Function at 0x18000dc40
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Read .ini file

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x6a8]
sub rsp, 0x7a8
movaps xmmword [rsp + 0x790], xmm6
mov rax, qword [0x180067dc0]
xor rax, rsp
mov qword [rbp + 0x680], rax
mov rsi, r9
mov r12, rdx
mov qword [rbp + 0x310], rdx
mov r14, rcx
mov qword [rbp - 0x68], rcx
mov qword [rbp - 0x60], rcx
movss xmm6, dword [rbp + 0x710]
xor r15d, r15d
mov dword [rcx + 8], r15d
mov dword [rcx + 0x10], r15d
lea rax, vtable.advancedfx::COutVideoStream.0
mov qword [rcx], rax
movups xmm0, xmmword [rdx]
movups xmmword [rcx + 0x18], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x28], xmm1
movsd xmm0, qword [rdx + 0x20]
movsd qword [rcx + 0x38], xmm0
lea rax, vtable.advancedfx::COutFFMPEGVideoStream.0
mov qword [rcx], rax
mov word [rcx + 0x58], r15w
mov dword [rcx + 0x5c], r15d
mov qword [rcx + 0x60], r15
mov qword [rcx + 0x68], r15
mov qword [rcx + 0x70], r15
mov qword [rcx + 0x78], r15
mov qword [rcx + 0x80], r15
mov qword [rcx + 0x88], r15
xorps xmm0, xmm0
movups xmmword [rcx + 0x90], xmm0
movups xmmword [rcx + 0xa0], xmm0
mov rdx, r8
lea rcx, [rbp + 0x3b0]
call fcn.18000db00
nop
movss xmm0, dword [0x18004f898]
comiss xmm0, xmm6
jbe 0x18000dd3c
cvtps2pd xmm1, xmm6
movq rdx, xmm1
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:_FPS__f___1._n
call qword [case.0x18002514f.0]
jmp 0x18000de4a
cmp byte [r14 + 0x58], 0
jne 0x18000de4a
mov byte [r14 + 0x58], 1
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rcx, qword [rbp + 0x3b0]
mov r8b, 1
lea rdx, [rbp + 0x3b0]
call fcn.18002d0a0
test al, al
je 0x18000dd80
mov byte [r14 + 0x59], 1
jmp 0x18000de4a
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
movdqa xmm1, xmmword [0x18004ede0]
movdqu xmmword [rbp + 0x360], xmm1
mov byte [rbp + 0x350], 0
lea rcx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rcx, qword [rbp + 0x3b0]
lea rdx, [rbp + 0x350]
call fcn.180032eb0
test al, al
jne 0x18000dde1
mov r8d, 5
lea rdx, str._n_a_
lea rcx, [rbp + 0x350]
call fcn.180006df0
lea rdx, [rbp + 0x350]
cmp qword [rbp + 0x368], 0xf
cmova rdx, qword [rbp + 0x350]
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:_could_not_create_path___s__n
call qword [case.0x18002514f.0]
nop
mov rdx, qword [rbp + 0x368]
cmp rdx, 0xf
jbe 0x18000de4a
inc rdx
mov rcx, qword [rbp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000de45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000de45
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
cmp byte [r14 + 0x59], 0
je 0x18000f4af
call fcn.180041550
xorps xmm0, xmm0
movups xmmword [rbp + 0x350], xmm0
mov qword [rbp + 0x360], r15
mov qword [rbp + 0x368], r15
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18000de80
mov rdx, rax
lea rcx, [rbp + 0x350]
call fcn.18000ccb0
nop
mov rdi, qword [rbp + 0x360]
mov rcx, qword [rbp + 0x368]
mov rax, rcx
sub rax, rdi
cmp rax, 0x11
jb 0x18000def8
lea rax, [rdi + 0x11]
mov qword [rbp + 0x360], rax
lea rbx, [rbp + 0x350]
cmp rcx, 7
cmova rbx, qword [rbp + 0x350]
lea rcx, [rbx + rdi*2]
mov r8d, 0x22
lea rdx, str.ffmpeg_ffmpeg.ini
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi*2 + 0x22], r15w
mov rbx, 0xffffffffffffffff
jmp 0x18000df1b
mov qword [rsp + 0x20], 0x11
lea r9, str.ffmpeg_ffmpeg.ini
xor r8d, r8d
lea edx, [r8 + 0x11]
lea rcx, [rbp + 0x350]
call fcn.18000d390
xorps xmm0, xmm0
movups xmmword [rbp + 0x330], xmm0
mov qword [rbp + 0x340], r15
mov qword [rbp + 0x348], 7
mov word [rbp + 0x330], r15w
lea rax, [rbp + 0x350]
cmp qword [rbp + 0x368], 7
cmova rax, qword [rbp + 0x350]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x107
lea r9, [rbp + 0x470]
xor r8d, r8d
lea rdx, str.Path
lea rcx, str.Ffmpeg
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
dec eax
cmp eax, 0x103
ja 0x18000dfff
lea rax, [rbp + 0x470]
mov rdx, rbx
inc rdx
cmp word [rax + rdx*2], 0
jne 0x18000df94
mov rax, qword [rbp + 0x348]
cmp rdx, rax
ja 0x18000dfe4
lea rdi, [rbp + 0x330]
cmp rax, 7
cmova rdi, qword [rbp + 0x330]
mov qword [rbp + 0x340], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
lea rdx, [rbp + 0x470]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi], r15w
jmp 0x18000e0e4
lea r9, [rbp + 0x470]
xor r8d, r8d
lea rcx, [rbp + 0x330]
call fcn.18000d210
jmp 0x18000e0e4
call fcn.180041550
mov rdx, rbx
nop word [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x18000e010
mov rcx, qword [rbp + 0x348]
cmp rdx, rcx
ja 0x18000e059
lea rdi, [rbp + 0x330]
cmp rcx, 7
cmova rdi, qword [rbp + 0x330]
mov qword [rbp + 0x340], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, rax
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi], r15w
jmp 0x18000e06b
mov r9, rax
xor r8d, r8d
lea rcx, [rbp + 0x330]
call fcn.18000d210
mov rdi, qword [rbp + 0x340]
mov rcx, qword [rbp + 0x348]
mov rax, rcx
sub rax, rdi
cmp rax, 0x15
jb 0x18000e0c1
lea rax, [rdi + 0x15]
mov qword [rbp + 0x340], rax
lea rbx, [rbp + 0x330]
cmp rcx, 7
cmova rbx, qword [rbp + 0x330]
lea rcx, [rbx + rdi*2]
mov r8d, 0x2a
lea rdx, str.ffmpeg_bin_ffmpeg.exe
call sub.VCRUNTIME140.dll_memmove
mov word [rbx + rdi*2 + 0x2a], r15w
jmp 0x18000e0e4
mov qword [rsp + 0x20], 0x15
lea r9, str.ffmpeg_bin_ffmpeg.exe
xor r8d, r8d
lea edx, [r8 + 0x15]
lea rcx, [rbp + 0x330]
call fcn.18000d390
xorps xmm0, xmm0
movups xmmword [rbp + 0x370], xmm0
mov qword [rbp + 0x380], r15
mov qword [rbp + 0x388], 7
mov word [rbp + 0x370], r15w
mov ecx, dword [r12]
sub ecx, 1
je 0x18000e258
sub ecx, 1
je 0x18000e232
cmp ecx, 1
je 0x18000e20c
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:_Unsupported_image_format.
call qword [case.0x18002514f.0]
nop
mov r8, qword [rbp + 0x388]
cmp r8, 7
jbe 0x18000e155
mov rdx, qword [rbp + 0x370]
lea rcx, [rbp + 0x370]
call fcn.180011030
mov qword [rbp + 0x380], r15
mov qword [rbp + 0x388], 7
mov word [rbp + 0x370], r15w
mov r8, qword [rbp + 0x348]
cmp r8, 7
jbe 0x18000e18f
mov rdx, qword [rbp + 0x330]
lea rcx, [rbp + 0x330]
call fcn.180011030
mov qword [rbp + 0x340], r15
mov qword [rbp + 0x348], 7
mov word [rbp + 0x330], r15w
mov r8, qword [rbp + 0x368]
cmp r8, 7
jbe 0x18000e1c9
mov rdx, qword [rbp + 0x350]
lea rcx, [rbp + 0x350]
call fcn.180011030
mov qword [rbp + 0x360], r15
mov qword [rbp + 0x368], 7
mov word [rbp + 0x350], r15w
mov r8, qword [rbp + 0x3c8]
cmp r8, 7
jbe 0x18000f4fd
mov rdx, qword [rbp + 0x3b0]
lea rcx, [rbp + 0x3b0]
call fcn.180011030
jmp 0x18000f4fd
mov qword [rbp + 0x380], 4
movabs rax, 0x79006100720067
mov qword [rbp + 0x370], rax
mov word [rbp + 0x378], r15w
jmp 0x18000e289
mov qword [rbp + 0x380], 4
movabs rax, 0x61007200670062
mov qword [rbp + 0x370], rax
mov word [rbp + 0x378], r15w
jmp 0x18000e289
mov qword [rbp + 0x380], 5
movsd xmm0, qword [str.bgr24]
movsd qword [rbp + 0x370], xmm0
movzx eax, word [0x18004f228]
mov word [rbp + 0x378], ax
mov word [rbp + 0x37a], r15w
mov rdx, rsi
lea rcx, [rbp + 0x450]
call fcn.18000db00
nop
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov ecx, 0x60
call fcn.180049f4c
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x300], xmm1
mov r8d, 0xd
lea rdx, str.FFMPEG_PATH
lea rcx, [rbp + 0x2f0]
call fcn.18000ccb0
nop
lea r8, [rbp + 0x2f0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
lea rax, [rbp + 0x330]
cmp rcx, rax
je 0x18000e33f
lea rdx, [rbp + 0x330]
cmp qword [rbp + 0x348], 7
cmova rdx, qword [rbp + 0x330]
mov r8, qword [rbp + 0x340]
call fcn.180011430
nop
mov rdx, qword [rbp + 0x308]
cmp rdx, 7
jbe 0x18000e388
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x2f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e383
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000e383
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
xorps xmm0, xmm0
movups xmmword [rbp + 0x390], xmm0
mov qword [rbp + 0x3a0], r15
mov qword [rbp + 0x3a8], r15
mov r8d, 0x11
lea rdx, str.AFX_STREAM_PATH
lea rcx, [rbp + 0x390]
call fcn.18000ccb0
nop
mov r13, qword [rsp + 0x50]
mov r9, qword [r13 + 8]
mov qword [rsp + 0x60], r9
mov dword [rsp + 0x68], r15d
mov rdi, r13
mov rsi, qword [rbp + 0x3a8]
mov rbx, qword [rbp + 0x3a0]
mov r15, qword [rbp + 0x390]
cmp byte [r9 + 0x19], 0
jne 0x18000e4a4
xor r14d, r14d
lea r12, [r14 - 1]
nop word [rax + rax]
mov qword [rsp + 0x60], r9
lea rax, [rbp + 0x390]
cmp rsi, 7
cmova rax, r15
lea r10, [r9 + 0x20]
cmp qword [r9 + 0x38], 7
jbe 0x18000e423
mov r10, qword [r9 + 0x20]
mov r11, qword [r9 + 0x30]
mov rcx, r11
cmp rbx, r11
cmovb rcx, rbx
test rcx, rcx
je 0x18000e454
sub r10, rax
nop dword [rax]
movzx edx, word [r10 + rax]
cmp dx, word [rax]
jne 0x18000e45e
add rax, 2
sub rcx, 1
jne 0x18000e440
cmp r11, rbx
jae 0x18000e469
mov eax, r12d
jmp 0x18000e46f
mov eax, 1
cmovb eax, r12d
jmp 0x18000e46f
mov eax, r14d
seta al
shr eax, 0x1f
test al, al
je 0x18000e481
mov dword [rsp + 0x68], r14d
mov r9, qword [r9 + 0x10]
jmp 0x18000e48f
mov dword [rsp + 0x68], 1
mov rdi, r9
mov r9, qword [r9]
cmp byte [r9 + 0x19], r14b
je 0x18000e400
mov r14, qword [rbp - 0x68]
mov r12, qword [rbp + 0x310]
cmp byte [rdi + 0x19], 0
jne 0x18000e526
lea rax, [rdi + 0x20]
cmp qword [rdi + 0x38], 7
jbe 0x18000e4b9
mov rax, qword [rdi + 0x20]
lea r9, [rbp + 0x390]
cmp rsi, 7
cmova r9, r15
mov r10, qword [rdi + 0x30]
mov rcx, rbx
cmp r10, rbx
cmovb rcx, r10
test rcx, rcx
je 0x18000e4f4
sub r9, rax
nop
movzx edx, word [r9 + rax]
cmp dx, word [rax]
jne 0x18000e502
add rax, 2
sub rcx, 1
jne 0x18000e4e0
cmp rbx, r10
jae 0x18000e513
mov rax, 0xffffffffffffffff
jmp 0x18000e51b
mov eax, 1
mov rcx, 0xffffffffffffffff
cmovb eax, ecx
jmp 0x18000e51b
xor eax, eax
cmp rbx, r10
seta al
shr eax, 0x1f
test al, al
je 0x18000e5e7
movabs rax, 0x2aaaaaaaaaaaaaa
cmp qword [rsp + 0x58], rax
je 0x18000f52b
lea rax, [rsp + 0x50]
mov qword [rbp + 0x310], rax
xor ebx, ebx
mov qword [rbp + 0x318], rbx
lea ecx, [rbx + 0x60]
call fcn.180049f4c
nop
mov qword [rax + 0x30], rbx
mov qword [rax + 0x38], rbx
movups xmm0, xmmword [rbp + 0x390]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rbp + 0x3a0]
movups xmmword [rax + 0x30], xmm1
mov qword [rbp + 0x3a0], rbx
mov qword [rbp + 0x3a8], 7
mov word [rbp + 0x390], bx
xorps xmm0, xmm0
movups xmmword [rax + 0x40], xmm0
mov qword [rax + 0x50], rbx
mov qword [rax + 0x58], 7
mov word [rax + 0x40], bx
mov qword [rax], r13
mov qword [rax + 8], r13
mov qword [rax + 0x10], r13
mov word [rax + 0x18], bx
movups xmm0, xmmword [rsp + 0x60]
movaps xmmword [rbp + 0x310], xmm0
mov r8, rax
lea rdx, [rbp + 0x310]
lea rcx, [rsp + 0x50]
call fcn.180011080
mov rdi, rax
mov rsi, qword [rbp + 0x3a8]
mov r15, qword [rbp + 0x390]
lea rcx, [rdi + 0x40]
lea rax, [rbp + 0x3b0]
cmp rcx, rax
je 0x18000e628
lea rdx, [rbp + 0x3b0]
cmp qword [rbp + 0x3c8], 7
cmova rdx, qword [rbp + 0x3b0]
mov r8, qword [rbp + 0x3c0]
call fcn.180011430
mov rsi, qword [rbp + 0x3a8]
mov r15, qword [rbp + 0x390]
cmp rsi, 7
jbe 0x18000e640
mov r8, rsi
mov rdx, r15
lea rcx, [rbp + 0x390]
call fcn.180011030
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x320], xmm1
mov r8d, 7
lea rdx, str.WIDTH
lea rcx, [rbp + 0x310]
call fcn.18000ccb0
nop
mov edx, dword [r12 + 4]
lea rcx, [rbp + 0x2f0]
call fcn.180011d60
mov rbx, rax
lea r8, [rbp + 0x310]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
mov rdx, rbx
call fcn.18000faf0
nop
mov r8, qword [rbp + 0x308]
cmp r8, 7
jbe 0x18000e6c9
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.180011030
movdqa xmm0, xmmword [0x18004f8a0]
movdqu xmmword [rbp + 0x300], xmm0
xor edi, edi
mov word [rbp + 0x2f0], di
mov r8, qword [rbp + 0x328]
cmp r8, 7
jbe 0x18000e702
mov rdx, qword [rbp + 0x310]
lea rcx, [rbp + 0x310]
call fcn.180011030
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x320], xmm1
mov r8d, 8
lea rdx, str.HEIGHT
lea rcx, [rbp + 0x310]
call fcn.18000ccb0
nop
mov edx, dword [r12 + 8]
lea rcx, [rbp + 0x2f0]
call fcn.180011d60
mov rbx, rax
lea r8, [rbp + 0x310]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
mov rdx, rbx
call fcn.18000faf0
nop
mov r8, qword [rbp + 0x308]
cmp r8, 7
jbe 0x18000e78b
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.180011030
movdqa xmm0, xmmword [0x18004f8a0]
movdqu xmmword [rbp + 0x300], xmm0
mov word [rbp + 0x2f0], di
mov r8, qword [rbp + 0x328]
cmp r8, 7
jbe 0x18000e7c2
mov rdx, qword [rbp + 0x310]
lea rcx, [rbp + 0x310]
call fcn.180011030
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x320], xmm1
mov r8d, 0xe
lea rdx, str.PIXEL_FORMAT
lea rcx, [rbp + 0x310]
call fcn.18000ccb0
nop
lea r8, [rbp + 0x310]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
lea rax, [rbp + 0x370]
cmp rcx, rax
je 0x18000e83e
