, rax
mov r8, rbx
mov edx, 1
mov rcx, rsi
call fcn.14001a2fc
mov rcx, rdi
call fcn.1400195d8
lea rdi, vtable.CVolCommonBaseWithMemManager.0
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2f8], rax
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp - 0x48]
test rdx, rdx
je 0x140004cdb
lea rcx, [rbp - 0x60]
call qword [method.CWString.virtual_24]
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x80], r13
mov ebx, 1
and ebx, 0xfffffffe
mov dword [rsp + 0x20], ebx
lea rax, [rsp + 0x48]
mov qword [rbp + 0x2f8], rax
mov qword [rsp + 0x48], r14
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140004d21
lea rcx, [rsp + 0x48]
call qword [method.CWString.virtual_24]
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x28], r13
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
lea rsi, vtable.CWString.0
mov qword [rbp - 0x80], rsi
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2f8], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], 0x40
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x30], 0xfe
or ebx, 4
mov dword [rsp + 0x20], ebx
lea rdx, [rbp - 0x80]
call fcn.140010880
lea r8, [0x140034da0]
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x1a0]
call fcn.140012530
nop
mov rcx, qword [rax + 0x18]
test rcx, rcx
je 0x140004dd8
mov rdi, qword [rbp + 0xa8]
mov rax, rdi
mov r14, qword [rbp + 0x98]
jmp 0x140004df9
cmp qword [rax + 0x48], 0
je 0x140004e48
mov rcx, qword [rax + 0x38]
mov rdi, qword [rbp + 0xa8]
mov rax, rdi
mov r14, qword [rbp + 0x98]
test rcx, rcx
je 0x140004e3a
cmp word [rcx], 0
je 0x140004e3a
test rax, rax
js 0x140004e3a
lea rdx, [0x140035ef4]
call fcn.14001c91c
mov rsi, rax
test rax, rax
je 0x140004e33
mov r9, rax
mov r8, rdi
mov edx, 1
mov rcx, r14
call fcn.14001a2fc
mov rcx, rsi
call fcn.1400195d8
lea rsi, vtable.CWString.0
lea r14, vtable.CVolMem.0
lea rdi, vtable.CVolCommonBaseWithMemManager.0
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x1c0], r14
mov rdx, qword [rbp + 0x1d8]
test rdx, rdx
je 0x140004e76
lea rcx, [rbp + 0x1c0]
call qword [method.CWString.virtual_24]
mov qword [rbp + 0x1d8], r12
mov qword [rbp + 0x1e8], r12
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1a0], r13
and ebx, 0xfffffffb
mov dword [rsp + 0x20], ebx
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2f8], rax
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp - 0x48]
test rdx, rdx
je 0x140004ec2
lea rcx, [rbp - 0x60]
call qword [method.CWString.virtual_24]
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x80], r13
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x28], rsi
lea rax, [rsp + 0x48]
mov qword [rbp + 0x2f8], rax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x78], 0x40
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x78], 0xfe
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x80], r13
mov qword [rbp - 0x78], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x80], rsi
lea rax, [rbp - 0x60]
mov qword [rbp + 0x300], rax
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], 0x40
mov qword [rbp - 0x68], r12
mov qword [rbp - 0x30], 0xfe
or ebx, 0x10
mov dword [rsp + 0x20], ebx
lea rdx, [rbp - 0x80]
call fcn.140010880
lea rdi, str.360AlbumViewer64.exe
mov r8, rdi
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x1a0]
call fcn.140012530
nop
or qword [rsp + 0x30], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x210], xmm0
movups xmmword [rbp + 0x220], xmm0
movups xmmword [rbp + 0x230], xmm0
movups xmmword [rbp + 0x240], xmm0
movups xmmword [rbp + 0x250], xmm0
movups xmmword [rbp + 0x260], xmm0
mov dword [rbp + 0x200], WSACleanup
mov dword [rbp + 0x204], 0x8100
lea rcx, str.runas
mov qword [rbp + 0x210], rcx
mov rcx, qword [rax + 0x18]
lea rdx, [0x140035c44]
test rcx, rcx
je 0x14000502d
mov qword [rbp + 0x218], rcx
jmp 0x140005048
cmp qword [rax + 0x48], 0
jne 0x14000503d
mov qword [rbp + 0x218], rdx
jmp 0x140005048
mov rax, qword [rax + 0x38]
mov qword [rbp + 0x218], rax
mov r8, qword [rsp + 0x70]
mov rax, qword [rsp + 0x40]
mov ecx, r12d
test rax, rax
je 0x140005062
cmp word [rax], cx
sete cl
jmp 0x14000506c
cmp r8, 2
setle cl
mov rax, r12
test ecx, ecx
je 0x140005079
mov qword [rbp + 0x220], r12
jmp 0x140005097
test rax, rax
je 0x140005087
mov qword [rbp + 0x220], rax
jmp 0x140005097
test r8, r8
cmovne rdx, qword [rsp + 0x60]
mov qword [rbp + 0x220], rdx
mov qword [rbp + 0x228], r12
mov dword [rbp + 0x230], 0xa
lea rcx, [rbp + 0x200]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
nop
lea rax, [rbp + 0x1c0]
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x1c0], r14
mov rdx, qword [rbp + 0x1d8]
test rdx, rdx
je 0x1400050e4
lea rcx, [rbp + 0x1c0]
call qword [method.CWString.virtual_24]
mov qword [rbp + 0x1d8], r12
mov qword [rbp + 0x1e8], r12
mov qword [rbp + 0x1e0], r12
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1a0], r13
and ebx, 0xffffffef
mov dword [rsp + 0x20], ebx
lea rax, [rbp - 0x60]
mov qword [rbp + 0x2f8], rax
mov qword [rbp - 0x60], r14
mov rdx, qword [rbp - 0x48]
test rdx, rdx
je 0x140005130
lea rcx, [rbp - 0x60]
call qword [method.CWString.virtual_24]
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x38], r12
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x80], r13
lea rax, [rsp + 0x48]
mov qword [rbp + 0x2f8], rax
mov qword [rsp + 0x48], r14
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14000516a
lea rcx, [rsp + 0x48]
call qword [method.CWString.virtual_24]
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x28], r13
mov rdx, qword [rbp + 0x60]
test rdx, rdx
je 0x140005197
lea rcx, [rbp + 0x48]
mov rax, qword [rbp + 0x48]
call qword [rax + 0x18]
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x68], r12
lea r15, vtable.CVolCommonBaseWithMemManager.0
lea rbx, vtable.CWConstString.0
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x28], rsi
lea rax, [rsp + 0x48]
mov qword [rbp + 0x2f8], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x78], 0x40
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x78], 0xfe
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x40], rdi
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x28]
call fcn.140005ff0
nop
lea rax, [rsp + 0x48]
mov qword [rbp + 0x300], rax
mov qword [rsp + 0x48], r14
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x140005256
lea rcx, [rsp + 0x48]
mov rax, qword [rsp + 0x48]
call qword [rax + 0x18]
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x28], r13
mov rdx, qword [rbp + 0x70]
mov rax, rdx
shr rax, 2
test eax, eax
je 0x1400051b1
mov rcx, r12
mov r8, rdx
shr r8, 2
test r8, r8
mov r15d, ecx
je 0x1400052b6
mov r9, qword [rbp + 0x60]
nop dword [rax + rax]
mov rax, r9
test rdx, rdx
cmove rax, r12
mov r15d, dword [rax + rcx*4]
inc rcx
cmp rcx, r8
jl 0x1400052a0
mov r14d, 0x3e8
nop dword [rax]
mov rdx, qword [rbp + 0x10]
test rdx, rdx
je 0x1400052d4
lea rcx, [rbp - 8]
mov rax, qword [rbp - 8]
call qword [rax + 0x18]
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x18], r12
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetTopWindow]
mov rbx, rax
test r15d, r15d
je 0x140005301
mov esi, r15d
jmp 0x140005309
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
test rbx, rbx
je 0x14000537a
nop
mov dword [rbp + 0x2f0], r12d
lea rdx, [rbp + 0x2f0]
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
test eax, eax
je 0x140005364
cmp dword [rbp + 0x2f0], esi
jne 0x140005364
mov rax, qword [rbp + 0x18]
mov rdi, qword [rbp + 0x20]
sub rax, rdi
cmp rax, 8
jl 0x140005353
mov rax, qword [rbp + 0x10]
mov qword [rdi + rax], rbx
add qword [rbp + 0x20], 8
jmp 0x140005364
lea rdx, [rdi + 8]
lea rcx, [rbp - 8]
call fcn.140011260
mov qword [rax + rdi], rbx
mov edx, 2
mov rcx, rbx
call qword [sym.imp.USER32.dll_GetWindow]
mov rbx, rax
test rax, rax
jne 0x140005310
mov rbx, r12
mov rdx, qword [rbp + 0x20]
test rdx, 0xfffffffffffffff8
jbe 0x1400053ba
nop word [rax + rax]
mov rcx, qword [rbp + 0x10]
test rdx, rdx
cmove rcx, r12
xor edx, edx
mov rcx, qword [rcx + rbx*8]
call qword [sym.imp.USER32.dll_ShowWindowAsync]
inc rbx
mov rdx, qword [rbp + 0x20]
mov rax, rdx
shr rax, 3
cmp rbx, rax
jl 0x140005390
sub r14, 1
jne 0x1400052c0
lea ecx, [r14 + 0x64]
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, vtable.CVolCommonBaseWithMemManager.0
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
lea rax, vtable.CWString.0
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x48]
mov qword [rbp + 0x2f0], rax
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea rbx, vtable.CVolMem.0
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x78], 0x40
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x78], 0xfe
lea rax, vtable.CWConstString.0
mov qword [rsp + 0x28], rax
lea rax, [0x140034da0]
mov qword [rsp + 0x40], rax
lea r8, [rsp + 0x28]
mov edx, r15d
lea rcx, [rbp + 0xf0]
call fcn.1400063a0
nop
lea rax, [rsp + 0x48]
mov qword [rbp + 0x2f8], rax
mov qword [rsp + 0x48], rbx
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x14000549a
lea rcx, [rsp + 0x48]
call qword [method.CWString.virtual_24]
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x28], r13
lea rax, [rbp + 0x48]
mov qword [rbp + 0x2f0], rax
lea rax, [rbp + 0x48]
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x48], rbx
mov rdx, qword [rbp + 0x60]
test rdx, rdx
je 0x1400054e0
lea rcx, [rbp + 0x48]
call qword [method.CWString.virtual_24]
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x68], r12
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x30], r13
lea rax, [rbp - 8]
mov qword [rbp + 0x2f0], rax
lea rax, [rbp - 8]
mov qword [rbp + 0x2f8], rax
mov qword [rbp - 8], rbx
mov rdx, qword [rbp + 0x10]
test rdx, rdx
je 0x140005521
lea rcx, [rbp - 8]
call qword [method.CWString.virtual_24]
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x18], r12
mov qword [rbp - 8], r13
mov qword [rbp - 0x20], r13
lea rax, [rbp + 0x140]
mov qword [rbp + 0x2f0], rax
lea rax, [rbp + 0x160]
mov qword [rbp + 0x2f8], rax
mov qword [rbp + 0x160], rbx
mov rdx, qword [rbp + 0x178]
test rdx, rdx
je 0x140005571
lea rcx, [rbp + 0x160]
call qword [method.CWString.virtual_24]
mov qword [rbp + 0x178], r12
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x180], r12
mov qword [rbp + 0x160], r13
mov qword [rbp + 0x140], r13
lea rax, [rbp + 0x108]
mov qword [rbp + 0x2f0], rax
mov rcx, qword [rbp + 0x120]
test rcx, rcx
je 0x1400055cd
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r12
mov dword [rbp + 0x138], r12d
mov qword [rbp + 0x108], r13
mov qword [rbp + 0xf0], r13
mov qword [rbp + 0x80], rbx
mov rdx, qword [rbp + 0x98]
test rdx, rdx
je 0x1400055ff
lea rcx, [rbp + 0x80]
mov rax, qword [rbp + 0x80]
call qword [rax + 0x18]
mov qword [rbp + 0x98], r12
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0x80], r13
mov qword [rbp + 0xb8], rbx
mov rdx, qword [rbp + 0xd0]
test rdx, rdx
je 0x14000563f
lea rcx, [rbp + 0xb8]
mov rax, qword [rbp + 0xb8]
call qword [rax + 0x18]
mov qword [rbp + 0xd0], r12
mov qword [rbp + 0xe0], r12
mov qword [rbp + 0xd8], r12
mov qword [rbp + 0xb8], r13
add rsp, 0x3a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret