Function at 0x140012b70
Capabilities:
Create process on windows

Disassembly:
push rdi
sub rsp, 0x930
mov rax, qword [0x140038040]
xor rax, rsp
mov qword [rsp + 0x920], rax
mov dword [rsp + 0xa8], 0xadad
mov dword [rsp + 0x30], 0x3368
mov dword [rsp + 0x38], 0x10b55
mov dword [rsp + 0x3c], 0x68c3
mov dword [rsp + 0x34], 0xbed2
lea rdx, [0x140034888]
lea rcx, str.license.dat
call fcn.14001c62c
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0xa0], 0
je 0x140013435
mov r8, qword [rsp + 0xa0]
mov edx, 0x800
lea rcx, [rsp + 0x120]
call fcn.14001cc44
test rax, rax
je 0x14001338c
mov eax, dword [0x140038c38]
cmp dword [rsp + 0x30], eax
jb 0x140012d3e
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x4c], eax
jmp 0x140012c27
mov eax, dword [rsp + 0x4c]
inc eax
mov dword [rsp + 0x4c], eax
mov eax, dword [0x140038bf0]
cmp dword [rsp + 0x4c], eax
jle 0x140012d39
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x34]
mov edx, dword [rsp + 0x3c]
add edx, ecx
mov ecx, edx
and eax, ecx
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x3c]
add eax, 0x53de
sar eax, 0xd9
mov ecx, dword [rsp + 0x34]
mov edx, dword [rsp + 0x3c]
sub edx, ecx
mov ecx, edx
mov dword [rsp + 0x98], ecx
mov edx, dword [rsp + 0x30]
movzx ecx, dl
mov edx, dword [rsp + 0x98]
shl edx, cl
mov ecx, edx
or eax, ecx
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x3c]
cdq
idiv dword [rsp + 0x3c]
imul eax, dword [rsp + 0x38]
add eax, dword [rsp + 0x38]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x3c]
add eax, 0xf99f
mov dword [rsp + 0x30], eax
imul eax, dword [rsp + 0x38], 0x18c1
add eax, dword [rsp + 0x3c]
mov dword [rsp + 0x9c], eax
mov eax, dword [rsp + 0x34]
cdq
idiv dword [rsp + 0x3c]
mov eax, edx
mov ecx, 0xba64
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x9c]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x34]
movzx ecx, al
mov eax, dword [rsp + 0x30]
sar eax, cl
mov dword [rsp + 0x70], eax
mov eax, 0xcb76
cdq
idiv dword [rsp + 0x38]
mov eax, edx
mov ecx, dword [rsp + 0x70]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x30]
sar eax, cl
mov dword [rsp + 0x34], eax
jmp 0x140012c1d
jmp 0x140013387
mov eax, dword [rsp + 0x3c]
cmp dword [rsp + 0x3c], eax
jle 0x140013387
mov eax, dword [0x140038c04]
cmp dword [rsp + 0x30], eax
jle 0x140012d62
mov eax, dword [rsp + 0x3c]
cmp dword [rsp + 0x34], eax
jg 0x140012dca
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x50], eax
jmp 0x140012d76
mov eax, dword [rsp + 0x50]
inc eax
mov dword [rsp + 0x50], eax
mov eax, dword [0x140038bec]
cmp dword [rsp + 0x50], eax
jbe 0x140012dc5
mov edx, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x3c]
call fcn.1400011b0
mov eax, dword [rsp + 0x3c]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
add eax, dword [rsp + 0x38]
add eax, dword [rsp + 0x34]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x38]
shl eax, 0x93
mov ecx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x30]
sub edx, ecx
mov ecx, edx
add ecx, dword [rsp + 0x38]
or eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140012d6c
jmp 0x140013387
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x54], eax
jmp 0x140012dde
mov eax, dword [rsp + 0x54]
inc eax
mov dword [rsp + 0x54], eax
mov eax, dword [0x140038b4c]
cmp dword [rsp + 0x54], eax
jb 0x140013387
mov eax, dword [0x140038bbc]
mov dword [rsp + 0x44], eax
cmp dword [rsp + 0x44], 0x3578
je 0x140012f49
cmp dword [rsp + 0x44], 0x4d46
je 0x14001306c
cmp dword [rsp + 0x44], 0xae11
je 0x140012e31
cmp dword [rsp + 0x44], 0x16cc9
je 0x140013130
jmp 0x140013382
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x58], eax
jmp 0x140012e45
mov eax, dword [rsp + 0x58]
dec eax
mov dword [rsp + 0x58], eax
mov eax, dword [0x140038c04]
cmp dword [rsp + 0x58], eax
jne 0x140012f44
mov dword [rsp + 0x38], 0x149bc
mov eax, dword [rsp + 0x34]
movzx ecx, al
mov eax, dword [rsp + 0x38]
shl eax, cl
mov ecx, dword [rsp + 0x34]
sar eax, cl
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x30]
cdq
idiv dword [rsp + 0x34]
mov ecx, dword [rsp + 0x38]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x3c]
mov edx, dword [rsp + 0x3c]
sub edx, ecx
mov ecx, edx
add ecx, 0x2492
shl eax, cl
mov dword [rsp + 0x38], eax
mov ecx, dword [rsp + 0x38]
call fcn.140001aa0
mov eax, dword [rsp + 0x34]
add eax, 0xb2b6
mov dword [rsp + 0x74], eax
mov ecx, dword [rsp + 0x38]
imul ecx, dword [rsp + 0x30]
mov eax, ecx
cdq
idiv dword [rsp + 0x3c]
mov eax, edx
mov ecx, dword [rsp + 0x74]
sub ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [rsp + 0x38]
shl eax, cl
mov dword [rsp + 0x30], eax
xor edx, edx
mov ecx, 0x7e924
call qword [sym.imp.ole32.dll_CreatePointerMoniker]
mov dword [rsp + 0x38], eax
imul eax, dword [rsp + 0x34], 0x8f3b
sub eax, dword [rsp + 0x38]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x34]
cmp dword [0x140038c40], eax
jb 0x140012e55
mov r9d, dword [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
mov edx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
call fcn.140001a40
mov eax, dword [rsp + 0x30]
imul eax, dword [rsp + 0x38]
mov dword [rsp + 0x3c], eax
jmp 0x140012e3b
jmp 0x140013382
mov eax, 0x4871
cdq
idiv dword [rsp + 0x3c]
sub eax, dword [rsp + 0x3c]
mov dword [0x140038c38], eax
mov edx, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x38]
call fcn.140001f30
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x30], eax
call fcn.1400026e0
mov eax, dword [rsp + 0x34]
cdq
idiv dword [rsp + 0x38]
mov ecx, dword [rsp + 0x30]
lea eax, [rcx + rax - 0x7d59]
mov ecx, dword [rsp + 0x30]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x34]
imul eax, dword [rsp + 0x34]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x38]
movzx ecx, al
mov eax, dword [rsp + 0x34]
shl eax, cl
or eax, dword [rsp + 0x3c]
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x38]
mov r8d, dword [rsp + 0x34]
mov edx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetTapePosition]
mov dword [rsp + 0x34], eax
mov ecx, dword [rsp + 0x34]
call fcn.140002660
mov eax, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x34]
sub ecx, eax
mov eax, ecx
mov ecx, 0xc3ff
mov dword [rsp + 0x78], ecx
movzx ecx, al
mov eax, dword [rsp + 0x78]
shl eax, cl
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x30]
cdq
mov ecx, 0x5840
idiv ecx
sub eax, dword [rsp + 0x38]
sub eax, dword [rsp + 0x30]
mov dword [rsp + 0x3c], eax
mov dword [rsp + 0x30], 0
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
mov ecx, dword [rsp + 0x30]
call fcn.140002660
mov eax, 0x17ab3
cdq
idiv dword [rsp + 0x30]
cdq
idiv dword [rsp + 0x3c]
mov dword [0x140038b3c], eax
mov eax, dword [rsp + 0x30]
imul eax, dword [rsp + 0x30]
sub eax, 0x6a09
sub eax, dword [rsp + 0x3c]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x34]
imul eax, dword [rsp + 0x30]
or eax, dword [rsp + 0x38]
mov dword [0x140038bb8], eax
mov eax, dword [rsp + 0x30]
imul eax, dword [rsp + 0x38]
add eax, dword [rsp + 0x30]
or eax, dword [rsp + 0x34]
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x34]
imul eax, dword [rsp + 0x30]
mov dword [rsp + 0x7c], eax
mov eax, dword [rsp + 0x3c]
cdq
idiv dword [rsp + 0x30]
mov eax, edx
mov ecx, dword [rsp + 0x7c]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x34]
mov dword [rsp + 0x3c], eax
mov ecx, dword [rsp + 0x34]
call fcn.140002180
mov eax, dword [rsp + 0x38]
cdq
idiv dword [rsp + 0x38]
mov eax, edx
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x30]
cdq
idiv dword [rsp + 0x34]
mov ecx, dword [rsp + 0x80]
sub ecx, eax
mov eax, ecx
shl eax, 0xe6
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x30]
sub eax, dword [rsp + 0x3c]
movzx ecx, al
mov eax, dword [rsp + 0x34]
shl eax, cl
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x38]
cmp dword [0x140038bf0], eax
jle 0x14001306c
jmp 0x140013382
mov eax, dword [rsp + 0x3c]
mov dword [0x140038cac], eax
mov eax, dword [rsp + 0x3c]
cdq
idiv dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [rsp + 0x34]
shl eax, cl
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x30]
imul eax, dword [rsp + 0x30]
add eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x3c]
sub ecx, 0x5e26
shl eax, cl
mov dword [rsp + 0x38], eax
mov edx, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x3c]
call fcn.1400060d0
cmp dword [0x140038bbc], eax
jbe 0x14001324a
mov dword [rsp + 0x38], 0x14c81
mov eax, dword [rsp + 0x34]
sub eax, 0x11f60
mov dword [rsp + 0x84], eax
mov eax, dword [rsp + 0x3c]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
cdq
idiv dword [rsp + 0x34]
mov eax, edx
imul eax, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x84]
or ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x30]
sar eax, 0xc5
mov ecx, dword [rsp + 0x38]
imul ecx, dword [rsp + 0x30]
