Function at 0x75c070
Capabilities:
Create process on windows

Disassembly:
push rbp
push r13
push rdi
push rsi
push rbx
sub rsp, 0x190
mov rbp, rsp
mov dword [rbp + 0x48], r9d
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x1c0], rcx
mov qword [rbp + 0x1c8], rdx
mov qword [rbp + 0x1d0], r8
mov rcx, qword [rbp + 0x1c0]
call fcn.0040fef0
mov rcx, qword [rbp + 0x1c8]
call fcn.0040fef0
mov rcx, qword [rbp + 0x1d0]
call fcn.0040fef0
nop
cmp byte [rbp + 0x1f0], 0
jne 0x75c282
lea rcx, [rbp + 0x188]
lea rdx, [0x0075cd50]
call fcn.00410410
jmp 0x75c295
lea rcx, [rbp + 0x188]
lea rdx, [0x0075cd68]
call fcn.00410410
mov rcx, qword [rbp + 0x1c0]
call fcn.006fe140
test al, al
je 0x75c2cb
lea rcx, [rbp + 0x178]
mov rdx, qword [rbp + 0x1c0]
call fcn.006fe500
lea rcx, [rbp + 0x1c0]
mov rdx, qword [rbp + 0x178]
call fcn.00410410
mov rcx, qword [rbp + 0x1c0]
call fcn.006fe140
test al, al
je 0x75c337
lea rcx, [rbp + 0x160]
mov rdx, qword [rbp + 0x1c0]
call fcn.006fd470
lea rcx, [rbp + 0x168]
mov rdx, qword [rbp + 0x160]
call fcn.00431c40
lea rcx, [rbp + 0x170]
mov rdx, qword [rbp + 0x168]
call fcn.004341e0
mov rcx, qword [rbp + 0x170]
lea rdx, [0x0075cd80]
call fcn.004119e0
test eax, eax
jne 0x75c337
lea rcx, [rbp + 0x188]
call fcn.0040fd60
lea rcx, [rbp + 0x158]
mov rdx, qword [rbp + 0x1c0]
call fcn.006fd470
mov rax, qword [rbp + 0x158]
lea rcx, [0x0075cd98]
mov rdx, rax
call fcn.00440650
test al, al
je 0x75c3b4
lea rcx, [rbp + 0x150]
mov rdx, qword [rbp + 0x1c0]
call fcn.006fd470
lea rcx, [0x0075cdb0]
mov rdx, qword [rbp + 0x150]
call fcn.0053c5f0
test al, al
jne 0x75c3b4
lea rcx, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x1c0]
call fcn.00410410
lea rcx, [rbp + 0x1c0]
lea rdx, [0x0075cdcc]
call fcn.00410410
cmp qword [rbp + 0x1d0], 0
jne 0x75c3ea
mov rcx, qword [rbp + 0x1c0]
call fcn.006fe140
test al, al
je 0x75c3ea
cmp byte [0x007ea2b0], 0
jne 0x75c3ea
lea rcx, [rbp + 0x1d0]
mov rdx, qword [rbp + 0x1c0]
call fcn.00433fc0
cmp qword [0x007ea2e8], 0
je 0x75c543
mov rcx, qword [rbp + 0x1c0]
call fcn.006fe140
test al, al
je 0x75c543
mov rcx, qword [rbp + 0x1c0]
call fcn.006fc6f0
test al, al
je 0x75c543
lea rcx, [0x0075cdf0]
mov rdx, qword [0x007ea2e8]
call fcn.0053c770
test al, al
je 0x75c4b6
lea rcx, [rbp + 0x140]
mov rdx, qword [0x007ea2e8]
call fcn.00431e00
lea rcx, [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
mov r8b, 1
call fcn.0074ebd0
lea rcx, [rbp + 0x130]
mov rdx, qword [rbp + 0x1c0]
call fcn.00431e00
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
call fcn.006fd3b0
lea rcx, [rbp + 0x1c0]
mov edx, 3
mov r8, qword [rbp + 0x148]
lea r9, [0x0075ce00]
mov rax, qword [rbp + 0x138]
mov qword [rsp + 0x20], rax
call fcn.00411900
jmp 0x75c543
lea rcx, [rbp + 0x118]
mov rdx, qword [0x007ea2e8]
call fcn.00431e00
lea rcx, [rbp + 0x120]
mov rdx, qword [rbp + 0x118]
mov r8b, 1
call fcn.0074ebd0
lea rcx, [rbp + 0x128]
mov rdx, qword [rbp + 0x120]
call fcn.006fd3b0
lea rcx, [rbp + 0x108]
mov rdx, qword [rbp + 0x1c0]
call fcn.00431e00
lea rcx, [rbp + 0x110]
mov rdx, qword [rbp + 0x108]
call fcn.006fd3b0
lea rcx, [rbp + 0x1c0]
mov edx, 3
mov r8, qword [rbp + 0x128]
lea r9, [0x0075ce00]
mov rax, qword [rbp + 0x110]
mov qword [rsp + 0x20], rax
call fcn.00411900
mov rcx, qword [rbp + 0x1c0]
call fcn.006fe140
test al, al
je 0x75c64c
lea rcx, [0x0075cdf0]
mov rdx, qword [rbp + 0x1c0]
call fcn.0053c770
test al, al
je 0x75c64c
lea rcx, [rbp + 0x1c0]
mov edx, 1
mov r8d, 1
call fcn.00411a50
lea rcx, [0x0075cdf0]
mov rdx, qword [rbp + 0x1c0]
mov r8d, 1
call fcn.00411c00
mov ecx, eax
add ecx, 1
xor eax, eax
mov rdx, qword [rbp + 0x1c0]
test rdx, rdx
je 0x75c5b8
mov eax, dword [rdx - 4]
lea rdx, [rbp + 0x100]
mov r8, qword [rbp + 0x1c0]
mov r9d, ecx
mov rcx, rdx
mov rdx, r8
mov r8d, r9d
mov r9d, eax
call fcn.004119f0
lea rcx, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x100]
call fcn.00431e00
lea rcx, [0x0075cdf0]
mov rdx, qword [rbp + 0x1c0]
mov r8d, 1
call fcn.00411c00
lea rcx, [rbp + 0xf0]
mov rdx, qword [rbp + 0x1c0]
mov r8d, 1
mov r9d, eax
sub r9d, 1
call fcn.004119f0
lea rcx, [rbp + 0xf8]
mov rdx, qword [rbp + 0xf0]
call fcn.00431e00
lea rcx, [rbp + 0x1c0]
mov rdx, qword [rbp + 0xf8]
call fcn.00410410
cmp qword [rbp + 0x1c8], 0
je 0x75c6bc
lea rcx, [0x0075ce10]
mov rdx, qword [rbp + 0x1c0]
call fcn.0053c5f0
test al, al
je 0x75c6bc
lea rcx, [rbp + 0x1c0]
mov edx, 5
lea r8, [0x0075cdf0]
mov r9, qword [rbp + 0x1c0]
lea rax, [0x0075ce00]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x1c8]
mov qword [rsp + 0x28], rax
lea rax, [0x0075cdf0]
mov qword [rsp + 0x30], rax
call fcn.00411900
lea rcx, [rbp + 0x1c8]
call fcn.0040fd60
cmp byte [rbp + 0x1f8], 0
je 0x75c6f4
mov rcx, qword [rbp + 0x1c0]
call fcn.006fe140
test al, al
je 0x75c6f4
mov rcx, qword [rbp + 0x1c0]
mov dl, 1
call fcn.00714f80
test al, al
je 0x75c6f4
mov eax, 0x21
mov dword [rbp + 0x4c], eax
jmp 0x75ccdc
lea rcx, [0x0075ce2c]
mov rdx, qword [rbp + 0x1c0]
mov r8d, 1
call fcn.00411c00
test eax, eax
jg 0x75c74f
lea rcx, [0x0075ce54]
mov rdx, qword [rbp + 0x1c0]
mov r8d, 1
call fcn.00411c00
test eax, eax
jg 0x75c74f
lea rcx, [0x0075ce7c]
mov rdx, qword [rbp + 0x1c0]
mov r8d, 1
call fcn.00411c00
test eax, eax
jle 0x75c972
lea rcx, [0x0075ce54]
mov rdx, qword [rbp + 0x1c0]
mov r8d, 1
call fcn.00411c00
test eax, eax
setg bl
lea rcx, [0x0075ce2c]
mov rdx, qword [rbp + 0x1c0]
mov r8d, 1
call fcn.00411c00
test eax, eax
setg sil
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0x1c0]
lea r8, [0x0075ce7c]
xor r9, r9
call fcn.0053c670
lea rcx, [rbp + 0x1c0]
mov rdx, qword [rbp + 0xe8]
call fcn.00410410
lea rcx, [rbp + 0xe0]
mov rdx, qword [rbp + 0x1c0]
lea r8, [0x0075ce2c]
xor r9, r9
call fcn.0053c670
lea rcx, [rbp + 0x1c0]
mov rdx, qword [rbp + 0xe0]
call fcn.00410410
lea rcx, [rbp + 0xd8]
mov rdx, qword [rbp + 0x1c0]
lea r8, [0x0075ce54]
xor r9, r9
call fcn.0053c670
lea rcx, [rbp + 0x1c0]
mov rdx, qword [rbp + 0xd8]
call fcn.00410410
mov rcx, qword [rbp + 0x1c0]
call fcn.00411370
lea rcx, [rbp + 0xd0]
mov rdx, rax
call fcn.00411400
mov rcx, qword [rbp + 0x1c8]
call fcn.00411370
lea rcx, [rbp + 0xc8]
mov rdx, rax
call fcn.00411400
mov rcx, qword [rbp + 0x1d0]
call fcn.00411370
lea rcx, [rbp + 0xc0]
mov rdx, rax
call fcn.00411400
lea rcx, [rbp + 0x180]
mov rdx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xc8]
mov r9, qword [rbp + 0xc0]
mov eax, dword [rbp + 0x48]
mov dword [rsp + 0x20], eax
movzx rax, byte [rbp + 0x1e8]
mov byte [rsp + 0x28], al
movzx rax, byte [rbp + 0x1f0]
mov byte [rsp + 0x30], al
call fcn.006fe7e0
test bl, bl
je 0x75c8cc
mov rcx, qword [0x007ea158]
mov rdx, qword [rbp + 0x180]
mov r8b, 1
xor r9, r9
call fcn.007513d0
jmp 0x75c941
mov rax, qword [0x007dc800]
cmp qword [rax], 0
je 0x75c941
mov rax, qword [0x007dc800]
mov rax, qword [rax]
mov rcx, qword [rax + 0x6f0]
mov rdx, qword [rbp + 0x180]
call fcn.00584b30
mov rax, qword [0x007dc800]
mov rax, qword [rax]
mov rcx, qword [rax + 0x6f0]
mov dl, 1
call fcn.00584910
mov rax, qword [0x007dc800]
mov rcx, qword [rax]
mov dl, 1
call fcn.006b43d0
test sil, sil
je 0x75c941
mov rax, qword [0x007dc800]
mov rax, qword [rax]
mov rax, qword [rax + 0x6f0]
mov rcx, rax
mov rbx, qword [rax]
call qword [rbx + 0x278]
mov rcx, qword [rbp + 0x180]
lea rdx, [0x0075ceb0]
call fcn.004119e0
test eax, eax
jne 0x75c965
mov eax, 0x20
mov dword [rbp + 0x4c], eax
jmp 0x75ccdc
mov eax, 0x21
mov dword [rbp + 0x4c], eax
jmp 0x75ccdc
cmp byte [rbp + 0x1e0], 0
je 0x75ca59
mov rcx, qword [rbp + 0x1c0]
call fcn.006fe010
test al, al
je 0x75ca1b
cmp byte [0x007ea2a8], 0
jne 0x75ca1b
lea rcx, [rbp + 0xb8]
call fcn.0074eff0
cmp qword [rbp + 0xb8], 0
je 0x75ca1b
lea rcx, [rbp + 0xb0]
call fcn.0074eff0
lea rcx, [rbp + 0xa0]
call fcn.0074eff0
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0xa0]
call fcn.00433fc0
mov rcx, qword [rbp + 0xb0]
mov rdx, qword [rbp + 0x1c0]
mov r8, qword [rbp + 0xa8]
mov r9d, dword [rbp + 0x48]
movzx rax, byte [rbp + 0x1e8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0x1f0]
mov byte [rsp + 0x28], al
call fcn.0075bf80
mov dword [rbp + 0x4c], eax
jmp 0x75ccdb
mov rcx, qword [rbp + 0x1c0]
mov rdx, qword [rbp + 0x1c8]
mov r8, qword [rbp + 0x1d0]
mov r9d, dword [rbp + 0x48]
movzx rax, byte [rbp + 0x1e8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0x1f0]
mov byte [rsp + 0x28], al
call fcn.0075bf80
mov dword [rbp + 0x4c], eax
jmp 0x75ccdb
mov rcx, qword [rbp + 0x1c0]
call fcn.006fe010
test al, al
je 0x75cb20
cmp byte [0x007ea2a8], 0
jne 0x75cb20
lea rcx, [rbp + 0x98]
call fcn.0074eff0
cmp qword [rbp + 0x98], 0
je 0x75cb20
call fcn.00749a30
mov ebx, eax
mov rcx, qword [rbp + 0x188]
call fcn.00411370
mov rsi, rax
lea rcx, [rbp + 0x90]
call fcn.0074eff0
mov rcx, qword [rbp + 0x90]
call fcn.00411370
mov rdi, rax
mov rcx, qword [rbp + 0x1c0]
call fcn.00411370
mov r13, rax
lea rcx, [rbp + 0x80]
call fcn.0074eff0
lea rcx, [rbp + 0x88]
mov rdx, qword [rbp + 0x80]
call fcn.00433fc0
mov rcx, qword [rbp + 0x88]
call fcn.00411370
mov ecx, ebx
mov rdx, rsi
mov r8, rdi
mov r9, r13
mov qword [rsp + 0x20], rax
mov eax, dword [rbp + 0x48]
mov dword [rsp + 0x28], eax
call sub.shell32.dll_ShellExecuteW
mov dword [rbp + 0x4c], eax
jmp 0x75cb7f
call fcn.00749a30
mov ebx, eax
mov rcx, qword [rbp + 0x188]
call fcn.00411370
mov rsi, rax
mov rcx, qword [rbp + 0x1c0]
call fcn.00411370
mov rdi, rax
mov rcx, qword [rbp + 0x1c8]
call fcn.00411370
mov r13, rax
mov rcx, qword [rbp + 0x1d0]
call fcn.00411370
mov ecx, ebx
mov rdx, rsi
mov r8, rdi
mov r9, r13
mov qword [rsp + 0x20], rax
mov eax, dword [rbp + 0x48]
mov dword [rsp + 0x28], eax
call sub.shell32.dll_ShellExecuteW
mov dword [rbp + 0x4c], eax
mov eax, dword [rbp + 0x4c]
cmp eax, 0x21
setl al
test byte [rbp + 0x1e8], al
je 0x75ccdb
mov rcx, qword [rbp + 0x1c0]
call fcn.006fd8f0
test al, al
je 0x75ccdb
cmp byte [0x007ea1b3], 0
je 0x75cbb9
mov eax, 3
mov dword [rbp + 0x48], eax
cmp byte [0x007ea2a8], 0
jne 0x75cc68
lea rcx, [rbp + 0x78]
call fcn.0074eff0
cmp qword [rbp + 0x78], 0
je 0x75cc68
call fcn.00749a30
mov ebx, eax
mov rcx, qword [rbp + 0x188]
call fcn.00411370
mov rsi, rax
lea rcx, [rbp + 0x70]
call fcn.0074eff0
mov rcx, qword [rbp + 0x70]
call fcn.00411370
mov rdi, rax
lea rcx, [rbp + 0x68]
lea rdx, [0x0075cec8]
mov r8, qword [rbp + 0x1c0]
call fcn.004117d0
mov rcx, qword [rbp + 0x68]
call fcn.00411370
mov r13, rax
lea rcx, [rbp + 0x58]
call fcn.0074eff0
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x58]
call fcn.00433fc0
mov rcx, qword [rbp + 0x60]
call fcn.00411370
mov ecx, ebx
mov rdx, rsi
mov r8, rdi
mov r9, r13
mov qword [rsp + 0x20], rax
mov eax, dword [rbp + 0x48]
mov dword [rsp + 0x28], eax
call sub.shell32.dll_ShellExecuteW
mov dword [rbp + 0x4c], eax
jmp 0x75ccdb
call fcn.00749a30
mov ebx, eax
mov rcx, qword [rbp + 0x188]
call fcn.00411370
mov rsi, rax
lea rcx, [rbp + 0x50]
lea rdx, [0x0075cec8]
mov r8, qword [rbp + 0x1c0]
call fcn.004117d0
mov rcx, qword [rbp + 0x50]
call fcn.00411370
mov rdi, rax
mov rcx, qword [rbp + 0x1c8]
call fcn.00411370
mov r13, rax
mov rcx, qword [rbp + 0x1d0]
call fcn.00411370
mov ecx, ebx
mov rdx, rsi
mov r8, rdi
mov r9, r13
mov qword [rsp + 0x20], rax
mov eax, dword [rbp + 0x48]
mov dword [rsp + 0x28], eax
call sub.shell32.dll_ShellExecuteW
mov dword [rbp + 0x4c], eax
nop
lea rcx, [rbp + 0x50]
mov edx, 0x28
call fcn.0040fe40
lea rcx, [rbp + 0x1c0]
mov edx, 3
call fcn.0040fe40
mov eax, dword [rbp + 0x4c]
lea rsp, [rbp + 0x190]
pop rbx
pop rsi
pop rdi
pop r13
pop rbp
ret