Function at 0x140001780
Capabilities:
Create process on windows
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x940]
sub rsp, 0xa40
mov rax, qword [0x14000b010]
xor rax, rsp
mov qword [rbp + 0x930], rax
xor edi, edi
mov dword [rsp + 0x50], edi
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x1400017dc
imul rbx, rax, 0x64
jmp 0x1400017f8
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rbx, [rax + rcx]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xf0], xmm0
movups xmmword [rbp + 0x100], xmm0
movups xmmword [rbp + 0x110], xmm0
movaps xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], rax
mov dword [rbp + 0xf0], 0x68
psrldq xmm0, 0xc
movd eax, xmm0
or eax, 1
mov dword [rbp + 0x12c], eax
mov word [rbp + 0x130], di
mov r12, qword [0x14000b060]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, r12
cmp rax, 0x1f
jb 0x140001feb
lea r13, [0x14000b050]
cmp qword [0x14000b068], 8
cmovae r13, qword [0x14000b050]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea r15, [r12 + 0x1f]
mov r14d, 7
lea rsi, [rsp + 0x58]
lea rdi, [r14 - 8]
cmp r15, r14
jbe 0x140001944
mov r14, r15
or r14, 7
cmp r14, rcx
jbe 0x1400018c8
mov r14, rcx
jmp 0x1400018d4
mov eax, 0xa
cmp r14, rax
cmovb r14, rax
mov rax, r14
add rax, 1
cmovb rax, rdi
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x140001fe5
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14000192e
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001fe5
mov rcx, rax
call fcn.1400051c0
test rax, rax
je 0x140001927
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14000193f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000193d
call fcn.1400051c0
mov rsi, rax
jmp 0x14000193f
xor esi, esi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r14
movaps xmm0, xmmword [str.w32tm__config__manualpeerlist:_]
movups xmmword [rsi], xmm0
movaps xmm1, xmmword [0x140007790]
movups xmmword [rsi + 0x10], xmm1
movaps xmm0, xmmword [0x1400077a0]
movups xmmword [rsi + 0x20], xmm0
movsd xmm0, qword [0x1400077b0]
movsd qword [rsi + 0x30], xmm0
mov eax, dword [0x1400077b8]
mov dword [rsi + 0x38], eax
movzx eax, word [0x1400077bc]
mov word [rsi + 0x3c], ax
lea rcx, [rsi + 0x3e]
lea r8, [r12 + r12]
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
xor r12d, r12d
mov word [rsi + r15*2], r12w
mov r14, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x70]
mov rax, rcx
sub rax, r14
cmp rax, 0x2d
jb 0x1400019f7
lea rax, [r14 + 0x2d]
mov qword [rsp + 0x68], rax
lea rsi, [rsp + 0x58]
cmp rcx, 8
cmovae rsi, qword [rsp + 0x58]
lea rcx, [rsi + r14*2]
lea r8d, [r12 + 0x5a]
lea rdx, str.___syncfromflags:manual__reliable:YES__update
call sub.VCRUNTIME140.dll_memmove
mov word [rsi + r14*2 + 0x5a], r12w
lea rax, [rsp + 0x58]
jmp 0x140001a0f
mov qword [rsp + 0x20], 0x2d
mov edx, 0x2d
lea rcx, [rsp + 0x58]
call fcn.1400049b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x18], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x140001a82
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001a7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001a7d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000544c
movdqa xmm0, xmmword [0x140007a80]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], r12w
lea rdx, [rbp - 0x28]
cmp qword [rbp - 0x10], 8
cmovae rdx, qword [rbp - 0x28]
lea rax, [rbp - 0x40]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xf0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140001b05
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rsi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rsi, 0x989680
jne 0x140001b23
imul rcx, rax, 0x64
jmp 0x140001b3e
cqo
idiv rsi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rsi
add rcx, rax
sub rcx, rbx
movabs rax, 0x431bde82d7b634db
imul rcx
mov rsi, rdx
sar rsi, 0x12
mov rax, rsi
shr rax, 0x3f
add rsi, rax
mov eax, dword [0x14000b048]
add rsi, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov rcx, rax
movabs rax, 0x346dc5d63886594b
imul rcx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
mov r8d, 0x3e8
lea rdx, [rbp + 0x160]
mov rcx, qword [0x14000bac0]
call qword [sym.imp.USER32.dll_GetWindowTextW]
xor edx, edx
mov r8d, 0xe8
lea rcx, [rbp]
call sub.VCRUNTIME140.dll_memset
lea rax, [0x140007a60]
mov qword [rbp], rax
lea rcx, [rbp + 0x88]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::constructor_void____ptr64]
nop
mov dword [rsp + 0x50], 7
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 8]
lea rcx, [rbp]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::constructor_class_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t______ptr64__bool____ptr64]
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea r15, vtable.std::basic_ostringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + rcx], r15
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__::constructor_void____ptr64]
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + 8], rax
mov qword [rbp + 0x70], r12
mov dword [rbp + 0x78], 4
lea rdx, str.Time_synchronized_with
lea rcx, [rbp]
call fcn.140004220
cmp qword [0x14000b068], 8
lea rdx, [0x14000b050]
cmovae rdx, qword [0x14000b050]
mov r8, qword [0x14000b060]
mov rcx, rax
call fcn.140004d50
lea rdx, str.._Elapsed_time:
mov rcx, rax
call fcn.140004220
mov rcx, rax
mov rdx, rsi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___long_long___int64_____ptr64]
mov rcx, rax
lea rdx, str._ms._Compensated_system_time:
call fcn.140004220
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___long_long___int64_____ptr64]
mov rcx, rax
lea rdx, str._ms_n
call fcn.140004220
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r12
mov r8d, 7
mov qword [rbp - 0x70], r8
mov word [rsp + 0x78], r12w
mov dword [rsp + 0x50], 0x17
mov ecx, dword [rbp + 0x78]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140001cff
mov rax, qword [rbp + 0x48]
mov rdx, qword [rax]
test rdx, rdx
je 0x140001cff
mov rax, qword [rbp + 0x28]
mov r9, qword [rax]
cmp rdx, qword [rbp + 0x70]
cmovb rdx, qword [rbp + 0x70]
jmp 0x140001d22
test cl, 4
jne 0x140001d5e
mov rax, qword [rbp + 0x40]
mov rdx, qword [rax]
test rdx, rdx
je 0x140001d5e
mov rax, qword [rbp + 0x20]
mov r9, qword [rax]
mov rax, qword [rbp + 0x58]
movsxd rcx, dword [rax]
lea rdx, [rdx + rcx*2]
sub rdx, r9
mov rax, r9
sar rdx, 1
test rax, rax
je 0x140001d5e
lea rcx, [rsp + 0x78]
cmp rdx, r8
ja 0x140001d55
mov qword [rbp - 0x78], rdx
lea rbx, [rdx + rdx]
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov word [rsp + rbx + 0x78], r12w
jmp 0x140001d5a
call fcn.1400046f0
mov r8, qword [rbp - 0x70]
lea rax, [rbp + 0x160]
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140001d65
mov rcx, qword [rbp - 0x78]
mov rax, r8
sub rax, rcx
cmp rdi, rax
ja 0x140001e31
lea rax, [rdi + rcx]
mov qword [rbp - 0x78], rax
lea rsi, [rsp + 0x78]
cmp r8, 8
cmovae rsi, qword [rsp + 0x78]
lea r8, [rcx + rcx]
lea rax, [rbp + 0x160]
lea rax, [rax + rdi*2]
cmp rax, rsi
jbe 0x140001de0
lea rax, [r8 + rsi]
lea rcx, [rbp + 0x160]
cmp rcx, rax
ja 0x140001de0
lea rax, [rbp + 0x160]
cmp rsi, rax
ja 0x140001dce
mov r14, r12
jmp 0x140001de3
lea rax, [rbp + 0x160]
mov r14, rsi
sub r14, rax
sar r14, 1
jmp 0x140001de3
mov r14, rdi
lea rcx, [rsi + rdi*2]
add r8, 2
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
lea rbx, [r14 + r14]
mov r8, rbx
lea rdx, [rbp + 0x160]
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rsi]
mov r8, rdi
sub r8, r14
add r8, r8
lea rax, [r14 + rdi]
lea rdx, [rbp + 0x160]
lea rdx, [rdx + rax*2]
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rsp + 0x78]
jmp 0x140001e4f
mov qword [rsp + 0x28], rdi
lea rax, [rbp + 0x160]
mov qword [rsp + 0x20], rax
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.140004f20
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 7
mov word [rax], r12w
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 8
cmovae rdx, qword [rbp - 0x68]
mov rcx, qword [0x14000bac0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov rdx, qword [rbp - 0x50]
cmp rdx, 8
jb 0x140001edb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ed6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ed6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000544c
movdqa xmm0, xmmword [0x140007a80]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x68], r12w
mov rdx, qword [rbp - 0x70]
cmp rdx, 8
jb 0x140001f32
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001f2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000544c
nop
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx], r15
mov rax, qword [rbp]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x88]
mov dword [rbp + rcx - 4], edx
lea rcx, [rbp + 8]
call fcn.140003990
lea rcx, [rbp + 0x10]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
lea rcx, [rbp + 0x88]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::destructor_void____ptr64]
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x140001fb5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001fb0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001fb0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000544c
mov rcx, qword [rbp + 0x930]
xor rcx, rsp
call fcn.1400051a0
lea r11, [rsp + 0xa40]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140001120
int3
call fcn.1400011c0
int3