Function at 0x14000d860
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rcx
push r14
sub rsp, 0xb0
cmp qword [rcx + 0x18], 0xf
jbe 0x14000d880
mov rax, qword [rcx]
mov qword [rsp + 0xc0], rax
lea rdx, [rsp + 0x44]
mov byte [rsp + 0xc8], 0
lea rcx, [rsp + 0xc8]
call fcn.140007c50
mov r14, rax
cmp byte [rax], 0
jne 0x14000e419
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xa0], rbp
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x80], r13
mov dword [rsp + 0xd0], 0
mov ecx, dword [rsp + 0xd0]
mov qword [rsp + 0x78], r15
movaps xmmword [rsp + 0x60], xmm6
call fcn.1400096d0
movsx r9d, al
call fcn.1400096e0
movsx ecx, al
imul r9d, ecx
call fcn.140009710
movsx r10d, al
call fcn.1400096f0
movsx r11d, al
call fcn.140009720
movsx ebx, al
call fcn.140009700
movsd xmm3, qword [0x140020a50]
movsd xmm4, qword [0x140020a48]
movsd xmm5, qword [0x140020a40]
movsd xmm6, qword [0x140020a38]
mov ebp, dword [rsp + 0xc0]
mov r15d, dword [rsp + 0xc0]
mov r12d, dword [rsp + 0xc0]
mov r13d, dword [rsp + 0xc0]
movsx edi, al
mov qword [rsp + 0x98], rsi
nop dword [rax + rax]
movsx edx, byte [0x14002a390]
movsx ecx, byte [0x14002a001]
imul edx, r11d
shl edx, 3
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000db73
movsx eax, byte [0x14002a010]
lea esi, [r9 + r10]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm3
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000da10
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000da10
mov dword [rsp + 0xd8], 5
jmp 0x14000da6c
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000da6c
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
xorps xmm0, xmm0
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
mov dword [rsp + 0xd8], eax
movsx eax, byte [0x14002a010]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm3
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000dae1
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000dae1
mov ebp, 5
jmp 0x14000db3a
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000db3a
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, r9d
add eax, r10d
xorps xmm0, xmm0
div ecx
movsx ecx, byte [section..data]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si ebp, xmm0
movsxd rax, dword [rsp + 0xd0]
movzx r8d, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
and r8b, bpl
add r8b, r8b
movzx edx, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
sub dl, r8b
add dl, byte [rsp + 0xd8]
mov byte [rax + r14 + 1], dl
movsx eax, byte [0x14002a003]
lea ecx, [r10 + r9*4]
add eax, ecx
xor edx, edx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e1bc
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*2]
movsx ecx, byte [0x14002a001]
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000dd96
movsx eax, byte [0x14002a010]
lea esi, [r9 + r10]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm4
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000dc37
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000dc37
mov dword [rsp + 0x30], 5
jmp 0x14000dc90
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000dc90
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
xorps xmm0, xmm0
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
mov dword [rsp + 0x30], eax
movsx eax, byte [0x14002a010]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm4
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000dd06
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000dd06
mov r15d, 5
jmp 0x14000dd60
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000dd60
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, r9d
add eax, r10d
xorps xmm0, xmm0
div ecx
movsx ecx, byte [section..data]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si r15d, xmm0
movsxd rax, dword [rsp + 0xd0]
movzx r8d, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
and r8b, r15b
add r8b, r8b
movzx edx, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
sub dl, r8b
add dl, byte [rsp + 0x30]
mov byte [rax + r14 + 1], dl
movsx edx, byte [0x14002a390]
movsx ecx, byte [0x14002a001]
imul edx, r11d
shl edx, 3
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000df92
movsx eax, byte [0x14002a010]
lea esi, [r9 + r10]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm5
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000de33
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000de33
mov dword [rsp + 0x34], 5
jmp 0x14000de8c
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000de8c
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
xorps xmm0, xmm0
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
