Function at 0x18000c9a0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x2e8]
sub rsp, 0x3b0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
mov rax, qword [0x180059098]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov r14, rdx
mov r12, rcx
xor edi, edi
lea rcx, [rbp + 0xd8]
call fcn.18000c820
nop
lea rcx, str.temp
call fcn.18002beb8
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x18000ca15
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180005a00
nop
mov r8d, 1
lea rdx, [0x180050508]
lea rcx, [rsp + 0x50]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xd8]
cmp qword [rbp + 0xf0], 0x10
cmovae rdx, qword [rbp + 0xd8]
mov r8, qword [rbp + 0xe8]
lea rcx, [rbp - 0x48]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str..bat
lea rcx, [rbp - 0x28]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x50], rdi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x38], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x48], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x18000cb43
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cb3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1f2
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000cb8f
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cb8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1f8
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000cbdd
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cbd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1fe
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp + 0x170]
call fcn.18001f470
mov r8d, 2
lea rdx, [rbp + 0x38]
lea rcx, [rbp + 0x170]
call fcn.180010c80
nop
cmp qword [rbp + 0x1f8], 0
jne 0x18000cc2c
xor bl, bl
jmp 0x18000e075
lea rcx, [rbp + 0xb8]
call fcn.18000c820
nop
lea rcx, str.temp
call fcn.18002beb8
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
inc rbx
cmp byte [rax + rbx], 0
jne 0x18000cc56
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.180005a00
nop
mov r8d, 1
lea rdx, [0x180050508]
lea rcx, [rsp + 0x50]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0x10
cmovae rdx, qword [rbp + 0xb8]
mov r8, qword [rbp + 0xc8]
lea rcx, [rsp + 0x78]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 4
lea rdx, str..vbs
lea rcx, [rbp - 0x68]
call fcn.1800052d0
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x58], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x68], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000cd7a
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cd75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e204
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000cdc7
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cdc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e20a
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000ce16
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ce11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e210
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
movq r13, xmm6
sub rax, r13
cmp rax, 0x37
jb 0x18000e216
lea r15, [rbp + 0x58]
movq rax, xmm7
mov qword [rbp - 0x48], rax
psrldq xmm6, 8
movq rcx, xmm6
mov qword [rbp - 8], rcx
cmp rcx, 0x10
cmovae r15, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rsi, [r13 + 0x37]
mov ebx, 0xf
lea rdi, [rbp - 0x28]
movabs rax, 0x8000000000000000
lea ecx, [rbx + 7]
cmp rsi, rbx
jbe 0x18000cf03
mov rbx, rsi
or rbx, 0xf
cmp rbx, rdx
jbe 0x18000cecb
mov rbx, rdx
add rax, 0x27
mov rcx, rax
call fcn.18001cd70
test rax, rax
je 0x18000e21c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000ceff
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000ceee
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000e1c2
jmp 0x18000ceac
test rcx, rcx
je 0x18000cefd
call fcn.18001cd70
mov rdi, rax
jmp 0x18000ceff
xor edi, edi
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], rbx
movups xmm0, xmmword [str.echo_Set_oWS__WScript.CreateObject__WScript.Shell____]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x180050900]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x180050910]
movups xmmword [rdi + 0x20], xmm0
mov eax, dword [0x180050920]
mov dword [rdi + 0x30], eax
movzx eax, word [0x180050924]
mov word [rdi + 0x34], ax
movzx eax, byte [0x180050926]
mov byte [rdi + 0x36], al
lea rcx, [rdi + 0x37]
mov r8, r13
mov rdx, r15
call fcn.18001edb0
mov byte [rdi + rsi], 0
mov r8d, 2
lea rdx, [0x1800508ec]
lea rcx, [rbp - 0x28]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xor r8d, r8d
mov qword [rbp + 0x28], r8
mov qword [rbp + 0x30], r8
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x28], xmm1
mov qword [rax + 0x10], r8
mov qword [rax + 0x18], 0xf
mov byte [rax], r8b
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x18000cfe0
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000cfd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e222
call fcn.18001cdac
xor r8d, r8d
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov r15, qword [r14 + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 0x25
jb 0x18000e228
cmp qword [r14 + 0x18], 0x10
jb 0x18000d019
mov r14, qword [r14]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rsi, [r15 + 0x25]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp rsi, rbx
jbe 0x18000d0b9
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x18000d079
