Function at 0x1400636f0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x128]
sub rsp, 0x220
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
mov rax, qword [0x14013a700]
xor rax, rsp
mov qword [rbp + 0xd0], rax
xor r14d, r14d
mov dword [rsp + 0x50], r14d
call fcn.140021f30
mov dword [rsp + 0x58], 0x431e0000
mov dword [rsp + 0x5c], 0x42480000
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x140124670]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x30], r14b
mov dword [rsp + 0x50], 2
lea rbx, [0x14013b0f4]
lea rdi, [0x14013b0f8]
movzx r9d, byte [rbx]
xor r9b, 0x63
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
jae 0x1400637bd
lea rax, [rcx + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x1400637c7
lea rcx, [rsp + 0x30]
call fcn.140007520
inc rbx
cmp rbx, rdi
jne 0x140063783
lea rdi, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdi, qword [rsp + 0x30]
mov rbx, qword [0x1402c6a60]
mov rax, qword [rbx + 0x3ea8]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3ea8]
movsxd r8, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
mov rcx, rdi
call fcn.140012fe0
mov esi, eax
cmp dword [rbx + 0x3edc], eax
jne 0x140063832
mov r8, rdi
mov edx, 0xb
mov ecx, eax
call fcn.1400297e0
mov dword [rsp + 0x20], r14d
mov r9b, 1
lea r8, [rsp + 0x58]
mov edx, esi
mov rcx, rdi
call fcn.14001b270
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14006388a
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063885
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063885
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2e24
movdqa xmm0, xmmword [0x140124670]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
xor edx, edx
mov r8d, 0x120
lea rcx, [rbp - 0x50]
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [0x141732a20]
lea rcx, [rbp - 0x50]
call fcn.1400902c0
nop
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x50]
call fcn.140090430
movss xmm8, dword [rbp - 0x60]
movss xmm9, dword [rbp - 0x5c]
lea rcx, [rbp - 0x50]
call fcn.1400904a0
mov rbx, rax
test rax, rax
je 0x140063aa0
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.14008e150
mov ecx, dword [rax]
xorps xmm7, xmm7
cvtsi2ss xmm7, rcx
mov ecx, dword [rax + 4]
xorps xmm6, xmm6
cvtsi2ss xmm6, rcx
lea rcx, [rbp - 0x50]
call fcn.1400904b0
mov edx, dword [rax + 4]
movd xmm1, edx
cvtdq2ps xmm1, xmm1
divss xmm1, xmm6
mov r8d, dword [rax]
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
divss xmm0, xmm7
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov ecx, dword [rax + 0xc]
add ecx, edx
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
divss xmm1, xmm6
mov eax, dword [rax + 8]
add eax, r8d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm7
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
mov rcx, rbx
call fcn.14008e140
mov qword [rsp + 0x70], r14
mov dword [rsp + 0x70], eax
mov eax, dword [0x1402c2b44]
movzx ecx, al
movd xmm3, ecx
cvtdq2ps xmm3, xmm3
movss xmm4, dword [0x140124418]
mulss xmm3, xmm4
shr eax, 8
movzx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movzx eax, byte [0x1402c2b46]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm4
movzx eax, byte [0x1402c2b47]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm4
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm0
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rsp + 0x60], xmm3
movups xmmword [rsp + 0x78], xmm3
mov eax, dword [0x14013a014]
movzx ecx, al
movd xmm3, ecx
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm4
shr eax, 8
movzx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movzx eax, byte [0x14013a016]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm4
movzx eax, byte [0x14013a017]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm4
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm0
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rsp + 0x60], xmm3
movups xmmword [rsp + 0x30], xmm3
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm9
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x70]
call fcn.1400460c0
mov rcx, qword [0x1417325a0]
call fcn.1400205e0
movss xmm1, dword [0x140124614]
xorps xmm0, xmm0
call fcn.140021c30
mov rdx, qword [0x1402c6a60]
mov rax, qword [rdx + 0x3ea8]
mov byte [rax + 0x98], 1
mov rax, qword [rdx + 0x3ea8]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x68]
addss xmm1, dword [0x140124550]
movss dword [rax + 0xe4], xmm1
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm1
movss dword [rax + 0xfc], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x140124670]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x30], 0
mov dword [rsp + 0x50], 9
lea rbx, [0x14013b1f0]
lea rdi, [0x14013b1f6]
nop word [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 0x61
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
jae 0x140063b7a
lea rax, [rcx + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140063b84
lea rcx, [rsp + 0x30]
call fcn.140007520
inc rbx
cmp rbx, rdi
jne 0x140063b40
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
xor edx, edx
lea r8d, [rdx + 1]
call fcn.140044120
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140063be9
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063be4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063be4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2e24
call fcn.140020680
call fcn.14001b480
call fcn.14001b180
test al, al
je 0x140063dca
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x140124670]
movdqu xmmword [rbp - 0x78], xmm1
mov byte [rsp + 0x78], 0
mov dword [rsp + 0x50], 0x25
lea rbx, str.____nz_____61z7_95_7_k_i
lea rdi, [0x14013b0b9]
movzx r9d, byte [rbx]
xor r9b, 0x54
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
cmp rcx, rdx
jae 0x140063c67
lea rax, [rcx + 1]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x78]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140063c71
lea rcx, [rsp + 0x78]
call fcn.140007520
inc rbx
cmp rbx, rdi
jne 0x140063c30
lea rdi, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdi, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x140124670]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x30], 0
mov dword [rsp + 0x50], 0x95
lea rbx, [0x14013b298]
lea rsi, [0x14013b29c]
nop word [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 0x63
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
jae 0x140063cfa
lea rax, [rcx + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x140063d04
lea rcx, [rsp + 0x30]
call fcn.140007520
inc rbx
cmp rbx, rsi
jne 0x140063cc0
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, rdi
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140063d78
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063d73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063d73
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2e24
movdqa xmm0, xmmword [0x140124670]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x140063dca
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140063dc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140063dc5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b2e24
call fcn.140022060
nop
lea rcx, [rbp - 0x48]
call fcn.140090700
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.1400b2990
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop rbp
ret