Function at 0x140004cb0
Capabilities:
Create process on windows
Resume thread

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x170]
sub rsp, 0x270
mov rax, qword [0x14005c0d0]
xor rax, rsp
mov qword [rbp + 0x160], rax
mov rsi, r8
mov rdi, rdx
mov r14, rcx
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rdx
mov qword [rbp - 0x60], r8
xor ebx, ebx
mov dword [rsp + 0x50], ebx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0xf0], xmm1
movups xmmword [rbp + 0x100], xmm1
movups xmmword [rbp + 0x110], xmm1
movups xmmword [rbp + 0x120], xmm1
movups xmmword [rbp + 0x130], xmm1
movups xmmword [rbp + 0x140], xmm1
mov qword [rbp + 0x150], rax
mov rdx, rcx
lea rcx, [rsp + 0x58]
call fcn.14000f210
nop
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x140004d58
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
mov rcx, rax
call fcn.14000b940
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140004dce
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dc9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000523d
call fcn.14001e020
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rdx, qword [rbp - 0x58]
lea rax, [rsp + 0x78]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x1400050df
mov r12, rdi
cmp qword [rdi + 0x18], 8
jb 0x140004e27
mov r12, qword [rdi]
mov r15, qword [rdi + 0x10]
call fcn.14001c7c4
mov r13d, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov dword [rsp + 0x50], 0x11
test r15, r15
je 0x140004ecd
cmp r15, 0x7fffffff
ja 0x140005243
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov r8d, r15d
mov rdx, r12
mov ecx, eax
call fcn.14001c834
mov rbx, rax
mov rcx, rax
shr rcx, 0x20
test ecx, ecx
jne 0x140005249
movsxd rdx, ebx
xor r8d, r8d
lea rcx, [rsp + 0x58]
call fcn.14000cdf0
lea r9, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae r9, qword [rsp + 0x58]
mov dword [rsp + 0x20], ebx
mov r8d, r15d
mov rdx, r12
mov ecx, r13d
call fcn.14001c834
shr rax, 0x20
test eax, eax
jne 0x14000524f
mov r15, qword [rsp + 0x78]
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp - 0x20]
call fcn.140020570
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x1b]
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x20]
call fcn.14001bcb0
nop
cmp qword [rbp + 0x70], 0
jne 0x140004f96
lea rdx, str.Error_while_reading_DLL_file_
call fcn.14000faa0
mov rcx, rax
call fcn.14000f9a0
nop
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x24], edx
lea rcx, [rbp - 0x10]
call fcn.140008700
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x24], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x90]
call fcn.14001d6a8
nop
jmp 0x140005081
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x20]
call fcn.14001bd50
mov rcx, qword [rbp - 0x38]
add rcx, qword [rbp - 0x30]
call fcn.14001e2e8
mov rbx, rax
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x20]
call fcn.14001be80
mov r8, qword [rbp - 0x30]
add r8, qword [rbp - 0x38]
mov rdx, rbx
lea rcx, [rbp - 0x20]
call fcn.14001c060
lea rcx, [rbp - 0x20]
call fcn.14001bc50
mov r8, qword [rbp - 0x30]
add r8, qword [rbp - 0x38]
mov dword [rsp + 0x38], 1
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 0
xor r9d, r9d
mov rdx, rbx
mov rcx, r15
call fcn.14001ac90
mov rcx, rbx
call fcn.14001e020
nop
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xb0]
mov dword [rbp + rcx - 0x24], edx
lea rcx, [rbp - 0x10]
call fcn.140008700
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx - 0x20], rax
mov rax, qword [rbp - 0x20]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rbp + rcx - 0x24], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x90], rax
lea rcx, [rbp + 0x90]
call fcn.14001d6a8
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x1400050be
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400050b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140005257
call fcn.14001e020
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x14000511a
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005115
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000525d
call fcn.14001e020
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0x10
jb 0x140005164
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14000515f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005263
mov rcx, r8
call fcn.14001e020
mov qword [r14 + 0x10], rbx
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 8
jb 0x1400051b3
mov rcx, qword [rdi]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400051ae
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005231
mov rcx, r8
call fcn.14001e020
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x1400051f8
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x1400051f3
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140005237
mov rcx, r8
call fcn.14001e020
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.14001e000
mov rbx, qword [rsp + 0x2c8]
add rsp, 0x270
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14002c1b4
nop
call fcn.14002c1b4
nop
call fcn.14002c1b4
nop
call fcn.140001820
int3
call fcn.140001b80
int3
mov ecx, eax
call fcn.140001b80
nop
call fcn.14002c1b4
nop
call fcn.14002c1b4
nop
call fcn.14002c1b4
int3