Function at 0x140023e50
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2d0]
sub rsp, 0x3d0
mov rax, qword [0x1400a3250]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov r12, rdx
mov r13, rcx
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x68], rdx
xor esi, esi
mov rcx, qword [rdx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x15
jb 0x140024a04
mov r9, rdx
cmp qword [rdx + 0x18], 0x10
jb 0x140023eba
mov r9, qword [rdx]
mov qword [rsp + 0x30], 0x15
lea rax, [0x140092040]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r8, r12
movzx edx, byte [rsp + 0x50]
lea rcx, [rbp - 0x28]
call fcn.140016250
nop
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x18]
add r8, rdx
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rdx, qword [rbp - 0x28]
lea rcx, [rbp + 0x18]
call fcn.140025f00
nop
cmp qword [r12 + 0x18], 0x10
jb 0x140023f29
mov r8, qword [r12]
mov rdx, r8
add r8, qword [r12 + 0x10]
jmp 0x140023f34
mov rdx, r12
mov r8, qword [r12 + 0x10]
add r8, r12
lea rcx, [rbp - 8]
call fcn.140025f00
nop
lea rdx, str.Found_roblox_at:__
lea rcx, [0x1400a7ed0]
call fcn.140010ef0
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0x10
cmovae rdx, qword [rbp - 0x28]
mov r8, qword [rbp - 0x18]
mov rcx, rax
call fcn.1400238b0
lea rdx, [0x140092058]
mov rcx, rax
call fcn.140010ef0
mov rcx, rax
call fcn.1400111b0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x254], xmm0
movups xmmword [rbp + 0x264], xmm0
movups xmmword [rbp + 0x274], xmm0
movups xmmword [rbp + 0x284], xmm0
movups xmmword [rbp + 0x294], xmm0
movups xmmword [rbp + 0x2a4], xmm0
mov dword [rbp + 0x2b4], eax
mov dword [rbp + 0x250], 0x68
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], rax
lea rax, [rbp - 8]
cmp qword [rbp + 0x10], 8
cmovae rax, qword [rbp - 8]
lea rdx, [rbp + 0x18]
cmp qword [rbp + 0x30], 8
cmovae rdx, qword [rbp + 0x18]
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0x250]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1400241c8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15, qword [rsp + 0x70]
test r15, r15
jne 0x1400242fa
lea rdx, str.Failed_to_open_process
lea rcx, [0x1400a7ed0]
call fcn.140010ef0
mov rcx, rax
call fcn.1400111b0
xorps xmm0, xmm0
movups xmmword [r13], xmm0
mov qword [r13 + 0x10], rsi
mov qword [r13 + 0x18], rsi
lea r8d, [r15 + 4]
lea rdx, str.NONE
mov rcx, r13
call fcn.140004d40
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x140024255
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024250
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024a0a
call fcn.140046800
movdqa xmm0, xmmword [0x1400921d0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], si
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x1400242a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400242a1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024a10
call fcn.140046800
movdqa xmm0, xmmword [0x1400921d0]
movdqu xmmword [rbp + 0x28], xmm0
mov word [rbp + 0x18], si
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x14002413b
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024136
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400249f2
jmp 0x140024136
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1a0], rax
lea rdx, str._WARNING:_DO_NOT_SHARE_THIS.__Sharing_this_will_allow_someone_to_log_in_as_you_and_to_steal_your_ROBUX_and_items.__0_9A_F_900_0_9A_F_
lea rcx, [rbp + 0x180]
call fcn.140009630
nop
movzx ebx, byte [rsp + 0x50]
nop dword [rax]
mov r14, rsi
mov r9d, 0x30
lea r8, [rbp - 0x78]
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
add byte [rax - 0x7b], cl
invalid
je 0x140024330
nop dword [rax]
cmp dword [rbp - 0x58], 0x1000
jne 0x14002474c
test byte [rbp - 0x54], 4
je 0x14002474c
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
mov rdi, qword [rbp - 0x60]
test rdi, rdi
jne 0x140024392
mov qword [rbp - 0x38], rdi
mov byte [rbp + rdi - 0x48], dil
jmp 0x1400243c5
lea rcx, [rbp - 0x48]
cmp rdi, 0xf
ja 0x1400243b1
mov qword [rbp - 0x38], rdi
mov r8, rdi
xor edx, edx
call fcn.140049090
mov byte [rbp + rdi - 0x48], 0
jmp 0x1400243c5
mov byte [rsp + 0x20], 0
mov r9, rdi
movzx r8d, bl
mov rdx, rdi
call fcn.14001a810
lea r8, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
cmovae r8, qword [rbp - 0x48]
lea rax, [rbp + 0x240]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp - 0x60]
mov rdx, r14
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x140024711
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x90], xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmmword [rbp + 0xc0], xmm0
lea rdx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0x10
setae r8b
cmovae rdx, qword [rbp - 0x48]
add rdx, qword [rbp - 0x38]
lea rax, [rbp - 0x48]
test r8b, r8b
cmovne rax, qword [rbp - 0x48]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x48], rdx
lea rcx, [rbp + 0x180]
mov qword [rbp + 0x50], rcx
mov dword [rbp + 0x58], esi
mov qword [rbp + 0x60], rsi
mov byte [rbp + 0x68], 0
movdqa xmmword [rbp + 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x80], xmm1
mov qword [rbp + 0x90], rsi
mov byte [rbp + 0x98], 0
movdqa xmmword [rbp + 0xa0], xmm0
mov byte [rbp + 0xb0], 0
mov qword [rbp + 0xb8], rsi
mov qword [rbp + 0xc0], rsi
mov byte [rbp + 0xc8], 0
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], esi
lea r9, [rbp + 0x180]
lea r8, [rbp + 0x60]
mov rcx, rax
call fcn.140016e60
mov r8, qword [rbp + 0x50]
test al, al
cmove r8, rsi
mov qword [rbp + 0x50], r8
xorps xmm0, xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
movups xmmword [rbp + 0x200], xmm0
movups xmmword [rbp + 0x220], xmm0
movups xmmword [rbp + 0x230], xmm0
movdqa xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rsi
mov qword [rbp + 0x1d0], rsi
mov byte [rbp + 0x1d8], 0
movdqa xmmword [rbp + 0x1e0], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp + 0x1f0], xmm1
mov qword [rbp + 0x200], rsi
mov byte [rbp + 0x208], 0
movdqa xmmword [rbp + 0x210], xmm0
mov byte [rbp + 0x220], 0
mov qword [rbp + 0x228], rsi
mov qword [rbp + 0x230], rsi
mov byte [rbp + 0x238], 0
movups xmmword [rbp + 0xd0], xmm0
movups xmmword [rbp + 0xe0], xmm0
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], r8
mov eax, dword [rbp + 0x58]
mov dword [rbp + 0xe8], eax
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0xf0], rax
movzx eax, byte [rbp + 0x68]
mov byte [rbp + 0xf8], al
movdqa xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rsi
mov rcx, qword [rbp + 0x78]
sub rcx, qword [rbp + 0x70]
movabs r9, 0x2aaaaaaaaaaaaaab
mov rax, r9
imul rcx
mov rdi, rdx
sar rdi, 2
mov rax, rdi
shr rax, 0x3f
add rdi, rax
mov rdx, rsi
je 0x14002468a
movabs rax, 0xaaaaaaaaaaaaaaa
cmp rdi, rax
ja 0x140024a1c
mov rdx, rdi
call fcn.140020b80
mov rsi, rax
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x108], rax
lea rcx, [rdi + rdi*2]
lea rdx, [rax + rcx*8]
mov qword [rbp + 0x110], rdx
mov rdi, qword [rbp + 0x78]
mov rdx, qword [rbp + 0x70]
sub rdi, rdx
mov r8, rdi
mov rcx, rax
call fcn.1400489f0
movabs r9, 0x2aaaaaaaaaaaaaab
mov rax, r9
imul rdi
