Function at 0x140001360
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r14
lea rbp, [rsp - 0x120]
sub rsp, 0x220
mov rax, qword [0x14001e008]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov ecx, 2
mov rdi, r8
call qword [sym.imp.api_ms_win_shcore_scaling_l1_1_1.dll_SetProcessDpiAwareness]
call qword [sym.imp.USER32.dll_SetProcessDPIAware]
xor r12d, r12d
lea rdx, str..LOTF2BinariesWin64LOTF2_Win64_Shipping.exe
xorps xmm0, xmm0
mov qword [rbp + 0x80], r12
lea rcx, [rbp + 0x70]
mov qword [rbp + 0x88], r12
movups xmmword [rbp + 0x70], xmm0
lea r8d, [r12 + 0x2f]
call fcn.140001db0
xorps xmm0, xmm0
mov qword [rbp], r12
xor r8d, r8d
mov qword [rbp + 8], r12
lea rdx, [0x14001aa00]
lea rcx, [rbp - 0x10]
movups xmmword [rbp - 0x10], xmm0
call fcn.140001db0
mov r14, 0xffffffffffffffff
mov rbx, r14
nop dword [rax]
inc rbx
cmp byte [rdi + rbx], r12b
jne 0x140001400
mov esi, r12d
test rbx, rbx
je 0x14000145a
mov rcx, qword [rbp]
mov rdx, qword [rbp + 8]
movsx r9d, byte [rdi]
cmp rcx, rdx
jae 0x140001444
lea rax, [rcx + 1]
cmp rdx, 8
mov qword [rbp], rax
lea rax, [rbp - 0x10]
cmovae rax, qword [rbp - 0x10]
mov word [rax + rcx*2], r9w
mov word [rax + rcx*2 + 2], r12w
jmp 0x14000144d
lea rcx, [rbp - 0x10]
call fcn.140001ee0
inc esi
inc rdi
movsxd rax, esi
cmp rax, rbx
jb 0x140001411
mov qword [rsp + 0x250], r13
lea rdx, str.__eac_nop_loaded
lea rcx, [rbp - 0x10]
mov qword [rsp + 0x258], r15
call fcn.140001d00
mov ecx, 0x1000
call fcn.1400026a4
xor edx, edx
mov qword [rsp + 0x58], rax
mov r8d, 0x1000
mov rcx, rax
mov rbx, rax
call fcn.140004620
cmp qword [rbp + 8], 8
lea rdx, [rbp - 0x10]
mov r8, qword [rbp]
mov rcx, rbx
cmovae rdx, qword [rbp - 0x10]
add r8, r8
call fcn.140008110
xorps xmm1, xmm1
mov dword [rbp - 0x80], 0x68
xor eax, eax
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
xorps xmm0, xmm0
mov qword [rsp + 0x70], rax
mov rdx, rbx
cmovae rcx, qword [rbp + 0x70]
xor r9d, r9d
mov dword [rbp - 0x1c], eax
xor r8d, r8d
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rbp - 0x7c], xmm1
movups xmmword [rbp - 0x6c], xmm1
movups xmmword [rbp - 0x5c], xmm1
movups xmmword [rbp - 0x4c], xmm1
movups xmmword [rbp - 0x3c], xmm1
movups xmmword [rbp - 0x2c], xmm1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140001b6a
call qword [sym.imp.KERNEL32.dll_GetLastError]
xorps xmm0, xmm0
mov qword [rbp + 0x40], r12
mov edi, eax
mov dword [rsp + 0x50], eax
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x48], r12
movups xmmword [rbp + 0x30], xmm0
cmp rax, 1
jb 0x140001c5b
dec rax
lea rdx, [rbp + 0x70]
cmp rax, r14
lea rcx, [rbp + 0x30]
mov r8, r14
cmovb r8, rax
cmp qword [rbp + 0x88], 8
cmovae rdx, qword [rbp + 0x70]
add rdx, 2
call fcn.140001db0
lea rcx, [rbp + 0x90]
call fcn.1400011c0
lea r9, [rbp + 0x30]
mov r8, rax
lea rcx, [rbp + 0xd0]
call fcn.140002260
mov rdx, qword [rbp + 0xa8]
cmp rdx, 8
jb 0x1400015f8
mov rcx, qword [rbp + 0x90]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400015f3
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c61
call fcn.140002660
mov rdx, qword [rbp + 0x48]
mov qword [rbp + 0xa0], r12
mov qword [rbp + 0xa8], 7
mov word [rbp + 0x90], r12w
cmp rdx, 8
jb 0x140001652
mov rcx, qword [rbp + 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000164d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c61
call fcn.140002660
mov ecx, 0x800
call fcn.1400026a4
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov dword [rsp + 0x28], 0x400
mov r8d, edi
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0x1200
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_FormatMessageW]
xorps xmm0, xmm0
mov qword [rbp + 0xa0], r12
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa8], r12
nop dword [rax]
inc r14
cmp word [rbx + r14*2], r12w
jne 0x1400016a0
mov r8, r14
lea rcx, [rbp + 0x90]
mov rdx, rbx
call fcn.140001db0
mov rcx, rbx
call fcn.140002660
mov rsi, qword [rbp + 0xe0]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, rsi
cmp rax, 0xa
jb 0x140001c67
mov r15, qword [rbp + 0xe8]
lea r13, [rbp + 0xd0]
mov r14, qword [rbp + 0xd0]
lea rdi, [rbp + 0x50]
cmp r15, 8
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], r12
mov ebx, 7
lea r12, [rsi + 0xa]
cmovae r13, r14
xorps xmm0, xmm0
movups xmmword [rbp + 0x50], xmm0
cmp r12, rbx
jbe 0x1400017b6
mov rbx, r12
or rbx, 7
cmp rbx, rcx
jbe 0x140001746
movabs rax, 0x7fffffffffffffff
mov rbx, rcx
lea rcx, [rax + rax]
jmp 0x140001775
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rbx + 1]
cmp rcx, rax
ja 0x140001c6d
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400017a1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001c6d
mov rcx, rax
call fcn.140002668
test rax, rax
je 0x140001c73
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400017b2
test rcx, rcx
je 0x1400017b0
call fcn.140002668
mov rdi, rax
jmp 0x1400017b2
xor edi, edi
mov qword [rbp + 0x50], rdi
movups xmm0, xmmword [0x14001aac8]
mov qword [rbp + 0x60], r12
lea r8, [rsi + rsi]
mov qword [rbp + 0x68], rbx
lea rcx, [rdi + 0x14]
movups xmmword [rdi], xmm0
mov eax, dword [0x14001aad8]
mov rdx, r13
mov dword [rdi + 0x10], eax
call fcn.140008110
xor eax, eax
lea rdx, str._n_nError:_Unable_to_execute_game_process_n
lea rcx, [rbp + 0x50]
mov word [rdi + r12*2], ax
call fcn.140001d00
xor r12d, r12d
lea r9, [rbp + 0xd0]
mov qword [rbp + 0x20], r12
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x28], r12
cmp r15, 8
movups xmm0, xmmword [rax]
cmovae r9, r14
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rcx, qword [rbp + 0x28]
mov rdi, qword [rbp + 0x20]
mov rax, rcx
sub rax, rdi
cmp rsi, rax
ja 0x14000187f
cmp rcx, 8
lea rax, [rdi + rsi]
lea rbx, [rbp + 0x10]
mov qword [rbp + 0x20], rax
cmovae rbx, qword [rbp + 0x10]
lea r8, [rsi + rsi]
mov rdx, r9
lea rcx, [rbx + rdi*2]
call fcn.140008110
lea rax, [rdi + rsi]
mov word [rbx + rax*2], r12w
lea rax, [rbp + 0x10]
jmp 0x14000189e
mov rdx, rsi
mov qword [rsp + 0x20], rsi
lea rcx, [rbp + 0x10]
call fcn.140002090
mov r15, qword [rbp + 0xe8]
mov r14, qword [rbp + 0xd0]
mov qword [rbp + 0xc0], r12
lea rdx, [0x14001aa40]
mov qword [rbp + 0xc8], r12
lea rcx, [rbp + 0xb0]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb0], xmm0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xb0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0xc0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
call fcn.140001d00
lea r9, [rbp + 0x90]
lea r8, [rbp + 0xf0]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r12
movups xmmword [rbp + 0xf0], xmm0
mov qword [rax + 0x18], 7
movups xmmword [rbp + 0x100], xmm1
mov word [rax], r12w
call fcn.140002260
cmp qword [rbp + 0x48], 8
lea rdx, [rbp + 0x30]
lea r8, str.Error
cmovae rdx, qword [rbp + 0x30]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x14000198a
mov rcx, qword [rbp + 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001985
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c73
call fcn.140002660
mov rdx, qword [rbp + 0x108]
mov qword [rbp + 0x40], r12
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], r12w
cmp rdx, 8
jb 0x1400019e1
mov rcx, qword [rbp + 0xf0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019dc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c73
call fcn.140002660
mov rdx, qword [rbp + 0xc8]
cmp rdx, 8
jb 0x140001a27
mov rcx, qword [rbp + 0xb0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a22
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c73
call fcn.140002660
mov rdx, qword [rbp + 0x28]
mov qword [rbp + 0xc0], r12
mov qword [rbp + 0xc8], 7
mov word [rbp + 0xb0], r12w
cmp rdx, 8
jb 0x140001a81
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a7c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c73
call fcn.140002660
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], r12w
cmp rdx, 8
jb 0x140001ad2
mov rcx, qword [rbp + 0x50]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001acd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c73
call fcn.140002660
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0x60], r12
mov qword [rbp + 0x68], 7
mov word [rbp + 0x50], r12w
cmp rdx, 8
jb 0x140001b29
mov rcx, qword [rbp + 0x90]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001b24
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c73
call fcn.140002660
cmp r15, 8
jb 0x140001b64
lea rdx, [r15*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140001b5c
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c55
mov rcx, r14
call fcn.140002660
mov ebx, dword [rsp + 0x50]
jmp 0x140001b83
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, r12d
mov rcx, qword [rsp + 0x58]
call fcn.140002660
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x140001bcd
mov rcx, qword [rbp - 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001bc8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c55
call fcn.140002660
mov rdx, qword [rbp + 0x88]
mov qword [rbp], r12
mov qword [rbp + 8], 7
mov word [rbp - 0x10], r12w
cmp rdx, 8
jb 0x140001c1d
mov rcx, qword [rbp + 0x70]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001c18
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001c55
call fcn.140002660
mov r15, qword [rsp + 0x258]
mov eax, ebx
mov r13, qword [rsp + 0x250]
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.140002640
mov rbx, qword [rsp + 0x260]
add rsp, 0x220
pop r14
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140008b8c
int3
call fcn.140001d90
int3
call fcn.140008b8c
int3
call fcn.1400011a0
int3
call fcn.140001100
int3
call fcn.140008b8c
int3