Function at 0x140001040
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
movups xmmword [rbp - 0x10], xmm6
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov eax, dword [0x1401d6044]
mov ecx, dword [0x1401d6048]
shrd ecx, eax, 0xf
xor ecx, 0x9b4caf1c
mov eax, ecx
shl rax, 5
call fcn.1400358c0
sub rsp, rax
mov rdi, rsp
mov r13, rdi
imul eax, dword [0x1401d604c], 0x81313103
imul ecx, dword [0x1401d6050], 0x939cfd1e
add eax, ecx
add eax, 0x87d2820d
imul rax, rax, 0x68
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.1400358c0
sub rsp, rax
mov r15, rsp
imul eax, dword [0x1401d6054], 0x5727b53f
imul ecx, dword [0x1401d6058], 0x6f912ad3
add eax, ecx
add eax, 0x80dd4b9d
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400358c0
sub rsp, rax
mov r12, rsp
sub rsp, 0x20
call fcn.14001f2d0
add rsp, 0x20
mov rax, qword [0x1401d6060]
mov rcx, qword [0x1401d6068]
shrd rcx, rax, 0x38
movabs rax, 0x555926f29a895af1
xor rax, rcx
mov qword [rdi + 8], rax
movabs rax, 0x1adc0f684be0dd9e
imul rax, qword [0x1401d6070]
movabs rcx, 0x95109ffdfa5d4f58
imul rcx, qword [0x1401d6078]
mov rdx, rcx
add rdx, rax
movabs rcx, 0x25420439af446a58
add rcx, rdx
sub rsp, 0x20
call fcn.140035828
add rsp, 0x20
mov rsi, rax
mov qword [rdi], rax
sub rsp, 0x20
call fcn.14001f350
add rsp, 0x20
cdqe
lea rcx, [0x140045760]
mov rax, qword [rcx + rax*8]
mov qword [rdi + 0x10], rax
sub rsp, 0x20
call fcn.14001f3d0
add rsp, 0x20
cdqe
lea rcx, [0x140045780]
mov rax, qword [rcx + rax*8]
mov qword [rdi + 0x18], rax
sub rsp, 0x20
lea rcx, [0x1401eaff8]
lea rdx, [0x140045018]
call fcn.14000fa80
add rsp, 0x20
movups xmm0, xmmword [0x1401eaff8]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x1401eb006]
movups xmmword [rsi + 0xe], xmm0
sub rsp, 0x20
call fcn.14001f450
add rsp, 0x20
movzx eax, byte [0x1401d6080]
movzx ecx, byte [0x1401d6081]
imul eax, eax, 0xffffff9d
imul ecx, ecx, 0x26
add cl, al
add cl, 0x50
mov byte [rsi + 0x1e], cl
sub rsp, 0x20
call fcn.1400373bc
add rsp, 0x20
mov rax, qword [rax]
mov rdi, qword [rax]
sub rsp, 0x20
mov rcx, rdi
call fcn.140038bb0
add rsp, 0x20
mov r14, rax
mov rbx, rax
sub rsp, 0x20
call fcn.14001f4c0
add rsp, 0x20
cdqe
lea rcx, [0x1400457a0]
cmp r14, qword [rcx + rax*8]
mov qword [rbp - 0x20], r13
jbe 0x140001277
nop
sub rsp, 0x30
mov qword [rsp + 0x20], rbx
mov rcx, r13
mov rdx, rbx
mov r9, rdi
call fcn.14000ec00
add rsp, 0x30
nop
mov r14, qword [rbp - 0x20]
mov rsi, qword [r14 + 0x10]
mov rbx, qword [r14 + 0x18]
jmp 0x1400012f2
mov qword [rbp - 0x28], r12
mov r12, r15
mov r15, rsi
add rsi, 0x1e
sub rsp, 0x20
call fcn.14001f540
add rsp, 0x20
cdqe
lea rcx, [0x1400457c0]
mov rax, qword [rcx + rax*8]
mov r14, r13
mov r13, rax
or r13, rbx
mov qword [r14 + 0x10], r13
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
mov r8, rbx
call fcn.140043ad0
call fcn.14001f5d0
add rsp, 0x20
movzx eax, byte [0x1401d6082]
movzx ecx, byte [0x1401d6083]
shr cl, 5
shl al, 3
or al, cl
xor al, 0xc2
mov byte [r15 + r13], al
mov r15, r12
mov r12, qword [rbp - 0x28]
mov ebx, 0x1f
mov rsi, r13
mov rdi, rbx
sub rdi, rsi
sub rsp, 0x20
call fcn.14001f640
add rsp, 0x20
cdqe
lea rcx, [0x1400457e0]
cmp rdi, qword [rcx + rax*8]
jae 0x140001391
sub rsp, 0x20
lea rsi, [0x1401eb01c]
lea rdx, [0x140045068]
