Function at 0x18000df00
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2f0]
sub rsp, 0x3f0
mov rax, qword [0x18006f080]
xor rax, rsp
mov qword [rbp + 0x2e0], rax
mov rsi, rdx
mov r14, rcx
xor r15d, r15d
lea rcx, [rbp + 0x118]
call fcn.18000dd00
nop
lea edx, [r15 + 0x28]
lea r8d, [r15 + 0x29]
lea rcx, [rbp + 0x18]
call fcn.180011e30
mov rdi, rax
lea edx, [r15 + 0x27]
lea r8d, [r15 + 0x28]
lea rcx, [rbp - 0x50]
call fcn.180011e30
nop
cmp qword [rax + 0x18], 0xf
jbe 0x18000df78
mov rax, qword [rax]
mov rcx, rax
call fcn.180034198
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18000dfa0
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.180006470
nop
mov r8d, 1
lea rdx, [0x18005b67c]
lea rcx, [rbp - 0x30]
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0xf
cmova rdx, qword [rbp + 0x118]
mov r8, qword [rbp + 0x128]
lea rcx, [rsp + 0x50]
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp - 0x70]
lea rcx, [rbp + 0xb8]
call fcn.180006840
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18000e094
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e08e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f521
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000e0d1
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e0cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f527
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x18000e11f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e11a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f52d
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18000e16b
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e166
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f533
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x18000e1b7
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e1b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f539
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], 0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x1d0]
call fcn.18004ae20
mov r12d, 2
mov r8d, r12d
lea rdx, [rbp + 0xb8]
lea rcx, [rbp + 0x1d0]
call fcn.1800184b0
nop
cmp qword [rbp + 0x258], 0
jne 0x18000e20a
xor bl, bl
jmp 0x18000f3ce
lea rcx, [rbp + 0x138]
call fcn.18000dd00
nop
mov edx, 0x29
lea r8d, [rdx + 1]
lea rcx, [rbp + 0x38]
call fcn.180011e30
mov rdi, rax
mov edx, 0x27
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x50]
call fcn.180011e30
nop
cmp qword [rax + 0x18], 0xf
jbe 0x18000e249
mov rax, qword [rax]
mov rcx, rax
call fcn.180034198
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
inc rbx
cmp byte [rax + rbx], 0
jne 0x18000e260
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.180006470
nop
mov r8d, 1
lea rdx, [0x18005b67c]
lea rcx, [rbp - 0x70]
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x138]
cmp qword [rbp + 0x150], 0xf
cmova rdx, qword [rbp + 0x138]
mov r8, qword [rbp + 0x148]
lea rcx, [rsp + 0x50]
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rdi
lea r8, [rbp + 0x18]
lea rcx, [rbp + 0x78]
call fcn.180006840
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x18000e353
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e34d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f53f
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000e390
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e38b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f545
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18000e3de
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e3d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f54b
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18000e42a
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e425
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f551
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x18000e476
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e471
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f557
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp + 0x48], xmm0
mov byte [rbp + 0x38], 0
mov edx, 0x2a
lea r8d, [rdx + 1]
lea rcx, [rbp + 0x18]
call fcn.180011e30
nop
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
mov rcx, rax
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005b7b0]
lea rcx, [rbp - 0x30]
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x98], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xa8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x18000e571
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e56c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f55d
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x18000e5bd
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e5b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f563
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp + 0x28], xmm0
mov byte [rbp + 0x18], 0
mov edx, 0x2c
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x10]
call fcn.180011e30
mov rbx, rax
mov edx, 0x2b
lea r8d, [rdx + 1]
lea rcx, [rsp + 0x70]
call fcn.180011e30
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x18000e604
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp - 0x50]
lea rcx, [rbp - 0x70]
call fcn.180006840
nop
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
lea rcx, [rbp - 0x70]
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005b7b0]
lea rcx, [rsp + 0x50]
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x38]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180005f10
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x18000e730
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e72a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f569
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000e76d
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e768
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f56f
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18000e7bb
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e7b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f575
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18000e808
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e802
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f57b
call fcn.180024bcc
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18000e844
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e83f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f581
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x18000e891
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e88c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f587
call fcn.180024bcc
mov edx, 0x2e
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x10]
call fcn.180011e30
mov rbx, rax
mov edx, 0x2d
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x50]
call fcn.180011e30
nop
mov rdx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x18000e8c6
mov rdx, qword [r14]
mov r8, qword [r14 + 0x10]
mov rcx, rax
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r9, rbx
lea r8, [rbp + 0x38]
lea rcx, [rbp - 0x70]
call fcn.180006840
nop
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
lea rcx, [rbp - 0x70]
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005b7b0]
lea rcx, [rsp + 0x50]
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180005f10
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18000e9f5
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e9ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f58d
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000ea32
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ea2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f593
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x18000ea80
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ea7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f599
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x50]
cmp rdx, 0xf
jbe 0x18000eacd
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eac7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f59f
call fcn.180024bcc
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 0xf
jbe 0x18000eb08
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eb03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5a5
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x18000eb54
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eb4f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5ab
call fcn.180024bcc
mov edx, 0x2f
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x10]
call fcn.180011e30
nop
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
mov rcx, rax
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005b7b0]
lea rcx, [rsp + 0x50]
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180005f10
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18000ec5a
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ec54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5b1
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000ec97
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ec92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5b7
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x18000ece5
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ece0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5bd
call fcn.180024bcc
mov edx, 0x30
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x10]
call fcn.180011e30
nop
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
mov rcx, rax
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005b7b0]
lea rcx, [rsp + 0x50]
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180005f10
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18000edeb
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ede5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5c3
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000ee28
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ee23
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5c9
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x18000ee76
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ee71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5cf
call fcn.180024bcc
mov edx, 0x31
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x10]
call fcn.180011e30
nop
lea rdx, [rbp + 0x78]
cmp qword [rbp + 0x90], 0xf
cmova rdx, qword [rbp + 0x78]
mov r8, qword [rbp + 0x88]
mov rcx, rax
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8, r12
lea rdx, [0x18005b7b0]
lea rcx, [rsp + 0x50]
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x70]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x98]
call fcn.180005f10
nop
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18000ef7c
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ef76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5d5
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x18000efb9
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000efb4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5db
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x18000f007
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f002
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f5e1
call fcn.180024bcc
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rdx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
lea rcx, [rbp + 0x1d0]
call fcn.1800203c0
lea rcx, [rbp + 0x1d8]
call fcn.18001c0b0
test rax, rax
jne 0x18000f07f
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
mov eax, 6
cmp qword [rbp + rcx + 0x218], 0
cmovne eax, r12d
or eax, dword [rbp + rcx + 0x1e0]
and eax, 0x17
mov dword [rbp + rcx + 0x1e0], eax
mov edx, dword [rbp + rcx + 0x1e4]
and edx, eax
jne 0x18000f5e7
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x160], xmm0
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rax
mov dword [rbp + 0x160], 0x68
mov dword [rbp + 0x19c], 1
mov word [rbp + 0x1a0], r15w
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], rax
lea edx, [rax + 0x32]
lea r8d, [rax + 0x33]
lea rcx, [rsp + 0x70]
call fcn.180011e30
nop
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, qword [rbp + 0xb8]
mov r8, qword [rbp + 0xc8]
mov rcx, rax
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x108], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x78]
cmp rdx, 0xf
jbe 0x18000f171
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f16c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f639
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp - 0x80], xmm0
mov byte [rsp + 0x70], 0
mov edx, 0x33
lea r8d, [rdx + 1]
lea rcx, [rbp - 0x10]
call fcn.180011e30
nop
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0xf
cmova rdx, qword [rbp + 0xf8]
mov r8, qword [rbp + 0x108]
mov rcx, rax
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe8], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xd8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xe8], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x18000f230
inc rdx
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f22b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f63f
call fcn.180024bcc
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0xf
cmova rdx, qword [rbp + 0xd8]
lea rax, [rbp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x160]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x18000f2c1
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xb8]
call fcn.180005bc0
mov rcx, rax
call fcn.1800303d8
test eax, eax
jne 0x18000f2c1
mov bl, 1
jmp 0x18000f2c3
xor bl, bl
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x18000f304
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f2ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f645
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rbp + 0xe8], xmm0
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x18000f35d
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f357
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f64b
call fcn.180024bcc
nop
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x18000f39e
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f399
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f651
call fcn.180024bcc
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], 0xf
mov byte [rbp + 0x98], 0
lea rcx, [rbp + 0x78]
call fcn.180005cc0
nop
lea rcx, [rbp + 0x138]
call fcn.180005cc0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1d0], rax
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x1cc], edx
lea rcx, [rbp + 0x1d8]
call fcn.180019b20
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x1d0], rax
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x1cc], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x278], rax
lea rcx, [rbp + 0x278]
call fcn.180023fd8
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x18000f497
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f492
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f657
call fcn.180024bcc
mov qword [rbp + 0xc8], r15
mov qword [rbp + 0xd0], 0xf
mov byte [rbp + 0xb8], 0
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x18000f4ed
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f4e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f51b
call fcn.180024bcc
movzx eax, bl
mov rcx, qword [rbp + 0x2e0]
xor rcx, rsp
call fcn.180024b70
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
int3
test dl, 4
je 0x18000f5f5
lea rbx, str.ios_base::badbit_set
jmp 0x18000f60a
test dl, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rsp + 0x50]
call fcn.180006b80
mov r8, rax
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.180007410
lea rdx, [0x18006d548]
lea rcx, [rbp - 0x10]
call fcn.180026a24
nop
call fcn.18002bd24
int3
call fcn.18002bd24
int3
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
int3