Function at 0x18000fd70
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x308]
sub rsp, 0x3e0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x180076100]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rsi, rdx
mov r14, rcx
xor r15d, r15d
lea rcx, [rbp + 0x118]
call fcn.18000f900
nop
mov edx, 0x28
mov r8d, 0x29
lea rcx, [rsp + 0x50]
call fcn.180013cc0
mov rdi, rax
mov edx, 0x27
mov r8d, 0x28
lea rcx, [rbp + 0x78]
call fcn.180013cc0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x18000fdf3
mov rax, qword [rax]
mov rcx, rax
call fcn.180036958
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x18000fe14
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.180006de0
nop
mov r8d, 1
lea rdx, [0x18005f6bc]
lea rcx, [rbp - 0x70]
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rbp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0xf
cmova rdx, qword [rbp + 0x118]
mov r8, qword [rbp + 0x128]
lea rcx, [rbp + 0x58]
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0xd8]
lea rcx, [rbp + 0xb8]
call fcn.180007070
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x18000ff12
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ff0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011378
call fcn.18002825c
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x18000ff4d
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ff48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001137e
call fcn.18002825c
movdqa xmm6, xmmword [0x18006b5f0]
movdqu xmmword [rbp + 0x68], xmm6
mov byte [rbp + 0x58], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18000ff99
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ff94
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011384
call fcn.18002825c
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x18000ffe0
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ffdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001138a
call fcn.18002825c
movdqu xmmword [rbp + 0x88], xmm6
mov byte [rbp + 0x78], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180010029
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011390
call fcn.18002825c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1b0]
call fcn.18004d690
mov r12d, 2
mov r8d, r12d
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x1b0]
call fcn.18001b840
nop
cmp qword [rbp + 0x238], 0
jne 0x180010076
xor bl, bl
jmp 0x180011220
lea rcx, [rbp + 0xd8]
call fcn.18000f900
nop
mov edx, 0x29
mov r8d, 0x2a
lea rcx, [rbp - 8]
call fcn.180013cc0
mov rdi, rax
mov edx, 0x27
mov r8d, 0x28
lea rcx, [rbp - 0x28]
call fcn.180013cc0
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1800100b9
mov rax, qword [rax]
mov rcx, rax
call fcn.180036958
xorps xmm0, xmm0
movups xmmword [rbp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x88], xmm1
inc rbx
cmp byte [rax + rbx], 0
jne 0x1800100d3
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0x78]
call fcn.180006de0
nop
mov r8d, 1
lea rdx, [0x18005f6bc]
lea rcx, [rbp + 0x78]
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0xf
cmova rdx, qword [rbp + 0xd8]
mov r8, qword [rbp + 0xe8]
lea rcx, [rsp + 0x50]
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp - 0x70]
lea rcx, [rbp + 0x58]
call fcn.180007070
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1800101c6
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800101c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011396
call fcn.18002825c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180010203
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800101fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001139c
call fcn.18002825c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x18001024c
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010247
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113a2
call fcn.18002825c
movdqu xmmword [rbp + 0x88], xmm6
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x180010293
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001028e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113a8
call fcn.18002825c
movdqu xmmword [rbp - 0x18], xmm6
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x1800102d7
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800102d2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113ae
call fcn.18002825c
movdqu xmmword [rbp + 8], xmm6
mov byte [rbp - 8], 0
mov edx, 0x2a
mov r8d, 0x2b
lea rcx, [rbp + 0x20]
call fcn.180013cc0
nop
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
mov rcx, rax
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005f7f0]
lea rcx, [rbp - 0x70]
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1800103c6
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800103c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113b4
call fcn.18002825c
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x18001040a
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010405
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113ba
call fcn.18002825c
movdqu xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x20], 0
mov edx, 0x2c
mov r8d, 0x2d
lea rcx, [rbp - 0x50]
call fcn.180013cc0
mov rbx, rax
mov edx, 0x2b
mov r8d, 0x2c
lea rcx, [rsp + 0x70]
call fcn.180013cc0
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x18001044d
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 0x28]
lea rcx, [rbp + 0x78]
call fcn.180007070
nop
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
lea rcx, [rbp + 0x78]
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005f7f0]
lea rcx, [rsp + 0x50]
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 8]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180006880
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x180010573
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001056d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113c0
call fcn.18002825c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1800105b0
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800105ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113c6
call fcn.18002825c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x1800105f9
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800105f4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113cc
call fcn.18002825c
movdqu xmmword [rbp + 0x88], xmm6
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x180010641
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001063b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113d2
call fcn.18002825c
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18001067d
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010678
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113d8
call fcn.18002825c
movdqu xmmword [rbp - 0x80], xmm6
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x1800106c2
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800106bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113de
call fcn.18002825c
mov edx, 0x2e
mov r8d, 0x2f
lea rcx, [rbp - 0x50]
call fcn.180013cc0
mov rbx, rax
mov edx, 0x2d
mov r8d, 0x2e
lea rcx, [rbp - 0x28]
call fcn.180013cc0
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x1800106fb
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, rax
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 8]
lea rcx, [rbp + 0x78]
call fcn.180007070
nop
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
lea rcx, [rbp + 0x78]
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005f7f0]
lea rcx, [rsp + 0x50]
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180006880
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x180010824
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001081e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113e4
call fcn.18002825c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180010861
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001085c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113ea
call fcn.18002825c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x1800108aa
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800108a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113f0
call fcn.18002825c
movdqu xmmword [rbp + 0x88], xmm6
mov byte [rbp + 0x78], 0
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x1800108f2
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800108ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113f6
call fcn.18002825c
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x18001092d
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010928
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800113fc
call fcn.18002825c
movdqu xmmword [rbp - 0x18], xmm6
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x180010971
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001096c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011402
call fcn.18002825c
mov edx, 0x2f
mov r8d, 0x30
lea rcx, [rbp - 0x50]
call fcn.180013cc0
nop
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
mov rcx, rax
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005f7f0]
lea rcx, [rsp + 0x50]
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180006880
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x180010a73
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010a6d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011408
call fcn.18002825c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180010ab0
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010aab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001140e
call fcn.18002825c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x180010af6
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010af1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011414
call fcn.18002825c
mov edx, 0x30
mov r8d, 0x31
lea rcx, [rbp - 0x50]
call fcn.180013cc0
nop
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
mov rcx, rax
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005f7f0]
lea rcx, [rsp + 0x50]
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180006880
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x180010bf8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010bf2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001141a
call fcn.18002825c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180010c35
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010c30
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011420
call fcn.18002825c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x180010c7b
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010c76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011426
call fcn.18002825c
mov edx, 0x31
mov r8d, 0x32
lea rcx, [rbp - 0x50]
call fcn.180013cc0
nop
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0xf
cmova rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
mov rcx, rax
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005f7f0]
lea rcx, [rsp + 0x50]
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180006880
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x180010d7d
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010d77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001142c
call fcn.18002825c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180010dba
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010db5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011432
call fcn.18002825c
movdqu xmmword [rsp + 0x60], xmm6
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x180010e00
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010dfb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011438
call fcn.18002825c
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rdx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
lea rcx, [rbp + 0x1b0]
call fcn.1800238c0
lea rcx, [rbp + 0x1b8]
call fcn.18001f3d0
test rax, rax
jne 0x180010e78
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x1f8], 0
cmovne eax, r12d
or eax, dword [rbp + rcx + 0x1c0]
and eax, 0x17
mov dword [rbp + rcx + 0x1c0], eax
mov edx, dword [rbp + rcx + 0x1c4]
and edx, eax
jne 0x18001143e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], rax
mov dword [rbp + 0x140], 0x68
mov dword [rbp + 0x17c], 1
mov word [rbp + 0x180], r15w
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], rax
mov edx, 0x32
mov r8d, 0x33
lea rcx, [rsp + 0x70]
call fcn.180013cc0
nop
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, qword [rbp + 0xb8]
mov r8, qword [rbp + 0xc8]
mov rcx, rax
call fcn.180006880
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x180010f6b
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010f66
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011490
call fcn.18002825c
movdqu xmmword [rbp - 0x80], xmm6
mov byte [rsp + 0x70], 0
mov edx, 0x33
mov r8d, 0x34
lea rcx, [rbp - 0x50]
call fcn.180013cc0
nop
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
mov rcx, rax
call fcn.180006880
xorps xmm0, xmm0
movups xmmword [rbp + 0xf8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x108], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x108], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18001101e
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011019
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011496
call fcn.18002825c
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0xf
cmova rdx, qword [rbp + 0xf8]
lea rax, [rbp + 0x40]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x140]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x1800110b7
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rcx, qword [rbp + 0xb8]
call fcn.180032b98
test eax, eax
jne 0x1800110b7
mov bl, 1
jmp 0x1800110b9
xor bl, bl
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x1800110fa
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800110f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001149c
call fcn.18002825c
movdqu xmmword [rbp + 0x108], xmm6
mov byte [rbp + 0xf8], 0
mov rdx, qword [rbp + 0x90]
cmp rdx, 0xf
jbe 0x180011148
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011142
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800114a2
call fcn.18002825c
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x180011189
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011184
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800114a8
call fcn.18002825c
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp + 0x70]
cmp rdx, 0xf
jbe 0x1800111de
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800111d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800114ae
call fcn.18002825c
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x180011220
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001121a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800114b4
call fcn.18002825c
nop
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1b0], rax
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x1ac], edx
lea rcx, [rbp + 0x1b8]
call fcn.18001ced0
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1b0], rax
mov rax, qword [rbp + 0x1b0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x1ac], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x258], rax
lea rcx, [rbp + 0x258]
call fcn.180027650
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x1800112e9
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800112e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800114ba
call fcn.18002825c
mov qword [rbp + 0xc8], r15
mov qword [rbp + 0xd0], 0xf
mov byte [rbp + 0xb8], 0
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x18001133f
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001133a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180011372
call fcn.18002825c
movzx eax, bl
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.180028200
lea r11, [rsp + 0x3e0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
int3
test dl, 4
je 0x18001144c
lea rbx, str.ios_base::badbit_set
jmp 0x180011461
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x50]
call fcn.1800073c0
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x50]
call fcn.180007c50
lea rdx, [0x180074688]
lea rcx, [rbp - 0x50]
call fcn.18002a1c8
nop
call fcn.18002e4dc
int3
call fcn.18002e4dc
int3
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
int3