Function at 0x140005d40
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push r15
sub rsp, 0x390
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x140dca080]
xor rax, rsp
mov qword [rsp + 0x370], rax
xor esi, esi
mov dword [rsp + 0xf0], esi
lea rcx, [rsp + 0x130]
call fcn.140007a50
nop
lea rax, [0x14005b6e0]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0x13
lea rax, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova rax, qword [rsp + 0x130]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x108], xmm0
movabs r15, 0xc000000000000000
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x70], 1
lea rax, [rsp + 0x100]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x170]
call fcn.14000d5c0
nop
lea rax, [0x14005b708]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0x1e
lea rax, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova rax, qword [rsp + 0x130]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x108], xmm0
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x70], 1
lea rax, [rsp + 0x100]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x190]
call fcn.14000d5c0
nop
lea rax, [0x14005b750]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0x1f
lea rax, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova rax, qword [rsp + 0x130]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x108], xmm0
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x70], 1
lea rax, [rsp + 0x100]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x150]
call fcn.14000d5c0
nop
lea rax, [0x14005b790]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0x1f
lea rax, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova rax, qword [rsp + 0x130]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x108], xmm0
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x70], 1
lea rax, [rsp + 0x100]
mov qword [rsp + 0x78], rax
movaps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x70], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x1b0]
call fcn.14000d5c0
nop
lea rax, [rsp + 0x130]
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x170]
cmp qword [rsp + 0x188], 7
cmova rdx, qword [rsp + 0x170]
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], rsi
mov r8, qword [rsp + 0x180]
lea rcx, [rsp + 0x80]
call fcn.14000c260
mov edi, 0x7e
mov r8d, 3
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x60]
call fcn.140005270
movsd xmm0, qword [rax]
movsd qword [rsp + 0xf0], xmm0
mov ecx, dword [rax + 8]
mov dword [rsp + 0x60], ecx
lea rax, [0x140dcace0]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x120], xmm0
mov eax, dword [rsp + 0xf0]
test eax, eax
je 0x140006118
cmp eax, 1
setne bl
mov rdx, qword [rsp + 0x98]
cmp rdx, 7
jbe 0x140006129
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006124
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000754b
jmp 0x140006124
xor bl, bl
test ecx, ecx
jne 0x140007551
jmp 0x1400060d3
call fcn.140019270
test bl, bl
je 0x140006444
lea rax, [0x14005b6a8]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], 0x19
lea rax, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova rax, qword [rsp + 0x130]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x68], rax
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rsp + 0x108], xmm0
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x60], 1
lea rax, [rsp + 0x100]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x1d0]
call fcn.14000d5c0
mov edi, 0x17e
lea rcx, [rsp + 0x1d0]
call fcn.1400078a0
movzx ebx, al
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 7
jbe 0x140006236
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006231
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007567
call fcn.140019270
test bl, bl
jne 0x140006444
lea rcx, [rsp + 0x70]
call fcn.140007610
movzx ebx, al
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 7
jbe 0x140006293
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000628e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075e7
call fcn.140019270
movdqa xmm0, xmmword [0x140dc28d0]
movdqu xmmword [rsp + 0x1c0], xmm0
mov word [rsp + 0x1b0], si
mov rdx, qword [rsp + 0x168]
cmp rdx, 7
jbe 0x1400062f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400062ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ed
call fcn.140019270
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], si
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 7
jbe 0x140006358
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006353
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f3
call fcn.140019270
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], 7
mov word [rsp + 0x190], si
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x1400063bc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400063b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f9
call fcn.140019270
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], si
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x140006420
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000641b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ff
call fcn.140019270
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], si
movzx eax, bl
jmp 0x140007518
lea rax, [0x14005b7d0]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], 0x1f
lea rax, [rsp + 0x130]
cmp qword [rsp + 0x148], 7
cmova rax, qword [rsp + 0x130]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x68], rax
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rsp + 0x108], xmm0
mov qword [rsp + 0x100], r15
mov qword [rsp + 0x60], 1
lea rax, [rsp + 0x100]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x1d0]
call fcn.14000d5c0
bts edi, 7
lea rcx, [rsp + 0x1d0]
call fcn.1400078a0
movzx ebx, al
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 7
jbe 0x140006548
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006543
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000756d
call fcn.140019270
test bl, bl
jne 0x140006756
lea rcx, [rsp + 0x70]
call fcn.140007610
movzx ebx, al
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 7
jbe 0x1400065a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400065a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075e7
call fcn.140019270
movdqa xmm0, xmmword [0x140dc28d0]
movdqu xmmword [rsp + 0x1c0], xmm0
mov word [rsp + 0x1b0], si
mov rdx, qword [rsp + 0x168]
cmp rdx, 7
jbe 0x140006606
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ed
call fcn.140019270
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], si
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 7
jbe 0x14000666a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006665
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f3
call fcn.140019270
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], 7
mov word [rsp + 0x190], si
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x1400066ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400066c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f9
call fcn.140019270
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], si
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x140006732
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000672d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ff
call fcn.140019270
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], si
movzx eax, bl
jmp 0x140007518
lea rdx, [rsp + 0x150]
cmp qword [rsp + 0x168], 7
cmova rdx, qword [rsp + 0x150]
xorps xmm0, xmm0
movups xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0x118], rsi
mov r8, qword [rsp + 0x160]
lea rcx, [rsp + 0x100]
call fcn.14000c260
or edi, 0x600
lea rdx, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 7
cmova rdx, qword [rsp + 0x190]
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], rsi
mov r8, qword [rsp + 0x1a0]
lea rcx, [rsp + 0x80]
call fcn.14000c260
or edi, 0x1800
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x80]
call fcn.140005b90
nop
mov rdx, qword [rsp + 0x98]
cmp rdx, 7
jbe 0x140006854
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000684f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007573
call fcn.140019270
movdqa xmm6, xmmword [0x140dc28d0]
movdqu xmmword [rsp + 0x90], xmm6
mov word [rsp + 0x80], si
mov rdx, qword [rsp + 0x118]
cmp rdx, 7
jbe 0x1400068b5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400068b0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007579
call fcn.140019270
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x1f0]
call fcn.1400322d0
lea rdx, [rsp + 0x1b0]
cmp qword [rsp + 0x1c8], 7
cmova rdx, qword [rsp + 0x1b0]
lea rcx, [rsp + 0x1f0]
call fcn.1400097c0
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea r14, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], r14
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
cmp qword [rsp + 0x278], 0
jne 0x140006bba
lea rcx, [rsp + 0x70]
call fcn.140007610
movzx ebx, al
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x1f0], r14
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
lea rcx, [rsp + 0x1f8]
call fcn.140008930
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x1ec], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x298], rax
lea rcx, [rsp + 0x298]
call fcn.140018858
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 7
jbe 0x140006a11
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075e7
call fcn.140019270
movdqu xmmword [rsp + 0x1c0], xmm6
mov word [rsp + 0x1b0], si
mov rdx, qword [rsp + 0x168]
cmp rdx, 7
jbe 0x140006a6a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006a65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ed
call fcn.140019270
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], si
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 7
jbe 0x140006ace
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006ac9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f3
call fcn.140019270
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], 7
mov word [rsp + 0x190], si
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x140006b32
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f9
call fcn.140019270
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], si
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x140006b96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006b91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ff
call fcn.140019270
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], si
movzx eax, bl
jmp 0x140007518
lea rcx, [rsp + 0x1f0]
call fcn.140008bf0
lea rcx, [rsp + 0x1f8]
call fcn.1400096c0
test rax, rax
jne 0x140006c1b
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
mov eax, 6
mov edx, 2
cmp qword [rsp + rcx + 0x238], 0
cmovne eax, edx
or eax, dword [rsp + rcx + 0x200]
and eax, 0x17
mov dword [rsp + rcx + 0x200], eax
mov edx, dword [rsp + rcx + 0x204]
and edx, eax
jne 0x14000757f
call qword [sym.imp.KERNEL32.dll_WTSGetActiveConsoleSessionId]
cmp eax, 0xffffffff
je 0x140006ee0
mov qword [rsp + 0xf0], rsi
lea rdx, [rsp + 0xf0]
mov ecx, eax
call qword [sym.imp.WTSAPI32.dll_WTSQueryUserToken]
test eax, eax
je 0x140006ee0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x300], xmm0
movups xmmword [rsp + 0x310], xmm0
movups xmmword [rsp + 0x320], xmm0
movups xmmword [rsp + 0x330], xmm0
movups xmmword [rsp + 0x340], xmm0
movups xmmword [rsp + 0x350], xmm0
mov qword [rsp + 0x360], rax
movups xmmword [rsp + 0x100], xmm0
mov qword [rsp + 0x110], rax
mov dword [rsp + 0x300], 0x68
mov dword [rsp + 0x33c], 1
mov word [rsp + 0x340], si
lea rax, [0x14005b830]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], 0x18
lea rax, [rsp + 0x150]
cmp qword [rsp + 0x168], 7
cmova rax, qword [rsp + 0x150]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x68], rax
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x60], 1
lea rax, [rsp + 0x80]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm1, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm1
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x1d0]
call fcn.14000d5c0
bts edi, 0xd
lea r8, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 7
cmova r8, qword [rsp + 0x1d0]
lea rax, [rsp + 0x100]
mov qword [rsp + 0x50], rax
lea rax, [rsp + 0x300]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rsi
xor r9d, r9d
xor edx, edx
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
mov ebx, eax
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x140006e98
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x108]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 7
jbe 0x140006e3c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006e36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075e1
call fcn.140019270
nop
xor bl, bl
test dil, 1
je 0x140006fc0
mov rdx, qword [rsp + 0xb8]
cmp rdx, 7
jbe 0x140006fc0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006fbb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075db
jmp 0x140006fbb
mov rdx, qword [rsp + 0x1e8]
cmp rdx, 7
jbe 0x140006ee0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006edb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075e1
call fcn.140019270
lea rax, [0x14005b810]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0xd
lea rax, [rsp + 0x150]
cmp qword [rsp + 0x168], 7
cmova rax, qword [rsp + 0x150]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x128], rax
movups xmm0, xmmword [rsp + 0x120]
movups xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x120], 1
lea rax, [rsp + 0x80]
mov qword [rsp + 0x128], rax
movaps xmm0, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x120], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xa0]
call fcn.14000d5c0
bts edi, 0xe
or edi, 1
mov dword [rsp + 0xf0], edi
lea rcx, [rsp + 0xa0]
call fcn.1400078a0
test al, al
jne 0x140006e3c
mov bl, 1
jmp 0x140006e3e
call fcn.140019270
test bl, bl
je 0x14000724e
lea rcx, [rsp + 0x70]
call fcn.140007610
movzx ebx, al
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x1f0], r14
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
lea rcx, [rsp + 0x1f8]
call fcn.140008930
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x1ec], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x298], rax
lea rcx, [rsp + 0x298]
call fcn.140018858
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 7
jbe 0x1400070a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400070a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075e7
call fcn.140019270
movdqu xmmword [rsp + 0x1c0], xmm6
mov word [rsp + 0x1b0], si
mov rdx, qword [rsp + 0x168]
cmp rdx, 7
jbe 0x1400070fe
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400070f9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ed
call fcn.140019270
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], si
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 7
jbe 0x140007162
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000715d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f3
call fcn.140019270
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], 7
mov word [rsp + 0x190], si
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x1400071c6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400071c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f9
call fcn.140019270
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], si
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x14000722a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007225
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ff
call fcn.140019270
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], si
movzx eax, bl
jmp 0x140007518
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
mov qword [rsp + rcx + 0x1f0], r14
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x1ec], edx
lea rcx, [rsp + 0x1f8]
call fcn.140008930
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rsp + rcx + 0x1ec], edx
lea rax, vtable.std::ios_base.0
mov qword [rsp + 0x298], rax
lea rcx, [rsp + 0x298]
call fcn.140018858
nop
mov rdx, qword [rsp + 0x1c8]
cmp rdx, 7
jbe 0x14000731e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007319
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075e7
call fcn.140019270
movdqu xmmword [rsp + 0x1c0], xmm6
mov word [rsp + 0x1b0], si
mov rdx, qword [rsp + 0x168]
cmp rdx, 7
jbe 0x140007377
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007372
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ed
call fcn.140019270
mov qword [rsp + 0x160], rsi
mov qword [rsp + 0x168], 7
mov word [rsp + 0x150], si
mov rdx, qword [rsp + 0x1a8]
cmp rdx, 7
jbe 0x1400073db
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400073d6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f3
call fcn.140019270
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x1a8], 7
mov word [rsp + 0x190], si
mov rdx, qword [rsp + 0x188]
cmp rdx, 7
jbe 0x14000743f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000743a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075f9
call fcn.140019270
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], 7
mov word [rsp + 0x170], si
mov rdx, qword [rsp + 0x148]
cmp rdx, 7
jbe 0x1400074a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000749e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400075ff
call fcn.140019270
mov qword [rsp + 0x140], rsi
mov qword [rsp + 0x148], 7
mov word [rsp + 0x130], si
mov al, 1
jmp 0x140007518
mov rcx, qword [rsp + 0x370]
xor rcx, rsp
call fcn.140019250
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
ret
call fcn.140020bb8
nop
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x120]
call fcn.1400047d0
nop
call fcn.140020bb8
int3
call fcn.140020bb8
nop
call fcn.140020bb8
nop
call fcn.140020bb8
nop
test dl, 4
je 0x14000758d
lea rbx, [0x14005b590]
jmp 0x1400075a2
test dl, 2
lea rbx, [0x14005b5a8]
lea rax, [0x14005b5c0]
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x120]
call fcn.140001370
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0xc0]
call fcn.1400020e0
lea rdx, [0x140dc82f8]
lea rcx, [rsp + 0xc0]
call fcn.14001b170
call fcn.140020bb8
int3
call fcn.140020bb8
nop
call fcn.140020bb8
nop
call fcn.140020bb8
nop
call fcn.140020bb8
nop
call fcn.140020bb8
nop
call fcn.140020bb8
int3