Function at 0x140001040
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
movups xmmword [rbp - 0x10], xmm6
mov qword [rbp - 0x18], 0xfffffffffffffffe
imul eax, dword [0x1401d6044], 0x3632d0c0
imul ecx, dword [str.wYk_A], 0x65e1f411
add eax, ecx
add eax, 0x1f06ef9a
shl rax, 5
call fcn.140035520
sub rsp, rax
mov rdi, rsp
mov eax, dword [0x1401d604c]
mov ecx, dword [0x1401d6050]
shrd ecx, eax, 8
mov r13, rdi
xor ecx, 0x410ff9d0
mov eax, ecx
imul rax, rax, 0x68
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.140035520
sub rsp, rax
mov r15, rsp
imul eax, dword [0x1401d6054], 0x2f43feb7
imul ecx, dword [0x1401d6058], 0x844a1b9e
add eax, ecx
add eax, 0x16e17626
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.140035520
sub rsp, rax
mov r12, rsp
sub rsp, 0x20
call fcn.14001f2e0
add rsp, 0x20
mov rax, qword [0x1401d6060]
mov rcx, qword [0x1401d6068]
shrd rcx, rax, 0x2f
movabs rax, 0xedb1311181643e34
xor rax, rcx
mov qword [rdi + 8], rax
movabs rax, 0x1cd343f185fe8686
imul rax, qword [0x1401d6070]
movabs rcx, 0xef95aab544fdf4b4
imul rcx, qword [0x1401d6078]
mov rdx, rcx
add rdx, rax
movabs rcx, 0xe9a2561230185a2a
add rcx, rdx
sub rsp, 0x20
call fcn.14003548c
add rsp, 0x20
mov rsi, rax
mov qword [rdi], rax
sub rsp, 0x20
call fcn.14001f350
add rsp, 0x20
cdqe
lea rcx, [0x1400457a0]
mov rax, qword [rcx + rax*8]
mov qword [rdi + 0x10], rax
sub rsp, 0x20
call fcn.14001f3c0
add rsp, 0x20
cdqe
lea rcx, [0x1400457c0]
mov rax, qword [rcx + rax*8]
mov qword [rdi + 0x18], rax
sub rsp, 0x20
lea rcx, [0x1401eb078]
lea rdx, [0x140045017]
call fcn.14000fc50
add rsp, 0x20
movups xmm0, xmmword [0x1401eb078]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x1401eb086]
movups xmmword [rsi + 0xe], xmm0
sub rsp, 0x20
call fcn.14001f450
add rsp, 0x20
movzx eax, byte [0x1401d6080]
movzx ecx, byte [0x1401d6081]
imul eax, eax, 0x78
imul ecx, ecx, 0xffffff95
add cl, al
add cl, 0xbe
mov byte [rsi + 0x1e], cl
sub rsp, 0x20
call fcn.14003701c
add rsp, 0x20
mov rax, qword [rax]
mov rdi, qword [rax]
sub rsp, 0x20
mov rcx, rdi
call fcn.140038810
add rsp, 0x20
mov r14, rax
mov rbx, rax
sub rsp, 0x20
call fcn.14001f4d0
add rsp, 0x20
cdqe
lea rcx, [0x1400457e0]
cmp r14, qword [rcx + rax*8]
mov qword [rbp - 0x20], r13
jbe 0x140001277
nop
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, r13
mov rdx, rbx
mov r9, rdi
call fcn.14000edb0
add rsp, 0x30
nop
mov r14, qword [rbp - 0x20]
mov rsi, qword [r14 + 0x10]
mov rbx, qword [r14 + 0x18]
jmp 0x1400012f5
mov qword [rbp - 0x28], r12
mov r12, r15
mov r15, rsi
add rsi, 0x1e
sub rsp, 0x20
call fcn.14001f550
add rsp, 0x20
cdqe
lea rcx, [0x140045800]
mov rax, qword [rcx + rax*8]
mov r14, r13
mov r13, rax
or r13, rbx
mov qword [r14 + 0x10], r13
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
call fcn.140043730
call fcn.14001f5e0
add rsp, 0x20
movzx eax, byte [0x1401d6082]
movzx ecx, byte [0x1401d6083]
imul eax, eax, 0xffffffbe
lea ecx, [rcx + rcx*4]
neg ecx
add cl, al
add cl, 0x8b
mov byte [r15 + r13], cl
mov r15, r12
mov r12, qword [rbp - 0x28]
mov ebx, 0x1f
mov rsi, r13
mov rdi, rbx
sub rdi, rsi
sub rsp, 0x20
call fcn.14001f660
add rsp, 0x20
cdqe
lea rcx, [0x140045820]
cmp rdi, qword [rcx + rax*8]
jae 0x1400013ac
sub rsp, 0x20
lea rsi, [0x1401eb09c]
lea rdx, [0x140045065]
mov rcx, rsi
call fcn.140010430
add rsp, 0x20
mov rax, qword [0x1401d6088]
mov rcx, qword [0x1401d6090]
shrd rcx, rax, 0x2f
movabs rdx, 0xa2d524c40143aa0b
xor rdx, rcx
movabs rax, 0x1c8aa198cdf1d0c4
imul rax, qword [0x1401d6098]
movabs rcx, 0x5bc2798d646c0f8a
imul rcx, qword [0x1401d60a0]
add rcx, rax
movabs rax, 0x9bd39454bcf89773
add rax, rcx
nop
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rcx, r14
mov r9, rsi
call fcn.14000edb0
add rsp, 0x30
nop
jmp 0x14000144c
sub rsp, 0x20
call fcn.14001f6e0
add rsp, 0x20
cdqe
lea rcx, [0x140045840]
mov rdi, qword [rcx + rax*8]
add rdi, rsi
mov qword [r14 + 0x10], rdi
sub rsp, 0x20
call fcn.14001f750
add rsp, 0x20
movsxd rcx, eax
lea rdx, [0x140045860]
mov rax, r14
cmp rbx, qword [rdx + rcx*8]
jbe 0x1400013f0
mov rax, qword [r14]
mov rbx, rax
sub rsp, 0x20
lea rcx, [0x1401eb09c]
lea rdx, [0x140045065]
call fcn.140010430
add rsp, 0x20
mov eax, dword [0x1401eb09c]
mov dword [rbx + rsi], eax
mov eax, dword [0x1401eb09f]
mov dword [rbx + rsi + 3], eax
sub rsp, 0x20
call fcn.14001f7c0
add rsp, 0x20
movzx eax, byte [0x1401d6084]
movzx ecx, byte [0x1401d6085]
add eax, eax
lea eax, [rax + rax*2]
imul ecx, ecx, 0x5f
add cl, al
add cl, 0xfc
mov byte [rbx + rdi], cl
xorps xmm6, xmm6
movups xmmword [r15 + 0x50], xmm6
movups xmmword [r15 + 0x40], xmm6
movups xmmword [r15 + 0x30], xmm6
movups xmmword [r15 + 0x20], xmm6
movups xmmword [r15 + 0x10], xmm6
movups xmmword [r15], xmm6
mov qword [r15 + 0x60], 0
sub rsp, 0x20
call fcn.14001f850
add rsp, 0x20
cdqe
lea rcx, [0x140045878]
mov eax, dword [rcx + rax*4]
mov dword [r15], eax
movups xmmword [r12], xmm6
mov qword [r12 + 0x10], 0
mov rdi, qword [rbp - 0x20]
mov rsi, qword [rdi + 0x18]
sub rsp, 0x20
call fcn.14001f8d0
add rsp, 0x20
cdqe
lea rcx, [0x140045890]
mov rdx, rdi
cmp rsi, qword [rcx + rax*8]
jbe 0x1400014c8
mov rdx, qword [rdi]
imul eax, dword [0x1401d60a8], 0xed636278
imul ecx, dword [0x1401d60ac], 0x5c6868c3
add eax, ecx
add eax, 0xa0fe7532
imul ecx, dword [str._bq.], 0x50d10473
imul r8d, dword [0x1401d60b4], 0xac3d7d85
add ecx, r8d
add ecx, 0xb27b5216
sub rsp, 0x50
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r15
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], eax
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
mov rcx, qword [r12]
sub rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
add rsp, 0x20
mov rcx, qword [r12 + 8]
sub rsp, 0x20
call rsi
add rsp, 0x20
mov rsi, qword [rdi + 0x18]
sub rsp, 0x20
call fcn.14001f940
add rsp, 0x20
cdqe
lea rcx, [0x1400458b0]
cmp rsi, qword [rcx + rax*8]
jbe 0x140001624
mov rbx, qword [rdi]
sub rsp, 0x20
call fcn.14001f9c0
add rsp, 0x20
cdqe
lea rcx, [0x1400458d0]
mov rdi, qword [rcx + rax*8]
add rdi, rsi
sub rsp, 0x20
call fcn.14001fa30
add rsp, 0x20
cdqe
lea rcx, [0x1400458f0]
cmp rdi, qword [rcx + rax*8]
jbe 0x140001611
mov rdi, qword [rbx - 8]
sub rsp, 0x20
call fcn.14001faa0
add rsp, 0x20
cdqe
lea rcx, [0x140045910]
add rbx, qword [rcx + rax*8]
sub rbx, rdi
sub rsp, 0x20
call fcn.14001fb20
add rsp, 0x20
cdqe
lea rcx, [0x140045930]
cmp rbx, qword [rcx + rax*8]
jae 0x140001639
sub rsp, 0x20
call fcn.14001fb90
add rsp, 0x20
cdqe
lea rcx, [0x140045950]
add rsi, qword [rcx + rax*8]
mov rdx, rsi
mov rcx, rdi
jmp 0x140001617
mov rdx, rdi
mov rcx, rbx
sub rsp, 0x20
call fcn.1400354d0
add rsp, 0x20
movups xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
sub rsp, 0x20
call fcn.1400380f8
int3