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + rdx*2]
lea rdx, [rsi + rax*8]
mov qword [rbp + 0x108], rdx
mov r8, qword [rbp + 0xe0]
xor esi, esi
movups xmm0, xmmword [rbp + 0x88]
movups xmmword [rbp + 0x118], xmm0
movsd xmm1, qword [rbp + 0x98]
movsd qword [rbp + 0x128], xmm1
movaps xmm0, xmmword [rbp + 0xa0]
movaps xmmword [rbp + 0x130], xmm0
movsd xmm1, qword [rbp + 0xb0]
movsd qword [rbp + 0x140], xmm1
movups xmm0, xmmword [rbp + 0xb8]
movups xmmword [rbp + 0x148], xmm0
movsd xmm1, qword [rbp + 0xc8]
movsd qword [rbp + 0x158], xmm1
test r8, r8
jne 0x140024774
lea rcx, [rbp + 0x100]
call fcn.14000c920
nop
lea rcx, [rbp + 0x1e0]
call fcn.14000c920
nop
lea rcx, [rbp + 0x70]
call fcn.14000c920
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x14002474c
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024747
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400249fe
call fcn.140046800
add r14, qword [rbp - 0x60]
mov r9d, 0x30
lea r8, [rbp - 0x78]
mov rdx, r14
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualQueryEx]
test rax, rax
jne 0x140024350
jmp 0x140024330
sub rdx, qword [rbp + 0x100]
mov rax, r9
imul rdx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rbp + 0x148]
cmovne rax, qword [rbp + 0x100]
cmp byte [rax + 0x10], 0
je 0x1400247ae
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x58], xmm0
jmp 0x1400247b7
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x160], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x170], xmm1
mov rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x60]
cmp rdx, r8
jne 0x1400247ef
mov qword [rbp + 0x178], 0xf
mov byte [rbp + 0x160], 0
jmp 0x1400247fe
sub r8, rdx
lea rcx, [rbp + 0x160]
call fcn.140004d40
xor edx, edx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
movups xmm0, xmmword [rbp + 0x160]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rbp + 0x170]
movups xmmword [r13 + 0x10], xmm1
lea rcx, [rbp + 0x100]
call fcn.14000c920
nop
lea rcx, [rbp + 0x1e0]
call fcn.14000c920
nop
lea rcx, [rbp + 0x70]
call fcn.14000c920
nop
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x140024880
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002487b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024a22
call fcn.140046800
mov qword [rbp - 0x38], rsi
mov qword [rbp - 0x30], 0xf
mov byte [rbp - 0x48], 0
lea rcx, [rbp + 0x180]
call fcn.14000c9a0
mov rcx, qword [rbp + 0x1a0]
test rcx, rcx
je 0x1400248c5
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1400248c5
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 8
jb 0x140024905
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024900
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024a28
call fcn.140046800
movdqa xmm0, xmmword [0x1400921d0]
movdqu xmmword [rbp + 8], xmm0
mov word [rbp - 8], si
mov rdx, qword [rbp + 0x30]
cmp rdx, 8
jb 0x140024956
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024951
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140024a2e
call fcn.140046800
movdqa xmm0, xmmword [0x1400921d0]
movdqu xmmword [rbp + 0x28], xmm0
mov word [rbp + 0x18], si
mov rdx, qword [rbp - 0x10]
cmp rdx, 0x10
jb 0x14002499e
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140024999
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400249ec
call fcn.140046800
movdqa xmm0, xmmword [0x1400921e0]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x140024188
inc rdx
mov rcx, qword [r12]
cmp rdx, 0x1000
jb 0x140024183
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400249f8
jmp 0x140024180
call fcn.14005a864
int3