Function at 0x140086e00
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
nop
mov qword [rsp - 8], rbp
sub rsp, 8
push rdi
push r12
push r14
nop
push 0x28f63364
mov qword [rsp], r15
lea rbp, [rsp - 0x2070]
mov eax, 0xd5fa03d
xor eax, 0xd5f814d
call fcn.140110640
sub rsp, rax
xchg r12, r15
mov r12, rdx
xchg r12, r15
xchg r12, rsi
mov rsi, rcx
xchg rsi, r12
xor ebx, ebx
mov r14d, ebx
mov dword [rbp + 0x20b0], ebx
test r8b, r8b
je 0x1400873ad
mov rcx, rdx
call fcn.140023820
cmp rax, 3
jb 0x1400872c3
lea edx, [rbx + 1]
xchg r13, rcx
mov r13, r15
xchg rcx, r13
call fcn.140019850
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
mov dl, 0x2d
xor dl, 0x2c
call 0x14002d930
test al, al
je 0x1400872c3
lea r9d, [rbx - 1]
lea r8d, [rbx + 0x1b]
lea rdx, [rbp - 0x20]
mov rcx, qword [r12]
call fcn.1400961b0
nop
xchg r15, rsi
mov r15, qword [r12]
xchg r15, rsi
lea rcx, [rsi + 0x308]
call fcn.14002dd70
xchg r8, rax
mov rdi, r8
xchg r8, rax
lea edx, [rbx + 2]
mov rcx, r15
call fcn.140019850
lea rdx, [rbp - 0x80]
mov rcx, rax
call fcn.14002db30
nop
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x28]
xchg rdx, rcx
mov rdx, rdi
xchg rcx, rdx
call fcn.14001c650
nop
mov rcx, rax
call fcn.1400a2ce0
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
lea rcx, [rbp - 0x20]
call fcn.14002ae70
xchg r9, rdi
mov rdi, r9
xchg rdi, r9
xchg rdi, rax
mov r8, rdi
xchg rdi, rax
lea edx, [rbx + 0x40]
mov rcx, rsi
call fcn.14009ce60
nop
lea rcx, [rbp + 0x28]
call fcn.14000a890
nop
lea rcx, [rbp - 0x80]
call fcn.140018350
xchg rcx, r15
mov r15, rcx
xchg r15, rcx
call fcn.140023820
cmp rax, 4
jb 0x1400872ba
xchg r15, rcx
mov r15, qword [r12]
xchg rcx, r15
add rcx, 0x698b5d55
sub rcx, 0x698b5a4d
call fcn.14002dd70
mov rdi, rax
lea edx, [rbx + 3]
mov rcx, r15
call fcn.140019850
lea rdx, [rsp + 0x60]
xchg rsi, rax
mov rcx, rsi
xchg rsi, rax
call fcn.14002db30
nop
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x60]
xchg r9, rcx
mov r9, rdi
xchg rcx, r9
call fcn.14001c650
nop
lea rcx, [rsp + 0x60]
call fcn.140018350
lea rcx, [rbp - 0x60]
call fcn.1400a5f00
cmp rax, 8
jb 0x14008714c
lea r9d, [rbx + 8]
xor r8d, r8d
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.1400a5f60
nop
mov dword [rbp + 0x20b0], 0x4b7cd7c8
xor dword [rbp + 0x20b0], 0x4b7cd7c9
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
call fcn.1400a2ce0
xchg r13, rax
mov rdx, r13
xchg r13, rax
lea rcx, [rbp + 0x10]
call fcn.14002a8d0
xchg rbx, rax
mov rdi, rbx
xchg rbx, rax
mov dword [rbp + 0x20b0], 0x112c646d
sub dword [rbp + 0x20b0], 0x112c646a
mov dword [rsp + 0x40], 0x26e77560
xor dword [rsp + 0x40], 0x9859cbde
mov dword [rsp + 0x4a], 0x39ddf6
xor dword [rsp + 0x4a], 0xff8f225c
mov dword [rsp + 0x4e], 0x6faa3042
xor dword [rsp + 0x4e], 0x9018cff4
mov dword [rsp + 0x44], 0x65487ab3
add dword [rsp + 0x44], 0x5976440b
mov dword [rsp + 0x52], 0x3bb44962
xor dword [rsp + 0x52], 0xc4c8b6d7
mov dword [rsp + 0x56], 0x189e0a5d
add dword [rsp + 0x56], 0xe6d3f514
xor eax, eax
mov word [rsp + 0x5a], ax
mov edx, ebx
movzx ecx, word [rsp + rdx*2 + 0x4a]
movzx eax, byte [rsp + rdx + 0x40]
add ax, cx
mov word [rsp + rdx*2 + 0x4a], ax
mov byte [rsp + rdx + 0x40], 0x7c
sub byte [rsp + rdx + 0x40], 0x7c
inc rdx
cmp rdx, 8
jb 0x14008709b
mov dword [rbp + 0x20b0], 0x5e54b786
xor dword [rbp + 0x20b0], 0x5e54b781
movups xmm0, xmmword [rsp + 0x40]
xchg r9, rbp
movaps xmmword [r9 - 0x40], xmm0
xchg r9, rbp
movsd xmm1, qword [rsp + 0x50]
xchg rbp, r14
movsd qword [r14 - 0x30], xmm1
xchg r14, rbp
mov eax, dword [rsp + 0x58]
mov dword [rbp - 0x28], eax
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 8]
call fcn.14002c0e0
nop
mov r14d, 0x79695d7a
sub r14d, 0x79695d6b
mov dword [rbp + 0x20b0], r14d
xchg rbp, rax
mov rdx, rbp
xchg rbp, rax
xchg rdi, r8
mov rcx, r8
xchg r8, rdi
call fcn.14002ae00
test al, al
je 0x14008714c
mov dil, 0x12
sub dil, 0x11
jmp 0x14008714f
xor dil, dil
test r14b, 8
je 0x14008716e
and r14d, 0xfffffff7
mov dword [rbp + 0x20b0], r14d
lea rcx, [rbp - 8]
call fcn.14002ab80
nop
test r14b, 4
je 0x1400871aa
and r14d, 0xfffffffb
mov dword [rbp + 0x20b0], r14d
xchg r13, rax
mov r13, rbx
xchg r13, rax
nop word [rax + rax]
mov byte [rsp + rax + 0x4a], 0x65
sub byte [rsp + rax + 0x4a], 0x65
inc rax
cmp rax, 0x10
jb 0x140087193
test r14b, 2
je 0x1400871c9
and r14d, 0xfffffffd
mov dword [rbp + 0x20b0], r14d
lea rcx, [rbp + 0x10]
call fcn.14002ab80
nop
test r14b, 1
je 0x1400871e7
and r14d, 0xfffffffe
mov dword [rbp + 0x20b0], r14d
lea rcx, [rbp + 0x48]
call fcn.14000a890
test dil, dil
je 0x1400872b0
lea rcx, [rbp - 0x60]
call fcn.1400a2ce0
mov r8, rax
mov dword [rsp + 0x30], 0x4d09accc
xor dword [rsp + 0x30], 0xf3b71272
mov dword [rsp + 0x36], 0x2a14c581
xor dword [rsp + 0x36], 0xd5a63a30
mov dword [rsp + 0x3a], 0x5dc2a9b7
add dword [rsp + 0x3a], 0xa1ee55f0
xor eax, eax
mov word [rsp + 0x3e], ax
xchg rdx, rbp
mov rbp, rbx
xchg rbp, rdx
nop word [rax + rax]
movzx ecx, word [rsp + rdx*2 + 0x36]
movzx eax, byte [rsp + rdx + 0x30]
add ax, cx
mov word [rsp + rdx*2 + 0x36], ax
mov byte [rsp + rdx + 0x30], 0x2d
sub byte [rsp + rdx + 0x30], 0x2d
inc rdx
cmp rdx, 4
jb 0x140087242
mov dword [rsp + 0x28], 0x348d9522
xor dword [rsp + 0x28], 0x348d9523
xchg r12, rbx
mov qword [rsp + 0x20], r12
xchg rbx, r12
xor r9d, r9d
lea rdx, [rsp + 0x36]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
nop dword [rax]
mov byte [rsp + rbx + 0x36], 0x38
sub byte [rsp + rbx + 0x36], 0x38
inc rbx
cmp rbx, 8
jb 0x140087299
lea rcx, [rbp - 0x60]
call fcn.14000a890
nop
lea rcx, [rbp - 0x20]
jmp 0x1400873a8
mov r9d, 0x5500b76a
add r9d, 0xaaff4895
lea r8d, [r9 + 0x1c]
lea rdx, [rbp - 0x80]
mov rcx, qword [r12]
call fcn.1400961b0
nop
mov r9d, 0x6bde3460
add r9d, 0x9421cb9f
lea r8d, [r9 + 0x1d]
lea rdx, [rsp + 0x60]
xchg rcx, rbp
mov rbp, qword [r12]
xchg rbp, rcx
call fcn.1400961b0
nop
xor edx, edx
mov r8d, 0x4667d109
sub r8d, 0x4667b109
lea rcx, [rbp + 0x70]
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [r12]
add rcx, 0xf578dfd
sub rcx, 0xf57889d
call fcn.14002aff0
xchg r15, rax
mov rbx, r15
xchg r15, rax
lea rcx, [rsp + 0x60]
call fcn.14002aff0
xchg r8, rdx
mov rdx, rbx
xchg rdx, r8
xchg rdx, rax
mov rax, rdx
xchg rdx, rax
lea rcx, [rbp + 0x70]
call fcn.1400348c0
xchg rbx, r11
mov r11, qword [r12]
xchg rbx, r11
lea rcx, [rbp - 0x80]
call fcn.14002ae70
lea r9, [rbp + 0x70]
xchg r8, rax
mov rax, r8
xchg r8, rax
mov edx, 0x2db5b5d5
xor edx, 0x2db5b595
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.14009ce60
nop
lea rcx, [rsp + 0x60]
call fcn.14002ab80
nop
lea rcx, [rbp - 0x80]
call fcn.14002ab80
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3