Function at 0x1400055b0
Capabilities:
Create process on windows

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x2d8
movaps xmmword [rsp + 0x270], xmm6
movaps xmmword [rsp + 0x280], xmm7
movaps xmmword [rsp + 0x290], xmm8
movaps xmmword [rsp + 0x2a0], xmm9
movaps xmmword [rsp + 0x2b0], xmm10
movaps xmmword [rsp + 0x2c0], xmm11
test rcx, rcx
mov rdx, rcx
je 0x140005bbf
lea rsi, [rsp + 0xa0]
xor eax, eax
mov ecx, 0xa
mov rdi, rsi
mov ebx, 0xa
rep stosq qword [rdi], rax
mov eax, dword [rdx + 0x28]
cmp eax, ebx
mov dword [rsp + 0x58], eax
cmovle ebx, eax
test eax, eax
jle 0x140005d8e
mov rdi, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x68], rsi
xor r12d, r12d
xor r14d, r14d
lea rax, [rsp + 0xf0]
lea r13, [rsp + 0x160]
mov rsi, rax
lea rbp, [rsp + 0xf4]
lea r15, [rsp + 0x80]
mov qword [rsp + 0x60], rdi
jmp 0x14000567a
add r12, 1
cmp ebx, r12d
jle 0x14000574f
movabs rax, 0x2e64617065746f6e
mov ecx, 0xc
mov rdi, rbp
mov dword [r13 + 8], 0x657865
mov qword [r13], rax
mov rax, r14
xor r9d, r9d
xor r8d, r8d
rep stosq qword [rdi], rax
mov qword [rsp + 0x80], r14
mov rdx, r13
mov dword [rsp + 0xf0], 0x68
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x90], r14
mov dword [rdi], 0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x14000566d
mov rax, qword [rsp + 0x60]
mov ecx, 0x1f4
call rax
lea rcx, str.Notepad
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowA]
mov rdi, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x88]
mov qword [rdi + r12*8], rax
add r12, 1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, r12d
jg 0x14000567a
mov rsi, qword [rsp + 0x68]
xor r13d, r13d
mov r8d, dword [rsp + 0x58]
test r8d, r8d
jle 0x140005c09
mov r12, qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rdi, qword [rsp + 0x60]
movsd xmm9, qword [0x14000ced0]
movsd xmm8, qword [0x14000ce88]
nop dword [rax + rax]
movsd xmm7, qword [0x14000ce90]
xor ebp, ebp
nop word [rax + rax]
mov r14, qword [rsi + rbp*8]
test r14, r14
je 0x140005858
pxor xmm0, xmm0
cvtsi2sd xmm0, ebp
pxor xmm1, xmm1
cvtsi2sd xmm1, ebx
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x78]
mulsd xmm0, xmm9
divsd xmm0, xmm1
pxor xmm1, xmm1
cvtsi2sd xmm1, r13d
addsd xmm0, xmm1
mulsd xmm0, xmm8
divsd xmm0, xmm7
call sym.sincos
movsd xmm10, qword [rsp + 0x70]
xor ecx, ecx
movsd xmm6, qword [rsp + 0x78]
call r12
mov ecx, 1
movsd xmm11, qword [0x14000ced8]
mov edx, eax
mulsd xmm10, xmm11
shr edx, 0x1f
add eax, edx
sar eax, 1
cvttsd2si r15d, xmm10
add r15d, eax
call r12
mulsd xmm6, xmm11
mov r8d, r15d
mov dword [rsp + 0x30], 0x40
mov ecx, eax
mov dword [rsp + 0x28], 0xc8
shr ecx, 0x1f
mov dword [rsp + 0x20], 0x12c
add eax, ecx
mov rcx, r14
sar eax, 1
cvttsd2si edx, xmm6
lea r9d, [rdx + rax]
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowPos]
add rbp, 1
cmp ebx, ebp
jg 0x140005798
add r13d, 5
mov ecx, 0x14
call rdi
cmp r13d, 0x168
jne 0x140005788
mov rax, qword [rsp + 0x60]
mov ecx, 0x1f4
call rax
mov dword [rsp + 0x68], 1
mov eax, dword [rsp + 0x68]
movsd xmm7, qword [0x14000cee0]
movq xmm6, qword [0x14000cef0]
cmp eax, 3
je 0x1400059ec
cmp eax, 4
je 0x140005ab4
cmp eax, 1
je 0x140005c7f
movsd xmm10, qword [0x14000ce50]
mov r14d, 0x32
xor edi, edi
mov edx, dword [rsp + 0x58]
xor ebp, ebp
test edx, edx
jle 0x1400059aa
nop
mov r13, qword [rsi + rbp*8]
test r13, r13
je 0x14000599e
pxor xmm0, xmm0
cvtsi2sd xmm0, ebp
pxor xmm1, xmm1
pxor xmm11, xmm11
cvtsi2sd xmm1, ebx
lea rdx, [rsp + 0x78]
lea r8, [rsp + 0x70]
mulsd xmm0, xmm7
divsd xmm0, xmm1
pxor xmm1, xmm1
cvtsi2sd xmm1, edi
mulsd xmm1, xmm10
addsd xmm0, xmm1
call sym.sincos
movsd xmm9, qword [rsp + 0x70]
xor ecx, ecx
movsd xmm8, qword [rsp + 0x78]
call r12
mov ecx, 1
cvtsi2sd xmm11, r14d
mov edx, eax
shr edx, 0x1f
add eax, edx
sar eax, 1
mulsd xmm9, xmm11
cvttsd2si r8d, xmm9
lea r15d, [r8 + rax]
call r12
mulsd xmm8, xmm11
mov r8d, r15d
mov dword [rsp + 0x30], 0x40
mov ecx, eax
mov dword [rsp + 0x28], 0xc8
shr ecx, 0x1f
mov dword [rsp + 0x20], 0x12c
add eax, ecx
mov rcx, r13
sar eax, 1
cvttsd2si edx, xmm8
lea r9d, [rdx + rax]
xor edx, edx
call qword [sym.imp.USER32.dll_SetWindowPos]
add rbp, 1
cmp ebx, ebp
jg 0x1400058e0
add edi, 1
mov rax, qword [rsp + 0x60]
mov ecx, 0x14
add r14d, 2
call rax
cmp edi, 0x64
jne 0x1400058d0
mov dword [rsp + 0x68], 2
mov rax, qword [rsp + 0x60]
mov ecx, 0x1f4
call rax
add dword [rsp + 0x68], 1
mov eax, dword [rsp + 0x68]
cmp eax, 3
jne 0x1400058ad
xor r15d, r15d
nop
mov eax, dword [rsp + 0x58]
test eax, eax
jle 0x140005c60
movsd xmm9, qword [0x14000ce68]
nop dword [rax]
movsd xmm8, qword [0x14000ced8]
xor r14d, r14d
nop dword [rax]
mov r13, qword [rsi + r14*8]
test r13, r13
je 0x140005a8c
xor ecx, ecx
call r12
mov ecx, 1
cdq
idiv ebx
imul eax, r14d
mov edi, eax
call r12
pxor xmm0, xmm0
cvtsi2sd xmm0, r15d
mov ebp, eax
mulsd xmm0, xmm9
call sym.sin
mov eax, ebp
mov r8d, edi
xor edx, edx
andpd xmm0, xmm6
mulsd xmm0, xmm8
shr eax, 0x1f
mov dword [rsp + 0x30], 0x40
add eax, ebp
mov dword [rsp + 0x28], 0xc8
sar eax, 1
mov dword [rsp + 0x20], 0x12c
cvttsd2si ecx, xmm0
lea r9d, [rcx + rax]
mov rcx, r13
call qword [sym.imp.USER32.dll_SetWindowPos]
add r14, 1
cmp ebx, r14d
jg 0x140005a18
add r15d, 1
mov rax, qword [rsp + 0x60]
mov ecx, 0x14
call rax
cmp r15d, 0x64
jne 0x140005a08
jmp 0x1400059ce
xor ecx, ecx
call r12
mov ecx, 1
mov edx, eax
shr edx, 0x1f
lea r13d, [rdx + rax]
call r12
mov edi, dword [rsp + 0x58]
sar r13d, 1
xor r12d, r12d
mov edx, eax
shr edx, 0x1f
lea r14d, [rdx + rax]
sar r14d, 1
test edi, edi
jle 0x140005c38
mov r15, qword [sym.imp.USER32.dll_SetWindowPos]
movsd xmm6, qword [0x14000cee0]
nop word [rax + rax]
lea rax, [rsp + 0x78]
xor ebp, ebp
mov qword [rsp + 0x58], rax
nop dword [rax]
mov rdi, qword [rsi + rbp*8]
test rdi, rdi
je 0x140005b89
pxor xmm0, xmm0
cvtsi2sd xmm0, ebp
pxor xmm1, xmm1
mov rdx, qword [rsp + 0x58]
cvtsi2sd xmm1, ebx
lea r8, [rsp + 0x70]
mulsd xmm0, xmm6
divsd xmm0, xmm1
call sym.sincos
pxor xmm0, xmm0
mov rcx, rdi
movsd xmm1, qword [rsp + 0x78]
cvtsi2sd xmm0, r12d
mov dword [rsp + 0x30], 0x40
mov dword [rsp + 0x28], 0xc8
mov dword [rsp + 0x20], 0x12c
mulsd xmm1, xmm0
mulsd xmm0, qword [rsp + 0x70]
cvttsd2si edx, xmm1
cvttsd2si eax, xmm0
lea r9d, [rdx + r14]
xor edx, edx
lea r8d, [rax + r13]
call r15
add rbp, 1
cmp ebx, ebp
jg 0x140005b10
add r12d, 5
mov rax, qword [rsp + 0x60]
mov ecx, 0x14
call rax
cmp r12d, 0x1f4
jne 0x140005b00
mov rax, qword [rsp + 0x60]
mov ecx, 0x1f4
call rax
nop
movaps xmm6, xmmword [rsp + 0x270]
xor eax, eax
movaps xmm7, xmmword [rsp + 0x280]
movaps xmm8, xmmword [rsp + 0x290]
movaps xmm9, xmmword [rsp + 0x2a0]
movaps xmm10, xmmword [rsp + 0x2b0]
movaps xmm11, xmmword [rsp + 0x2c0]
add rsp, 0x2d8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
add r13d, 5
mov rax, qword [rsp + 0x60]
mov ecx, 0x14
call rax
cmp r13d, 0x168
jne 0x140005757
mov r12, qword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x14000587c
add r12d, 5
mov rax, qword [rsp + 0x60]
mov ecx, 0x14
call rax
cmp r12d, 0x1f4
jne 0x140005ae0
jmp 0x140005bb2
add r15d, 1
mov rax, qword [rsp + 0x60]
mov ecx, 0x14
call rax
cmp r15d, 0x64
jne 0x1400059f0
jmp 0x1400059ce
xor r15d, r15d
nop word [rax + rax]
mov ecx, dword [rsp + 0x58]
test ecx, ecx
jle 0x140005d6f
movsd xmm10, qword [0x14000ce68]
movsd xmm9, qword [0x14000cec8]
nop word cs:[rax + rax]
movsd xmm8, qword [0x14000ce58]
xor edi, edi
nop dword [rax + rax]
mov rbp, qword [rsi + rdi*8]
test rbp, rbp
je 0x140005d44
xor ecx, ecx
call r12
mov ecx, 1
cdq
idiv ebx
imul eax, edi
mov r13d, eax
call r12
pxor xmm0, xmm0
pxor xmm1, xmm1
cvtsi2sd xmm0, r15d
mov r14d, eax
cvtsi2sd xmm1, edi
mulsd xmm0, xmm10
mulsd xmm1, xmm9
addsd xmm0, xmm1
call sym.sin
mov eax, r14d
mov r8d, r13d
xor edx, edx
mulsd xmm0, xmm8
shr eax, 0x1f
mov dword [rsp + 0x30], 0x40
add eax, r14d
mov dword [rsp + 0x28], 0xc8
sar eax, 1
mov dword [rsp + 0x20], 0x12c
cvttsd2si ecx, xmm0
lea r9d, [rcx + rax]
mov rcx, rbp
call qword [sym.imp.USER32.dll_SetWindowPos]
add rdi, 1
cmp ebx, edi
jg 0x140005cc0
add r15d, 1
mov rax, qword [rsp + 0x60]
mov ecx, 0x14
call rax
cmp r15d, 0x64
jne 0x140005cb0
jmp 0x1400059ce
add r15d, 1
mov rax, qword [rsp + 0x60]
mov ecx, 0x14
call rax
cmp r15d, 0x64
jne 0x140005c88
jmp 0x1400059ce
mov rax, qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x60], rax
jmp 0x140005754