mov rcx, rsi
call fcn.140010280
add rsp, 0x20
mov rax, qword [0x1401d6088]
mov rcx, qword [0x1401d6090]
shrd rcx, rax, 0x18
mov rax, qword [0x1401d6098]
mov r8, qword [0x1401d60a0]
shrd r8, rax, 0x19
movabs rdx, 0x231642c9fce05c86
xor rdx, rcx
movabs rax, 0x6a6b248f0bd31321
xor rax, r8
nop
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rcx, r14
mov r9, rsi
call fcn.14000ec00
add rsp, 0x30
nop
jmp 0x14000142d
sub rsp, 0x20
call fcn.14001f6d0
add rsp, 0x20
cdqe
lea rcx, [0x140045800]
mov rdi, qword [rcx + rax*8]
add rdi, rsi
mov qword [r14 + 0x10], rdi
sub rsp, 0x20
call fcn.14001f740
add rsp, 0x20
movsxd rcx, eax
lea rdx, [0x140045820]
mov rax, r14
cmp rbx, qword [rdx + rcx*8]
jbe 0x1400013d5
mov rax, qword [r14]
mov rbx, rax
sub rsp, 0x20
lea rcx, [0x1401eb01c]
lea rdx, [0x140045068]
call fcn.140010280
add rsp, 0x20
mov eax, dword [0x1401eb01c]
mov dword [rbx + rsi], eax
mov eax, dword [0x1401eb01f]
mov dword [rbx + rsi + 3], eax
sub rsp, 0x20
call fcn.14001f7d0
add rsp, 0x20
movzx eax, byte [0x1401d6084]
movzx ecx, byte [0x1401d6085]
shr cl, 7
add al, al
or al, cl
xor al, 0x8e
mov byte [rbx + rdi], al
xorps xmm6, xmm6
movups xmmword [r15 + 0x50], xmm6
movups xmmword [r15 + 0x40], xmm6
movups xmmword [r15 + 0x30], xmm6
movups xmmword [r15 + 0x20], xmm6
movups xmmword [r15 + 0x10], xmm6
movups xmmword [r15], xmm6
mov qword [r15 + 0x60], 0
sub rsp, 0x20
call fcn.14001f850
add rsp, 0x20
cdqe
lea rcx, [0x140045838]
mov eax, dword [rcx + rax*4]
mov dword [r15], eax
movups xmmword [r12], xmm6
mov qword [r12 + 0x10], 0
mov rdi, qword [rbp - 0x20]
mov rsi, qword [rdi + 0x18]
sub rsp, 0x20
call fcn.14001f8c0
add rsp, 0x20
cdqe
lea rcx, [0x140045850]
mov rdx, rdi
cmp rsi, qword [rcx + rax*8]
jbe 0x1400014a9
mov rdx, qword [rdi]
mov eax, dword [0x1401d60a8]
mov ecx, dword [0x1401d60ac]
shrd ecx, eax, 0x13
imul eax, dword [0x1401d60b0], 0x8a1a0db
imul r8d, dword [0x1401d60b4], 0x8457db19
xor ecx, 0xf4a07fd3
add eax, r8d
add eax, 0xbbefa480
sub rsp, 0x50
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r15
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
mov rcx, qword [r12]
sub rsp, 0x20
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
add rsp, 0x20
mov rcx, qword [r12 + 8]
sub rsp, 0x20
call rsi
add rsp, 0x20
mov rsi, qword [rdi + 0x18]
sub rsp, 0x20
call fcn.14001f940
add rsp, 0x20
cdqe
lea rcx, [0x140045870]
cmp rsi, qword [rcx + rax*8]
jbe 0x1400015ff
mov rbx, qword [rdi]
sub rsp, 0x20
call fcn.14001f9c0
add rsp, 0x20
cdqe
lea rcx, [0x140045890]
mov rdi, qword [rcx + rax*8]
add rdi, rsi
sub rsp, 0x20
call fcn.14001fa50
add rsp, 0x20
cdqe
lea rcx, [0x1400458b0]
cmp rdi, qword [rcx + rax*8]
jbe 0x1400015ec
mov rdi, qword [rbx - 8]
sub rsp, 0x20
call fcn.14001fad0
add rsp, 0x20
cdqe
lea rcx, [0x1400458d0]
add rbx, qword [rcx + rax*8]
sub rbx, rdi
sub rsp, 0x20
call fcn.14001fb50
add rsp, 0x20
cdqe
lea rcx, [0x1400458f0]
cmp rbx, qword [rcx + rax*8]
jae 0x140001614
sub rsp, 0x20
call fcn.14001fbc0
add rsp, 0x20
cdqe
lea rcx, [0x140045910]
add rsi, qword [rcx + rax*8]
mov rdx, rsi
mov rcx, rdi
jmp 0x1400015f2
mov rdx, rdi
mov rcx, rbx
sub rsp, 0x20
call fcn.14003586c
add rsp, 0x20
movups xmm6, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
sub rsp, 0x20
call fcn.140038498
int3