Function at 0x140039e20
Capabilities:
Create process on windows
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x2d0
mov rax, qword [0x1400e00c0]
xor rax, rsp
mov qword [rsp + 0x2c0], rax
xor edi, edi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], di
lea rdx, [rsp + 0xb0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], 7
mov word [rsp + 0x70], di
lea rax, [rsp + 0xb0]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140039ea0
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x70]
call fcn.1400027d0
nop
lea rdx, [0x1400e0df0]
cmp qword [0x1400e0e08], 8
cmovae rdx, qword [0x1400e0df0]
mov r8, qword [0x1400e0e00]
lea rcx, [rsp + 0x70]
call fcn.140014b80
mov r8d, 0xb
lea rdx, str._report.xml
mov rcx, rax
call fcn.140014b80
lea rcx, [rsp + 0x90]
call fcn.14000aa00
mov rbx, rax
lea rax, [rsp + 0x50]
cmp rax, rbx
je 0x140039f8a
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x140039f57
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039f52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1ae
call fcn.140070654
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], di
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rdx, qword [rsp + 0xa8]
cmp rdx, 8
jb 0x140039fd2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140039fcd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1ae
call fcn.140070654
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], di
mov r8d, 1
lea rdx, [0x1400bf9d8]
lea rcx, [rsp + 0x30]
call fcn.140014b80
lea rdx, [rsp + 0x70]
cmp qword [rsp + 0x88], 8
cmovae rdx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x80]
lea rcx, [rsp + 0x30]
call fcn.140014b80
mov r8d, 1
lea rdx, [0x1400bf9d8]
lea rcx, [rsp + 0x30]
call fcn.140014b80
mov dword [rsp + 0x28], 1
lea rdx, str.open
mov qword [rsp + 0x20], rdi
cmp qword [rsp + 0x60], 0
jbe 0x14003a07e
lea r9, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae r9, qword [rsp + 0x30]
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 8
cmovae r8, qword [rsp + 0x50]
jmp 0x14003a092
lea r8, [rsp + 0x30]
cmp qword [rsp + 0x48], 8
cmovae r8, qword [rsp + 0x30]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x14003a0dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a0d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1b4
call fcn.140070654
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], 7
mov word [rsp + 0x30], di
mov rdx, qword [rsp + 0x88]
cmp rdx, 8
jb 0x14003a135
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a130
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1ba
call fcn.140070654
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x88], 7
mov word [rsp + 0x70], di
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14003a18d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003a187
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003a1c0
call fcn.140070654
nop
mov rcx, qword [rsp + 0x2c0]
xor rcx, rsp
call fcn.140070140
mov rbx, qword [rsp + 0x2e0]
add rsp, 0x2d0
pop rdi
ret
call fcn.14007d0fc
nop
call fcn.14007d0fc
nop
call fcn.14007d0fc
nop
call fcn.14007d0fc
int3