Function at 0x14006a780
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
xor ebx, ebx
movzx r12d, r8b
mov r15, rdx
mov dword [rbp + 0x77], ebx
xorps xmm0, xmm0
mov qword [rbp + 0x27], rbx
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x2f], 7
lea edx, [rbx + 0x10]
movups xmmword [rbp + 0x17], xmm0
call fcn.1400038c0
movups xmm0, xmmword [0x140145bd0]
mov qword [rbp + 0x17], rax
mov esi, 0xf
mov qword [rbp + 0x27], 8
mov qword [rbp + 0x2f], rsi
movups xmmword [rax], xmm0
mov word [rax + 0x10], bx
mov rdx, qword [r15 + 8]
test rdx, rdx
je 0x14006a816
cmp qword [rdx + 8], rbx
je 0x14006a816
mov r8, qword [rdx + 8]
lea rcx, [rbp - 9]
mov rdx, qword [rdx]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 9], xmm0
movdqu xmmword [rbp + 7], xmm1
call fcn.14000f940
jmp 0x14006a82e
movdqa xmm1, xmmword [0x140133460]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
mov word [rbp - 9], bx
movdqu xmmword [rbp + 7], xmm1
xor r8d, r8d
mov qword [rsp + 0xe0], r14
lea rdx, [rbp + 0x17]
mov edi, 3
lea rcx, [rbp - 9]
call fcn.140072ef0
test al, al
jne 0x14006a8eb
mov eax, dword [0x140145bf0]
mov rdx, qword [r15 + 8]
movsd xmm0, qword [0x140145be8]
mov dword [rbp - 0x41], eax
movzx eax, word [0x140145bf4]
mov word [rbp - 0x3d], ax
mov qword [rbp - 0x39], 7
mov qword [rbp - 0x31], 7
movsd qword [rbp - 0x49], xmm0
mov word [rbp - 0x3b], bx
test rdx, rdx
je 0x14006a8b8
cmp qword [rdx + 8], rbx
je 0x14006a8b8
mov r8, qword [rdx + 8]
lea rcx, [rbp - 0x29]
mov rdx, qword [rdx]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp - 0x29], xmm0
movdqu xmmword [rbp - 0x19], xmm1
call fcn.14000f940
jmp 0x14006a8d0
movdqa xmm1, xmmword [0x140133460]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov word [rbp - 0x29], bx
movdqu xmmword [rbp - 0x19], xmm1
xor r8d, r8d
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x29]
mov edi, esi
call fcn.140072ef0
test al, al
jne 0x14006a8eb
mov r14b, 1
jmp 0x14006a8f6
xor r14b, r14b
mov esi, edi
test dil, 8
je 0x14006a947
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x14006a936
mov rcx, qword [rbp - 0x29]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a931
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ab18
call fcn.1400eef0c
movdqa xmm0, xmmword [0x140133460]
movdqu xmmword [rbp - 0x19], xmm0
mov word [rbp - 0x29], bx
test sil, 4
je 0x14006a99d
mov rdx, qword [rbp - 0x31]
cmp rdx, 8
jb 0x14006a98d
mov rcx, qword [rbp - 0x49]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a988
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ab18
call fcn.1400eef0c
mov qword [rbp - 0x39], rbx
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], bx
mov rdx, qword [rbp + 0xf]
cmp rdx, 8
jb 0x14006a9dd
mov rcx, qword [rbp - 9]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a9d8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ab18
call fcn.1400eef0c
mov rdx, qword [rbp + 0x2f]
movdqa xmm0, xmmword [0x140133460]
mov word [rbp - 9], bx
movdqu xmmword [rbp + 7], xmm0
cmp rdx, 8
jb 0x14006aa2e
mov rcx, qword [rbp + 0x17]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006aa29
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ab18
call fcn.1400eef0c
test r14b, r14b
mov ecx, 1
cmove ecx, r12d
test cl, cl
jne 0x14006aa74
mov rax, qword [r15 + 8]
test rax, rax
je 0x14006aa4c
mov r8, qword [rax]
jmp 0x14006aa4f
mov r8, rbx
mov dword [rsp + 0x28], 3
lea rdx, [0x140145bf8]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp rax, 0x20
ja 0x14006aaf3
lea rdx, [rbp + 0x17]
mov rcx, r15
call fcn.140002710
mov rdi, qword [0x1401b8890]
mov ecx, 0x28
mov rax, qword [rdi + 0x198]
mov rsi, qword [rax + 0x30]
call fcn.1400eeed0
test rax, rax
je 0x14006aab0
lea rdx, [rbp + 0x17]
mov rcx, rax
call fcn.1400b9490
mov rbx, rax
mov rdx, rbx
lea rcx, [rdi + 0x198]
call rsi
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0x10
jb 0x14006aaf3
mov rcx, qword [rbp + 0x17]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006aaee
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ab12
call fcn.1400eef0c
mov r14, qword [rsp + 0xe0]
mov rbx, qword [rsp + 0xe8]
add rsp, 0xb0
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400f5e30
int3
call fcn.1400f5e30
int3