Function at 0x140004450
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x14067d0c0]
xor rax, rsp
mov qword [rbp + 0x30], rax
xor ebx, ebx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rax
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rax
mov dword [rbp - 0x40], 0x68
mov dword [rbp - 4], 1
mov word [rbp], bx
lea rax, [0x140057698]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0xd
mov rdx, rcx
cmp qword [rcx + 0x18], 7
jbe 0x1400044de
mov rdx, qword [rcx]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rax
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rsp + 0x78], xmm0
movabs rax, 0xc000000000000000
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x50], 1
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.14000a5a0
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova rdx, qword [rbp - 0x60]
lea rax, [rbp - 0x78]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140004677
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x50]
call fcn.140002230
mov rbx, qword [rsp + 0x50]
movabs rax, 0x7fffffffc46535fe
cmp rbx, rax
jg 0x1400045c8
add rbx, 0x3b9aca00
jmp 0x1400045d2
movabs rbx, 0x7fffffffffffffff
movabs rdi, 0x4e94914f0000
movabs rsi, 0x431bde82d7b634db
mov r14d, 0xff
nop dword [rax]
lea rcx, [rsp + 0x50]
call fcn.140002230
mov rax, qword [rsp + 0x50]
cmp rbx, rax
je 0x140004677
mov ecx, 1
cmovl ecx, r14d
test cl, cl
jle 0x140004677
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jne 0x140004639
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x1400045f0
jl 0x140004649
mov edx, 0x5265c00
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x1400045f0
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x14000466b
inc edx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x1400045f0
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x1400046b3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400046ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400046dc
call fcn.140014f60
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140014f40
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.14001c878
int3