mov dword [rsp + 0x34], eax
movsx eax, byte [0x14002a010]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm5
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000df02
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000df02
mov r12d, 5
jmp 0x14000df5c
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000df5c
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, r9d
add eax, r10d
xorps xmm0, xmm0
div ecx
movsx ecx, byte [section..data]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si r12d, xmm0
movsxd rax, dword [rsp + 0xd0]
movzx r8d, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
and r8b, r12b
add r8b, r8b
movzx edx, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
sub dl, r8b
add dl, byte [rsp + 0x34]
mov byte [rax + r14 + 1], dl
movsx eax, byte [0x14002a003]
lea ecx, [r9 + r10]
lea ecx, [rcx + r9*8]
xor edx, edx
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e1bc
mov eax, dword [rsp + 0xd0]
lea esi, [r9 + r10]
sub eax, 0xa
xor edx, edx
movd xmm2, eax
movsx eax, byte [0x14002a010]
cvtdq2pd xmm2, xmm2
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e04b
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000e04b
mov dword [rsp + 0x38], 5
jmp 0x14000e0a4
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e0a4
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
xorps xmm0, xmm0
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0xd0]
xor edx, edx
sub eax, 0xa
movd xmm2, eax
movsx eax, byte [0x14002a010]
cvtdq2pd xmm2, xmm2
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e12c
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000e12c
mov r13d, 5
jmp 0x14000e186
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e186
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, r9d
add eax, r10d
xorps xmm0, xmm0
div ecx
movsx ecx, byte [section..data]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si r13d, xmm0
movsxd rax, dword [rsp + 0xd0]
movzx r8d, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
and r8b, r13b
add r8b, r8b
movzx edx, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
sub dl, r8b
add dl, byte [rsp + 0x38]
mov byte [rax + r14 + 1], dl
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*8]
movsx ecx, byte [0x14002a001]
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000e3bf
movsx eax, byte [0x14002a010]
lea esi, [r9 + r10]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm6
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e259
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000e259
mov dword [rsp + 0x40], 5
jmp 0x14000e2b2
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e2b2
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
xorps xmm0, xmm0
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
mov dword [rsp + 0x40], eax
movsx eax, byte [0x14002a010]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14002a001]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm6
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [0x14002a003]
movsx ecx, byte [0x14002a002]
add eax, esi
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e32a
movsx ecx, byte [0x14002a390]
imul ecx, r11d
lea edx, [rcx + rcx*4]
movsx ecx, byte [0x14002a001]
add edx, edx
sub edx, ebx
add edx, edi
add ecx, edx
je 0x14000e32a
mov dword [rsp + 0x3c], 5
jmp 0x14000e387
movsx eax, byte [0x14002a003]
xor edx, edx
imul ecx, r9d, 7
add ecx, r10d
add eax, ecx
movsx ecx, byte [0x14002a002]
div ecx
movsx ecx, byte [section..data]
cmp eax, ecx
je 0x14000e387
movsx eax, byte [0x14002a003]
xor edx, edx
movsx ecx, byte [0x14002a002]
add eax, r9d
add eax, r10d
xorps xmm0, xmm0
div ecx
movsx ecx, byte [section..data]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
mov dword [rsp + 0x3c], eax
movsxd rax, dword [rsp + 0xd0]
movzx r8d, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
and r8b, byte [rsp + 0x3c]
add r8b, r8b
movzx edx, byte [rax + r14 + 1]
movsxd rax, dword [rsp + 0xd0]
sub dl, r8b
add dl, byte [rsp + 0x40]
mov byte [rax + r14 + 1], dl
mov eax, dword [rsp + 0xd0]
inc eax
mov dword [rsp + 0xd0], eax
mov eax, dword [rsp + 0xd0]
cmp eax, 5
jb 0x14000d970
movaps xmm6, xmmword [rsp + 0x60]
mov r15, qword [rsp + 0x78]
mov r13, qword [rsp + 0x80]
mov r12, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x98]
mov rbp, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xa8]
mov r8, qword [rsp + 0xc0]
lea rdx, [r14 + 1]
mov dword [rsp + 0x28], 1
xor r9d, r9d
xor ecx, ecx
mov qword [rsp + 0x20], 0
mov byte [r14], 1
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
add rsp, 0xb0
pop r14
ret