lea rdx, [rbp + 0x370]
cmp qword [rbp + 0x388], 7
cmova rdx, qword [rbp + 0x370]
mov r8, qword [rbp + 0x380]
call fcn.180011430
nop
mov r8, qword [rbp + 0x328]
cmp r8, 7
jbe 0x18000e85e
mov rdx, qword [rbp + 0x310]
lea rcx, [rbp + 0x310]
call fcn.180011030
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x300], xmm1
mov r8d, 0xb
lea rdx, str.FRAMERATE
lea rcx, [rbp + 0x2f0]
call fcn.18000ccb0
nop
cvtss2sd xmm6, xmm6
movaps xmm1, xmm6
movq rdx, xmm6
lea rcx, [0x18004ef68]
call fcn.180011f10
movsxd rbx, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x310], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x320], xmm1
xor edx, edx
mov r8, rbx
lea rcx, [rbp + 0x310]
call fcn.18000cde0
lea rcx, [rbp + 0x310]
cmp qword [rbp + 0x328], 7
cmova rcx, qword [rbp + 0x310]
lea rdx, [rbx + 1]
movaps xmm3, xmm6
movq r9, xmm6
lea r8, [0x18004ef68]
call fcn.180011f70
nop
lea r8, [rbp + 0x2f0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
lea rdx, [rbp + 0x310]
call fcn.18000faf0
nop
mov r8, qword [rbp + 0x328]
cmp r8, 7
jbe 0x18000e948
mov rdx, qword [rbp + 0x310]
lea rcx, [rbp + 0x310]
call fcn.180011030
movdqa xmm0, xmmword [0x18004f8a0]
movdqu xmmword [rbp + 0x320], xmm0
mov word [rbp + 0x310], di
mov r8, qword [rbp + 0x308]
cmp r8, 7
jbe 0x18000e97f
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.180011030
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x300], xmm1
mov r8d, 7
lea rdx, str.QUOTE
lea rcx, [rbp + 0x2f0]
call fcn.18000ccb0
nop
lea r8, [rbp + 0x2f0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
mov r8d, 1
lea rdx, [0x18004f340]
call fcn.180011430
nop
mov r8, qword [rbp + 0x308]
cmp r8, 7
jbe 0x18000e9fe
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.180011030
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x300], xmm1
mov r8d, 2
lea rdx, [0x18004f344]
lea rcx, [rbp + 0x2f0]
call fcn.18000ccb0
nop
lea r8, [rbp + 0x2f0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
mov r8d, 1
lea rdx, [0x18004f34c]
call fcn.180011430
nop
mov r8, qword [rbp + 0x308]
cmp r8, 7
jbe 0x18000ea7d
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.180011030
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x300], xmm1
mov r8d, 2
lea rdx, [0x18004f350]
lea rcx, [rbp + 0x2f0]
call fcn.18000ccb0
nop
lea r8, [rbp + 0x2f0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
mov r8d, 1
lea rdx, [0x18004f358]
call fcn.180011430
nop
mov r8, qword [rbp + 0x308]
cmp r8, 7
jbe 0x18000eafc
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.180011030
xorps xmm0, xmm0
movups xmmword [rbp + 0x2f0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x300], xmm1
mov r8d, 2
lea rdx, [0x18004f35c]
lea rcx, [rbp + 0x2f0]
call fcn.18000ccb0
nop
lea r8, [rbp + 0x2f0]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call fcn.18000d780
mov rcx, qword [rax]
add rcx, 0x40
mov r8d, 1
lea rdx, [0x18004f0f0]
call fcn.180011430
nop
mov r8, qword [rbp + 0x308]
cmp r8, 7
jbe 0x18000eb7b
mov rdx, qword [rbp + 0x2f0]
lea rcx, [rbp + 0x2f0]
call fcn.180011030
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x450]
call fcn.180010a00
xor r8d, r8d
lea rdx, [0x18004f364]
lea rcx, [rbp + 0x450]
call fcn.1800113b0
mov rdx, rax
lea rcx, [rbp + 0x430]
call fcn.18000db00
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], rax
mov dword [rbp - 0x50], 0x68
mov dword [rbp - 0x14], 0x100
mov qword [rsp + 0x78], 0x18
mov qword [rbp - 0x78], 1
mov qword [rbp - 0x80], rdi
lea edx, [rax + 1]
lea rcx, [rbp + 0x200]
call fcn.18000da50
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
lea rdx, str..pipeAfxHookSource_FFMPEG_Out_
lea rcx, [rbp + 0x200]
call fcn.180006380
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18004f368]
call fcn.180006380
mov rcx, rax
mov rdx, r14
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [rbp + 0x410]
lea rcx, [rbp + 0x200]
call fcn.180011c60
nop
lea rcx, [rbp + 0x410]
cmp qword [rbp + 0x428], 0xf
cmova rcx, qword [rbp + 0x410]
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], 0x4e20
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x78]
lea r8, [r14 + 0x78]
lea rdx, [r14 + 0x70]
call fcn.18000fed0
cmp eax, 1
je 0x18000ecaa
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:_Could_not_create_STDOUT._n
call qword [case.0x18002514f.0]
mov rcx, qword [r14 + 0x70]
cmp rcx, 0xffffffffffffffff
je 0x18000ece7
xor r8d, r8d
lea edx, [r8 + 1]
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
jne 0x18000ece7
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:STDOUT_SetHandleInformation._n
call qword [case.0x18002514f.0]
mov rcx, qword [r14 + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, 0xffffffffffffffff
mov qword [r14 + 0x70], rax
mov edx, 1
lea rcx, [rbp + 0x110]
call fcn.18000da50
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
lea rdx, str..pipeAfxHookSource_FFMPEG_Err_
lea rcx, [rbp + 0x110]
call fcn.180006380
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18004f368]
call fcn.180006380
mov rcx, rax
mov rdx, r14
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [rbp + 0x3f0]
lea rcx, [rbp + 0x110]
call fcn.180011c60
nop
lea rcx, [rbp + 0x3f0]
cmp qword [rbp + 0x408], 0xf
cmova rcx, qword [rbp + 0x3f0]
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], 0x4e20
mov dword [rsp + 0x20], edi
lea r9, [rsp + 0x78]
lea r8, [r14 + 0x88]
lea rdx, [r14 + 0x80]
call fcn.18000fed0
cmp eax, 1
je 0x18000eda3
lea rcx, str.AFXERROR:_CERRFFMPEGVideoStream::CERRFFMPEGVideoStream:_Could_not_create_STDERR._n
call qword [case.0x18002514f.0]
mov rcx, qword [r14 + 0x80]
cmp rcx, 0xffffffffffffffff
je 0x18000ede9
xor r8d, r8d
lea edx, [r8 + 1]
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
jne 0x18000ede9
lea rcx, str.AFXERROR:_CERRFFMPEGVideoStream::CERRFFMPEGVideoStream:STDERR_SetHandleInformation._n
call qword [case.0x18002514f.0]
mov rcx, qword [r14 + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, 0xffffffffffffffff
mov qword [r14 + 0x80], rax
mov edx, 1
lea rcx, [rbp + 0x20]
call fcn.18000da50
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ebx, eax
lea rdx, str..pipeAfxHookSource_FFMPEG_In_
lea rcx, [rbp + 0x20]
call fcn.180006380
mov rcx, rax
mov edx, ebx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18004f368]
call fcn.180006380
mov rcx, rax
mov rdx, r14
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
lea rdx, [rbp + 0x3d0]
lea rcx, [rbp + 0x20]
call fcn.180011c60
nop
lea rbx, [rbp + 0x3d0]
cmp qword [rbp + 0x3e8], 0xf
cmova rbx, qword [rbp + 0x3d0]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x4e20
mov dword [rsp + 0x28], 0x100000
mov dword [rsp + 0x20], 0x100000
mov r9d, 1
xor r8d, r8d
mov edx, r9d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov rdi, rax
test rax, rax
je 0x18000eeed
xor eax, eax
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x40000080
mov dword [rsp + 0x20], 3
lea r9, [rsp + 0x78]
xor r8d, r8d
mov edx, 0x40000000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x18000f05b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:_Could_not_create_STDIN._n
call qword [case.0x18002514f.0]
mov rcx, qword [r14 + 0x68]
cmp rcx, 0xffffffffffffffff
je 0x18000ef37
xor r8d, r8d
lea edx, [r8 + 1]
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
jne 0x18000ef37
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:STDIN_SetHandleInformation._n
call qword [case.0x18002514f.0]
mov rcx, qword [r14 + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, 0xffffffffffffffff
mov qword [r14 + 0x68], rax
xor r9d, r9d
mov edx, 1
xor ecx, ecx
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [r14 + 0xa8], rax
cmp rax, 0xffffffffffffffff
jne 0x18000ef64
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:STDIN_CreateEventA._n
call qword [case.0x18002514f.0]
lea r8, [r14 + 0x40]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [r8], xmm0
mov qword [r8 + 0x10], rax
mov rax, qword [r14 + 0x60]
cmp rax, 0xffffffffffffffff
je 0x18000f068
cmp qword [r14 + 0x68], 0xffffffffffffffff
je 0x18000f068
cmp qword [r14 + 0x80], 0xffffffffffffffff
je 0x18000f068
cmp qword [r14 + 0x88], 0xffffffffffffffff
je 0x18000f068
cmp qword [r14 + 0x70], 0xffffffffffffffff
je 0x18000f068
cmp qword [r14 + 0x78], 0xffffffffffffffff
je 0x18000f068
mov dword [r14 + 0x5c], 1
mov qword [rbp], rax
mov rax, qword [r14 + 0x88]
mov qword [rbp + 0x10], rax
mov rax, qword [r14 + 0x78]
mov qword [rbp + 8], rax
lea rdx, [rbp + 0x430]
cmp qword [rbp + 0x448], 7
cmova rdx, qword [rbp + 0x430]
lea rcx, [rbp + 0x330]
cmp qword [rbp + 0x348], 7
cmova rcx, qword [rbp + 0x330]
mov qword [rsp + 0x48], r8
lea rax, [rbp - 0x50]
mov qword [rsp + 0x40], rax
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [r14 + 0x5c], eax
cmp eax, 1
je 0x18000f06e
lea rcx, str.AFXERROR:_COutFFMPEGVideoStream::COutFFMPEGVideoStream:_CreateProcessW._n
call qword [case.0x18002514f.0]
jmp 0x18000f06e
mov qword [r14 + 0x60], rdi
mov qword [r14 + 0x68], rax
jmp 0x18000eefa
xor ebx, ebx
mov dword [r14 + 0x5c], ebx
cmp dword [r14 + 0x5c], 0
jne 0x18000f07e
mov rcx, r14
call fcn.180010060
nop
mov rdx, qword [rbp + 0x3e8]
cmp rdx, 0xf
jbe 0x18000f0c2
inc rdx
mov rcx, qword [rbp + 0x3d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f0bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f0bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
movdqa xmm0, xmmword [0x18004ede0]
movdqu xmmword [rbp + 0x3e0], xmm0
mov byte [rbp + 0x3d0], 0
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea rdi, vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx + 0x20], rdi
mov rax, qword [rbp + 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x1c], edx
lea rcx, [rbp + 0x28]
call fcn.180006a50
lea rcx, [rbp + 0x30]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0xa8]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x408]
cmp rdx, 0xf
jbe 0x18000f164
inc rdx
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f15f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f15f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
movdqa xmm0, xmmword [0x18004ede0]
movdqu xmmword [rbp + 0x400], xmm0
mov byte [rbp + 0x3f0], 0
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x110], rdi
mov rax, qword [rbp + 0x110]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x10c], edx
lea rcx, [rbp + 0x118]
call fcn.180006a50
lea rcx, [rbp + 0x120]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x198]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x428]
cmp rdx, 0xf
jbe 0x18000f211
inc rdx
mov rcx, qword [rbp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f20c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f20c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
movdqa xmm0, xmmword [0x18004ede0]
movdqu xmmword [rbp + 0x420], xmm0
mov byte [rbp + 0x410], 0
mov rax, qword [rbp + 0x200]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0x200], rdi
mov rax, qword [rbp + 0x200]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx + 0x1fc], edx
lea rcx, [rbp + 0x208]
call fcn.180006a50
lea rcx, [rbp + 0x210]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x288]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
mov rdx, qword [rbp + 0x448]
cmp rdx, 7
jbe 0x18000f2c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x430]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f2be
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f2be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
movdqa xmm0, xmmword [0x18004f8a0]
movdqu xmmword [rbp + 0x440], xmm0
mov word [rbp + 0x430], bx
mov rcx, qword [rsp + 0x50]
mov rsi, qword [rcx + 8]
cmp byte [rsi + 0x19], 0
jne 0x18000f335
nop dword [rax]
mov r8, qword [rsi + 0x10]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x50]
call fcn.18000cf20
mov rdi, rsi
mov rsi, qword [rsi]
lea rcx, [rdi + 0x40]
call fcn.180011320
lea rcx, [rdi + 0x20]
call fcn.180011320
mov edx, 0x60
mov rcx, rdi
call fcn.180049f88
cmp byte [rsi + 0x19], 0
je 0x18000f2f0
mov rcx, qword [rsp + 0x50]
xor ebx, ebx
mov edx, 0x60
call fcn.180049f88
nop
mov rdx, qword [rbp + 0x468]
cmp rdx, 7
jbe 0x18000f389
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x450]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f384
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f384
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
movdqa xmm0, xmmword [0x18004f8a0]
movdqu xmmword [rbp + 0x460], xmm0
mov word [rbp + 0x450], bx
mov rdx, qword [rbp + 0x388]
cmp rdx, 7
jbe 0x18000f3e9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x370]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f3e4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f3e4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
mov qword [rbp + 0x380], rbx
mov qword [rbp + 0x388], 7
mov word [rbp + 0x370], bx
mov rdx, qword [rbp + 0x348]
cmp rdx, 7
jbe 0x18000f44b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f446
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f446
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
mov qword [rbp + 0x340], rbx
mov qword [rbp + 0x348], 7
mov word [rbp + 0x330], bx
mov rdx, qword [rbp + 0x368]
cmp rdx, 7
jbe 0x18000f4b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x350]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f4a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f4a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
jmp 0x18000f4b3
mov dword [r14 + 0x5c], r15d
mov rdx, qword [rbp + 0x3c8]
cmp rdx, 7
jbe 0x18000f4fd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x3b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f4f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18000f4f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180049f88
nop
mov rax, r14
mov rcx, qword [rbp + 0x680]
xor rcx, rsp
call fcn.18004a020
movaps xmm6, xmmword [rsp + 0x790]
add rsp, 0x7a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180011300
nop
int3