Function at 0x140001000
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x518
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x490], 0xfffffffffffffffe
mov rbx, rdx
mov edx, ecx
xorps xmm0, xmm0
lea rcx, [rbp + 0x240]
movaps xmmword [rcx], xmm0
and qword [rcx + 0x10], 0
mov eax, 0x200
mov qword [rcx + 0x18], rax
mov qword [rcx + 0x20], rax
mov dword [rbp + 0x488], edx
movsxd rdx, edx
shl rdx, 3
call fcn.14000fe8c
mov qword [rbp + 0x480], rax
xor r14d, r14d
mov eax, dword [rbp + 0x488]
test eax, eax
mov r13d, 0
cmovg r13d, eax
lea rsi, [rbp - 0x28]
lea r15, [rbp + 0x2f0]
lea r12, [rbp + 0x240]
cmp r14, r13
je 0x1400010ec
mov rdi, qword [rbx + r14*8]
mov rcx, rdi
call fcn.1401997f8
mov rcx, rsi
mov rdx, rdi
mov r8, rax
call fcn.1400120d7
cmp qword [rbp - 0x10], 0x10
mov rax, rsi
jb 0x1400010b7
mov rax, qword [rbp - 0x28]
mov qword [rbp + 0x2f0], rax
add rax, qword [rbp - 0x18]
mov qword [rbp + 0x2f8], rax
mov rcx, r15
mov rdx, r12
call fcn.14000fffb
mov rcx, qword [rbp + 0x480]
mov qword [rcx + r14*8], rax
mov rcx, rsi
call fcn.140001ad8
inc r14
jmp 0x14000108a
xorps xmm0, xmm0
lea r8, [rbp + 0x2f0]
movaps xmmword [r8 + 0x60], xmm0
movaps xmmword [r8 + 0x50], xmm0
movaps xmmword [r8 + 0x40], xmm0
movaps xmmword [r8 + 0x30], xmm0
movaps xmmword [r8 + 0x20], xmm0
movaps xmmword [r8 + 0x10], xmm0
movaps xmmword [r8], xmm0
and dword [r8 + 0x70], 0
mov ecx, dword [rbp + 0x488]
mov rdx, qword [rbp + 0x480]
call fcn.140002274
cmp byte [rbp + 0x35f], 0
je 0x14000114b
xor esi, esi
lea rcx, str.subl
call fcn.140003202
jmp 0x1400016be
cmp byte [rbp + 0x360], 0
je 0x14000116e
xor esi, esi
lea rcx, str.Sublime_Text_Build__s_n
lea rdx, str.4152
call fcn.140001a32
jmp 0x1400016be
cmp byte [rbp + 0x358], 0
je 0x14000117e
mov byte [0x1402596d0], 1
mov r8b, byte [rbp + 0x361]
lea rcx, str.Sublime_Text
mov dl, 1
xor r9d, r9d
call fcn.140009a70
lea rax, [rbp - 0x10]
and qword [rax - 0x18], 0
mov qword [rax - 0x10], 0x200
mov qword [rax - 8], rax
lea rcx, [rbp + 0x3d0]
lea rdx, [rbp - 0x28]
call fcn.1400033d9
movups xmm0, xmmword [rbp + 0x3d0]
lea rdx, [rbp + 0x1f0]
movaps xmmword [rdx], xmm0
lea rcx, [rbp + 0x370]
call fcn.14000e75a
mov r14b, byte [rbp + 0x370]
test r14b, r14b
je 0x140001202
lea rdx, [rbp + 0x378]
lea rcx, [rbp + 0x428]
mov word [rcx - 8], 1
call fcn.14000e91e
jmp 0x1400015e5
lea rdx, str._sublime_text.exe
lea r13, [rbp + 0x3b0]
mov rcx, r13
call fcn.140010db9
cmp qword [rbp + 0x3c0], 0
je 0x140001343
and qword [rbp + 0x3f0], 0
mov al, byte [rbp + 0x35c]
and word [rbp + 0x3e0], 0
mov cl, byte [rbp + 0x362]
or cl, al
setne byte [rbp + 0x48f]
mov qword [rbp + 0x3f8], 7
je 0x140001350
lea rcx, [rbp + 0x460]
lea rdx, [rbp + 0x2f0]
call fcn.14000328e
xor edi, edi
lea r12, [rbp + 0x420]
lea rbx, [rbp + 0x270]
lea rsi, [rbp + 0x3e0]
mov rax, qword [rbp + 0x460]
mov rcx, qword [rbp + 0x468]
sub rcx, rax
sar rcx, 3
cmp rdi, rcx
jae 0x140001417
test rdi, rdi
je 0x1400012bc
mov rcx, rsi
mov dx, 0x20
call fcn.140001bfc
mov rax, qword [rbp + 0x460]
mov r15, qword [rax + rdi*8]
mov qword [rbp + 0x410], r15
mov rcx, r15
call fcn.14019ddd0
add rax, r15
mov qword [rbp + 0x418], rax
mov rcx, r12
lea rdx, [rbp + 0x410]
call fcn.1400111f4
cmp qword [rbp + 0x438], 0x10
mov rax, r12
jb 0x1400012fc
mov rax, qword [rbp + 0x420]
mov qword [rbp + 0x400], rax
add rax, qword [rbp + 0x430]
mov qword [rbp + 0x408], rax
mov rcx, rbx
lea rdx, [rbp + 0x400]
call fcn.140012028
mov rcx, rsi
mov rdx, rbx
call fcn.140001fcc
mov rcx, rbx
call fcn.140001c0a
mov rcx, r12
call fcn.140001ad8
inc rdi
jmp 0x140001286
and word [rbp + 0x420], 0
jmp 0x1400015d9
xor r12d, r12d
lea r15, [rbp + 0x420]
lea rbx, [rbp + 0x270]
lea rdi, [rbp + 0x3e0]
cmp r12d, dword [rbp + 0x488]
jge 0x140001423
test r12d, r12d
je 0x140001386
mov rcx, rdi
mov dx, 0x20
call fcn.140001bfc
mov eax, r12d
mov rcx, qword [rbp + 0x480]
mov rsi, qword [rcx + rax*8]
mov qword [rbp + 0x410], rsi
mov rcx, rsi
call fcn.14019ddd0
add rax, rsi
mov qword [rbp + 0x418], rax
mov rcx, r15
lea rdx, [rbp + 0x410]
call fcn.1400111f4
cmp qword [rbp + 0x438], 0x10
mov rax, r15
jb 0x1400013d0
mov rax, qword [rbp + 0x420]
mov qword [rbp + 0x400], rax
add rax, qword [rbp + 0x430]
mov qword [rbp + 0x408], rax
mov rcx, rbx
lea rdx, [rbp + 0x400]
call fcn.140012028
mov rcx, rdi
mov rdx, rbx
call fcn.140001fcc
mov rcx, rbx
call fcn.140001c0a
mov rcx, r15
call fcn.140001ad8
inc r12d
jmp 0x140001368
lea rcx, [rbp + 0x460]
call fcn.140001c42
cmp qword [rbp + 0x3f8], 8
jb 0x140001436
mov rdx, qword [rbp + 0x3e0]
jmp 0x14000143d
lea rdx, [rbp + 0x3e0]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x270], xmm0
movaps xmmword [rbp + 0x2c0], xmm0
movaps xmmword [rbp + 0x2b0], xmm0
movaps xmmword [rbp + 0x2a0], xmm0
movaps xmmword [rbp + 0x290], xmm0
and qword [rbp + 0x2d0], 0
movaps xmmword [rbp + 0x280], xmm0
and qword [rbp + 0x470], 0
mov dword [rbp + 0x270], 0x68
movaps xmmword [rbp + 0x460], xmm0
cmp qword [rbp + 0x3c8], 8
jb 0x14000149c
mov r13, qword [rbp + 0x3b0]
lea rax, [rbp + 0x460]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x270]
mov qword [rsp + 0x40], rax
and dword [rsp + 0x28], 0
movups xmmword [rsp + 0x30], xmm0
and dword [rsp + 0x20], 0
mov rcx, r13
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov rcx, qword [rbp + 0x460]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x468]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [rbp + 0x48f], 0
je 0x140001591
lea r13, [rbp + 0x378]
xor r15d, r15d
lea rbx, [rbp + 0x420]
lea r12, [rbp + 0x2e0]
lea rdi, [rbp + 0x370]
mov rsi, qword [sym.imp.KERNEL32.dll_Sleep]
cmp r15d, 0x4f
ja 0x14000159b
movups xmm0, xmmword [rbp + 0x3d0]
movaps xmmword [rbp + 0x2e0], xmm0
mov rcx, rbx
mov rdx, r12
call fcn.14000e75a
mov rcx, rdi
call fcn.140001c74
mov al, byte [rbp + 0x420]
mov byte [rbp + 0x370], al
test al, al
je 0x140001567
mov rcx, r13
lea rdx, [rbp + 0x428]
call fcn.14000e91e
jmp 0x140001576
mov rcx, r13
lea rdx, [rbp + 0x428]
call fcn.1400020fa
mov rcx, rbx
call fcn.140001c74
cmp byte [rbp + 0x370], 0
jne 0x1400015a3
push 0x32
pop rcx
call rsi
inc r15d
jmp 0x14000151f
and word [rbp + 0x420], 0
jmp 0x1400015cd
mov al, byte [rbp + 0x370]
jmp 0x1400015a5
mov al, 1
lea rcx, [rbp + 0x428]
mov byte [rcx - 8], al
mov edx, eax
xor dl, 1
mov byte [rcx - 7], dl
test al, al
je 0x1400015c5
mov rdx, r13
call fcn.14000e91e
jmp 0x1400015cd
mov rdx, r13
call fcn.1400020fa
lea rcx, [rbp + 0x3e0]
call fcn.140001c0a
lea rcx, [rbp + 0x3b0]
call fcn.140001c0a
lea rcx, [rbp + 0x370]
call fcn.140001c74
test r14b, r14b
je 0x14000161a
lea rcx, str.__launch_or_new_window
mov edx, dword [rbp + 0x488]
mov r8, qword [rbp + 0x480]
call fcn.14000b6f4
test al, al
je 0x14000161a
mov byte [rbp + 0x35a], 1
mov dil, byte [rbp + 0x35c]
mov bl, byte [rbp + 0x35e]
mov cl, byte [rbp + 0x420]
mov al, byte [rbp + 0x421]
mov byte [rbp + 0x200], cl
mov byte [rbp + 0x201], al
test cl, cl
je 0x14000165c
lea rcx, [rbp + 0x208]
lea rdx, [rbp + 0x428]
call fcn.14000e91e
mov al, byte [rbp + 0x421]
test al, al
je 0x140001673
lea rcx, [rbp + 0x208]
lea rdx, [rbp + 0x428]
call fcn.1400020fa
and word [rbp + 0x420], 0
lea rcx, [rbp + 0x200]
lea rdx, [rbp + 0x2f0]
call fcn.1400034fe
mov esi, eax
test dil, dil
je 0x1400016a9
and bl, 1
jne 0x1400016a9
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetForegroundWindow]
lea rcx, [rbp + 0x420]
call fcn.140001a74
lea rcx, [rbp - 0x28]
call fcn.1400115a8
lea rcx, [rbp + 0x2f0]
call fcn.140001aa8
lea rcx, [rbp + 0x240]
call fcn.14000fe58
mov eax, esi
add rsp, 0x518
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret