Function at 0x14005b2c0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0x128]
sub rsp, 0x220
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
movaps xmmword [rax - 0x48], xmm9
mov rax, qword [0x14012d700]
xor rax, rsp
mov qword [rbp + 0xd0], rax
xor r14d, r14d
mov dword [rsp + 0x50], r14d
call fcn.140020f00
mov dword [rsp + 0x58], 0x431e0000
mov dword [rsp + 0x5c], 0x42480000
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1401190b0]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x30], r14b
mov dword [rsp + 0x50], 2
lea rbx, [0x14012e0dc]
lea rdi, [0x14012e0e0]
movzx r9d, byte [rbx]
xor r9b, 0x63
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
jae 0x14005b38d
lea rax, [rcx + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14005b397
lea rcx, [rsp + 0x30]
call fcn.140006df0
inc rbx
cmp rbx, rdi
jne 0x14005b353
lea rdi, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdi, qword [rsp + 0x30]
mov rbx, qword [0x1402b9870]
mov rax, qword [rbx + 0x3ea8]
mov byte [rax + 0x98], 1
mov rax, qword [rbx + 0x3ea8]
movsxd r8, dword [rax + 0xd0]
mov rax, qword [rax + 0xd8]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
mov rcx, rdi
call fcn.140012830
mov esi, eax
cmp dword [rbx + 0x3edc], eax
jne 0x14005b402
mov r8, rdi
mov edx, 0xb
mov ecx, eax
call fcn.1400287b0
mov dword [rsp + 0x20], r14d
mov r9b, 1
lea r8, [rsp + 0x58]
mov edx, esi
mov rcx, rdi
call fcn.14001a2c0
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14005b45a
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b455
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b455
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a3354
movdqa xmm0, xmmword [0x1401190b0]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
xor edx, edx
mov r8d, 0x120
lea rcx, [rbp - 0x50]
call sub.VCRUNTIME140.dll_memset
mov rdx, qword [0x140bb39e0]
lea rcx, [rbp - 0x50]
call fcn.140080800
nop
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x50]
call fcn.140080970
movss xmm8, dword [rbp - 0x60]
movss xmm9, dword [rbp - 0x5c]
lea rcx, [rbp - 0x50]
call fcn.1400809e0
mov rbx, rax
test rax, rax
je 0x14005b670
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.14007e690
mov ecx, dword [rax]
xorps xmm7, xmm7
cvtsi2ss xmm7, rcx
mov ecx, dword [rax + 4]
xorps xmm6, xmm6
cvtsi2ss xmm6, rcx
lea rcx, [rbp - 0x50]
call fcn.1400809f0
mov edx, dword [rax + 4]
movd xmm1, edx
cvtdq2ps xmm1, xmm1
divss xmm1, xmm6
mov r8d, dword [rax]
movd xmm0, r8d
cvtdq2ps xmm0, xmm0
divss xmm0, xmm7
movss dword [rsp + 0x50], xmm0
movss dword [rsp + 0x54], xmm1
mov ecx, dword [rax + 0xc]
add ecx, edx
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
divss xmm1, xmm6
mov eax, dword [rax + 8]
add eax, r8d
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm7
movss dword [rsp + 0x58], xmm0
movss dword [rsp + 0x5c], xmm1
mov rcx, rbx
call fcn.14007e680
mov qword [rsp + 0x70], r14
mov dword [rsp + 0x70], eax
mov eax, dword [0x1402b5954]
movzx ecx, al
movd xmm3, ecx
cvtdq2ps xmm3, xmm3
movss xmm4, dword [0x140118e70]
mulss xmm3, xmm4
shr eax, 8
movzx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movzx eax, byte [0x1402b5956]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm4
movzx eax, byte [0x1402b5957]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm4
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm0
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rsp + 0x60], xmm3
movups xmmword [rsp + 0x78], xmm3
mov eax, dword [0x14012d014]
movzx ecx, al
movd xmm3, ecx
cvtdq2ps xmm3, xmm3
mulss xmm3, xmm4
shr eax, 8
movzx ecx, al
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movzx eax, byte [0x14012d016]
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm4
movzx eax, byte [0x14012d017]
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm2, xmm4
shufps xmm3, xmm3, 0xe1
movss xmm3, xmm0
shufps xmm3, xmm3, 0xc6
movss xmm3, xmm1
shufps xmm3, xmm3, 0x27
movss xmm3, xmm2
shufps xmm3, xmm3, 0x39
movups xmmword [rsp + 0x60], xmm3
movups xmmword [rsp + 0x30], xmm3
movss dword [rsp + 0x60], xmm8
movss dword [rsp + 0x64], xmm9
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x58]
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x70]
call fcn.14003e8c0
mov rcx, qword [0x140bb3570]
call fcn.14001f660
movss xmm1, dword [0x14011904c]
xorps xmm0, xmm0
call fcn.140020c00
mov rdx, qword [0x1402b9870]
mov rax, qword [rdx + 0x3ea8]
mov byte [rax + 0x98], 1
mov rax, qword [rdx + 0x3ea8]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x68]
addss xmm1, dword [0x140118f90]
movss dword [rax + 0xe4], xmm1
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm1
movss dword [rax + 0xfc], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1401190b0]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x30], 0
mov dword [rsp + 0x50], 9
lea rbx, [0x14012e1d8]
lea rdi, [0x14012e1de]
nop word [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 0x61
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
jae 0x14005b74a
lea rax, [rcx + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14005b754
lea rcx, [rsp + 0x30]
call fcn.140006df0
inc rbx
cmp rbx, rdi
jne 0x14005b710
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
xor edx, edx
lea r8d, [rdx + 1]
call fcn.14003c950
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14005b7b9
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b7b4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b7b4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a3354
call fcn.14001f700
call fcn.14001a4d0
call fcn.14001a1d0
test al, al
je 0x14005b99a
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
movdqa xmm1, xmmword [0x1401190b0]
movdqu xmmword [rbp - 0x78], xmm1
mov byte [rsp + 0x78], 0
mov dword [rsp + 0x50], 0x25
lea rbx, str.____nz_____61z7_95_7_k_i
lea rdi, [0x14012e0a1]
movzx r9d, byte [rbx]
xor r9b, 0x54
mov rcx, qword [rbp - 0x78]
mov rdx, qword [rbp - 0x70]
cmp rcx, rdx
jae 0x14005b837
lea rax, [rcx + 1]
mov qword [rbp - 0x78], rax
lea rax, [rsp + 0x78]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x78]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14005b841
lea rcx, [rsp + 0x78]
call fcn.140006df0
inc rbx
cmp rbx, rdi
jne 0x14005b800
lea rdi, [rsp + 0x78]
cmp qword [rbp - 0x70], 0xf
cmova rdi, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movdqa xmm1, xmmword [0x1401190b0]
movdqu xmmword [rsp + 0x40], xmm1
mov byte [rsp + 0x30], 0
mov dword [rsp + 0x50], 0x95
lea rbx, [0x14012e280]
lea rsi, [0x14012e284]
nop word [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 0x63
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
jae 0x14005b8ca
lea rax, [rcx + 1]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x30]
cmp rdx, 0xf
cmova rax, qword [rsp + 0x30]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14005b8d4
lea rcx, [rsp + 0x30]
call fcn.140006df0
inc rbx
cmp rbx, rsi
jne 0x14005b890
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rdx, qword [rsp + 0x30]
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], r14
xor r9d, r9d
mov r8, rdi
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14005b948
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b943
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b943
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a3354
movdqa xmm0, xmmword [0x1401190b0]
movdqu xmmword [rsp + 0x40], xmm0
mov byte [rsp + 0x30], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0xf
jbe 0x14005b99a
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005b995
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005b995
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400a3354
call fcn.140021030
nop
lea rcx, [rbp - 0x48]
call fcn.140080c40
mov rcx, qword [rbp + 0xd0]
xor rcx, rsp
call fcn.1400a2ec0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop rbp
ret