Function at 0x14009ca00
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x38]
sub rsp, 0x120
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x1400d5040]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rax, qword [0x1400ec178]
xor r15d, r15d
mov qword [rax + 0x4a10], r15
mov qword [rax + 0x4a18], r15
mov dword [rax + 0x4a04], 4
or dword [rax + 0x4a00], 3
mov dword [rax + 0x4a20], 0x44480000
mov dword [rax + 0x4a24], 0x44160000
mov dword [rax + 0x4a08], 4
movaps xmm0, xmmword [0x1400b5c50]
movups xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
lea ecx, [r15 + 2]
call fcn.140052220
mov r8d, 0x126
lea rdx, [0x1400d50c4]
lea rcx, str.NexLevel___Elevate_Your_Experience
call fcn.14005bb40
test al, al
je 0x14009d404
movss xmm6, dword [0x1400b59d0]
cmp qword [0x1400ec2b0], r15
je 0x14009cd40
mov rax, qword [0x1400ec178]
mov r8, qword [rax + 0x4000]
cmp qword [r8 + 0x1b8], r15
jne 0x14009caf5
cmp qword [rax + 0x4e18], r15
mov ecx, 0x260
je 0x14009cafa
mov ecx, 0x230
movss xmm7, dword [r8 + rcx]
movss xmm2, dword [r8 + 0x110]
subss xmm7, xmm2
movd xmm0, dword [0x1400ec268]
cvtdq2ps xmm0, xmm0
movaps xmm1, xmm7
subss xmm1, xmm0
mulss xmm1, dword [0x1400b58d0]
subss xmm2, dword [r8 + 0x28]
addss xmm2, dword [r8 + 0x8c]
addss xmm2, xmm1
mov byte [r8 + 0xc0], 1
mov rax, qword [rax + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm2
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [0x1400b5c70]
movups xmmword [rsp + 0x70], xmm1
mov dword [rsp + 0x60], 0x3f800000
mov dword [rsp + 0x64], 0x3f800000
mov qword [rsp + 0x68], r15
movd xmm1, dword [0x1400ec26c]
cvtdq2ps xmm1, xmm1
movd xmm0, dword [0x1400ec268]
cvtdq2ps xmm0, xmm0
movss dword [rsp + 0x40], xmm0
movss dword [rsp + 0x44], xmm1
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x40]
mov rcx, qword [0x1400ec2b0]
call fcn.14007f560
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x44], 0x40a00000
lea rcx, [rsp + 0x40]
call fcn.14007fdb0
movaps xmm0, xmmword [0x1400b5c30]
movups xmmword [rsp + 0x70], xmm0
lea rdx, [rsp + 0x70]
xor ecx, ecx
call fcn.140052220
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
mov r8d, 8
lea rdx, str.NexLevel
lea rcx, [rbp - 0x30]
call fcn.14001e3f0
nop
lea rax, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rax, qword [rbp - 0x30]
mov rbx, qword [0x1400ec178]
test rax, rax
jne 0x14009cc57
xorps xmm0, xmm0
jmp 0x14009cca1
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x1400b59c0]
movss xmm2, dword [rbx + 0x3d38]
lea rdx, [rsp + 0x50]
mov rcx, qword [rbx + 0x3d30]
call fcn.140079950
movss xmm0, dword [rsp + 0x50]
addss xmm0, dword [0x1400b5900]
cvttss2si eax, xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
subss xmm7, xmm0
mulss xmm7, dword [0x1400b58d0]
mov rax, qword [rbx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rbx + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm7
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rdx, qword [rbp - 0x30]
lea rcx, [0x1400b44a8]
call fcn.14007d9c0
mov r8, qword [0x1400ec178]
movsxd rax, dword [r8 + 0x4a78]
cmp eax, 1
jl 0x14009cd37
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a80]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39cc], xmm0
dec dword [r8 + 0x4a78]
lea rcx, [rbp - 0x30]
call fcn.14000f500
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x44], 0x41200000
lea rcx, [rsp + 0x40]
call fcn.14007fdb0
mov rcx, qword [0x1400ec178]
mov r8, qword [rcx + 0x4000]
cmp qword [r8 + 0x1b8], 0
jne 0x14009cd83
cmp qword [rcx + 0x4e18], 0
lea rdx, [r8 + 0x260]
je 0x14009cd8a
lea rdx, [r8 + 0x230]
movss xmm1, dword [rdx]
subss xmm1, dword [r8 + 0x110]
subss xmm1, dword [0x1400b5980]
mulss xmm1, dword [0x1400b58d0]
mov byte [r8 + 0xc0], 1
mov rax, qword [rcx + 0x4000]
movss xmm0, dword [rax + 0x28]
subss xmm0, dword [rax + 0x8c]
addss xmm0, xmm1
movss dword [rax + 0x110], xmm0
mov byte [rax + 0x151], 1
movsxd rax, dword [0x1400d50c0]
test eax, eax
js 0x14009ceae
lea rcx, [rax + rax*4]
shl rcx, 4
add rcx, qword [0x1400ec218]
mov r11d, dword [rcx + 0x20]
cmp byte [0x1400ec0a4], 0
jne 0x14009ce7b
mov r10, qword [0x1400d51d8]
mov r9, qword [0x1400d51d0]
cmp r9, r10
je 0x14009ceae
lea r8, [r9 + 0x60]
lea rbx, str.active
cmp dword [r8 - 0x5c], r11d
jne 0x14009ce61
lea rdx, [r8 - 0x18]
cmp qword [r8], 0xf
jbe 0x14009ce36
mov rdx, qword [rdx]
cmp qword [r8 - 8], 6
jne 0x14009ce61
mov rcx, r15
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [rbx + rcx - 1]
jne 0x14009ce58
cmp rcx, 6
jne 0x14009ce40
mov eax, r15d
jmp 0x14009ce5d
sbb eax, eax
or eax, 1
test eax, eax
je 0x14009ce74
add r9, 0x88
add r8, 0x88
cmp r9, r10
jne 0x14009ce23
cmp r9, r10
je 0x14009ceae
jmp 0x14009ce84
cmp dword [0x1400d5210], r11d
jne 0x14009ceae
mov dword [rsp + 0x40], 0x42c80000
mov dword [rsp + 0x44], 0x41a00000
lea rdx, [rsp + 0x40]
lea rcx, str.Inject
call fcn.14007e260
test al, al
je 0x14009ceae
call fcn.14009bf90
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x44], 0x41a00000
lea rcx, [rsp + 0x40]
call fcn.14007fdb0
mov rbx, qword [0x1400ec178]
mov rdx, qword [rbx + 0x4000]
cmp byte [rdx + 0xc3], 0
jne 0x14009cf16
mov r8d, dword [rdx + 0x1c4]
mov eax, r8d
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [rdx + 0x1b8], 0
je 0x14009cf02
neg r8d
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x1400b5908]
call fcn.14007ff40
mov rbx, qword [0x1400ec178]
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x44], 0x43160000
mov rax, qword [rbx + 0x4000]
mov byte [rax + 0xc0], 1
mov rbx, qword [rbx + 0x4000]
movsxd r8, dword [rbx + 0x100]
mov rax, qword [rbx + 0x108]
mov r8d, dword [rax + r8*4 - 4]
xor edx, edx
lea rcx, str.GameSelectionArea
call fcn.140051750
mov edi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x404c], eax
jne 0x14009cf7c
lea r8, str.GameSelectionArea
mov edx, 0xb
mov ecx, eax
call fcn.140069230
mov dword [rsp + 0x20], r15d
mov r9d, 1
lea r8, [rsp + 0x40]
mov edx, edi
lea rcx, str.GameSelectionArea
call fcn.140058940
mov rcx, qword [0x1400ec178]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
mov rcx, qword [rax + 0x1b8]
test rcx, rcx
je 0x14009cfd3
cmp dword [rcx + 0x10], 2
jne 0x14009cfce
cmp dword [rcx + 4], 1
je 0x14009cfe8
call fcn.14007cd90
mov edx, 2
lea r8d, [rdx - 1]
lea rcx, str.GameListAndDetails
call fcn.14007c490
lea rcx, str.Games_Available
call fcn.14007d9c0
mov qword [rsp + 0x40], 0
lea rdx, [rsp + 0x40]
call fcn.140086d70
test al, al
je 0x14009d192
mov edi, r15d
mov rcx, qword [0x1400ec220]
mov r8, qword [0x1400ec218]
sub rcx, r8
movabs r12, 0x6666666666666667
mov rax, r12
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14009d188
mov qword [rsp + 0x40], rdi
mov rsi, r15
nop
lea rbx, [r8 + rsi]
cmp dword [0x1400d50c0], edi
sete r14b
mov ecx, edi
call fcn.14005ef10
lea r9, [rsp + 0x40]
mov r8d, 6
movzx edx, r14b
lea rcx, str.selectable
call fcn.1400865e0
test al, al
je 0x14009d08a
mov dword [0x1400d50c0], edi
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140061e30
mov rdx, qword [0x1400ec2b0]
mov qword [rbx + 0x48], rdx
mov rcx, qword [0x1400ec2b0]
test rcx, rcx
je 0x14009d10f
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
movaps xmm1, xmmword [0x1400b5c70]
movups xmmword [rbp - 0x30], xmm1
mov dword [rsp + 0x68], 0x3f800000
mov dword [rsp + 0x6c], 0x3f800000
mov qword [rsp + 0x60], 0
mov dword [rsp + 0x50], 0x41a00000
mov dword [rsp + 0x54], 0x41a00000
lea rax, [rsp + 0x70]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
call fcn.14007f560
movaps xmm1, xmm6
xorps xmm0, xmm0
call fcn.140061e30
cmp qword [rbx + 0x18], 0xf
jbe 0x14009d124
mov rbx, qword [rbx]
mov rdx, rbx
lea rcx, [0x1400b44a8]
call fcn.14007d9c0
mov rax, qword [0x1400ec178]
mov rcx, qword [rax + 0x4000]
dec dword [rcx + 0x100]
test r14b, r14b
je 0x14009d151
call fcn.14005ed70
inc edi
add rsi, 0x50
mov rcx, qword [0x1400ec220]
mov r8, qword [0x1400ec218]
sub rcx, r8
mov rax, r12
imul rcx
sar rdx, 5
mov rax, rdx
shr rax, 0x3f
add rdx, rax
movsxd rax, edi
cmp rax, rdx
jb 0x14009d050
call fcn.140058c90
call fcn.1400621e0
call fcn.14007ca80
movsxd rax, dword [0x1400d50c0]
test eax, eax
js 0x14009d3c6
lea rbx, [rax + rax*4]
shl rbx, 4
add rbx, qword [0x1400ec218]
cmp byte [0x1400ec0a4], 0
jne 0x14009d30e
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
mov qword [rbp - 0x20], r15
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.14000e710
mov eax, dword [rbx + 0x20]
mov dword [rbp - 0x60], eax
lea rdx, [rbx + 0x28]
lea rcx, [rbp - 0x58]
call fcn.14000e710
mov rax, qword [rbx + 0x48]
mov qword [rbp - 0x38], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x50], rax
mov rdi, qword [0x1400d51d8]
mov rbx, qword [0x1400d51d0]
cmp rbx, rdi
je 0x14009d255
mov rdx, qword [rbp - 0x28]
mov eax, dword [rbp - 0x60]
cmp dword [rbx + 4], eax
jne 0x14009d249
mov r8, rbx
cmp rdx, qword [rbp - 0x20]
je 0x14009d23c
call fcn.14003b000
mov rdx, qword [rbp - 0x28]
add rdx, 0x88
mov qword [rbp - 0x28], rdx
jmp 0x14009d249
lea rcx, [rbp - 0x30]
call fcn.140029620
mov rdx, qword [rbp - 0x28]
add rbx, 0x88
cmp rbx, rdi
jne 0x14009d215
lea rcx, [rbp - 0x58]
call fcn.14000f500
lea rcx, [rbp - 0x80]
call fcn.14000f500
mov r8, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x30]
sub r8, rcx
movabs rax, 0x7878787878787879
imul r8
sar rdx, 6
mov r8, rdx
shr r8, 0x3f
add r8, rdx
movzx r9d, byte [rsp + 0x48]
mov rdx, qword [rbp - 0x28]
call fcn.14009e8f0
mov rbx, qword [rbp - 0x30]
cmp rbx, qword [rbp - 0x28]
je 0x14009d2f6
lea rdx, [rbx + 0x28]
cmp qword [rdx + 0x18], 0xf
jbe 0x14009d2b4
mov rdx, qword [rdx]
lea rcx, str.End_Subscription_date:__s
call fcn.14007d9c0
lea rdx, [rbx + 0x48]
cmp qword [rdx + 0x18], 0xf
jbe 0x14009d2ce
mov rdx, qword [rdx]
lea rcx, str.Subscription_Status:__s
call fcn.14007d9c0
lea rdx, [rbx + 0x68]
cmp qword [rdx + 0x18], 0xf
jbe 0x14009d2e8
mov rdx, qword [rdx]
lea rcx, str.Subscription_Type:__s
call fcn.14007d9c0
jmp 0x14009d303
lea rcx, str.No_subscription_for_this_game.
call fcn.14007d9c0
nop
lea rcx, [rbp - 0x30]
call fcn.14000c4e0
jmp 0x14009d35c
mov eax, dword [rbx + 0x20]
cmp dword [0x1400d5210], eax
jne 0x14009d350
lea rdx, [0x1400d5280]
cmp qword [0x1400d5298], 0xf
cmova rdx, qword [0x1400d5280]
lea rcx, str.License_Key_Expires_At:__s
call fcn.14007d9c0
mov edx, dword [0x1400d52a0]
lea rcx, str.Days_Remaining:__d
call fcn.14007d9c0
jmp 0x14009d35c
lea rcx, str.No_license_key_details_available_for_this_game.
call fcn.14007d9c0
movaps xmm0, xmmword [0x1400b5c40]
movups xmmword [rbp - 0x30], xmm0
lea rdx, str.Status:_Undetected
lea rcx, [rbp - 0x30]
call fcn.14007da30
mov qword [rsp + 0x50], 0
lea rdx, [rsp + 0x50]
lea rcx, str.Buy_Subscription
call fcn.14007e260
test al, al
je 0x14009d3c6
lea r8, [0x1400ec1f8]
cmp qword [0x1400ec210], 0xf
cmova r8, qword [0x1400ec1f8]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [0x1400ec178]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
mov rcx, qword [rax + 0x1b8]
test rcx, rcx
je 0x14009d3ff
cmp dword [rcx + 0x10], 1
jne 0x14009d3fa
cmp dword [rcx + 4], 0
je 0x14009d3ff
call fcn.14007cd90
call fcn.140058c90
lea rdx, [0x1400d5148]
cmp qword [0x1400d5160], 0xf
cmova rdx, qword [0x1400d5148]
lea rcx, [0x1400b5434]
call fcn.14007d9c0
call fcn.14005e060
mov r8, qword [0x1400ec178]
movsxd rax, dword [r8 + 0x4a78]
cmp eax, 1
jl 0x14009d467
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4a80]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, rax
movups xmm0, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8 + 0x39cc], xmm0
dec dword [r8 + 0x4a78]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400a1650
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop rbp
ret