Function at 0x1400112f3
Capabilities:
Create process on windows
Terminate process

Disassembly:
jmp 0x1400124d0
push rbp
push rdi
sub rsp, 0x508
lea rbp, [rsp + 0x50]
lea rdi, [rsp + 0x50]
mov ecx, 0xce
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [section..data]
xor rax, rbp
mov qword [rbp + 0x4a8], rax
lea rcx, [0x140025102]
call fcn.14001141a
nop
call fcn.14001140b
movzx eax, al
test eax, eax
jne 0x1400126b3
call fcn.14001107d
movzx eax, al
test eax, eax
jne 0x1400126b3
lea r8, str.prodesireless.exe
mov edx, 0x104
lea rcx, [rbp + 0x10]
call qword [sym.imp.ucrtbased.dll_wcscpy_s]
nop
mov r8d, 0x68
xor edx, edx
lea rcx, [rbp + 0x240]
call fcn.14001134d
nop
mov dword [rbp + 0x240], 0x68
mov r8d, 0x18
xor edx, edx
lea rcx, [rbp + 0x2c8]
call fcn.14001134d
nop
lea rax, [rbp + 0x2c8]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x240]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140012672
lea rdx, str.prodesireless.exe_launched_successfully_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011091
lea rdx, [0x14001103c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x2c8]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
mov rax, qword [rbp + 0x2c8]
mov qword [rbp + 0x2f8], rax
lea rdx, str.Press_any_key_to_close_the_window_and_terminate_prodesireless.exe...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011091
lea rdx, [0x14001103c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140D.dll_public:_int___cdecl_std::basic_istream_char__struct_std::char_traits_char__::get_void____ptr64]
nop
xor edx, edx
mov rcx, qword [rbp + 0x2f8]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
nop
mov rcx, qword [rbp + 0x2c8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rbp + 0x2d0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x1400126b1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x314], eax
lea rdx, str.Failed_to_launch_prodesireless.exe._Error_code:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011091
mov edx, dword [rbp + 0x314]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x14001103c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x1400126d7
lea rdx, str.VM_or_debug_detection_triggered._Exiting.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140011091
lea rdx, [0x14001103c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
xor eax, eax
mov edi, eax
lea rcx, [rbp - 0x50]
lea rdx, [0x14001bd10]
call fcn.1400113a7
mov eax, edi
mov rcx, qword [rbp + 0x4a8]
xor rcx, rbp
call fcn.140011217
lea rsp, [rbp + 0x4b8]
pop rdi
pop rbp
ret