Function at 0x140004e00
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x140
mov rax, qword [0x14002f160]
xor rax, rsp
mov qword [rsp + 0x138], rax
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x80], xmm0
xor edx, edx
lea rcx, [rsp + 0x80]
call fcn.140003cc0
nop
cmp qword [rsp + 0x80], rbx
jne 0x140004e9c
mov rdi, qword [rsp + 0x88]
test rdi, rdi
je 0x140004e92
mov ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x140004e92
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x1400202e0]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x140004e92
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x1400202e0]
mov eax, 0x1f
jmp 0x1400051ea
mov rcx, qword [rsp + 0x80]
mov rax, qword [rcx]
mov edx, 0x2710
mov rax, qword [rax + 0x10]
call qword [0x1400202e0]
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
movdqa xmmword [rsp + 0x50], xmm0
mov rax, qword [rsp + 0x88]
test rax, rax
je 0x140004ed8
lock inc dword [rax + 8]
movaps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x90]
call fcn.140003c30
nop
mov rcx, qword [rsp + 0x90]
test rcx, rcx
jne 0x140004f9e
mov rdi, qword [rsp + 0x98]
lea ebx, [rcx - 1]
test rdi, rdi
je 0x140004f52
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x140004f52
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x1400202e0]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x140004f52
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x1400202e0]
nop
mov rdi, qword [rsp + 0x88]
test rdi, rdi
je 0x140004f94
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x140004f94
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x1400202e0]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x140004f94
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x1400202e0]
mov eax, 0x4c9
jmp 0x1400051ea
mov rax, qword [rcx]
lea rdx, [rsp + 0xa0]
mov rax, qword [rax + 0x38]
call qword [0x1400202e0]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xc0], xmm0
movups xmmword [rsp + 0xd0], xmm0
movups xmmword [rsp + 0xe0], xmm0
movups xmmword [rsp + 0xf0], xmm0
movups xmmword [rsp + 0x100], xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rax
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x230
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rsp + 0xa0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140005101
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14000506e
mov rax, qword [rsp + 0xb0]
test rax, rax
je 0x14000506e
call qword [0x1400202e0]
nop
mov rdi, qword [rsp + 0x98]
mov ebx, 0xffffffff
test rdi, rdi
je 0x1400050b8
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400050b8
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x1400202e0]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x1400050b8
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x1400202e0]
nop
mov rdi, qword [rsp + 0x88]
test rdi, rdi
je 0x1400050fa
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400050fa
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x1400202e0]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x1400050fa
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x1400202e0]
mov eax, esi
jmp 0x1400051ea
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140005111
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140005122
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140005143
mov rax, qword [rsp + 0xb0]
test rax, rax
je 0x140005143
call qword [0x1400202e0]
nop
mov rdi, qword [rsp + 0x98]
mov ebx, 0xffffffff
test rdi, rdi
je 0x14000518d
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x14000518d
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x1400202e0]
mov eax, ebx
lock xadd dword [rdi + 0xc], eax
cmp eax, 1
jne 0x14000518d
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x1400202e0]
nop
mov rdi, qword [rsp + 0x88]
test rdi, rdi
je 0x1400051cf
mov eax, ebx
lock xadd dword [rdi + 8], eax
cmp eax, 1
jne 0x1400051cf
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax]
call qword [0x1400202e0]
lock xadd dword [rdi + 0xc], ebx
cmp ebx, 1
jne 0x1400051cf
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 8]
call qword [0x1400202e0]
xor eax, eax
jmp 0x1400051ea
mov rcx, qword [rsp + 0x138]
xor rcx, rsp
call fcn.140008d50
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret