Function at 0x14004cab0
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Read file on windows
Read pipe
Terminate process

Disassembly:
mov r11, rsp
push r13
push r14
push r15
sub rsp, 0x560
mov qword [rsp + 0x60], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
mov rax, qword [0x1400cc010]
xor rax, rsp
mov qword [rsp + 0x550], rax
xor r14d, r14d
mov dword [rsp + 0x58], r14d
movdqa xmm0, xmmword [0x1400b9680]
movdqu xmmword [rsp + 0x1c8], xmm0
mov word [r11 - 0x3c0], r14w
lea r8d, [r14 + 0x2a]
lea rdx, str.dism__online__cleanup_image__restorehealth
lea rcx, [r11 - 0x3c0]
call fcn.140001a40
nop
lea rdx, [rsp + 0x1b8]
cmp qword [rsp + 0x1d0], 8
cmovae rdx, qword [rsp + 0x1b8]
lea rcx, str.RestoreSystemHealthCMD:__s
call fcn.140040a00
mov dword [rsp + 0x80], SafeArrayPutElement
mov qword [rsp + 0x88], r14
mov dword [rsp + 0x90], 1
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
xor r9d, r9d
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x14004cbeb
mov dword [0x1400d10f8], 0x32
mov rdx, qword [rsp + 0x1d0]
cmp rdx, 8
jb 0x14004d97d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9af
jmp 0x14004d978
mov dword [rsp + 0xb0], 0x68
lea rcx, [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x108], rax
mov word [rsp + 0xf0], r14w
mov dword [rsp + 0xec], 0x101
xor edx, edx
mov r8d, 0x200
lea rcx, [rsp + 0x350]
call fcn.140062890
lea r8, [rsp + 0x1b8]
cmp qword [rsp + 0x1d0], 8
cmovae r8, qword [rsp + 0x1b8]
mov edx, 0x100
lea rcx, [rsp + 0x350]
call fcn.140070b94
lea rax, [rsp + 0x98]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x40], rax
lea rax, str.C:WindowsSystem32_
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x350]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14004cd34
lea rcx, str.RestoreSystemHealthCreateProcess_FAIL
call fcn.140040a00
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x1400d10f8], 0x32
mov rdx, qword [rsp + 0x1d0]
cmp rdx, 8
jb 0x14004d97d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9b5
jmp 0x14004d978
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x198], r14
mov qword [rsp + 0x1a0], 7
mov word [rsp + 0x188], r14w
mov qword [rsp + 0x178], r14
mov qword [rsp + 0x180], SafeArrayPutElement
mov byte [rsp + 0x168], 0
xor eax, eax
mov qword [rsp + 0x320], rax
mov qword [rsp + 0x328], rax
mov byte [rsp + 0x330], al
call fcn.140075fa4
mov ebx, eax
mov dword [rsp + 0x50], eax
mov edi, 0x2bf20
mov dword [rsp + 0x54], edi
mov r15, 0xffffffffffffffff
lea r12, [0x1400b7618]
lea r13, [0x1400b761c]
nop dword [rax + rax]
cmp dword [0x1400d10f4], 1
jne 0x14004cdee
xor edx, edx
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x14004d84e
mov dword [rsp + 0x160], r14d
mov dword [rsp + 0x1b0], r14d
lea rax, [rsp + 0x1b0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1f8]
mov r8d, 0x11
lea rdx, [rsp + 0x320]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
test eax, eax
je 0x14004d82e
cmp dword [rsp + 0x160], 0
jne 0x14004ce6a
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140075fa4
sub eax, ebx
cmp eax, edi
jge 0x14004d84e
jmp 0x14004cdd0
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x68]
mov r8d, 0x11
lea rdx, [rsp + 0x338]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x14004d007
cmp dword [rsp + 0x68], 0
jbe 0x14004d007
call fcn.140075fa4
mov dword [rsp + 0x50], eax
mov r8d, dword [rsp + 0x68]
mov qword [rsp + 0x130], r14
mov qword [rsp + 0x138], SafeArrayPutElement
mov byte [rsp + 0x120], 0
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x120]
call fcn.1400027a0
nop
mov r8d, dword [rsp + 0x68]
shr r8, 1
mov qword [rsp + 0x1e8], r14
mov qword [rsp + 0x1f0], 7
mov word [rsp + 0x1d8], r14w
lea rdx, [rsp + 0x338]
lea rcx, [rsp + 0x1d8]
call fcn.140001a40
nop
lea rdx, [rsp + 0x120]
cmp qword [rsp + 0x138], 0x10
cmovae rdx, qword [rsp + 0x120]
mov r8, qword [rsp + 0x130]
lea rcx, [rsp + 0x168]
call fcn.140026a20
lea rdx, [rsp + 0x1d8]
cmp qword [rsp + 0x1f0], 8
cmovae rdx, qword [rsp + 0x1d8]
mov r8, qword [rsp + 0x1e8]
lea rcx, [rsp + 0x188]
call fcn.140002d30
nop
mov rdx, qword [rsp + 0x1f0]
cmp rdx, 8
jb 0x14004cfc3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1d8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004cfbd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9bb
call fcn.14005da54
nop
mov rdx, qword [rsp + 0x138]
cmp rdx, 0x10
jb 0x14004d007
inc rdx
mov rcx, qword [rsp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d001
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9c1
call fcn.14005da54
nop
mov qword [rsp + 0x130], r14
mov qword [rsp + 0x138], r14
mov rdi, qword [rsp + 0x178]
lea rsi, [rsp + 0x168]
cmp qword [rsp + 0x180], 0x10
cmovae rsi, qword [rsp + 0x168]
cmp rdi, 0x10
jae 0x14004d058
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x138], SafeArrayPutElement
jmp 0x14004d0d7
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rax, [rbx + 1]
cmp rax, 0x1000
jb 0x14004d0a6
lea rcx, [rax + 0x27]
cmp rcx, rax
cmovbe rcx, r15
call fcn.14005da5c
mov rcx, rax
test rax, rax
je 0x14004d9c7
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14004d0b8
test rax, rax
je 0x14004d0b5
mov rcx, rax
call fcn.14005da5c
jmp 0x14004d0b8
mov rax, r14
mov qword [rsp + 0x120], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call fcn.140062a50
mov qword [rsp + 0x138], rbx
mov qword [rsp + 0x130], rdi
lea rcx, [rsp + 0x120]
call fcn.14004c910
test al, al
je 0x14004d1d9
lea r8, [rsp + 0x168]
cmp qword [rsp + 0x180], 0x10
cmovae r8, qword [rsp + 0x168]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, dword [rsp + 0x178]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rdi, eax
test eax, eax
jle 0x14004d1d9
lea ecx, [rdi + 1]
movsxd rdx, ecx
mov eax, 2
mul rdx
cmovo rax, r15
mov rcx, rax
call fcn.14005da98
mov rbx, rax
lea r8, [rsp + 0x168]
cmp qword [rsp + 0x180], 0x10
cmovae r8, qword [rsp + 0x168]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x178]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov word [rbx + rdi*2], r14w
mov qword [rsp + 0x198], r14
lea rax, [rsp + 0x188]
cmp qword [rsp + 0x1a0], 8
cmovae rax, qword [rsp + 0x188]
mov word [rax], r14w
mov r8, r15
inc r8
cmp word [rbx + r8*2], 0
jne 0x14004d1b5
mov rdx, rbx
lea rcx, [rsp + 0x188]
call fcn.140001a40
mov rcx, rbx
call fcn.14005da54
nop
jmp 0x14004d1f0
lea r10, [rsp + 0x188]
mov rbx, qword [rsp + 0x188]
mov rdi, qword [rsp + 0x1a0]
cmp rdi, 8
cmovae r10, rbx
mov r11, qword [rsp + 0x198]
cmp r11, 1
jb 0x14004d271
lea rcx, [r11 - 1]
mov rax, r15
cmp rcx, 0xffffffffffffffff
cmovb rax, rcx
lea r9, [r10 + rax*2]
mov r8, r9
sub r8, r12
cmp word [r9], 0x5d
jne 0x14004d262
mov edx, 1
mov rcx, r12
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x14004d262
add rcx, 2
sub rdx, 1
jne 0x14004d246
sub r9, r10
sar r9, 1
jmp 0x14004d274
cmp r9, r10
je 0x14004d271
sub r9, 2
sub r8, 2
jmp 0x14004d237
mov r9, r15
cmp r9, 0xffffffffffffffff
jne 0x14004d291
lea ecx, [r9 + 0x65]
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [rsp + 0x50]
mov edi, dword [rsp + 0x54]
jmp 0x14004cdd0
mov qword [rsp + 0x150], r14
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], r14w
cmp r11, r9
cmovb r9, r11
lea rdx, [rsp + 0x188]
cmp rdi, 8
cmovae rdx, rbx
mov r8, r9
lea rcx, [rsp + 0x140]
call fcn.140001a40
mov esi, dword [rsp + 0x58]
or esi, 1
mov dword [rsp + 0x58], esi
lea r10, [rsp + 0x140]
mov rbx, qword [rsp + 0x140]
mov rdi, qword [rsp + 0x158]
cmp rdi, 8
cmovae r10, rbx
mov r11, qword [rsp + 0x150]
cmp r11, 1
jb 0x14004d7c9
lea rcx, [r11 - 1]
mov rax, r15
cmp rcx, 0xffffffffffffffff
cmovb rax, rcx
lea r9, [r10 + rax*2]
mov r8, r9
sub r8, r13
nop dword [rax + rax]
cmp word [r9], 0x5b
jne 0x14004d38f
mov edx, 1
mov rcx, r13
nop
movzx eax, word [rcx]
cmp word [rcx + r8], ax
jne 0x14004d38f
add rcx, 2
sub rdx, 1
jne 0x14004d340
sub r9, r10
sar r9, 1
cmp r9, 0xffffffffffffffff
je 0x14004d7c9
inc r9
mov qword [rsp + 0x130], r14
mov qword [rsp + 0x138], 7
mov word [rsp + 0x120], r14w
cmp r11, r9
jb 0x14004d9cd
jmp 0x14004d3a2
cmp r9, r10
je 0x14004d7c9
sub r9, 2
sub r8, 2
jmp 0x14004d330
sub r11, r9
mov r8, r15
cmp r11, 0xffffffffffffffff
cmovb r8, r11
lea rax, [rsp + 0x140]
cmp rdi, 8
cmovae rax, rbx
lea rdx, [rax + r9*2]
lea rcx, [rsp + 0x120]
call fcn.140001a40
or esi, 2
mov dword [rsp + 0x58], esi
lea rcx, [rsp + 0x140]
call fcn.140001990
movups xmm0, xmmword [rsp + 0x120]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rsp + 0x130]
movups xmmword [rsp + 0x150], xmm1
lea rcx, [rsp + 0x140]
movq rdi, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rsi, xmm0
cmp rsi, 8
cmovae rcx, rdi
mov qword [rsp + 0x20], 1
lea r9, [0x1400aa178]
xor r8d, r8d
movq rbx, xmm1
mov rdx, rbx
call fcn.140001c70
cmp rax, 0xffffffffffffffff
jne 0x14004d4b0
lea ecx, [rax + 0x65]
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 8
mov ebx, dword [rsp + 0x50]
mov edi, dword [rsp + 0x54]
jb 0x14004cdd0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d824
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9d3
jmp 0x14004d824
mov qword [rsp + 0x130], r14
mov qword [rsp + 0x138], 7
mov word [rsp + 0x120], r14w
cmp rbx, rax
cmovb rax, rbx
lea rdx, [rsp + 0x140]
cmp rsi, 8
cmovae rdx, rdi
mov r8, rax
lea rcx, [rsp + 0x120]
call fcn.140001a40
lea rcx, [rsp + 0x140]
call fcn.140001990
movups xmm0, xmmword [rsp + 0x120]
movups xmmword [rsp + 0x140], xmm0
movups xmm1, xmmword [rsp + 0x130]
movups xmmword [rsp + 0x150], xmm1
lea r10, [rsp + 0x140]
movq rbx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rdi, xmm0
cmp rdi, 8
cmovae r10, rbx
movq r11, xmm1
cmp r11, 1
jb 0x14004d5ab
lea rcx, [r11 - 1]
mov rax, r15
cmp rcx, 0xffffffffffffffff
cmovb rax, rcx
lea rdx, [r10 + rax*2]
mov r9, rdx
lea rsi, [0x1400a86a0]
sub r9, rsi
nop
cmp word [rdx], 0x20
jne 0x14004d59c
mov r8d, 1
mov rcx, rsi
nop
movzx eax, word [rcx]
cmp word [r9 + rcx], ax
jne 0x14004d59c
add rcx, 2
sub r8, 1
jne 0x14004d580
sub rdx, r10
sar rdx, 1
jmp 0x14004d5ae
cmp rdx, r10
je 0x14004d5ab
sub rdx, 2
sub r9, 2
jmp 0x14004d570
mov rdx, r15
cmp rdx, 0xffffffffffffffff
jne 0x14004d635
lea r10, [rsp + 0x140]
cmp rdi, 8
cmovae r10, rbx
cmp r11, 1
jb 0x14004d632
lea rcx, [r11 - 1]
mov rax, r15
cmp rcx, rdx
cmovb rax, rcx
lea rdx, [r10 + rax*2]
mov r9, rdx
lea rax, [0x1400afdcc]
sub r9, rax
nop dword [rax]
cmp word [rdx], 0x3d
jne 0x14004d623
mov r8d, 1
mov rcx, rax
nop
