Function at 0x140054030
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x38]
sub rsp, 0x110
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x14009e180]
xor rax, rsp
mov qword [rbp - 0x38], rax
mov rcx, qword [0x14009e200]
mov rax, qword [rcx + 0x1778]
movss xmm8, dword [rax + 0x24]
movss xmm9, dword [rax + 0x28]
mov byte [rax + 0x8a], 1
mov rax, qword [rcx + 0x1778]
mov rax, qword [rax + 0x290]
mov qword [rsp + 0x78], rax
movdqa xmm1, xmmword [0x14008d230]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm2, xmmword [0x14008d2a0]
movdqu xmmword [rsp + 0x40], xmm2
mov cl, 0x7c
mov dl, 0x23
mov r8b, 0x2c
mov r10b, 0x79
mov r11b, 0x20
mov bl, 0x26
mov dil, 0x2d
mov sil, 0x2f
mov r14b, 0x2a
mov r15b, 4
mov r12b, 0x70
mov r13b, 0x2e
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], r9b
xor byte [rsp + 0x33], r9b
xor byte [rsp + 0x34], r9b
xor byte [rsp + 0x35], r9b
xor byte [rsp + 0x36], r9b
xor byte [rsp + 0x37], r9b
xor byte [rsp + 0x38], r9b
xor byte [rsp + 0x39], r9b
xor byte [rsp + 0x3a], r9b
xor byte [rsp + 0x3b], r9b
xor byte [rsp + 0x3c], r9b
xor byte [rsp + 0x3d], r9b
xor byte [rsp + 0x3e], r9b
xor byte [rsp + 0x3f], r9b
movd eax, xmm2
xor al, r9b
mov byte [rsp + 0x40], al
xor byte [rsp + 0x41], r9b
xor byte [rsp + 0x42], r9b
xor byte [rsp + 0x43], r9b
xor byte [rsp + 0x44], r9b
xor byte [rsp + 0x45], r9b
xor byte [rsp + 0x46], r9b
xor byte [rsp + 0x47], r9b
xor byte [rsp + 0x48], r9b
xor byte [rsp + 0x49], r9b
xor byte [rsp + 0x4a], r9b
xor byte [rsp + 0x4b], r9b
xor byte [rsp + 0x4c], r9b
xor byte [rsp + 0x4d], r9b
xor byte [rsp + 0x4e], r9b
xor byte [rsp + 0x4f], r9b
xor cl, r9b
mov byte [rsp + 0x50], cl
xor dl, r9b
mov byte [rsp + 0x51], dl
xor r8b, r9b
mov byte [rsp + 0x52], r8b
xor r10b, r9b
mov byte [rsp + 0x53], r10b
xor r11b, r9b
mov byte [rsp + 0x54], r11b
xor bl, r9b
mov byte [rsp + 0x55], bl
xor dil, r9b
mov byte [rsp + 0x56], dil
xor sil, r9b
mov byte [rsp + 0x57], sil
xor r14b, r9b
mov byte [rsp + 0x58], r14b
xor r15b, r9b
mov byte [rsp + 0x59], r15b
xor r12b, r9b
mov byte [rsp + 0x5a], r12b
xor r13b, r9b
mov byte [rsp + 0x5b], r13b
mov byte [rsp + 0x5c], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140054216
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x58]
call fcn.140027cd0
nop
movdqa xmm1, xmmword [0x14008daf0]
movdqu xmmword [rsp + 0x30], xmm1
movdqa xmm2, xmmword [0x14008dad0]
movdqu xmmword [rsp + 0x40], xmm2
mov cl, 0x32
mov dl, 0x4c
mov r8b, 0x67
mov r10b, 0x4d
mov r11b, 0x7c
mov bl, 0x50
mov dil, 0x77
mov sil, 0x37
movzx r14d, bl
mov r15b, 0x6d
mov r12b, 0x5f
mov r13b, 0x64
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x31], al
xor byte [rsp + 0x32], r9b
xor byte [rsp + 0x33], r9b
xor byte [rsp + 0x34], r9b
xor byte [rsp + 0x35], r9b
xor byte [rsp + 0x36], r9b
xor byte [rsp + 0x37], r9b
xor byte [rsp + 0x38], r9b
xor byte [rsp + 0x39], r9b
xor byte [rsp + 0x3a], r9b
xor byte [rsp + 0x3b], r9b
xor byte [rsp + 0x3c], r9b
xor byte [rsp + 0x3d], r9b
xor byte [rsp + 0x3e], r9b
xor byte [rsp + 0x3f], r9b
movd eax, xmm2
xor al, r9b
mov byte [rsp + 0x40], al
xor byte [rsp + 0x41], r9b
xor byte [rsp + 0x42], r9b
xor byte [rsp + 0x43], r9b
xor byte [rsp + 0x44], r9b
xor byte [rsp + 0x45], r9b
xor byte [rsp + 0x46], r9b
xor byte [rsp + 0x47], r9b
xor byte [rsp + 0x48], r9b
xor byte [rsp + 0x49], r9b
xor byte [rsp + 0x4a], r9b
xor byte [rsp + 0x4b], r9b
xor byte [rsp + 0x4c], r9b
xor byte [rsp + 0x4d], r9b
xor byte [rsp + 0x4e], r9b
xor byte [rsp + 0x4f], r9b
xor cl, r9b
mov byte [rsp + 0x50], cl
xor dl, r9b
mov byte [rsp + 0x51], dl
xor r8b, r9b
mov byte [rsp + 0x52], r8b
xor r10b, r9b
mov byte [rsp + 0x53], r10b
xor r11b, r9b
mov byte [rsp + 0x54], r11b
xor bl, r9b
mov byte [rsp + 0x55], bl
xor dil, r9b
mov byte [rsp + 0x56], dil
xor sil, r9b
mov byte [rsp + 0x57], sil
xor r14b, r9b
mov byte [rsp + 0x58], r14b
xor r15b, r9b
mov byte [rsp + 0x59], r15b
xor r12b, r9b
mov byte [rsp + 0x5a], r12b
xor r13b, r9b
mov byte [rsp + 0x5b], r13b
mov byte [rsp + 0x5c], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
lea rax, [rsp + 0x31]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400543a0
lea rdx, [rsp + 0x31]
lea rcx, [rbp - 0x78]
call fcn.140027cd0
nop
lea rcx, [0x1400ca2f8]
call fcn.1400032e0
movaps xmm0, xmm9
subss xmm0, dword [0x14008cb1c]
movaps xmm1, xmm8
subss xmm1, dword [0x14008ca80]
movss dword [rsp + 0x60], xmm1
movss dword [rsp + 0x64], xmm0
movaps xmm0, xmm8
subss xmm0, xmm1
movss dword [rsp + 0x6c], xmm0
mov dword [rsp + 0x70], 0x42280000
mov dword [rsp + 0x28], 0xffffffff
movss xmm6, dword [0x14008cac4]
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x6c]
mov rcx, qword [rsp + 0x78]
call fcn.14001e9f0
lea rcx, [0x1400ca388]
call fcn.1400032e0
subss xmm9, dword [0x14008cb20]
movaps xmm0, xmm8
movss xmm7, dword [0x14008ca94]
subss xmm0, xmm7
movss dword [rsp + 0x6c], xmm0
movss dword [rsp + 0x70], xmm9
subss xmm8, xmm0
movss dword [rsp + 0x60], xmm8
mov dword [rsp + 0x64], 0x422c0000
mov dword [rsp + 0x28], 0xffffffff
movss dword [rsp + 0x20], xmm6
mov r9d, eax
lea r8, [rsp + 0x6c]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x78]
call fcn.14001e9f0
mov rbx, qword [0x14009e200]
mov rax, qword [rbx + 0x1778]
mov byte [rax + 0x8a], 1
mov rax, qword [rbx + 0x1778]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x64]
addss xmm0, dword [0x14008cb18]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x60]
movss xmm6, dword [0x14008caa8]
addss xmm2, xmm6
movss dword [rax + 0xc0], xmm2
movss dword [rax + 0xc4], xmm0
movss xmm1, dword [rax + 0xdc]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xd8]
maxss xmm0, xmm2
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm1
xor r15d, r15d
mov edi, r15d
mov dword [rsp + 0x6c], 0x42a00000
mov dword [rsp + 0x70], 0x41d00000
lea rsi, str.Theme
lea r14, [0x140087f20]
mov edx, dword [0x1400ca598]
nop dword [rax]
lea rcx, [rbx + 0x1808]
movss xmm0, dword [rbx + 0x1400]
cmp edi, edx
jne 0x140054574
mov dword [rsp + 0x78], r15d
movss dword [rsp + 0x7c], xmm0
lea rdx, [rsp + 0x78]
call fcn.140014750
mov dword [rbx + 0x1400], 0x3f800000
jmp 0x140054593
mov dword [rsp + 0x60], r15d
movss dword [rsp + 0x64], xmm0
lea rdx, [rsp + 0x60]
call fcn.140014750
mov dword [rbx + 0x1400], 0x3f000000
lea rdx, [rsp + 0x6c]
mov rcx, qword [rsi]
call fcn.14000d210
test al, al
je 0x1400545c0
cmp byte [0x1400cdd68], r15b
jne 0x1400545c0
cmp byte [0x1400cde75], r15b
je 0x1400545c0
mov edx, edi
mov dword [0x1400ca598], edx
jmp 0x1400545c6
mov edx, dword [0x1400ca598]
mov rbx, qword [0x14009e200]
movsxd rax, dword [rbx + 0x1808]
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 0x1810]
movsxd r8, dword [rax + rcx*4 - 0xc]
mov r9d, dword [r14 + r8*8]
cmp r9d, 1
jne 0x140054604
movss xmm0, dword [rax + rcx*4 - 8]
mov eax, dword [r14 + r8*8 + 4]
movss dword [rax + rbx + 0x1400], xmm0
jmp 0x140054644
cmp r9d, 2
jne 0x14005462f
movss xmm1, dword [rax + rcx*4 - 4]
movss xmm0, dword [rax + rcx*4 - 8]
mov eax, dword [r14 + r8*8 + 4]
movss dword [rax + rbx + 0x1400], xmm0
movss dword [rax + rbx + 0x1404], xmm1
jmp 0x140054644
test r9d, r9d
jne 0x140054644
mov ecx, dword [rax + rcx*4 - 8]
mov eax, dword [r14 + r8*8 + 4]
mov dword [rax + rbx + 0x1400], ecx
dec dword [rbx + 0x1808]
cmp edi, 1
jae 0x1400546e7
mov rax, qword [rbx + 0x1778]
movss xmm0, dword [rax + 0xc4]
subss xmm0, dword [rax + 0x20]
addss xmm0, dword [rax + 0x64]
addss xmm0, xmm7
mov byte [rax + 0x8a], 1
mov rax, qword [rbx + 0x1778]
movss xmm1, dword [rax + 0x20]
subss xmm1, dword [rax + 0x64]
addss xmm1, xmm0
movss dword [rax + 0xc4], xmm1
movss xmm0, dword [rax + 0xdc]
maxss xmm0, xmm1
movss dword [rax + 0xdc], xmm0
mov rax, qword [rbx + 0x1778]
mov byte [rax + 0x8a], 1
mov rax, qword [rbx + 0x1778]
movss xmm1, dword [rax + 0x1c]
subss xmm1, dword [rax + 0x60]
addss xmm1, xmm6
movss dword [rax + 0xc0], xmm1
movss xmm0, dword [rax + 0xd8]
maxss xmm0, xmm1
movss dword [rax + 0xd8], xmm0
inc edi
add rsi, 8
cmp edi, 2
jl 0x140054540
mov rax, qword [rbx + 0x1778]
mov byte [rax + 0x8a], 1
mov rax, qword [rbx + 0x1778]
movss xmm0, dword [rax + 0x20]
subss xmm0, dword [rax + 0x64]
addss xmm0, dword [0x14008cb50]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x60]
addss xmm2, dword [0x14008cb3c]
movss dword [rax + 0xc0], xmm2
movss dword [rax + 0xc4], xmm0
movss xmm1, dword [rax + 0xdc]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xd8]
maxss xmm0, xmm2
movss dword [rax + 0xd8], xmm0
movss dword [rax + 0xdc], xmm1
test edx, edx
jne 0x1400547e8
movss xmm0, dword [0x14008cb68]
call fcn.14000bc00
mov dword [rsp + 0x20], 4
lea r9, str.gray
lea rdx, [0x1400d1a98]
call fcn.1400124b0
mov rcx, qword [0x14009e200]
mov rax, qword [rcx + 0x1778]
mov byte [rax + 0x8a], 1
mov rdx, qword [rcx + 0x1778]
movsxd rcx, dword [rdx + 0x140]
lea eax, [rcx - 1]
mov dword [rdx + 0x140], eax
