Function at 0x1401f7d7f
Capabilities:
Create process on windows
Terminate process

Disassembly:
call fcn.1401f3a10
call fcn.1401f3330
lea rdx, [rbp + 0xff8]
call fcn.1401f8530
lea rdx, [rbp + 0xfe0]
mov ebx, eax
call fcn.1401f8530
mov esi, eax
call fcn.1401f3a10
call fcn.1401f3330
test ebx, ebx
je 0x1401f7d87
xor ecx, ecx
lea r8, [0x1402595d8]
mov r9d, 0x1030
test esi, esi
je 0x1401f7d78
lea rdx, [0x1402595e0]
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1401f7d22
lea rdx, [0x1402596a0]
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1401f7d22
test esi, esi
je 0x1401f7dac
mov r9d, 0x1030
lea r8, [0x1402595d8]
lea rdx, [0x140259740]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x1401f7d22
call fcn.1401f3a10
call fcn.1401f3330
call fcn.1401f3330
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, 0x12c
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, 0xfffffed4
sub ecx, ebx
movsxd rcx, ecx
add rax, rcx
mov rdx, rax
shr rdx, 0x20
mov ecx, edx
xor ecx, eax
sub ecx, edx
cmp ecx, 0x64
jg 0x1401f7fe6
call fcn.1401f3a10
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov rsi, rax
mov ebx, 0xa
nop dword [rax + rax]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x1f4
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Beep]
sub rbx, 1
jne 0x1401f7e10
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
sub eax, esi
cmp eax, 0x2710
jl 0x1401f801b
call fcn.1401f3330
nop dword [rax]
inc rdi
cmp byte [r14 + rdi], r15b
jne 0x1401f7e50
shr rdi, 1
lea r9, [rbp + 0x1290]
mov rdx, r14
mov dword [rsp + 0x20], edi
call fcn.1401f8960
lea r8, [rbp + 0x1290]
lea rdx, [rbp - 0x80]
call fcn.1401f8160
call fcn.1401f3a10
call fcn.1401f3330
mov r8d, 0x65
mov dword [rsp + 0x20], r15d
lea rdx, [rbp + 0x96]
call fcn.1401f87d0
call fcn.1401f3a10
mov r8d, 0x66
mov dword [rsp + 0x20], 8
lea rdx, [rbp + 0x19a]
call fcn.1401f87d0
call fcn.1401f3330
mov r8d, 0x67
mov dword [rsp + 0x20], r15d
lea rdx, [rbp + 0x3a2]
call fcn.1401f87d0
call fcn.1401f3a10
mov r8d, 0x68
mov dword [rsp + 0x20], r15d
lea rdx, [rbp + 0x29e]
call fcn.1401f87d0
call fcn.1401f3330
call fcn.1401f3330
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1080], xmm0
mov qword [rbp + 0x10e0], rax
movups xmmword [rbp + 0x1090], xmm0
mov qword [rsp + 0x68], rax
movups xmmword [rbp + 0x10a0], xmm0
movups xmmword [rbp + 0x10b0], xmm0
movups xmmword [rbp + 0x10c0], xmm0
movups xmmword [rbp + 0x10d0], xmm0
movups xmmword [rsp + 0x58], xmm0
call fcn.1401f3a10
call fcn.1401f3330
lea rax, [rsp + 0x58]
xor r9d, r9d
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x96]
lea rax, [rbp + 0x1080]
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor edx, edx
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x1401f7fac
call fcn.1401f3a10
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1401f3330
call fcn.1401f3330
call fcn.1401f3a10
lea r8, [0x1402597d0]
lea rdx, [rbp + 0x1010]
lea rcx, [rsp + 0x50]
call fcn.140211ecc
test eax, eax
jne 0x1401f7fe6
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1401f7fe6
call fcn.140211d18
call fcn.1401f3330
mov rsi, qword [rsp + 0x1430]
mov rcx, qword [rbp + 0x1300]
xor rcx, rsp
call fcn.1401fbb10
lea r11, [rsp + 0x1410]
mov rbx, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.1401f3bf0
call fcn.1401f3bf0
call fcn.1401f3c00
call fcn.1401f8910
call fcn.1401f3c00
call fcn.1401f3bf0
call fcn.1401f3c00
call fcn.1401f88b0
call fcn.1401f3bf0
call fcn.1401f3c00
xor ecx, ecx
invalid
invalid
invalid
invalid