movzx eax, word [rcx]
cmp word [r9 + rcx], ax
jne 0x14004d61c
add rcx, 2
sub r8, 1
jne 0x14004d600
sub rdx, r10
sar rdx, 1
jmp 0x14004d635
lea rax, [0x1400afdcc]
cmp rdx, r10
je 0x14004d632
sub rdx, 2
sub r9, 2
jmp 0x14004d5f0
mov rdx, r15
inc rdx
mov qword [rsp + 0x210], r14
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], r14w
cmp r11, rdx
jb 0x14004d9d9
sub r11, rdx
mov r8, r15
cmp r11, 0xffffffffffffffff
cmovb r8, r11
lea rax, [rsp + 0x140]
cmp rdi, 8
cmovae rax, rbx
lea rdx, [rax + rdx*2]
lea rcx, [rsp + 0x200]
call fcn.140001a40
mov eax, dword [rsp + 0x58]
or eax, 0xc
mov dword [rsp + 0x58], eax
xor edx, edx
mov r8d, 0xf8
lea rcx, [rsp + 0x220]
call fcn.140062890
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x220]
call fcn.1400472d0
nop
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x1a8], eax
lea rdx, [rsp + 0x1a8]
lea rcx, [rsp + 0x220]
call fcn.140048240
mov ebx, dword [rsp + 0x1a8]
mov dword [rsp + 0x5c], ebx
lea rcx, [rsp + 0x220]
call fcn.140047140
mov edx, ebx
lea rcx, [0x1400b7620]
call fcn.140040a00
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x1400b9608]
cvttsd2si eax, xmm0
mov dword [0x1400d10f8], eax
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rsp + 0x218]
cmp rdx, 8
jb 0x14004d778
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d772
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9df
call fcn.14005da54
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 8
mov ebx, dword [rsp + 0x50]
mov edi, dword [rsp + 0x54]
jb 0x14004cdd0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d824
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9e5
jmp 0x14004d824
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 8
mov ebx, dword [rsp + 0x50]
mov edi, dword [rsp + 0x54]
jb 0x14004cdd0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d824
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9eb
call fcn.14005da54
jmp 0x14004cdd0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.PeekNamedPipe_GetLastError__d
call fcn.140040a00
lea rcx, str.PeekNamedPipe_break
call fcn.140040a00
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x98]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x1400d10f8], 0x32
mov rdx, qword [rsp + 0x180]
cmp rdx, 0x10
jb 0x14004d8b4
inc rdx
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d8af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9f1
call fcn.14005da54
mov qword [rsp + 0x178], r14
mov qword [rsp + 0x180], SafeArrayPutElement
mov byte [rsp + 0x168], 0
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 8
jb 0x14004d918
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d913
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9f7
call fcn.14005da54
mov qword [rsp + 0x198], r14
mov qword [rsp + 0x1a0], 7
mov word [rsp + 0x188], r14w
mov rdx, qword [rsp + 0x1d0]
cmp rdx, 8
jb 0x14004d97d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1b8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004d9fd
call fcn.14005da54
mov rcx, qword [rsp + 0x550]
xor rcx, rsp
call fcn.14005da30
lea r11, [rsp + 0x560]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.140064eec
int3
call fcn.140064eec
nop
call fcn.140064eec
nop
call fcn.140064eec
nop
call fcn.140064eec
nop
call fcn.140002900
nop
call fcn.140064eec
nop
call fcn.140002900
int3
call fcn.140064eec
nop
call fcn.140064eec
int3
call fcn.140064eec
nop
call fcn.140064eec
nop
call fcn.140064eec
nop
call fcn.140064eec
int3