Function at 0x1402031ee
Capabilities:
Create process on windows

Disassembly:
jmp 0x140388b20
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0x1718
call fcn.1401fa5d5
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x43a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x1738]
mov rax, qword [0x1406fa740]
xor rax, rbp
mov qword [rbp + 0x16d8], rax
lea rcx, [0x1420079e7]
call fcn.140205606
mov edx, 0x18
lea rcx, [rbp + 8]
call fcn.140204508
lea rcx, [rbp + 8]
call fcn.1401f9a9a
nop
mov rdx, qword [rbp + 0x1708]
lea rcx, [rbp + 8]
call fcn.140201fc4
movzx eax, al
test eax, eax
jne 0x140388bc5
mov rdx, qword [rbp + 0x1708]
lea rcx, str.Cant_open_file:__s_n
call fcn.1401fe4d7
nop
lea rcx, [rbp + 8]
call fcn.1401fc989
jmp 0x140388eda
lea rcx, [rbp + 8]
call fcn.140203b03
mov rax, qword [rbp + 0x1700]
mov r9d, dword [rax + 0xa3200]
lea r8, str.Date:_d_r_n
mov edx, 0xc8
lea rcx, [rbp + 0x40]
call fcn.1401f8de8
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 8]
call fcn.140200273
lea rdx, str._tfeidxtg__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x8e0
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1402003c2
lea rdx, str._tfeidx__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x36540
mov r8, rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1700]
call fcn.140202c8a
mov rax, qword [rbp + 0x1700]
add rax, 0x87a20
mov r8, rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1700]
call fcn.140202c8a
lea rdx, str._tfestktg__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0xdff8
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1402003c2
lea rdx, str._tfestk__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x43e10
mov r8, rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1700]
call fcn.140202c8a
mov rax, qword [rbp + 0x1700]
add rax, 0x952f0
mov r8, rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1700]
call fcn.140202c8a
lea rdx, str._tfeidxspread__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x6c880
mov r8, rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1700]
call fcn.140202c8a
lea rdx, str._tfestkspread__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x7a150
mov r8, rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1700]
call fcn.140202c8a
lea rdx, str._optidxtg__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x1b710
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1402003c2
lea rdx, str._optidx__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x516e0
mov r8, rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1700]
call fcn.140202c8a
lea rdx, str._optstktg__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x28e28
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1402003c2
lea rdx, str._optstk__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
add rax, 0x5efb0
mov r8, rax
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x1700]
call fcn.140202c8a
lea rdx, str._tfetext__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
mov rax, qword [rax + 0x30]
add rax, 0xb060
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1401fe6c1
lea rdx, str._opttext__r_n
lea rcx, [rbp + 8]
call fcn.140200273
mov rax, qword [rbp + 0x1700]
mov rax, qword [rax + 0x30]
add rax, 0xb0e0
mov rdx, rax
lea rcx, [rbp + 8]
call fcn.1401fe6c1
lea rcx, [rbp + 8]
call fcn.1401fb967
mov rax, qword [rbp + 0x1700]
mov byte [rax + 0xa335a], 0
mov r8d, 0xfa0
xor edx, edx
lea rcx, [rbp + 0x130]
call fcn.140201e5c
mov rax, qword [rbp + 0x1708]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x1708]
mov qword [rsp + 0x20], rax
lea r9, [0x140701a00]
lea r8, str._srar.exe_a__m5__ep__y__s.rar__s
mov edx, 0xf9f
lea rcx, [rbp + 0x130]
call fcn.1401f8de8
mov edx, 1
lea rcx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_WinExec]
nop
lea rcx, [rbp + 8]
call fcn.1401fc989
lea rcx, [rbp - 0x30]
lea rdx, reloc.WS2_32.dll_closesocket
call fcn.140202ef1
mov rcx, qword [rbp + 0x16d8]
xor rcx, rbp
call fcn.1401fe6b7
lea rsp, [rbp + 0x16e8]
pop rdi
pop rbp
ret