Function at 0x140029f30
Capabilities:
Create process on windows
Terminate process

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x218
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x190], 0xfffffffffffffffe
mov rbx, qword [rdx]
mov r15, qword [rdx + 8]
cmp rbx, r15
je 0x140029fa2
mov r14, rcx
mov rcx, r15
sub rcx, rbx
js 0x14002b13c
mov esi, r8d
mov qword [rbp + 0x98], r9
mov rdi, rcx
sar rdi, 5
cmp rcx, 0xfe1
jb 0x140029fa9
add rcx, 0x27
call fcn.1400fa374
lea r9, [rax + 0x27]
and r9, 0xffffffffffffffe0
mov qword [r9 - 8], rax
jmp 0x140029fb1
xor ebx, ebx
jmp 0x14002b126
call fcn.1400fa374
mov r9, rax
mov qword [rbp + 0x158], r9
mov qword [rbp + 0x160], r9
shl rdi, 5
add rdi, r9
mov qword [rbp + 0x168], rdi
lea rcx, [rbp + 0x158]
mov qword [rbp - 0x30], rcx
mov rdx, rbx
mov r8, r15
call fcn.140020840
mov qword [rbp + 0x160], rax
xorps xmm0, xmm0
movaps xmmword [rbp - 0x30], xmm0
movaps xmmword [rbp + 0x20], xmm0
movaps xmmword [rbp + 0x10], xmm0
movaps xmmword [rbp], xmm0
movaps xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp - 0x20], xmm0
mov qword [rbp + 0x30], 0
mov dword [rbp - 0x30], 0x68
mov rcx, qword [rbp + 0x158]
call fcn.14002bfc0
test al, al
je 0x14002a288
mov rbx, qword [rbp + 0x210]
test sil, 4
je 0x14002a04c
xor edi, edi
test sil, 8
je 0x14002a522
cmp qword [rbx + 0x10], 0
je 0x14002a522
mov dword [rbp + 0xc], 1
lea rax, str.COMSPEC
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x40], 7
mov rax, qword [r14]
lea r15, [rbp + 0x130]
lea r8, [rbp + 0x38]
mov rcx, r14
mov rdx, r15
call qword [rax + 0x50]
cmp qword [rbp + 0x140], 0
jne 0x14002a0fa
mov rax, qword [rbp + 0x148]
cmp rax, 7
jae 0x14002a0ce
mov ecx, 0x10
call fcn.1400fa374
mov qword [rbp + 0x140], 7
mov qword [rbp + 0x148], 0xf
mov dword [rax + 3], 0x6578652e
mov dword [rax], 0x2e646d63
mov byte [rax + 7], 0
mov qword [rbp + 0x130], rax
jmp 0x14002a0fa
cmp rax, 0x10
jb 0x14002a0db
mov r15, qword [rbp + 0x130]
mov qword [rbp + 0x140], 7
mov dword [r15 + 3], 0x6578652e
mov dword [r15], 0x2e646d63
mov byte [r15 + 7], 0
lea rcx, [rbp + 0x130]
call fcn.14002bfc0
test al, al
je 0x14002a243
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x188], 0xf
mov qword [rbp + 0x180], 2
mov word [rbp + 0x170], 0x432f
mov byte [rbp + 0x172], 0
mov r8, qword [rbp + 0x158]
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x110]
lea r9, [rbp + 0x170]
call fcn.14002c3f0
mov rax, qword [rbp + 0x188]
cmp rax, 0x10
jb 0x14002a1a5
mov rcx, qword [rbp + 0x170]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002a1a0
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov r8, qword [rbp + 0x158]
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x170]
lea r9, [rbp + 0x130]
call fcn.14002c5b0
test sil, 8
jne 0x14002a28f
test sil, 4
jne 0x14002a4da
lea rdx, str._nul
lea rcx, [rbp + 0x170]
call fcn.140001510
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x170]
call fcn.140021410
lea rcx, [rbp + 0x170]
call fcn.140001580
lea rdx, str.2_1
lea rcx, [rbp + 0x170]
call fcn.140001510
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x170]
call fcn.140021410
lea rcx, [rbp + 0x170]
call fcn.140001580
jmp 0x14002a4da
mov rax, qword [rbp + 0x148]
cmp rax, 0x10
jb 0x14002a288
mov rcx, qword [rbp + 0x130]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002a283
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
xor ebx, ebx
jmp 0x14002b064
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x188], 0xf
mov qword [rbp + 0x180], 1
mov word [rbp + 0x170], 0x3e
mov rdx, qword [rbp + 0x160]
