Function at 0x1400032c0
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x168
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xd0], xmm6
mov qword [rbp + 0xc8], 0xfffffffffffffffe
mov rsi, rcx
xor edi, edi
xorps xmm6, xmm6
lea r12, [rbp - 0x30]
lea r13, [rbp + 0x60]
mov r15d, 0x7361f23c
lea r14, [rbp + 0xb8]
nop word [rax + rax]
movaps xmmword [rbp - 0x10], xmm6
movaps xmmword [rbp], xmm6
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x40], xmm6
mov qword [rbp + 0x50], 0
movaps xmmword [rbp + 0x80], xmm6
mov qword [rbp + 0x90], 0
mov dword [rbp - 0x10], 0x68
lea rax, [rbp + 0x80]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x40], rax
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea rcx, str.C:workspaceABBYYTask11_ProcessDebugWordsDict.exe
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400038d3
lea rax, [rdi + rdi*2]
mov rcx, qword [rbp + 0x90]
mov qword [rsi + rax*8 + 0x38], rcx
movaps xmm0, xmmword [rbp + 0x80]
movups xmmword [rsi + rax*8 + 0x28], xmm0
mov eax, 0x9460747f
mov ebx, dword [rbp + 0x90]
nop word [rax + rax]
cmp eax, 0x2e1a6ede
je 0x1400033e0
cmp eax, 0x9460747f
jne 0x1400033c0
mov rcx, r13
mov edx, ebx
call fcn.14000b070
mov eax, 0x2e1a6ede
jmp 0x1400033c0
mov ecx, 0xcd7a1790
nop word cs:[rax + rax]
nop
cmp ecx, 0x86ee7290
je 0x1400034a0
cmp ecx, 0xcd7a1790
jne 0x1400033f0
mov eax, 0xac379288
nop dword [rax]
cmp eax, 0xac379288
je 0x140003420
cmp eax, 0x72328649
jne 0x140003410
jmp 0x140003427
mov eax, 0x72328649
jmp 0x140003410
mov qword [rbp + 0xb8], 0xa
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0xa0], rax
mov ebx, 0xa8c0dd84
nop word cs:[rax + rax]
nop
cmp ebx, 0xbe49dff5
je 0x14000347f
cmp ebx, 0xa8c0dd84
jne 0x140003450
mov ebx, 0xbe49dff5
mov r9, qword [rbp + 0xa0]
mov rcx, r13
xor edx, edx
lea r8, str.LocalText
call fcn.140012890
jmp 0x140003450
mov qword [rbp + 0xb8], rax
mov rax, qword [rbp + 0xb8]
mov ecx, 0x86ee7290
jmp 0x1400033f0
mov qword [rbp + 0xb8], rax
mov rdx, qword [rbp + 0xb8]
mov rcx, r12
call fcn.140012680
mov eax, 0xc10616e4
nop dword [rax + rax]
cmp eax, 0xdc0238fc
je 0x1400034e0
cmp eax, 0xc10616e4
jne 0x1400034c0
mov rcx, r13
call fcn.1400123b0
mov eax, 0xdc0238fc
jmp 0x1400034c0
mov qword [rbp + 0xb0], r13
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0xa8], rax
mov eax, 0xa460792f
nop word [rax + rax]
cmp eax, 0x820390aa
je 0x140003550
cmp eax, 0xa460792f
jne 0x140003500
mov rax, qword [rbp + 0xa8]
mov ecx, 0xd901b7d3
nop word [rax + rax]
cmp ecx, 0xd901b7d3
je 0x140003532
cmp ecx, 0x812b4060
jne 0x140003520
jmp 0x140003539
mov ecx, 0x812b4060
jmp 0x140003520
mov qword [rbp + 0xb8], rax
mov rax, qword [rbp + 0xb8]
mov eax, 0x820390aa
jmp 0x140003500
mov ecx, 0x5115f6f8
mov rax, qword [rbp - 0x18]
nop dword [rax]
cmp ecx, 0xa393004a
je 0x140003690
cmp ecx, 0x5115f6f8
jne 0x140003560
mov qword [rbp + 0xb0], r12
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0xa8], rcx
mov edx, 0xc914f71a
nop
cmp edx, 0xb0556c1
jg 0x1400035f0
cmp edx, 0x9009d400
je 0x140003620
cmp edx, 0xac1b8891
je 0x140003671
cmp edx, 0xc914f71a
jne 0x140003590
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0xb8], rdx
mov edx, 0xa4778a04
nop dword [rax + rax]
cmp edx, 0xa4778a04
je 0x1400035e2
cmp edx, 0x913d659a
jne 0x1400035d0
jmp 0x14000362e
mov edx, 0x913d659a
jmp 0x1400035d0
cmp edx, 0xb0556c2
je 0x14000364f
cmp edx, 0x10082683
je 0x140003667
cmp edx, 0x7361f23c
jne 0x140003590
mov rdx, qword [rbp + 0xb0]
mov rdx, qword [rdx]
mov qword [rbp + 0x60], rdx
mov edx, 0x10082683
jmp 0x140003590
mov edx, 0xac1b8891
mov rcx, qword [r13]
jmp 0x140003590
cmp rax, 8
setae byte [rbp + 0xc6]
mov dl, byte [rbp + 0xc6]
mov byte [rbp + 0xc7], dl
mov edx, 0xb0556c2
jmp 0x140003590
cmp byte [rbp + 0xc7], 0
mov edx, 0xac1b8891
cmovne edx, r15d
mov rcx, qword [r14]
jmp 0x140003590
mov edx, 0x9009d400
jmp 0x140003590
mov qword [rbp + 0xa0], rcx
mov ecx, 0xa393004a
jmp 0x140003560
mov rcx, qword [rbp + 0xa0]
mov qword [rsi + rdi*8 + 0x88], rcx
mov ecx, 0x5115f6f8
nop word cs:[rax + rax]
nop
cmp ecx, 0xa393004a
je 0x1400037e0
cmp ecx, 0x5115f6f8
jne 0x1400036b0
mov qword [rbp + 0xb0], r12
mov rcx, qword [rbp + 0xb0]
mov qword [rbp + 0xa8], rcx
mov edx, 0xc914f71a
nop
cmp edx, 0xb0556c1
jg 0x140003740
cmp edx, 0x9009d400
je 0x140003770
cmp edx, 0xac1b8891
je 0x1400037c1
cmp edx, 0xc914f71a
jne 0x1400036e0
mov rdx, qword [rbp + 0xa8]
mov qword [rbp + 0xb8], rdx
mov edx, 0xa4778a04
nop dword [rax + rax]
cmp edx, 0xa4778a04
je 0x140003732
cmp edx, 0x913d659a
jne 0x140003720
jmp 0x14000377e
mov edx, 0x913d659a
jmp 0x140003720
cmp edx, 0xb0556c2
je 0x14000379f
cmp edx, 0x10082683
je 0x1400037b7
cmp edx, 0x7361f23c
jne 0x1400036e0
mov rdx, qword [rbp + 0xb0]
mov rdx, qword [rdx]
mov qword [rbp + 0x60], rdx
mov edx, 0x10082683
jmp 0x1400036e0
mov edx, 0xac1b8891
mov rcx, qword [r13]
jmp 0x1400036e0
cmp rax, 8
setae byte [rbp + 0xc6]
mov dl, byte [rbp + 0xc6]
mov byte [rbp + 0xc7], dl
mov edx, 0xb0556c2
jmp 0x1400036e0
cmp byte [rbp + 0xc7], 0
mov edx, 0xac1b8891
cmovne edx, r15d
mov rcx, qword [r14]
jmp 0x1400036e0
mov edx, 0x9009d400
jmp 0x1400036e0
mov qword [rbp + 0xa0], rcx
mov ecx, 0xa393004a
jmp 0x1400036b0
mov rax, qword [rbp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x800
mov rcx, 0xffffffffffffffff
xor edx, edx
mov r8d, 4
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateFileMappingW]
mov rbx, rax
test rax, rax
je 0x14000381c
mov qword [rsi + rdi*8 + 0xa8], rbx
mov eax, 0xc10616e4
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp eax, 0xdc0238fc
je 0x140003850
cmp eax, 0xc10616e4
jne 0x140003830
mov rcx, r12
call fcn.1400123b0
mov eax, 0xdc0238fc
jmp 0x140003830
mov qword [rbp + 0xa8], r12
mov rax, qword [rbp + 0xa8]
mov qword [rbp + 0xb8], rax
mov eax, 0xa460792f
nop word [rax + rax]
cmp eax, 0x820390aa
je 0x1400038c0
cmp eax, 0xa460792f
jne 0x140003870
mov rax, qword [rbp + 0xb8]
mov ecx, 0xd901b7d3
nop word [rax + rax]
cmp ecx, 0xd901b7d3
je 0x1400038a2
cmp ecx, 0x812b4060
jne 0x140003890
jmp 0x1400038a9
mov ecx, 0x812b4060
jmp 0x140003890
mov qword [rbp + 0x60], rax
mov rax, qword [rbp + 0x60]
mov eax, 0x820390aa
jmp 0x140003870
test rbx, rbx
je 0x1400038d3
add rdi, 1
cmp rdi, 4
jne 0x140003310
movaps xmm6, xmmword [rbp + 0xd0]
add rsp, 0x168
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret