Function at 0x140004ce0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rsi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x90
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
mov rax, qword [0x141372040]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rcx, qword [0x141372f48]
lea rdx, [0x1413720d8]
movss xmm1, dword [0x1413722a4]
xorps xmm6, xmm6
movss xmm0, dword [0x1413722a0]
mov r8d, 0x2b
unpcklps xmm0, xmm1
xorps xmm1, xmm1
mov eax, dword [rcx + 0x1dc0]
movsd qword [rcx + 0x1dd4], xmm0
or eax, 1
mov dword [rcx + 0x1dc0], eax
or eax, 0x42
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
unpcklps xmm1, xmm6
movsd qword [rcx + 0x1ddc], xmm1
movss xmm0, dword [0x1413722a8]
movss xmm1, dword [0x1413722ac]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1dc8], 1
mov dword [rcx + 0x1e20], 0x3f800000
lea rcx, [0x140054a68]
call fcn.140014e90
mov rax, qword [0x141372f48]
movss xmm3, dword [0x141367694]
movss xmm2, dword [0x141367764]
mov rcx, qword [rax + 0x1d18]
movss xmm1, dword [rcx + 0x5c]
movss xmm0, dword [rcx + 0x58]
movss xmm4, dword [rcx + 0x54]
unpcklps xmm0, xmm1
movss xmm1, dword [rcx + 0x50]
movq rdx, xmm0
unpcklps xmm1, xmm4
movq rcx, xmm1
call fcn.1400039e0
lea rcx, [0x140054f88]
call fcn.140048790
movss xmm7, dword [0x1413677ec]
xorps xmm0, xmm0
movaps xmm1, xmm7
call fcn.140019c20
mov r8, qword [0x141372f48]
mov rax, qword [r8 + 0x1d18]
movss xmm4, dword [rax + 0x11c]
subss xmm4, dword [rax + 0x54]
addss xmm4, dword [rax + 0xa0]
mov byte [rax + 0xd1], 1
mov rax, qword [r8 + 0x1d18]
subss xmm4, dword [0x141367750]
movss xmm0, dword [rax + 0x134]
movss xmm1, dword [rax + 0x54]
subss xmm1, dword [rax + 0xa0]
addss xmm1, xmm4
maxss xmm0, xmm1
movss dword [rax + 0x11c], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140019e80
lea rdx, [rbp + 7]
mov qword [rbp + 7], 0
lea rcx, [0x140054fa0]
call fcn.1400490b0
xor esi, esi
test al, al
je 0x140004ea7
mov dword [0x141373028], esi
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140019c20
lea rdx, [rbp + 7]
mov qword [rbp + 7], rsi
lea rcx, [0x140054fa8]
call fcn.1400490b0
test al, al
je 0x140004ed4
mov dword [0x141373028], 1
call fcn.140019fd0
movss xmm0, dword [0x1413722a8]
lea rdx, [rbp + 7]
mov rcx, qword [0x141372f48]
subss xmm0, dword [0x14136779c]
mov qword [rbp + 7], rsi
mov rax, qword [rcx + 0x1d18]
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
lea rcx, [0x140054fb4]
movss xmm3, dword [rax + 0x50]
movss xmm2, dword [rax + 0x54]
subss xmm3, dword [rax + 0x9c]
subss xmm2, dword [rax + 0xa0]
addss xmm3, xmm0
addss xmm2, dword [0x141367774]
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
movss xmm0, dword [rax + 0x134]
maxss xmm1, xmm3
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.1400490b0
test al, al
je 0x140004f98
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor r9d, r9d
mov edx, 0x112
mov rcx, rax
mov r8d, 0xf020
call qword [sym.imp.USER32.dll_SendMessageA]
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140019c20
lea rdx, [rbp + 7]
mov qword [rbp + 7], rsi
lea rcx, [0x140054fb8]
call fcn.1400490b0
test al, al
je 0x140004fc3
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostQuitMessage]
mov eax, dword [0x141373028]
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rdi
test eax, eax
jne 0x140005446
cmp byte [0x1413720e0], sil
lea rdi, [0x140054fc0]
mov rbx, qword [0x141372f48]
lea rdx, [rbp + 7]
movss xmm3, dword [0x1413677dc]
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
movss xmm2, dword [rbx + 0x1a80]
mov rcx, qword [rbx + 0x1a78]
mov qword [rsp + 0x28], rdi
movss dword [rsp + 0x20], xmm7
je 0x140005292
call fcn.140041270
movss xmm1, dword [0x1413722a8]
mov rcx, rdi
movss xmm3, dword [0x1413722ac]
movss xmm0, dword [rbp + 7]
addss xmm0, dword [0x141367710]
movss xmm6, dword [0x1413676d4]
movss xmm7, dword [0x141367794]
subss xmm3, xmm7
cvttss2si eax, xmm0
mulss xmm3, xmm6
subss xmm3, dword [0x14136778c]
movd xmm0, eax
mov rax, qword [rbx + 0x1d18]
cvtdq2ps xmm0, xmm0
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
subss xmm1, xmm0
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
mulss xmm1, xmm6
addss xmm0, xmm1
addss xmm2, xmm3
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140048790
movss xmm1, dword [0x1413722ac]
lea rdx, [rbp + 7]
movss xmm0, dword [0x1413722a8]
subss xmm1, xmm7
mov rcx, qword [0x141372f48]
subss xmm0, dword [0x1413677b4]
mov dword [rbp + 7], 0x43480000
mov dword [rbp + 0xb], 0x42480000
mov rax, qword [rcx + 0x1d18]
mulss xmm1, xmm6
mulss xmm0, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
addss xmm1, xmm7
lea rcx, [0x140054fcc]
movss xmm3, dword [rax + 0x50]
movss xmm2, dword [rax + 0x54]
subss xmm3, dword [rax + 0x9c]
subss xmm2, dword [rax + 0xa0]
addss xmm3, xmm0
addss xmm2, xmm1
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
movss xmm0, dword [rax + 0x134]
maxss xmm1, xmm3
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.1400490b0
test al, al
je 0x140005486
cmp byte [0x141372d28], sil
sete al
mov byte [0x141372d28], al
test al, al
je 0x140005486
cmp byte [0x1413720e0], sil
je 0x140005279
lea rcx, [rbp + 0xf]
call fcn.140003d70
cmp qword [rbp + 0x1f], rsi
je 0x14000521f
cmp qword [rbp + 0x27], 0xf
lea r8, [rbp + 0xf]
mov dword [rsp + 0x28], 5
lea rdx, [0x140054fd4]
cmova r8, qword [rbp + 0xf]
xor r9d, r9d
xor ecx, ecx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x14000523b
mov r9d, 0x10
lea r8, [0x140054c44]
lea rdx, [0x140054fe0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rdx, qword [rbp + 0x27]
cmp rdx, 0xf
jbe 0x140005279
mov rcx, qword [rbp + 0xf]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005274
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005274
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14005199c
call fcn.140003410
call fcn.1400035c0
mov dword [0x1413720dc], 0xffffffff
jmp 0x140005486
call fcn.140041270
movss xmm1, dword [0x1413722a8]
mov rcx, rdi
movss xmm3, dword [0x1413722ac]
movss xmm0, dword [rbp + 7]
addss xmm0, dword [0x141367710]
movss xmm6, dword [0x1413676d4]
movss xmm7, dword [0x141367794]
subss xmm3, xmm7
cvttss2si eax, xmm0
mulss xmm3, xmm6
subss xmm3, dword [0x14136778c]
movd xmm0, eax
mov rax, qword [rbx + 0x1d18]
cvtdq2ps xmm0, xmm0
mov byte [rax + 0xd1], 1
mov rax, qword [rbx + 0x1d18]
subss xmm1, xmm0
movss xmm0, dword [rax + 0x50]
subss xmm0, dword [rax + 0x9c]
movss xmm2, dword [rax + 0x54]
subss xmm2, dword [rax + 0xa0]
mulss xmm1, xmm6
addss xmm0, xmm1
addss xmm2, xmm3
movss dword [rax + 0x118], xmm0
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0x134]
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.140048790
movss xmm1, dword [0x1413722ac]
lea rdx, [rbp + 7]
movss xmm0, dword [0x1413722a8]
subss xmm1, xmm7
mov rcx, qword [0x141372f48]
subss xmm0, dword [0x1413677b4]
mov dword [rbp + 7], 0x43480000
mov dword [rbp + 0xb], 0x42480000
mov rax, qword [rcx + 0x1d18]
mulss xmm1, xmm6
mulss xmm0, xmm6
mov byte [rax + 0xd1], 1
mov rax, qword [rcx + 0x1d18]
addss xmm1, xmm7
lea rcx, [0x140054fcc]
movss xmm3, dword [rax + 0x50]
movss xmm2, dword [rax + 0x54]
subss xmm3, dword [rax + 0x9c]
subss xmm2, dword [rax + 0xa0]
addss xmm3, xmm0
addss xmm2, xmm1
movss dword [rax + 0x118], xmm3
movss dword [rax + 0x11c], xmm2
movss xmm1, dword [rax + 0x130]
movss xmm0, dword [rax + 0x134]
maxss xmm1, xmm3
maxss xmm0, xmm2
movss dword [rax + 0x130], xmm1
movss dword [rax + 0x134], xmm0
call fcn.1400490b0
test al, al
je 0x140005486
mov r9d, 0x40
lea r8, [0x140055028]
lea rdx, [0x140055038]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140003410
call fcn.1400035c0
jmp 0x140005486
cmp eax, 1
jne 0x140005486
call fcn.14004a900
movaps xmm1, xmm7
xorps xmm0, xmm0
call fcn.140019c20
lea rdx, [rbp + 7]
mov qword [rbp + 7], rsi
lea rcx, [0x140055070]
call fcn.1400490b0
xor ecx, ecx
call fcn.14000cc70
test al, al
je 0x140005486
lea rcx, [0x140055080]
call fcn.14001ab50
call fcn.1400180e0
mov rdi, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xa0]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140051870
mov rsi, qword [rsp + 0xb0]
movaps xmm6, xmmword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x70]
add rsp, 0x90
pop rbp
ret