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18001cd70
test rax, rax
je 0x18000e240
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000d0b4
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000d0a2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000e1c8
jmp 0x18000d05a
test rcx, rcx
je 0x18000d0b1
call fcn.18001cd70
mov rdi, rax
jmp 0x18000d0b4
mov rdi, r8
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rbx
movups xmm0, xmmword [str.echo_Set_oLink__oWS.CreateShortcut__]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x180050940]
movups xmmword [rdi + 0x10], xmm1
mov eax, dword [0x180050950]
mov dword [rdi + 0x20], eax
movzx eax, byte [0x180050954]
mov byte [rdi + 0x24], al
lea rcx, [rdi + 0x25]
mov r8, r15
mov rdx, r14
call fcn.18001edb0
mov byte [rdi + rsi], 0
mov r15d, 6
mov r8d, r15d
lea rdx, str._____
lea rcx, [rsp + 0x50]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x58]
cmp qword [rbp - 8], 0x10
cmovae rdx, qword [rbp - 0x48]
mov r8, r13
lea rcx, [rbp - 0x68]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
lea r8d, [r15 - 4]
lea rdx, [0x1800508ec]
lea rcx, [rsp + 0x78]
call fcn.1800052d0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
lea rdx, [rbp - 0x48]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x18]
call fcn.1800052d0
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000d232
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d22c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e22e
call fcn.18001cdac
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000d26e
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d269
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e234
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000d2bb
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d2b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e23a
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000d309
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d304
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e240
call fcn.18001cdac
mov r14, qword [r12 + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0x19
jb 0x18000e246
cmp qword [r12 + 0x18], 0x10
jb 0x18000d334
mov r12, qword [r12]
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
lea rsi, [r14 + 0x19]
mov ebx, 0xf
lea rdi, [rbp - 0x68]
cmp rsi, rbx
jbe 0x18000d3d0
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x18000d391
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18001cd70
test rax, rax
je 0x18000e25e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000d3cc
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000d3ba
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000e1ce
jmp 0x18000d372
test rcx, rcx
je 0x18000d3c9
call fcn.18001cd70
mov rdi, rax
jmp 0x18000d3cc
mov rdi, r13
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x50], rbx
movups xmm0, xmmword [str.echo_oLink.TargetPath___]
movups xmmword [rdi], xmm0
movsd xmm0, qword [0x180050970]
movsd qword [rdi + 0x10], xmm0
movzx eax, byte [0x180050978]
mov byte [rdi + 0x18], al
lea rcx, [rdi + 0x19]
mov r8, r14
mov rdx, r12
call fcn.18001edb0
mov byte [rdi + rsi], 0
mov r8d, 5
lea rdx, str.____
lea rcx, [rbp - 0x68]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp + 0x58]
cmp qword [rbp + 0x70], 0x10
cmovae rdx, qword [rbp + 0x58]
mov r8, qword [rbp + 0x68]
lea rcx, [rsp + 0x78]
call fcn.1800052d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 2
lea rdx, [0x1800508ec]
lea rcx, [rsp + 0x50]
call fcn.1800052d0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rbp - 0x48]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x18]
call fcn.1800052d0
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x18000d53d
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d537
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e24c
call fcn.18001cdac
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000d57a
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d575
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e252
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000d5c9
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d5c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e258
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18000d616
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d611
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e25e
call fcn.18001cdac
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp + 0x68]
sub rax, rsi
cmp rax, 0x13
jb 0x18000e264
lea r13, [rbp + 0x58]
mov r14, qword [rbp + 0x58]
cmp qword [rbp + 0x70], 0x10
cmovae r13, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r12, [rsi + 0x13]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp r12, rbx
jbe 0x18000d6e4
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x18000d6a5
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18001cd70
test rax, rax
je 0x18000e270
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000d6df
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000d6ce
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000e1d4
jmp 0x18000d686
test rcx, rcx
je 0x18000d6dd
call fcn.18001cd70
mov rdi, rax
jmp 0x18000d6df
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rbx
movups xmm0, xmmword [str.echo_oLink.Save___]
movups xmmword [rdi], xmm0
movzx eax, word [0x180050990]
mov word [rdi + 0x10], ax
movzx eax, byte [0x180050992]
mov byte [rdi + 0x12], al
lea rcx, [rdi + 0x13]
mov r8, rsi
mov rdx, r13
call fcn.18001edb0
mov byte [rdi + r12], 0
mov r8d, 2
lea rdx, [0x1800508ec]
lea rcx, [rsp + 0x50]
call fcn.1800052d0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x78]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x18]
call fcn.1800052d0
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000d7c7
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d7c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e26a
call fcn.18001cdac
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000d804
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d7ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e270
call fcn.18001cdac
lea r13, [rbp + 0x58]
cmp qword [rbp + 0x70], 0x10
cmovae r13, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r12, [rsi + 8]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp r12, rbx
jbe 0x18000d8be
mov rbx, r12
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x18000d87f
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18001cd70
test rax, rax
je 0x18000e27c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000d8b9
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000d8a8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000e1da
jmp 0x18000d860
test rcx, rcx
je 0x18000d8b7
call fcn.18001cd70
mov rdi, rax
jmp 0x18000d8b9
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rbx
movabs rax, 0x2074706972637363
mov qword [rdi], rax
lea rcx, [rdi + 8]
mov r8, rsi
mov rdx, r13
call fcn.18001edb0
mov byte [rdi + r12], 0
mov r8d, 2
lea rdx, [0x1800508ec]
lea rcx, [rsp + 0x50]
call fcn.1800052d0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x78]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x18]
call fcn.1800052d0
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000d98f
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d989
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e276
call fcn.18001cdac
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000d9cc
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d9c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e27c
call fcn.18001cdac
lea r13, [rbp + 0x58]
cmp qword [rbp + 0x70], 0x10
cmovae r13, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea r12, [rsi + 4]
mov ebx, 0xf
lea rdi, [rsp + 0x50]
cmp r12, rbx
jbe 0x18000da86
mov rbx, r12
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
jbe 0x18000da47
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18001cd70
test rax, rax
je 0x18000e288
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000da81
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000da70
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000e1e0
jmp 0x18000da28
test rcx, rcx
je 0x18000da7f
call fcn.18001cd70
mov rdi, rax
jmp 0x18000da81
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rbx
mov dword [rdi], 0x206c6564
lea rcx, [rdi + 4]
mov r8, rsi
mov rdx, r13
call fcn.18001edb0
mov byte [rdi + r12], 0
mov ebx, 2
mov r8d, ebx
lea rdx, [0x1800508ec]
lea rcx, [rsp + 0x50]
call fcn.1800052d0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x78], xmm1
xor r13d, r13d
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
lea rdx, [rsp + 0x78]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, rcx
movq r8, xmm1
lea rcx, [rbp + 0x18]
call fcn.1800052d0
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000db51
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000db4b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e282
call fcn.18001cdac
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x18000db8e
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000db89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e288
call fcn.18001cdac
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], 0x10
cmovae rdx, qword [rbp + 0x18]
mov r8, qword [rbp + 0x28]
lea rcx, [rbp + 0x170]
call fcn.1800185b0
lea rcx, [rbp + 0x178]
call fcn.1800145e0
test rax, rax
jne 0x18000dbf9
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
cmp qword [rbp + rcx + 0x1b8], 0
cmovne r15d, ebx
or r15d, dword [rbp + rcx + 0x180]
and r15d, 0x17
mov dword [rbp + rcx + 0x180], r15d
mov eax, dword [rbp + rcx + 0x184]
and eax, r15d
jne 0x18000e28e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], rax
mov dword [rbp + 0x100], 0x68
mov dword [rbp + 0x13c], 1
mov word [rbp + 0x140], r13w
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
mov r15, qword [rbp + 0x48]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, 3
jb 0x18000e2df
lea r12, [rbp + 0x38]
cmp qword [rbp + 0x50], 0x10
cmovae r12, qword [rbp + 0x38]
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], r13
lea rsi, [r15 + 3]
mov ebx, 0xf
lea rdi, [rbp + 0x78]
cmp rsi, rbx
jbe 0x18000dd1e
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x18000dcdf
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18001cd70
test rax, rax
je 0x18000e2f1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000dd1a
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000dd08
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000e1e6
jmp 0x18000dcc0
test rcx, rcx
je 0x18000dd17
call fcn.18001cd70
mov rdi, rax
jmp 0x18000dd1a
mov rdi, r13
mov qword [rbp + 0x78], rdi
mov qword [rbp + 0x88], rsi
mov qword [rbp + 0x90], rbx
mov eax, dword [0x180050994]
mov word [rdi], ax
movzx eax, byte [0x180050996]
mov byte [rdi + 2], al
lea rcx, [rdi + 3]
mov r8, r15
mov rdx, r12
call fcn.18001edb0
mov byte [rdi + rsi], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rdx, qword [rbp + 0x88]
sub rax, rdx
cmp rax, 8
jb 0x18000e2e5
lea r12, [rbp + 0x78]
mov rsi, qword [rbp + 0x78]
mov r13, qword [rbp + 0x90]
cmp r13, 0x10
cmovae r12, rsi
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa8], xmm1
lea r15, [rdx + 8]
mov ebx, 0xf
lea rdi, [rbp + 0x98]
cmp r15, rbx
jbe 0x18000de43
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x18000ddfb
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.18001cd70
test rax, rax
je 0x18000e2eb
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
mov rdx, qword [rbp + 0x88]
jmp 0x18000de3c
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000de24
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000e1ec
jmp 0x18000ddd5
test rcx, rcx
je 0x18000de37
call fcn.18001cd70
mov rdx, qword [rbp + 0x88]
jmp 0x18000de39
xor eax, eax
mov rdi, rax
mov qword [rbp + 0x98], rdi
mov qword [rbp + 0xa8], r15
mov qword [rbp + 0xb0], rbx
movabs rax, 0x206578652e646d63
mov qword [rdi], rax
lea rcx, [rdi + 8]
mov r8, rdx
mov rdx, r12
call fcn.18001edb0
mov byte [rdi + r15], 0
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0x10
cmovae rdx, qword [rbp + 0x98]
lea rax, [rbp]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x100]
mov qword [rsp + 0x40], rax
xor edi, edi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x18000df02
mov edx, 0xffffffff
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0x38]
cmp qword [rbp + 0x50], 0x10
cmovae rcx, qword [rbp + 0x38]
call fcn.1800280f8
test eax, eax
jne 0x18000df02
mov bl, 1
jmp 0x18000df04
xor bl, bl
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0x10
jb 0x18000df45
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000df40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e2eb
call fcn.18001cdac
movdqa xmm0, xmmword [0x180050d90]
movdqu xmmword [rbp + 0xa8], xmm0
mov byte [rbp + 0x98], dil
cmp r13, 0x10
jb 0x18000df94
lea rdx, [r13 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000df8b
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e2f1
mov rcx, rsi
call fcn.18001cdac
nop
mov rdx, qword [rbp + 0x30]
cmp rdx, 0x10
jb 0x18000dfcf
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000dfca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e2f7
call fcn.18001cdac
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x30], 0xf
mov byte [rbp + 0x18], 0
mov rax, qword [rbp + 0x70]
cmp rax, 0x10
jb 0x18000e01b
lea rdx, [rax + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18000e012
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e2fd
mov rcx, r14
call fcn.18001cdac
nop
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0x10
jb 0x18000e05c
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e057
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e303
call fcn.18001cdac
mov qword [rbp + 0xc8], rdi
mov qword [rbp + 0xd0], 0xf
mov byte [rbp + 0xb8], 0
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x170], rax
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0x16c], edx
lea rcx, [rbp + 0x178]
call fcn.1800121c0
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0x170], rax
mov rax, qword [rbp + 0x170]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx + 0x16c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x218], rax
lea rcx, [rbp + 0x218]
call fcn.18001c220
nop
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x18000e138
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e133
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e309
call fcn.18001cdac
mov qword [rbp + 0x48], rdi
mov qword [rbp + 0x50], 0xf
mov byte [rbp + 0x38], 0
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x18000e185
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e180
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000e1bc
call fcn.18001cdac
movzx eax, bl
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.18001cd50
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.180023a40
nop
call fcn.1800011a0
nop
call fcn.1800011a0
int3
call fcn.1800011a0
int3
call fcn.1800011a0
int3
call fcn.1800011a0
int3
call fcn.1800011a0
int3
call fcn.1800011a0
nop
call fcn.1800011a0
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
int3
call fcn.180001240
int3
call fcn.180023a40
nop
call fcn.180023a40
int3
call fcn.180001240
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
int3
call fcn.180001240
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
int3
call fcn.180001240
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
int3
test al, 4
je 0x18000e29b
lea rbx, str.ios_base::badbit_set
jmp 0x18000e2af
test al, 2
lea rbx, str.ios_base::failbit_set
lea rax, str.ios_base::eofbit_set
cmove rbx, rax
mov edx, 1
lea rcx, [rbp - 0x48]
call fcn.180006100
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.1800069a0
lea rdx, [0x1800576a0]
lea rcx, [rsp + 0x50]
call fcn.18001ec2c
int3
call fcn.180001240
nop
call fcn.180001240
int3
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
nop
call fcn.180023a40
int3