Function at 0x140030478
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r14
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x1409963c0]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov rsi, rcx
mov r14, rdx
mov rcx, qword [0x140999580]
xor r8d, r8d
mov rdx, rsi
mov rax, qword [rcx + 0x3eb0]
mov byte [rax + 0xb0], 1
mov rbx, qword [rcx + 0x3eb0]
mov rcx, rbx
call fcn.14000ee4c
movss xmm6, dword [0x1400f56b4]
lea rcx, [rbp - 0x39]
xor r9d, r9d
movss dword [rsp + 0x20], xmm6
xor r8d, r8d
mov rdx, rsi
mov edi, eax
call fcn.14000b9c8
movss xmm4, dword [rbx + 0xf8]
lea rcx, [rbp - 0x39]
movaps xmm3, xmm4
movaps xmm1, xmm6
movss xmm2, dword [rax + 4]
addss xmm3, dword [rax]
addss xmm2, dword [rbx + 0xfc]
movss dword [rbp - 0x11], xmm4
movss xmm0, dword [rbx + 0xfc]
movss dword [rbp - 0xd], xmm0
movss dword [rbp - 9], xmm3
subss xmm3, xmm4
movss dword [rbp - 5], xmm2
subss xmm2, xmm0
movss dword [rbp - 0x39], xmm3
movss dword [rbp - 0x35], xmm2
call fcn.14001100c
xor r9d, r9d
lea rcx, [rbp - 0x11]
xor r8d, r8d
mov edx, edi
call fcn.140010cec
and dword [rsp + 0x20], 0
lea r9, [rbp - 0x18]
lea r8, [rbp - 0x19]
mov edx, edi
lea rcx, [rbp - 0x11]
call fcn.140027a88
movss xmm0, dword [0x14012d020]
xorps xmm3, xmm3
movss xmm6, dword [0x1400f3cac]
xor edx, edx
mov r8b, byte [rbp - 0x19]
mov rcx, rsi
movss dword [rsp + 0x28], xmm0
mov bl, al
movss dword [rsp + 0x20], xmm6
call fcn.140030d54
movaps xmm1, xmm6
mov ecx, 1
movaps xmm8, xmm0
call fcn.14000ec78
movss xmm7, dword [0x1400f5614]
xorps xmm0, xmm0
movzx ecx, al
xorps xmm1, xmm1
mov edx, eax
cvtsi2ss xmm1, rcx
mov ecx, eax
shr eax, 0x10
shr ecx, 8
movzx ecx, cl
movzx eax, al
shr edx, 0x18
cvtsi2ss xmm0, rcx
mulss xmm1, xmm7
mulss xmm0, xmm7
movss dword [rbp - 0x39], xmm1
movss dword [rbp - 0x35], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm7
movss dword [rbp - 0x31], xmm0
xorps xmm0, xmm0
mov eax, edx
movaps xmm1, xmm6
mov ecx, 2
cvtsi2ss xmm0, rax
mulss xmm0, xmm7
movss dword [rbp - 0x2d], xmm0
call fcn.14000ec78
xorps xmm0, xmm0
movzx ecx, al
mov edx, eax
lea r8, [rbp - 0x39]
shr edx, 0x18
movaps xmm3, xmm8
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 8
movzx ecx, cl
mulss xmm0, xmm7
movss dword [rbp - 0x29], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rcx
mov ecx, eax
shr ecx, 0x10
movzx eax, cl
lea rcx, [rbp - 1]
mulss xmm0, xmm7
movss dword [rbp - 0x25], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mov eax, edx
lea rdx, [rbp - 0x29]
mulss xmm0, xmm7
movss dword [rbp - 0x21], xmm0
xorps xmm0, xmm0
cvtsi2ss xmm0, rax
mulss xmm0, xmm7
movss dword [rbp - 0x1d], xmm0
movups xmm0, xmmword [rbp - 0x39]
movups xmm1, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmmword [rbp - 0x29], xmm1
call fcn.140030c50
test bl, bl
je 0x1400306d3
and dword [rsp + 0x28], 0
xor r9d, r9d
and qword [rsp + 0x20], 0
mov r8, r14
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rdx, [rbp - 1]
mov ecx, 1
call fcn.140015e5c
mov rcx, qword [rbp - 0x11]
mov r9b, 1
xor r8d, r8d
mov rdx, rsi
call fcn.140016f28
mov ecx, 1
call fcn.140015b68
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.14008bd80
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret