Function at 0x180022740
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4f0
movaps xmmword [rsp + 0x4e0], xmm6
mov rax, qword [0x18018a280]
xor rax, rsp
mov qword [rsp + 0x4d0], rax
mov rdi, r8
mov r15, rdx
mov qword [rsp + 0xa0], r8
xor r12d, r12d
cmp qword [rdx + 0x10], r12
jne 0x1800227a7
mov r8d, Ordinal_15
lea rdx, str.Path_is_empty
mov rcx, rdi
call fcn.180008bc0
xor al, al
jmp 0x1800245ea
lea rcx, [rsp + 0x160]
call fcn.180024bd0
nop
lea rax, str.Windows_System32
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], Ordinal_26
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x138], xmm0
movabs rsi, 0xc000000000000000
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x70], 1
lea rax, [rsp + 0x130]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x150], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x1c0]
call fcn.18000d1f0
nop
lea rax, str.WindowsSystem32printui.exe
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], Ordinal_37
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x70], 1
lea rax, [rsp + 0x130]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x150], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x1e0]
call fcn.18000d1f0
nop
lea rax, str.Windows_System32printui.exe
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], Ordinal_37
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x70], 1
lea rax, [rsp + 0x130]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x150], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x1a0]
call fcn.18000d1f0
nop
lea rax, str.Windows_System32printui.dll
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], Ordinal_37
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x70], 1
lea rax, [rsp + 0x130]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x150], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x220]
call fcn.18000d1f0
nop
lea rax, [rsp + 0x160]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 7
cmova rdx, qword [rsp + 0x1c0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x198], r12
mov r8, qword [rsp + 0x1d0]
lea rcx, [rsp + 0x180]
call fcn.18000acd0
nop
mov r8d, 3
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x60]
call fcn.180021d40
movsd xmm0, qword [rax]
movsd qword [rsp + 0x120], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x60], ecx
lea rax, [0x18018b270]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x150], xmm0
mov eax, dword [rsp + 0x120]
test eax, eax
je 0x180022b40
cmp eax, 1
setne bl
mov rdx, qword [rsp + 0x198]
cmp rdx, 7
jbe 0x180022b51
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022b4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002461c
jmp 0x180022b4c
xor bl, bl
test ecx, ecx
jne 0x180024622
jmp 0x180022afb
call fcn.18008ed30
test bl, bl
je 0x180022f4c
lea rax, str.rmdir__s__q__Windows__
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], Ordinal_26
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x68], rax
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x60], 1
lea rax, [rsp + 0x130]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x150], xmm0
movaps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x200]
call fcn.18000d1f0
nop
lea rcx, [rsp + 0x200]
call fcn.180024a20
movzx ebx, al
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x180022c5a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022c55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002463f
call fcn.18008ed30
test bl, bl
jne 0x180022f4c
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Fake_windows_can_not_deleted_error_code:_
mov qword [rsp + 0x150], rcx
mov qword [rsp + 0x158], Ordinal_47
mov dword [rsp + 0x68], eax
movabs rsi, 0x2000000000000000
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x120], 1
lea rax, [rsp + 0x60]
mov qword [rsp + 0x128], rax
movaps xmm0, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x150], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x200]
call fcn.1800197e0
lea rdx, [rsp + 0x200]
mov rcx, rdi
call fcn.180008dc0
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x180022d41
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022d3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024645
call fcn.18008ed30
lea rcx, [rsp + 0x70]
call fcn.180024770
movzx ebx, al
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x180022d96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022d91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024721
call fcn.18008ed30
movdqa xmm0, xmmword [0x18016fc30]
movdqu xmmword [rsp + 0x230], xmm0
mov word [rsp + 0x220], r12w
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 7
jbe 0x180022df8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022df3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024727
call fcn.18008ed30
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r12w
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x180022e5d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022e58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002472d
call fcn.18008ed30
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], r12w
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 7
jbe 0x180022ec2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022ebd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024733
call fcn.18008ed30
mov qword [rsp + 0x1d0], r12
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], r12w
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x180022f27
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180022f22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024739
call fcn.18008ed30
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], r12w
movzx eax, bl
jmp 0x1800245ea
lea rax, str.mkdir___Windows_System32_
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], Ordinal_37
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x158], rax
movups xmm0, xmmword [rsp + 0x150]
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x150], 1
lea rax, [rsp + 0x130]
mov qword [rsp + 0x158], rax
movaps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x150], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x200]
call fcn.18000d1f0
nop
lea rcx, [rsp + 0x200]
call fcn.180024a20
movzx ebx, al
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x180023056
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023051
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002464b
call fcn.18008ed30
test bl, bl
jne 0x180023139
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Fake_windows_can_not_created_error_code:_
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], Ordinal_47
mov dword [rsp + 0x158], eax
movabs rsi, 0x2000000000000000
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0x60], 1
lea rax, [rsp + 0x150]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm1
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x200]
call fcn.1800197e0
lea rdx, [rsp + 0x200]
mov rcx, rdi
call fcn.180008dc0
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x180023143
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023132
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024651
call fcn.18008ed30
jmp 0x180023143
movabs rsi, 0x2000000000000000
lea rdx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 7
cmova rdx, qword [rsp + 0x1a0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], r12
mov r8, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x80]
call fcn.18000acd0
nop
lea rdx, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 7
cmova rdx, qword [rsp + 0x1e0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x180], xmm0
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x198], r12
mov r8, qword [rsp + 0x1f0]
lea rcx, [rsp + 0x180]
call fcn.18000acd0
nop
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x180]
call fcn.180022590
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 7
jbe 0x180023237
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023232
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024657
call fcn.18008ed30
movdqa xmm6, xmmword [0x18016fc30]
movdqu xmmword [rsp + 0x190], xmm6
mov word [rsp + 0x180], r12w
mov rdx, qword [rsp + 0x98]
cmp rdx, 7
jbe 0x180023299
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023294
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002465d
call fcn.18008ed30
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x240]
call fcn.1800c4f50
lea rdx, [rsp + 0x220]
cmp qword [rsp + 0x238], 7
cmova rdx, qword [rsp + 0x220]
lea rcx, [rsp + 0x240]
call fcn.180026410
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea r13, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x240], r13
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x23c], edx
cmp qword [rsp + 0x2c8], 0
jne 0x1800235b9
mov r8d, reloc.LIBPQ.dll_Ordinal_38
lea rdx, str.Fake_printui.dll_file_can_not_created.
mov rcx, rdi
call fcn.180008bc0
lea rcx, [rsp + 0x70]
call fcn.180024770
movzx esi, al
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x240], r13
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x23c], edx
lea rcx, [rsp + 0x248]
call fcn.180025ab0
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x240], rdi
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x23c], edx
lea rbx, vtable.std::ios_base.0
mov qword [rsp + 0x2e8], rbx
lea rcx, [rsp + 0x2e8]
call fcn.18008c880
nop
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x18002340a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023405
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024721
call fcn.18008ed30
movdqu xmmword [rsp + 0x230], xmm6
mov word [rsp + 0x220], r12w
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 7
jbe 0x180023464
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002345f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024727
call fcn.18008ed30
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r12w
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x1800234c9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800234c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002472d
call fcn.18008ed30
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], r12w
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 7
jbe 0x18002352e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023529
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024733
call fcn.18008ed30
mov qword [rsp + 0x1d0], r12
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], r12w
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x180023593
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002358e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024739
call fcn.18008ed30
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], r12w
movzx eax, sil
jmp 0x1800245ea
mov r8d, 0x66400
lea rdx, [0x1801033f0]
lea rcx, [rsp + 0x240]
call fcn.180025c50
lea rcx, [rsp + 0x248]
call fcn.180026310
mov ebx, 6
mov r14d, 2
test rax, rax
jne 0x18002362b
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
mov eax, ebx
cmp qword [rsp + rcx + 0x288], 0
cmovne eax, r14d
or eax, dword [rsp + rcx + 0x250]
and eax, 0x17
mov dword [rsp + rcx + 0x250], eax
mov edx, dword [rsp + rcx + 0x254]
and edx, eax
jne 0x180024663
mov rdx, r15
lea rcx, [rsp + 0x180]
call fcn.180005610
nop
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x350]
call fcn.1800c4f50
lea rax, str.Windows_System32_readui.txt
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], Ordinal_37
lea rax, [rsp + 0x160]
cmp qword [rsp + 0x178], 7
cmova rax, qword [rsp + 0x160]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x158], rax
movups xmm0, xmmword [rsp + 0x150]
movups xmmword [rsp + 0x138], xmm0
movabs r15, 0xc000000000000000
mov qword [rsp + 0x130], r15
mov qword [rsp + 0x150], 1
lea rax, [rsp + 0x130]
mov qword [rsp + 0x158], rax
movaps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x150], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xa8]
call fcn.18000d1f0
nop
lea rdx, [rsp + 0xa8]
cmp qword [rsp + 0xc0], 7
cmova rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0x350]
call fcn.180026410
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x350], r13
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x34c], edx
mov rdx, qword [rsp + 0xc0]
cmp rdx, 7
jbe 0x1800237a9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800237a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800246c0
call fcn.18008ed30
movdqu xmmword [rsp + 0xb8], xmm6
mov word [rsp + 0xa8], r12w
cmp qword [rsp + 0x3d8], 0
jne 0x180023b41
mov r8d, Ordinal_33
lea rdx, str.readui.txt_Can_not_created._n
mov rcx, rdi
call fcn.180008bc0
lea rcx, [rsp + 0x70]
call fcn.180024770
movzx esi, al
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x350], r13
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x34c], edx
lea rcx, [rsp + 0x358]
call fcn.180025ab0
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x350], rdi
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x34c], edx
lea rbx, vtable.std::ios_base.0
mov qword [rsp + 0x3f8], rbx
lea rcx, [rsp + 0x3f8]
call fcn.18008c880
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x1800238b7
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800238b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002474b
call fcn.18008ed30
movdqa xmm0, xmmword [0x18016fc40]
movdqu xmmword [rsp + 0x190], xmm0
mov byte [rsp + 0x180], 0
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x240], r13
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x23c], edx
lea rcx, [rsp + 0x248]
call fcn.180025ab0
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x240], rdi
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x23c], edx
mov qword [rsp + 0x2e8], rbx
lea rcx, [rsp + 0x2e8]
call fcn.18008c880
nop
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x180023992
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002398d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024751
call fcn.18008ed30
movdqu xmmword [rsp + 0x230], xmm6
mov word [rsp + 0x220], r12w
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 7
jbe 0x1800239ec
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800239e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024757
call fcn.18008ed30
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r12w
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x180023a51
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023a4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002475d
call fcn.18008ed30
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], r12w
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 7
jbe 0x180023ab6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023ab1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024763
call fcn.18008ed30
mov qword [rsp + 0x1d0], r12
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], r12w
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x180023b1b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023b16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024769
call fcn.18008ed30
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], r12w
movzx eax, sil
jmp 0x1800245ea
lea rdx, [rsp + 0x180]
cmp qword [rsp + 0x198], 0xf
cmova rdx, qword [rsp + 0x180]
mov r8, qword [rsp + 0x190]
lea rcx, [rsp + 0x350]
call fcn.180025c50
lea rcx, [rsp + 0x358]
call fcn.180026310
test rax, rax
jne 0x180023bbb
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
cmp qword [rsp + rcx + 0x398], 0
cmovne ebx, r14d
or ebx, dword [rsp + rcx + 0x360]
and ebx, 0x17
mov dword [rsp + rcx + 0x360], ebx
mov eax, dword [rsp + rcx + 0x364]
and eax, ebx
jne 0x1800246c6
call qword [sym.imp.KERNEL32.dll_WTSGetActiveConsoleSessionId]
cmp eax, 0xffffffff
je 0x180024167
mov qword [rsp + 0x120], r12
lea rdx, [rsp + 0x120]
mov ecx, eax
call qword [sym.imp.WTSAPI32.dll_WTSQueryUserToken]
test eax, eax
je 0x180024167
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x460], xmm0
movups xmmword [rsp + 0x470], xmm0
movups xmmword [rsp + 0x480], xmm0
movups xmmword [rsp + 0x490], xmm0
movups xmmword [rsp + 0x4a0], xmm0
movups xmmword [rsp + 0x4b0], xmm0
mov qword [rsp + 0x4c0], rax
movups xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], rax
mov dword [rsp + 0x460], 0x68
mov dword [rsp + 0x49c], 1
mov word [rsp + 0x4a0], r12w
lea rax, str.cmd.exe__c_start______
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], Ordinal_26
lea rax, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 7
cmova rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x1b0]
mov qword [rsp + 0x158], rax
movups xmm0, xmmword [rsp + 0x150]
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x150], 1
lea rax, [rsp + 0x80]
mov qword [rsp + 0x158], rax
movaps xmm0, xmmword [rsp + 0x150]
movdqa xmmword [rsp + 0x150], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x150]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x200]
call fcn.18000d1f0
lea r8, [rsp + 0x200]
cmp qword [rsp + 0x218], 7
cmova r8, qword [rsp + 0x200]
lea rax, [rsp + 0x130]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x460]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor edx, edx
mov rcx, qword [rsp + 0x120]
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
mov ebx, eax
mov rcx, qword [rsp + 0x120]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x18002411f
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x138]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x180023de4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023dde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002473f
call fcn.18008ed30
nop
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x350], r13
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x34c], edx
lea rcx, [rsp + 0x358]
call fcn.180025ab0
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x350], rdi
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x34c], edx
lea rbx, vtable.std::ios_base.0
mov qword [rsp + 0x3f8], rbx
lea rcx, [rsp + 0x3f8]
call fcn.18008c880
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x180023eb0
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023eaa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002474b
call fcn.18008ed30
nop
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x240], r13
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x23c], edx
lea rcx, [rsp + 0x248]
call fcn.180025ab0
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x240], rdi
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x23c], edx
mov qword [rsp + 0x2e8], rbx
lea rcx, [rsp + 0x2e8]
call fcn.18008c880
nop
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x180023f72
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023f6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024721
call fcn.18008ed30
movdqu xmmword [rsp + 0x230], xmm6
mov word [rsp + 0x220], r12w
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 7
jbe 0x180023fcc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180023fc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024727
call fcn.18008ed30
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r12w
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x180024031
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002402c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002472d
call fcn.18008ed30
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], r12w
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 7
jbe 0x180024096
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024091
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024733
call fcn.18008ed30
mov qword [rsp + 0x1d0], r12
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], r12w
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x1800240fb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800240f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024739
call fcn.18008ed30
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], r12w
mov al, 1
jmp 0x1800245ea
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x180024167
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024162
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002473f
call fcn.18008ed30
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.As_user_can_not_created_error_code:__n
mov qword [rsp + 0x120], rcx
mov qword [rsp + 0x128], Ordinal_47
mov dword [rsp + 0x158], eax
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0x60], 1
lea rax, [rsp + 0x150]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm1
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x200]
call fcn.1800197e0
lea rdx, [rsp + 0x200]
mov rcx, rdi
call fcn.180008dc0
mov rdx, qword [rsp + 0x218]
cmp rdx, 0xf
jbe 0x180024236
inc rdx
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024231
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024745
call fcn.18008ed30
lea rcx, [rsp + 0x70]
call fcn.180024770
movzx esi, al
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x350], r13
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x34c], edx
lea rcx, [rsp + 0x358]
call fcn.180025ab0
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x350], rdi
mov rax, qword [rsp + 0x350]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x34c], edx
lea rbx, vtable.std::ios_base.0
mov qword [rsp + 0x3f8], rbx
lea rcx, [rsp + 0x3f8]
call fcn.18008c880
nop
mov rdx, qword [rsp + 0x198]
cmp rdx, 0xf
jbe 0x18002430e
inc rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024309
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002474b
call fcn.18008ed30
movdqa xmm0, xmmword [0x18016fc40]
movdqu xmmword [rsp + 0x190], xmm0
mov byte [rsp + 0x180], 0
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x240], r13
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x23c], edx
lea rcx, [rsp + 0x248]
call fcn.180025ab0
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x240], rdi
mov rax, qword [rsp + 0x240]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x23c], edx
mov qword [rsp + 0x2e8], rbx
lea rcx, [rsp + 0x2e8]
call fcn.18008c880
nop
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x1800243e9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800243e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024751
call fcn.18008ed30
movdqu xmmword [rsp + 0x230], xmm6
mov word [rsp + 0x220], r12w
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 7
jbe 0x180024443
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002443e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024757
call fcn.18008ed30
mov qword [rsp + 0x1b0], r12
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r12w
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x1800244a8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800244a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002475d
call fcn.18008ed30
mov qword [rsp + 0x1f0], r12
mov qword [rsp + 0x1f8], 7
mov word [rsp + 0x1e0], r12w
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 7
jbe 0x18002450d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180024508
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024763
call fcn.18008ed30
mov qword [rsp + 0x1d0], r12
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], r12w
mov rdx, qword [rsp + 0x178]
cmp rdx, 7
jbe 0x180024572
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002456d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180024769
call fcn.18008ed30
mov qword [rsp + 0x170], r12
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], r12w
movzx eax, sil
jmp 0x1800245ea
mov rcx, qword [rsp + 0x4d0]
xor rcx, rsp
call fcn.18008ed10
lea r11, [rsp + 0x4f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.1800a4178
nop
lea r8, [rsp + 0x180]
lea rdx, [rsp + 0x150]
lea rcx, [0x1801030d0]
call fcn.1800212b0
nop
call fcn.1800a4178
int3
call fcn.1800a4178
int3
call fcn.1800a4178
int3
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
test dl, 4
je 0x180024671
lea rbx, [0x1800ffb48]
jmp 0x180024686
test r14b, dl
lea rbx, [0x1800ffb60]
lea rax, [0x1800ffb78]
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x150]
call fcn.180002eb0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0xd0]
call fcn.180003880
lea rdx, [0x180188038]
lea rcx, [rsp + 0xd0]
call fcn.1800913f8
nop
call fcn.1800a4178
int3
test al, 4
je 0x1800246d3
lea rbx, [0x1800ffb48]
jmp 0x1800246e7
test al, 2
lea rbx, [0x1800ffb60]
lea rax, [0x1800ffb78]
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x150]
call fcn.180002eb0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0xf8]
call fcn.180003880
lea rdx, [0x180188038]
lea rcx, [rsp + 0xf8]
call fcn.1800913f8
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
int3
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
nop
call fcn.1800a4178
int3