Function at 0x18000e190
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov rax, qword [0x180074060]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov rsi, rdx
mov r14, rcx
lea rcx, [rbp + 0x108]
call fcn.18000dfa0
nop
mov edx, 0x28
lea r8d, [rdx + 1]
lea rcx, [rsp + 0x50]
call fcn.180011aa0
mov rdi, rax
mov edx, 0x27
lea r8d, [rdx + 1]
lea rcx, [rbp + 0x68]
call fcn.180011aa0
nop
cmp qword [rax + 0x18], 0x10
jb 0x18000e208
mov rax, qword [rax]
mov rcx, rax
call fcn.1800338f4
xor r15d, r15d
mov qword [rsp + 0x70], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], r15b
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], r15b
jne 0x18000e233
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.1800061c0
nop
mov r8d, 1
lea rdx, [0x180060b6c]
lea rcx, [rsp + 0x70]
call fcn.180006320
mov qword [rbp + 0x48], r15
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x108]
cmp qword [rbp + 0x120], 0x10
cmovae rdx, qword [rbp + 0x108]
mov r8, qword [rbp + 0x118]
lea rcx, [rbp + 0x48]
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xa8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xb8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0xa8]
lea rcx, [rbp + 0xc8]
call fcn.180006970
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0x10
jb 0x18000e32f
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e329
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f59d
call fcn.18002491c
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x18000e36a
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e365
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5a3
call fcn.18002491c
mov qword [rbp + 0x58], r15
mov qword [rbp + 0x60], 0xf
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18000e3b6
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e3b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5a9
call fcn.18002491c
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x18000e405
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e400
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5af
call fcn.18002491c
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], 0xf
mov byte [rbp + 0x68], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000e455
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e450
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5b5
call fcn.18002491c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1a0]
call fcn.180026ef0
mov r12d, 2
mov r8d, r12d
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x1a0]
call fcn.180018280
nop
cmp qword [rbp + 0x228], 0
jne 0x18000e4aa
xor bl, bl
jmp 0x18000f543
lea rcx, [rbp + 0xa8]
call fcn.18000dfa0
nop
mov edx, 0x29
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x50]
call fcn.180011aa0
mov rdi, rax
mov edx, 0x27
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x10]
call fcn.180011aa0
nop
cmp qword [rax + 0x18], 0x10
jb 0x18000e4e9
mov rax, qword [rax]
mov rcx, rax
call fcn.1800338f4
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
nop dword [rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x18000e510
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.1800061c0
nop
mov r8d, 1
lea rdx, [0x180060b6c]
lea rcx, [rsp + 0x50]
call fcn.180006320
mov qword [rsp + 0x70], r15
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 0x10
cmovae rdx, qword [rbp + 0xa8]
mov r8, qword [rbp + 0xb8]
lea rcx, [rsp + 0x70]
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0x10]
lea rcx, [rbp + 0x48]
call fcn.180006970
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x18000e600
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e5fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5bb
call fcn.18002491c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18000e63c
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e637
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5c1
call fcn.18002491c
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000e68a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e685
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5c7
call fcn.18002491c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x18000e6d8
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e6d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5cd
call fcn.18002491c
mov qword [rbp], r15
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x18000e723
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e71e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5d3
call fcn.18002491c
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov edx, 0x2a
lea r8d, [rdx + 1]
lea rcx, [rbp + 0x10]
call fcn.180011aa0
nop
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
mov rcx, rax
call fcn.180006320
mov qword [rbp + 0x68], r15
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x180060ca0]
lea rcx, [rbp + 0x68]
call fcn.180006320
mov qword [rbp + 0x88], r15
mov qword [rbp + 0x98], r15
mov qword [rbp + 0xa0], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x98], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x18000e817
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e812
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5d9
call fcn.18002491c
mov qword [rbp + 0x78], r15
mov qword [rbp + 0x80], 0xf
mov byte [rbp + 0x68], 0
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x18000e865
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e860
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5df
call fcn.18002491c
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], 0
mov edx, 0x2c
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x30]
call fcn.180011aa0
mov rbx, rax
mov edx, 0x2b
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x50]
call fcn.180011aa0
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x18000e8aa
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 0x70]
lea rcx, [rsp + 0x70]
call fcn.180006970
nop
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.180006320
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x180060ca0]
lea rcx, [rsp + 0x50]
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x10]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x88]
call fcn.180006320
nop
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x18000e9d0
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e9ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5e5
call fcn.18002491c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000ea0d
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ea08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5eb
call fcn.18002491c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18000ea5c
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ea57
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5f1
call fcn.18002491c
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18000eaa9
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eaa3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5f7
call fcn.18002491c
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x18000eae4
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eadf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5fd
call fcn.18002491c
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18000eb2f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eb2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f603
call fcn.18002491c
mov edx, 0x2e
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x30]
call fcn.180011aa0
mov rbx, rax
mov edx, 0x2d
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x50]
call fcn.180011aa0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0x10
jb 0x18000eb64
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, rax
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 0x10]
lea rcx, [rsp + 0x70]
call fcn.180006970
nop
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
lea rcx, [rsp + 0x70]
call fcn.180006320
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x180060ca0]
lea rcx, [rsp + 0x50]
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x88]
call fcn.180006320
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18000ec8a
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ec84
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f609
call fcn.18002491c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000ecc7
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ecc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f60f
call fcn.18002491c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x18000ed16
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ed11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f615
call fcn.18002491c
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0x10
jb 0x18000ed63
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ed5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f61b
call fcn.18002491c
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x18000ed9e
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ed99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f621
call fcn.18002491c
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18000ede9
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ede4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f627
call fcn.18002491c
mov edx, 0x2f
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x30]
call fcn.180011aa0
nop
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
mov rcx, rax
call fcn.180006320
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x180060ca0]
lea rcx, [rsp + 0x50]
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x88]
call fcn.180006320
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18000eee4
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eede
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f62d
call fcn.18002491c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000ef21
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ef1c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f633
call fcn.18002491c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18000ef6f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ef6a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f639
call fcn.18002491c
mov edx, 0x30
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x30]
call fcn.180011aa0
nop
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
mov rcx, rax
call fcn.180006320
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x180060ca0]
lea rcx, [rsp + 0x50]
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x88]
call fcn.180006320
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18000f06a
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f064
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f63f
call fcn.18002491c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000f0a7
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f0a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f645
call fcn.18002491c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18000f0f5
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f0f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f64b
call fcn.18002491c
mov edx, 0x31
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x30]
call fcn.180011aa0
nop
lea rdx, [rbp + 0x48]
cmp qword [rbp + 0x60], 0x10
cmovae rdx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x58]
mov rcx, rax
call fcn.180006320
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x180060ca0]
lea rcx, [rsp + 0x50]
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x88]
call fcn.180006320
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x18000f1f0
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f1ea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f651
call fcn.18002491c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000f22d
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f228
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f657
call fcn.18002491c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18000f27b
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f276
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f65d
call fcn.18002491c
lea rdx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 0x10
cmovae rdx, qword [rbp + 0x88]
mov r8, qword [rbp + 0x98]
lea rcx, [rbp + 0x1a0]
call fcn.180022150
lea rcx, [rbp + 0x1a8]
call fcn.18001b510
test rax, rax
jne 0x18000f2e4
mov rax, qword [rbp + 0x1a0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1a0]
add rcx, rax
mov edx, 6
cmp qword [rcx + 0x48], 0
cmovne edx, r12d
or edx, dword [rcx + 0x10]
xor r8d, r8d
call fcn.1800075b0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x190], rax
mov dword [rbp + 0x130], 0x68
mov dword [rbp + 0x16c], 1
mov word [rbp + 0x170], r15w
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
lea edx, [rax + 0x32]
lea r8d, [rax + 0x33]
lea rcx, [rbp - 0x50]
call fcn.180011aa0
nop
lea rdx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xd8]
mov rcx, rax
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x78], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x18000f3ce
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f3c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f663
call fcn.18002491c
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], 0
mov edx, 0x33
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x30]
call fcn.180011aa0
nop
lea rdx, [rbp + 0x68]
cmp qword [rbp + 0x80], 0x10
cmovae rdx, qword [rbp + 0x68]
mov r8, qword [rbp + 0x78]
mov rcx, rax
call fcn.180006320
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xe8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xf8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x18000f46d
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f468
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f597
call fcn.18002491c
lea rdx, [rbp + 0xe8]
cmp qword [rbp + 0x100], 0x10
cmovae rdx, qword [rbp + 0xe8]
lea rax, [rbp + 0x30]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x130]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x18000f506
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], 0x10
cmovae rcx, qword [rbp + 0xc8]
call fcn.18002f9c8
test eax, eax
jne 0x18000f506
mov bl, 1
jmp 0x18000f508
xor bl, bl
lea rcx, [rbp + 0xe8]
call fcn.180005f90
nop
lea rcx, [rbp + 0x68]
call fcn.180005f90
nop
lea rcx, [rbp + 0x88]
call fcn.180005f90
nop
lea rcx, [rbp + 0x48]
call fcn.180005f90
nop
lea rcx, [rbp + 0xa8]
call fcn.180005f90
nop
lea rcx, [rbp + 0x1a0]
call fcn.180008f20
nop
lea rcx, [rbp + 0xc8]
call fcn.180005f90
nop
lea rcx, [rbp + 0x108]
call fcn.180005f90
movzx eax, bl
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.1800248c0
lea r11, [rsp + 0x3c0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
nop
call fcn.18002b30c
int3