or eax, ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x38]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x34]
lea eax, [rax + rcx - 0xcbee]
mov dword [rsp + 0x34], eax
mov edx, dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x30]
call fcn.1400011b0
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov eax, ecx
mov dword [0x140038bec], eax
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
sub eax, 0xbd42
sub eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x38]
imul ecx, dword [rsp + 0x3c]
imul ecx, dword [rsp + 0x30]
add eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140013382
mov eax, dword [rsp + 0x30]
cdq
idiv dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x38]
mov dword [rsp + 0x38], eax
mov eax, 0x3e25
cdq
idiv dword [rsp + 0x30]
mov eax, edx
mov ecx, dword [rsp + 0x3c]
mov edx, dword [rsp + 0x3c]
add edx, ecx
mov ecx, edx
shl eax, cl
mov dword [rsp + 0x30], eax
mov r9d, dword [rsp + 0x3c]
mov r8d, dword [rsp + 0x30]
mov edx, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x34]
call qword [sym.imp.GDI32.dll_SetViewportExtEx]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [rsp + 0x3c]
sar eax, cl
mov ecx, dword [rsp + 0x30]
mov edx, dword [rsp + 0x34]
add edx, ecx
mov ecx, edx
add ecx, dword [rsp + 0x30]
and eax, ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x88], eax
mov eax, dword [rsp + 0x30]
cdq
idiv dword [rsp + 0x38]
imul eax, dword [rsp + 0x3c]
imul eax, dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [rsp + 0x88]
shl eax, cl
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x38]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
mov ecx, dword [rsp + 0x38]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x3c]
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x34]
imul eax, dword [rsp + 0x38]
mov dword [rsp + 0x8c], eax
mov eax, dword [rsp + 0x38]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
mov ecx, dword [rsp + 0x8c]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x3c]
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x3c]
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x30]
cdq
idiv dword [rsp + 0x3c]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x90]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
jmp 0x140012dd4
jmp 0x140012be0
mov rcx, qword [rsp + 0xa0]
call fcn.14001c9f4
test eax, eax
je 0x140013430
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x5c], eax
jmp 0x1400133b5
mov eax, dword [rsp + 0x5c]
dec eax
mov dword [rsp + 0x5c], eax
mov eax, dword [0x140038bbc]
cmp dword [rsp + 0x5c], eax
jb 0x140013430
mov eax, dword [rsp + 0x30]
cdq
idiv dword [rsp + 0x34]
cdq
idiv dword [rsp + 0x34]
mov eax, edx
mov dword [rsp + 0x94], eax
mov eax, dword [rsp + 0x3c]
cdq
idiv dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [rsp + 0x94]
sar eax, cl
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x34]
mov ecx, dword [rsp + 0x30]
add ecx, eax
mov eax, ecx
movzx ecx, al
mov eax, dword [rsp + 0x38]
sar eax, cl
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [rsp + 0x30]
sar eax, cl
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x38]
and ecx, eax
mov eax, ecx
mov dword [rsp + 0x38], eax
jmp 0x1400133ab
jmp 0x14001355c
lea rax, [rsp + 0x40]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x40]
call fcn.140013580
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x60], 0
jmp 0x140013475
mov rax, qword [rsp + 0x60]
inc rax
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0x1a
jae 0x1400134d7
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
movzx eax, word [rax]
mov rcx, qword [rsp + 0x68]
movsx ecx, byte [rcx]
xor eax, ecx
mov word [rsp + 0x48], ax
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
lea rax, [rax + rcx*2 + 2]
mov qword [rsp + 0xb8], rax
movzx eax, word [rsp + 0x48]
mov rcx, qword [rsp + 0xb8]
mov word [rcx], ax
jmp 0x140013468
mov eax, 0x1a
imul rax, rax, 2
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + rax + 2]
mov qword [rsp + 0xc0], rax
xor eax, eax
mov rcx, qword [rsp + 0xc0]
mov word [rcx], ax
mov rax, qword [rsp + 0x68]
add rax, 2
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xd0]
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
mov r8, rax
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov qword [rsp + 0xd8], rax
call fcn.1400129f0
nop
mov rcx, qword [rsp + 0x920]
xor rcx, rsp
call fcn.1400160a0
add rsp, 0x930
pop rdi
ret