Function at 0x140001e90
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x160
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xd0], xmm6
mov qword [rbp + 0xc8], 0xfffffffffffffffe
mov rdi, r8
mov r14, rdx
mov rsi, rcx
mov qword [rbp - 0x28], 0
mov ecx, 0x210
call fcn.14001d0d8
mov rbx, rax
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], 0x104
mov qword [rbp - 0x18], 0x107
mov r8d, 0x20a
mov rcx, rax
xor edx, edx
call fcn.140021470
xor ecx, ecx
mov rdx, rbx
mov r8d, 0x104
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x70], xmm0
movaps xmmword [rbp + 0x60], xmm0
lea rcx, [rbp + 0x60]
mov r8d, 0x104
mov rdx, rbx
call fcn.1400051e0
lea rbx, [rbp + 0x60]
mov rcx, rbx
call fcn.1400027e0
mov r8, qword [r14 + 0x10]
cmp qword [r14 + 0x18], 8
jb 0x140001f45
mov r14, qword [r14]
xorps xmm6, xmm6
movaps xmmword [rbp], xmm6
movaps xmmword [rbp - 0x10], xmm6
lea rcx, [rbp - 0x10]
mov rdx, r14
call fcn.1400051e0
movaps xmmword [rbp + 0x90], xmm6
movaps xmmword [rbp + 0x80], xmm6
mov r14, qword [rbp + 0x70]
cmp qword [rbp + 0x78], 8
jb 0x140001f79
mov rbx, qword [rbp + 0x60]
movabs r12, 0x7fffffffffffffff
cmp r14, r12
jae 0x140002634
cmp r14, 7
ja 0x140001fb3
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], 7
movups xmm0, xmmword [rbx]
movaps xmmword [rbp + 0x80], xmm0
jmp 0x140002051
mov qword [rbp + 0x98], 7
mov rax, r14
or rax, 7
movabs rcx, 0x7ffffffffffffffe
cmp rax, rcx
ja 0x14000263e
cmp rax, 0xb
mov r15d, 0xa
cmovae r15, rax
lea rcx, [r15 + r15]
cmp r15, 0x7ff
jb 0x140002020
movabs rax, 0x7fffffffffffffec
cmp r15, rax
jae 0x14000263e
add rcx, 0x29
call fcn.14001d0d8
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x14000202c
add rcx, 2
call fcn.14001d0d8
mov rcx, rax
mov qword [rbp + 0x80], rcx
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], r15
lea r8, [r14 + r14]
add r8, 2
mov rdx, rbx
call fcn.140020dd0
lea r14, [rbp + 0x80]
lea rbx, [rbp - 0x10]
mov rcx, r14
mov rdx, rbx
call fcn.140004c60
mov rax, qword [rbp + 8]
cmp rax, 8
jb 0x1400020ad
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400020a8
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000262f
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001d11c
xorps xmm0, xmm0
movaps xmmword [rbp + 0xa0], xmm0
mov qword [rbp + 0xb0], 1
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], 0x22
movaps xmmword [rbp], xmm0
movaps xmmword [rbp - 0x10], xmm0
mov r15, qword [rbp + 0x90]
cmp qword [rbp + 0x98], 8
jb 0x1400020f6
mov r14, qword [rbp + 0x80]
cmp r15, r12
jae 0x140002639
cmp r15, 7
ja 0x140002128
mov qword [rbp], r15
mov qword [rbp + 8], 7
movups xmm0, xmmword [r14]
movaps xmmword [rbp - 0x10], xmm0
mov ecx, 7
mov eax, 1
jmp 0x1400021d7
mov qword [rbp + 8], 7
mov rax, r15
or rax, 7
movabs rcx, 0x7ffffffffffffffe
cmp rax, rcx
ja 0x140002643
cmp rax, 0xb
mov r12d, 0xa
cmovae r12, rax
lea rcx, [r12 + r12]
cmp r12, 0x7ff
jb 0x140002192
movabs rax, 0x7fffffffffffffec
cmp r12, rax
jae 0x140002643
add rcx, 0x29
call fcn.14001d0d8
mov rcx, rax
add rcx, 0x27
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x14000219e
add rcx, 2
call fcn.14001d0d8
mov rcx, rax
mov qword [rbp - 0x10], rcx
mov qword [rbp], r15
mov qword [rbp + 8], r12
lea r8, [r15 + r15]
add r8, 2
mov rdx, r14
call fcn.140020dd0
cmp qword [rbp + 8], 8
jb 0x1400021c5
mov rbx, qword [rbp - 0x10]
mov r15, qword [rbp]
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xb8]
mov rdx, rcx
sub rdx, rax
cmp rdx, r15
jae 0x1400021fb
mov qword [rsp + 0x20], r15
lea rcx, [rbp + 0xa0]
mov rdx, r15
mov r9, rbx
call fcn.140005050
jmp 0x140002235
lea r14, [rax + r15]
mov qword [rbp + 0xb0], r14
cmp rcx, 8
jb 0x140002215
mov r12, qword [rbp + 0xa0]
jmp 0x14000221c
lea r12, [rbp + 0xa0]
lea rcx, [r12 + rax*2]
add r15, r15
mov rdx, rbx
mov r8, r15
call fcn.140020dd0
mov word [r12 + r14*2], 0
mov rax, qword [rbp + 8]
cmp rax, 8
jb 0x14000227b
mov rcx, qword [rbp - 0x10]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x140002276
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000262f
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001d11c
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xb8]
cmp rax, rcx
jae 0x1400022a8
lea rdx, [rax + 1]
mov qword [rbp + 0xb0], rdx
cmp rcx, 8
jb 0x1400022c0
mov rcx, qword [rbp + 0xa0]
jmp 0x1400022c7
lea rcx, [rbp + 0xa0]
mov edx, 1
mov r9w, 0x22
call fcn.140004700
jmp 0x1400022ce
lea rcx, [rbp + 0xa0]
mov dword [rcx + rax*2], 0x22
mov rbx, qword [rdi]
mov r14, qword [rdi + 8]
lea rdi, [rbp + 0xa0]
cmp rbx, r14
jne 0x1400023c3
mov ecx, 0x30
call fcn.14001d0d8
mov rdi, rax
movups xmm0, xmmword [0x14004c6c4]
movups xmmword [rax + 0x1a], xmm0
movups xmm0, xmmword [0x14004c6ba]
movups xmmword [rax + 0x10], xmm0
movups xmm0, xmmword [str.NekoNyan.AngelicChaos]
movups xmmword [rax], xmm0
mov word [rax + 0x2a], 0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp], xmm0
movaps xmmword [rbp + 0x20], xmm0
movaps xmmword [rbp + 0x40], xmm0
movaps xmmword [rbp + 0x30], xmm0
movaps xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x50], 0
mov dword [rbp - 0x10], 0x68
mov qword [rbp + 8], rax
mov dword [rbp + 0x2c], 0x3000
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], 0
cmp qword [rbp + 0x78], 8
jb 0x140002484
mov rax, qword [rbp + 0x60]
cmp qword [rbp + 0xb8], 8
jae 0x140002496
lea rdx, [rbp + 0xa0]
cmp qword [rbp + 0x98], 8
jae 0x1400024ab
lea rcx, [rbp + 0x80]
jmp 0x1400024b2
lea rcx, [r12 + rax*2]
add r8, r8
mov rdx, r9
call fcn.140020dd0
mov word [r12 + r15*2], 0
add rbx, 0x20
cmp rbx, r14
je 0x1400022e5
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xb8]
cmp rax, rcx
jae 0x140002400
lea rdx, [rax + 1]
mov qword [rbp + 0xb0], rdx
mov rdx, rdi
cmp rcx, 8
jb 0x1400023f1
mov rdx, qword [rbp + 0xa0]
mov dword [rdx + rax*2], 0x20
jmp 0x140002412
mov edx, 1
mov rcx, rdi
mov r9w, 0x20
call fcn.140004700
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
mov r9, rbx
jb 0x140002423
mov r9, qword [rbx]
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xb8]
mov rdx, rcx
sub rdx, rax
cmp rdx, r8
jae 0x140002460
mov qword [rsp + 0x20], r8
mov rcx, rdi
mov rdx, r8
call fcn.140005050
add rbx, 0x20
cmp rbx, r14
jne 0x1400023c3
jmp 0x1400022e5
lea r15, [rax + r8]
mov qword [rbp + 0xb0], r15
mov r12, rdi
cmp rcx, 8
jb 0x1400023a0
mov r12, qword [rbp + 0xa0]
jmp 0x1400023a0
lea rax, [rbp + 0x60]
cmp qword [rbp + 0xb8], 8
jb 0x140002375
mov rdx, qword [rbp + 0xa0]
cmp qword [rbp + 0x98], 8
jb 0x14000238a
mov rcx, qword [rbp + 0x80]
mov qword [rsp + 0x48], rsi
lea r8, [rbp - 0x10]
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x400
mov dword [rsp + 0x20], 0
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edx, 0x30
mov rcx, rdi
call fcn.14001d11c
mov rax, qword [rbp + 0xb8]
cmp rax, 8
jb 0x140002543
mov rcx, qword [rbp + 0xa0]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14000253e
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000262f
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001d11c
mov rax, qword [rbp + 0x98]
cmp rax, 8
jb 0x14000258f
mov rcx, qword [rbp + 0x80]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14000258a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000262f
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001d11c
mov rax, qword [rbp + 0x78]
cmp rax, 8
jb 0x1400025d1
mov rcx, qword [rbp + 0x60]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x1400025cc
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000262f
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001d11c
mov rax, qword [rbp - 0x18]
cmp rax, 8
jb 0x140002613
mov rcx, qword [rbp - 0x30]
lea rdx, [rax + rax]
add rdx, 2
cmp rdx, 0x1000
jb 0x14000260e
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000262f
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.14001d11c
mov rax, rsi
movaps xmm6, xmmword [rbp + 0xd0]
add rsp, 0x160
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
call fcn.140027260
call fcn.140004870
call fcn.140004870
call fcn.140004890
call fcn.140004890
int3