cmp rdx, qword [rbp + 0x168]
je 0x14002a2f6
mov qword [rdx], 0
xorps xmm0, xmm0
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [rbp + 0x170]
movups xmm1, xmmword [rbp + 0x180]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
add qword [rbp + 0x160], 0x20
jmp 0x14002a34e
lea rcx, [rbp + 0x158]
lea r8, [rbp + 0x170]
call fcn.14001b370
mov rax, qword [rbp + 0x188]
cmp rax, 0x10
jb 0x14002a34e
mov rcx, qword [rbp + 0x170]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002a349
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov r14, qword [rbp + 0x160]
cmp r14, qword [rbp + 0x168]
je 0x14002a38f
mov qword [r14], 0
xorps xmm0, xmm0
movups xmmword [r14 + 0x10], xmm0
mov r15, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x14002a37b
mov rbx, qword [rbx]
cmp r15, 0xf
ja 0x14002a3aa
movups xmm0, xmmword [rbx]
movups xmmword [r14], xmm0
mov edi, 0xf
jmp 0x14002a400
lea rcx, [rbp + 0x158]
mov rdx, r14
mov r8, rbx
call fcn.14001b6b0
mov rdx, qword [rbp + 0x160]
jmp 0x14002a41a
mov rdi, r15
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x14002a3e5
lea rcx, [rdi + 0x28]
call fcn.1400fa374
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x14002a3f1
lea rcx, [rdi + 1]
call fcn.1400fa374
mov rcx, rax
mov qword [r14], rcx
lea r8, [r15 + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [r14 + 0x10], r15
mov qword [r14 + 0x18], rdi
mov rdx, qword [rbp + 0x160]
add rdx, 0x20
mov qword [rbp + 0x160], rdx
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x188], 0xf
mov qword [rbp + 0x180], 4
mov dword [rbp + 0x170], 0x31263e32
mov byte [rbp + 0x174], 0
cmp rdx, qword [rbp + 0x168]
je 0x14002a482
mov qword [rdx], 0
xorps xmm0, xmm0
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [rbp + 0x170]
movups xmm1, xmmword [rbp + 0x180]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rdx], xmm0
add qword [rbp + 0x160], 0x20
jmp 0x14002a4da
lea rcx, [rbp + 0x158]
lea r8, [rbp + 0x170]
call fcn.14001b370
mov rax, qword [rbp + 0x188]
cmp rax, 0x10
jb 0x14002a4da
mov rcx, qword [rbp + 0x170]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002a4d5
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov rax, qword [rbp + 0x148]
cmp rax, 0x10
jb 0x14002a51f
mov rcx, qword [rbp + 0x130]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002a51a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov dil, 1
xorps xmm0, xmm0
movaps xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], 0
mov rdx, qword [rbp + 0x158]
lea rcx, [rbp + 0x78]
call fcn.1400424c0
lea rcx, [rbp + 0xc0]
call fcn.140042350
test dil, dil
je 0x14002a5d3
mov rbx, qword [rbp + 0x158]
mov qword [rbp + 0x130], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov r14, qword [rbx + 0x30]
cmp qword [rbx + 0x38], 0x10
jb 0x14002a617
mov rbx, qword [rbx + 0x20]
cmp r14, 0xf
jbe 0x14002a625
mov rdi, r14
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x14002a678
lea rcx, [rdi + 0x28]
call fcn.1400fa374
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x14002a684
mov rbx, qword [rbp + 0x158]
mov qword [rbp + 0x130], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x140], xmm0
mov r14, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 0x10
jb 0x14002a5fd
mov rbx, qword [rbx]
cmp r14, 0xf
ja 0x14002a636
movups xmm0, xmmword [rbx]
movaps xmmword [rbp + 0x130], xmm0
mov edi, 0xf
jmp 0x14002a90e
add rbx, 0x20
cmp r14, 0xf
ja 0x14002a591
movups xmm0, xmmword [rbx]
movaps xmmword [rbp + 0x130], xmm0
mov edi, 0xf
jmp 0x14002a697
mov rdi, r14
or rdi, 0xf
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
cmovae rdi, rax
cmp rdi, 0xfff
jb 0x14002a8ef
lea rcx, [rdi + 0x28]
call fcn.1400fa374
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x14002a8fb
lea rcx, [rdi + 1]
call fcn.1400fa374
mov rcx, rax
mov qword [rbp + 0x130], rcx
lea r8, [r14 + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x148], rdi
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x188], 0xf
mov byte [rbp + 0x170], 0
mov r12d, 2
lea rbx, [rbp + 0x110]
lea r14, [rbp + 0x48]
lea r15, [rbp + 0x170]
jmp 0x14002a6f9
mov word [rdx + rax], 0x20
inc r12
mov rcx, qword [rbp + 0x158]
mov rdx, qword [rbp + 0x160]
sub rdx, rcx
sar rdx, 5
dec rdx
mov rax, r12
shl rax, 5
add rax, rcx
cmp r12, rdx
jae 0x14002a858
cmp qword [rax + 0x18], 0x10
mov rcx, rax
jb 0x14002a731
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x48], rcx
mov qword [rbp + 0x50], rax
mov rcx, rbx
mov rdx, r14
call fcn.1400431a0
cmp qword [rbp + 0x128], 0x10
mov r9, rbx
jb 0x14002a75c
mov r9, qword [rbp + 0x110]
mov r8, qword [rbp + 0x120]
mov rcx, qword [rbp + 0x180]
mov rax, qword [rbp + 0x188]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x14002a790
mov qword [rsp + 0x20], r8
mov rcx, r15
mov rdx, r8
call fcn.140006c20
jmp 0x14002a7bc
lea rdi, [rcx + r8]
mov qword [rbp + 0x180], rdi
mov r13, r15
cmp rax, 0x10
jb 0x14002a7ab
mov r13, qword [rbp + 0x170]
add rcx, r13
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [r13 + rdi], 0
mov rax, qword [rbp + 0x128]
cmp rax, 0x10
jb 0x14002a801
mov rcx, qword [rbp + 0x110]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002a7fc
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov rax, qword [rbp + 0x180]
mov rcx, qword [rbp + 0x188]
cmp rax, rcx
jae 0x14002a840
lea rdx, [rax + 1]
mov qword [rbp + 0x180], rdx
mov rdx, r15
cmp rcx, 0x10
jb 0x14002a6f0
mov rdx, qword [rbp + 0x170]
jmp 0x14002a6f0
mov edx, 1
mov rcx, r15
mov r9b, 0x20
call fcn.140012b20
inc r12
jmp 0x14002a6f9
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14002a866
mov rax, qword [rax]
mov qword [rbp + 0x58], rax
mov qword [rbp + 0x60], rcx
lea rbx, [rbp + 0x110]
lea rdx, [rbp + 0x58]
mov rcx, rbx
call fcn.1400431a0
mov r8, qword [rbp + 0x120]
cmp qword [rbp + 0x128], 0x10
jb 0x14002a899
mov rbx, qword [rbp + 0x110]
mov rcx, qword [rbp + 0x180]
mov rax, qword [rbp + 0x188]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x14002a8ce
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0x170]
mov rdx, r8
mov r9, rbx
call fcn.140006c20
jmp 0x14002ab07
lea rdi, [rcx + r8]
mov qword [rbp + 0x180], rdi
cmp rax, 0x10
jb 0x14002aaf0
mov r14, qword [rbp + 0x170]
jmp 0x14002aaf7
lea rcx, [rdi + 1]
call fcn.1400fa374
mov rcx, rax
mov qword [rbp + 0x130], rcx
lea r8, [r14 + 1]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x140], r14
mov qword [rbp + 0x148], rdi
mov r12d, 1
lea rbx, [rbp + 0x130]
lea r14, [rbp + 0x170]
lea r15, [rbp + 0x68]
jmp 0x14002a948
call fcn.1400fa3b8
inc r12
mov rax, qword [rbp + 0x160]
sub rax, qword [rbp + 0x158]
sar rax, 5
cmp r12, rax
jae 0x14002aab9
mov rax, qword [rbp + 0x140]
mov rcx, qword [rbp + 0x148]
cmp rax, rcx
jae 0x14002a9a0
lea rdx, [rax + 1]
mov qword [rbp + 0x140], rdx
mov rdx, rbx
cmp rcx, 0x10
jb 0x14002a991
mov rdx, qword [rbp + 0x130]
mov word [rdx + rax], 0x20
jmp 0x14002a9b0
mov edx, 1
mov rcx, rbx
mov r9b, 0x20
call fcn.140012b20
mov rax, qword [rbp + 0x158]
mov rdx, r12
shl rdx, 5
mov rcx, qword [rax + rdx + 0x10]
cmp qword [rax + rdx + 0x18], 0x10
jb 0x14002a9e0
mov rax, qword [rax + rdx]
jmp 0x14002a9e3
add rax, rdx
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x70], rcx
mov rcx, r14
mov rdx, r15
call fcn.1400431a0
cmp qword [rbp + 0x188], 0x10
mov r9, r14
jb 0x14002aa0a
mov r9, qword [rbp + 0x170]
mov r8, qword [rbp + 0x180]
mov rcx, qword [rbp + 0x140]
mov rax, qword [rbp + 0x148]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x14002aa40
mov qword [rsp + 0x20], r8
mov rcx, rbx
mov rdx, r8
call fcn.140006c20
jmp 0x14002aa6c
lea rdi, [rcx + r8]
mov qword [rbp + 0x140], rdi
mov r13, rbx
cmp rax, 0x10
jb 0x14002aa5b
mov r13, qword [rbp + 0x130]
add rcx, r13
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [r13 + rdi], 0
mov rax, qword [rbp + 0x188]
cmp rax, 0x10
jb 0x14002a945
mov rcx, qword [rbp + 0x170]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002a940
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x14002a940
lea rcx, [rbp + 0x170]
lea rdx, [rbp + 0x130]
call fcn.1400424c0
lea rcx, [rbp + 0xc0]
lea rdx, [rbp + 0x170]
call fcn.140042740
lea rcx, [rbp + 0x170]
call fcn.140042730
jmp 0x14002aef0
lea r14, [rbp + 0x170]
add rcx, r14
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rdi], 0
mov rax, qword [rbp + 0x128]
cmp rax, 0x10
jb 0x14002ab4c
mov rcx, qword [rbp + 0x110]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002ab47
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov rbx, qword [rbp + 0x140]
mov rax, rbx
shr rax, 1
movabs rcx, 0x3fffffffffffffff
cmp rax, rcx
je 0x14002b141
mov r15, qword [rbp + 0x130]
mov r12, qword [rbp + 0x148]
mov qword [rbp + 0xf0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x100], xmm0
lea r13, [rbx + 2]
cmp r13, 0x10
jb 0x14002abc6
mov rax, r13
or rax, 0xf
js 0x14002abd4
cmp rax, 0x17
mov edi, 0x16
cmovae rdi, rax
lea rcx, [rdi + 1]
cmp rdi, 0xfff
jae 0x14002abe8
call fcn.1400fa374
mov r14, rax
jmp 0x14002ac00
mov edi, 0xf
lea r14, [rbp + 0xf0]
jmp 0x14002ac07
movabs rdi, 0x7fffffffffffffff
movabs rcx, 0x8000000000000000
add rcx, 0x27
call fcn.1400fa374
mov r14, rax
add r14, 0x27
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
mov qword [rbp + 0xf0], r14
cmp r12, 0x10
lea rdx, [rbp + 0x130]
cmovae rdx, r15
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x108], rdi
mov rcx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
mov word [r14 + rbx], 0x2220
mov byte [r14 + rbx + 2], 0
mov r8, qword [rbp + 0x180]
cmp qword [rbp + 0x188], 0x10
jb 0x14002ac56
mov r9, qword [rbp + 0x170]
jmp 0x14002ac5d
lea r9, [rbp + 0x170]
mov rcx, qword [rbp + 0x100]
mov rax, qword [rbp + 0x108]
mov rdx, rax
sub rdx, rcx
cmp rdx, r8
jae 0x14002ac8f
mov qword [rsp + 0x20], r8
lea rcx, [rbp + 0xf0]
mov rdx, r8
call fcn.140006c20
mov rbx, rax
jmp 0x14002acc1
lea rdi, [rcx + r8]
mov qword [rbp + 0x100], rdi
lea rbx, [rbp + 0xf0]
mov r14, rbx
cmp rax, 0x10
jb 0x14002acb1
mov r14, qword [rbp + 0xf0]
add rcx, r14
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [r14 + rdi], 0
movups xmm0, xmmword [rbx]
movups xmm1, xmmword [rbx + 0x10]
movaps xmmword [rbp + 0xe0], xmm1
movaps xmmword [rbp + 0xd0], xmm0
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rcx, qword [rbp + 0xe0]
mov rdx, qword [rbp + 0xe8]
cmp rdx, rcx
jne 0x14002ad1f
mov qword [rsp + 0x20], 1
lea r9, [0x140104d8f]
lea rcx, [rbp + 0xd0]
mov edx, 1
call fcn.140006c20
jmp 0x14002ad48
lea rax, [rcx + 1]
mov qword [rbp + 0xe0], rax
lea rax, [rbp + 0xd0]
mov r8, rax
cmp rdx, 0x10
jb 0x14002ad41
mov r8, qword [rbp + 0xd0]
mov word [r8 + rcx], 0x22
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp + 0x120], xmm1
movaps xmmword [rbp + 0x110], xmm0
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rcx, [rbp + 0x88]
lea rdx, [rbp + 0x110]
call fcn.1400424c0
lea rcx, [rbp + 0xc0]
lea rdx, [rbp + 0x88]
call fcn.140042740
lea rcx, [rbp + 0x88]
call fcn.140042730
mov rax, qword [rbp + 0x128]
cmp rax, 0x10
jb 0x14002ade7
mov rcx, qword [rbp + 0x110]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002ade2
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x128], 0xf
mov byte [rbp + 0x110], 0
mov rax, qword [rbp + 0xe8]
cmp rax, 0x10
jb 0x14002ae49
mov rcx, qword [rbp + 0xd0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002ae44
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
mov rax, qword [rbp + 0x108]
cmp rax, 0x10
jb 0x14002aeab
mov rcx, qword [rbp + 0xf0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002aea6
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov rax, qword [rbp + 0x188]
cmp rax, 0x10
jb 0x14002aef0
mov rcx, qword [rbp + 0x170]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002aeeb
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov rax, qword [rbp + 0x148]
cmp rax, 0x10
jb 0x14002af35
mov rcx, qword [rbp + 0x130]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002af30
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002b0e6
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
lea rcx, [rbp + 0xc0]
call fcn.140042900
mov rdx, qword [rbp + 0x78]
test rdx, rdx
lea rcx, [0x140102f6e]
cmovne rcx, rdx
lea rdx, [rbp + 0xa0]
mov qword [rsp + 0x48], rdx
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x40], rdx
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor ebx, ebx
mov rdx, rax
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14002b04f
mov rdi, qword [rbp + 0x208]
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rdi, rdi
je 0x14002afba
mov eax, dword [rbp + 0xb0]
mov dword [rdi], eax
mov r14, qword [rbp + 0xa0]
mov bl, 1
test sil, 1
je 0x14002b041
xor edx, edx
mov rax, qword [rbp + 0x98]
cmp rax, 1
sbb edx, edx
or edx, eax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
setne cl
cmp eax, 0x102
setne bl
and bl, cl
cmp eax, 0x102
je 0x14002afff
cmp eax, 0xffffffff
jne 0x14002b019
test sil, 2
je 0x14002b041
mov rcx, qword [rbp + 0xa0]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x14002b041
mov rsi, qword [rbp + 0x200]
mov rcx, qword [rbp + 0xa0]
lea rdx, [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test rsi, rsi
je 0x14002b041
mov eax, dword [rbp + 0x130]
mov dword [rsi], eax
test r14, r14
je 0x14002b04f
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rbp + 0xc0]
call fcn.140042730
lea rcx, [rbp + 0x78]
call fcn.140042730
mov rsi, qword [rbp + 0x158]
test rsi, rsi
je 0x14002b126
mov rdi, qword [rbp + 0x160]
cmp rsi, rdi
jne 0x14002b0bb
jmp 0x14002b0f3
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400fa3b8
mov qword [rsi + 0x10], 0
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
add rsi, 0x20
cmp rsi, rdi
je 0x14002b0ec
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x14002b09f
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002b09a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jb 0x14002b090
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov rsi, qword [rbp + 0x158]
mov rdx, qword [rbp + 0x168]
sub rdx, rsi
cmp rdx, 0x1000
jb 0x14002b11e
mov rax, qword [rsi - 8]
add rsi, 0xfffffffffffffff8
sub rsi, rax
cmp rsi, 0x20
jae 0x14002b0e6
add rdx, 0x27
mov rsi, rax
mov rcx, rsi
call fcn.1400fa3b8
mov eax, ebx
add rsp, 0x218
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140006410
call fcn.1400067d0
int3