test eax, eax
jne 0x1400547cd
movss xmm0, dword [rdx + 0x224]
jmp 0x1400547da
mov rax, qword [rdx + 0x148]
movss xmm0, dword [rax + rcx*4 - 8]
movss dword [rdx + 0x134], xmm0
mov edx, dword [0x1400ca598]
cmp edx, 1
jne 0x14005490e
mov dword [rsp + 0x6c], 0x43960000
mov dword [rsp + 0x70], 0x43480000
mov byte [rsp + 0x78], 0x1c
mov al, 0x5e
mov cl, 0x5d
mov dl, 0x52
mov r8b, 0x3c
movzx r9d, cl
mov r10b, 0x51
mov r11b, 0x55
xor ebx, ebx
xor al, 0x1c
mov byte [rsp + 0x79], al
xor cl, 0x1c
mov byte [rsp + 0x7a], cl
xor dl, 0x1c
mov byte [rsp + 0x7b], dl
xor r8b, 0x1c
mov byte [rsp + 0x7c], r8b
xor r9b, 0x1c
mov byte [rsp + 0x7d], r9b
xor r10b, 0x1c
mov byte [rsp + 0x7e], r10b
xor r11b, 0x1c
mov byte [rsp + 0x7f], r11b
mov byte [rbp - 0x80], bl
lea rdx, [rsp + 0x6c]
lea rcx, [rsp + 0x79]
call fcn.14000d210
test al, al
je 0x14005490e
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
and eax, 0x80000001
jge 0x140054881
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1400548af
lea r8, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova r8, qword [rbp - 0x58]
mov byte [rsp + 0x60], 0x3c
mov al, 0x53
mov cl, 0x4c
mov dl, 0x59
mov r9b, 0x52
xor al, 0x3c
xor cl, 0x3c
xor dl, 0x3c
xor r9b, 0x3c
jmp 0x1400548dc
cmp eax, 1
jne 0x14005490e
lea r8, [rbp - 0x78]
cmp qword [rbp - 0x60], 0xf
cmova r8, qword [rbp - 0x78]
mov byte [rsp + 0x60], 0x77
mov al, 0x18
mov cl, 7
mov dl, 0x12
mov r9b, 0x19
xor al, 0x77
xor cl, 0x77
xor dl, 0x77
xor r9b, 0x77
mov dword [rsp + 0x28], 0xa
mov byte [rsp + 0x64], r9b
mov byte [rsp + 0x63], dl
mov byte [rsp + 0x62], cl
mov qword [rsp + 0x20], r15
mov byte [rsp + 0x61], al
mov byte [rsp + 0x65], bl
xor r9d, r9d
lea rdx, [rsp + 0x61]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov eax, dword [0x1400d1a98]
test eax, eax
jne 0x140054928
movaps xmm0, xmmword [0x14008d4d0]
movaps xmm1, xmmword [0x14008d460]
jmp 0x140054965
cmp eax, 1
jne 0x14005493d
movaps xmm0, xmmword [0x14008d530]
movaps xmm1, xmmword [0x14008d510]
jmp 0x140054965
cmp eax, 2
jne 0x140054952
movaps xmm0, xmmword [0x14008d480]
movaps xmm1, xmmword [0x14008d4e0]
jmp 0x140054965
cmp eax, 3
jne 0x140054973
movaps xmm0, xmmword [0x14008d500]
movaps xmm1, xmmword [0x14008d540]
movups xmmword [0x1400ca388], xmm1
movups xmmword [0x1400ca2f8], xmm0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x1400549b1
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400549ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400549ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
movdqa xmm0, xmmword [0x14008cc10]
movdqu xmmword [rbp - 0x68], xmm0
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140054a00
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400549fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400549fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007ca90
mov rcx, qword [rbp - 0x38]
xor rcx, rsp
call fcn.14007c640
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret