Function at 0x7ff9101b5c70
Capabilities:
Execute command

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0xd0
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x7ff91020e040]
xor rax, rsp
mov qword [rsp + 0xb0], rax
mov r14d, ecx
mov dword [rsp + 0x40], ecx
lea r9, [rsp + 0x78]
xor r8d, r8d
mov dl, 1
mov ecx, 0x14
call qword [0x7ff91021a778]
mov dword [rsp + 0x48], 0x30
xor esi, esi
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x60], esi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x68], rsi
movups xmm0, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rsp + 0x90], xmm1
movups xmm0, xmmword [rsp + 0x68]
movups xmmword [rsp + 0xa0], xmm0
mov ecx, dword [0x7ff91020e0f0]
call fcn.7ff9101c9f00
mov rbx, rax
mov qword [0x7ff910211dd8], rax
mov r8d, dword [0x7ff91020e0f0]
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
movsd xmm6, qword [0x7ff9101f1e30]
nop dword [rax]
mov rcx, rbx
call fcn.7ff9101c96f4
test rbx, rbx
je 0x7ff9101b5d48
mov qword [0x7ff910211dd8], 0x8123
mov eax, dword [0x7ff91020e0f0]
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
cvttsd2si rax, xmm0
mov dword [0x7ff91020e0f0], eax
mov ecx, eax
call fcn.7ff9101c9f00
mov qword [0x7ff910211dd8], rax
jmp 0x7ff9101b5d84
mov ecx, 1
call qword [sym.imp.kernel32.dll_Sleep]
mov rax, qword [0x7ff910217338]
xor r9d, r9d
mov r8d, dword [0x7ff91020e0f0]
mov rdx, qword [0x7ff910211dd8]
mov ecx, 0x10
call rax
cmp eax, 0xc0000004
jne 0x7ff9101b5dc1
mov rbx, qword [0x7ff910211dd8]
jmp 0x7ff9101b5d30
test eax, eax
jns 0x7ff9101b5de5
lea rdx, [0x7ff9101ed568]
mov rcx, qword [sym.imp.msvcp140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.7ff9100c4490
lea rcx, [0x7ff9101ed4e8]
call qword [sym.imp.ucrtbase.dll_system]
mov edi, esi
mov rax, qword [0x7ff910211dd8]
cmp dword [rax], 0
jbe 0x7ff9101b5f0c
call qword [sym.imp.kernel32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [0x7ff91021a9ac]
call qword [sym.imp.kernel32.dll_GetProcessHandleCount]
cmp dword [0x7ff91021a9ac], 0x32
ja 0x7ff9101b5f42
mov eax, edi
lea rbx, [rax + rax*2]
mov rax, qword [0x7ff910211dd8]
cmp word [rax + rbx*8 + 0xe], 0
je 0x7ff9101b5efb
cmp byte [rax + rbx*8 + 0xc], 7
jne 0x7ff9101b5efb
mov eax, dword [rax + rbx*8 + 8]
mov qword [0x7ff910211dc8], rax
mov rcx, qword [0x7ff910211df0]
test rcx, rcx
je 0x7ff9101b5e5b
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rax, qword [0x7ff91021a738]
lea r9, [0x7ff910211dc8]
lea r8, [rsp + 0x80]
mov edx, 0x40
lea rcx, [0x7ff910211df0]
call rax
mov r11, qword [0x7ff910211df0]
lea rcx, [r11 - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x7ff9101b5efb
test eax, eax
js 0x7ff9101b5efb
mov r10, qword [0x7ff910214938]
mov rax, qword [0x7ff910211dd8]
movzx edx, word [rax + rbx*8 + 0xe]
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], 0x1fffff
lea r9, [0x7ff910211de8]
mov r8, 0xffffffffffffffff
mov rcx, r11
call r10
mov rdx, qword [0x7ff910211de8]
lea rcx, [rdx - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x7ff9101b5efb
test eax, eax
js 0x7ff9101b5efb
mov rcx, rdx
call qword [sym.imp.kernel32.dll_GetProcessId]
cmp eax, r14d
je 0x7ff9101b5f0c
mov rcx, qword [0x7ff910211de8]
call qword [sym.imp.kernel32.dll_CloseHandle]
inc edi
mov rax, qword [0x7ff910211dd8]
cmp edi, dword [rax]
jb 0x7ff9101b5df7
mov rax, qword [0x7ff910211de8]
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.7ff9101c9690
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r14
ret
mov r8d, r14d
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.kernel32.dll_OpenProcess]
jmp 0x7ff9101b5f13