Function at 0x14000dd10
Capabilities:
Create process on windows

Disassembly:
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x1f8
mov rax, qword [0x14005b080]
xor rax, rsp
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x20], r8
mov r9d, edx
mov r8, rcx
lea rdx, str._s__d___s_
lea rcx, [rsp + 0xe0]
call fcn.140021d60
xorps xmm0, xmm0
mov dword [rsp + 0x70], 0x68
movups xmmword [rsp + 0xa8], xmm0
xor r12d, r12d
mov dword [rsp + 0xac], 1
mov word [rsp + 0xb0], r12w
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rsp + 0x88], xmm0
movups xmmword [rsp + 0x98], xmm0
movups xmmword [rsp + 0xb8], xmm0
movups xmmword [rsp + 0xc8], xmm0
call fcn.14000b0a0
movsx r14d, al
call fcn.14000b090
movsx r15d, al
mov edi, r15d
imul edi, r14d
call fcn.14000b0d0
movsx r8d, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx esi, al
lea ecx, [rdi + rsi]
lea eax, [rcx + rdi*4]
movsx ecx, byte [0x14005bcd0]
add eax, r8d
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
cmp r8d, eax
je 0x14000e10b
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x48], rax
lea rdx, [rsp + 0xe0]
lea rax, [rsp + 0x70]
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ecx, r12d
xorps xmm2, xmm2
test eax, eax
movsx eax, byte [0x14005bcd2]
sete cl
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14005bcd4]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
lea eax, [rdi + rdi*4]
lea ebp, [rsi + rax*2]
cvtsi2sd xmm2, rcx
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movsx ecx, byte [0x14005bcd0]
add eax, ebp
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
cmp r8d, eax
je 0x14000ded7
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
je 0x14000ded7
lea r9d, [r12 + 0xa]
jmp 0x14000df41
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx ecx, byte [0x14005bcd0]
add eax, esi
lea eax, [rax + rdi*2]
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
cmp r8d, eax
je 0x14000df3c
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea edx, [rdi + rdi*2]
movsx ecx, byte [0x14005bcd0]
add eax, esi
xorps xmm0, xmm0
lea eax, [rax + rdx*2]
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si r9d, xmm0
jmp 0x14000df41
mov r9d, dword [rsp + 0x50]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx ecx, byte [0x14005bcd0]
add eax, ebp
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
sub r8d, eax
imul r8d, r9d
test r8d, r8d
je 0x14000e10b
mov qword [rsp + 0x1f0], rbx
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Failed_to_launch_injector__Error_code:
mov ebx, eax
lea rcx, [0x14005c4f0]
call fcn.140021a20
mov rcx, rax
mov edx, ebx
call fcn.14001f180
mov rcx, rax
call fcn.140021cd0
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx ecx, byte [0x14005bcd0]
add eax, edi
mov rbx, qword [rsp + 0x1f0]
add eax, esi
div ecx
xorps xmm2, xmm2
xor edx, edx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
movsx eax, byte [0x14005bcd4]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x50], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movsx ecx, byte [0x14005bcd0]
add eax, ebp
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
cmp r8d, eax
je 0x14000e069
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
jne 0x14000e104
call fcn.14000b0d0
movsx edx, al
mov ecx, r15d
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
imul ecx, r14d
lea r8d, [rdx + rcx*2]
movsx ecx, byte [0x14005bcd0]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
cmp r8d, eax
je 0x14000e0fb
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
xorps xmm0, xmm0
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x14005bcd0]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
jmp 0x14000e0ff
mov eax, dword [rsp + 0x50]
cmp r12d, eax
jge 0x14000e10b
xor eax, eax
jmp 0x14000e2de
mov rcx, qword [rsp + 0x58]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
imul r8d, edx, 7
call fcn.14000b0d0
movsx ecx, al
xor edx, edx
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
add r8d, ecx
movsx ecx, byte [0x14005bcd0]
add eax, r8d
div ecx
xorps xmm2, xmm2
mov r8d, eax
movsx eax, byte [0x14005bcd3]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm2, rax
movsx eax, byte [0x14005bcd2]
movd xmm1, eax
movsx eax, byte [0x14005bcd4]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rsp + 0x50], xmm1
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*4]
call fcn.14000b0d0
movsx ecx, al
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x14005bcd0]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
cmp r8d, eax
je 0x14000e232
call fcn.14000b0b0
movsx edx, al
movsx eax, byte [0x14005e1b0]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.14000b0e0
movsx ecx, al
sub r8d, ecx
call fcn.14000b0c0
movsx ecx, al
add r8d, ecx
movsx ecx, byte [0x14005bcd4]
add ecx, r8d
jne 0x14000e2d9
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
call fcn.14000b0d0
movsx ecx, al
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x14005bcd0]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
cmp r8d, eax
je 0x14000e2d0
call fcn.14000b0a0
movsx edx, al
call fcn.14000b090
movsx ecx, al
imul edx, ecx
lea edx, [rdx + rdx*2]
call fcn.14000b0d0
movsx ecx, al
xorps xmm0, xmm0
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea r8d, [rcx + rdx*2]
movsx ecx, byte [0x14005bcd0]
add eax, r8d
xor edx, edx
div ecx
mov r8d, eax
movsx eax, byte [0x14005bcd3]
sub r8d, eax
mov eax, r8d
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rsp + 0x50]
cvttsd2si eax, xmm0
jmp 0x14000e2d4
mov eax, dword [rsp + 0x50]
cmp r12d, eax
jge 0x14000e2de
mov eax, 1
mov rcx, qword [rsp + 0x1e0]
xor rcx, rsp
call fcn.140025340
add rsp, 0x1f8
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret