Function at 0x1400351b0
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
mov rax, qword [0x140120140]
xor rax, rsp
mov qword [rbp - 0x29], rax
mov rdi, qword [0x1401475c0]
mov rbx, rdx
mov r12, r8
mov r15, rcx
mov rcx, rbx
mov r13, r9
mov rax, qword [rdi + 0x3eb0]
mov byte [rax + 0xb0], 1
mov r14, qword [rdi + 0x3eb0]
movsxd rdx, dword [r14 + 0xe8]
mov rax, qword [r14 + 0xf0]
mov r8d, dword [rax + rdx*4 - 4]
xor edx, edx
call fcn.140006090
mov esi, eax
cmp dword [rdi + 0x3ef8], eax
jne 0x140035252
mov r8, rbx
mov edx, ntohs
mov ecx, eax
call fcn.14001be30
mov rdi, qword [0x1401475c0]
movss xmm1, dword [r14 + 0xfc]
movss xmm3, dword [r14 + 0xf8]
movaps xmm0, xmm1
mov rcx, qword [rdi + 0x58]
movaps xmm2, xmm3
movss dword [rbp - 0x35], xmm1
movss dword [rbp - 0x39], xmm3
mov rdx, qword [rcx + 0x60]
lea rcx, [rbp - 0x45]
mov rax, qword [rdx + 0x10]
addss xmm2, dword [rax + 0x14]
mov rax, qword [rdx + 8]
addss xmm0, dword [rax + 0x14]
movss dword [rbp - 0x31], xmm2
subss xmm2, xmm3
movss dword [rbp - 0x2d], xmm0
subss xmm0, xmm1
movss xmm1, dword [0x14010bc90]
movss dword [rbp - 0x45], xmm2
movss dword [rbp - 0x41], xmm0
call fcn.140014cc0
mov edx, esi
lea rcx, [rbp - 0x39]
xor r9d, r9d
call fcn.140014e30
lea r9, [rbp - 0x48]
mov dword [rsp + 0x20], 0
lea r8, [rbp - 0x49]
mov edx, esi
lea rcx, [rbp - 0x39]
call fcn.140030050
cmp byte [rbp - 0x49], 0
movss xmm0, dword [r15 + 0x14]
mov byte [rbp - 0x47], al
jne 0x1400352fe
cmp byte [rbp - 0x48], 0
jne 0x1400352fe
xor r8d, r8d
jmp 0x140035301
mov r8b, 1
movss dword [rsp + 0x28], xmm0
xorps xmm3, xmm3
movss xmm0, dword [0x14010bb88]
xor edx, edx
mov rcx, rbx
movss dword [rsp + 0x20], xmm0
xorps xmm8, xmm8
call fcn.140035ab0
mov rdi, qword [r14 + 0x290]
mov rcx, r12
call fcn.140006550
movss xmm9, dword [0x14010bb44]
mov esi, eax
mov r9, qword [0x1401475c0]
movss xmm6, dword [rbp - 0x39]
movss xmm7, dword [rbp - 0x35]
addss xmm6, dword [rbp - 0x31]
mov rcx, qword [r9 + 0x58]
addss xmm7, dword [rbp - 0x2d]
mov rdx, qword [rcx + 0x60]
mulss xmm6, xmm9
mulss xmm7, xmm9
mov rcx, qword [rdx + 0x10]
movss dword [rbp - 0x45], xmm6
movss dword [rbp - 0x41], xmm7
movss xmm2, dword [rcx + 0x14]
test eax, 0xff000000
je 0x1400353d6
comiss xmm9, xmm2
ja 0x1400353d6
movss xmm0, dword [0x14010bbd0]
lea rdx, [rbp - 0x45]
mov dword [rsp + 0x28], 0x23
xorps xmm3, xmm3
mov rcx, rdi
movss dword [rsp + 0x20], xmm0
call fcn.1400272d0
mov r8d, dword [rdi + 0x78]
mov r9d, esi
mov rdx, qword [rdi + 0x80]
mov rcx, rdi
call fcn.1400267f0
mov r9, qword [0x1401475c0]
mov dword [rdi + 0x78], 0
movups xmm0, xmmword [r9 + 0x38b8]
mov r8, qword [r14 + 0x290]
lea rcx, [rbp - 0x39]
movups xmmword [rbp - 0x39], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [r9 + 0x37e0]
movss dword [rbp - 0x2d], xmm0
call fcn.140006550
mov rcx, qword [r9 + 0x58]
mov r11d, eax
mov rdx, qword [rcx + 0x60]
mov r10, qword [rdx + 0x10]
movss xmm2, dword [r10 + 0x14]
movaps xmm0, xmm2
mulss xmm0, xmm9
subss xmm6, xmm0
subss xmm7, xmm0
movss dword [rbp - 0x45], xmm6
movss dword [rbp - 0x41], xmm7
test eax, 0xff000000
je 0x1400354af
mov rcx, 0xffffffffffffffff
inc rcx
cmp byte [rbx + rcx], 0
jne 0x140035441
add rcx, rbx
cmp rbx, rcx
je 0x1400354af
test r10, r10
jne 0x14003545f
mov rax, qword [r8 + 0x38]
mov r10, qword [rax + 8]
ucomiss xmm2, xmm8
jp 0x140035470
jne 0x140035470
mov rax, qword [r8 + 0x38]
movss xmm2, dword [rax + 0x10]
movups xmm0, xmmword [r8 + 0x88]
mov byte [rsp + 0x48], 0
lea rax, [rbp - 0x39]
movss dword [rsp + 0x40], xmm8
lea r9, [rbp - 0x45]
mov qword [rsp + 0x38], rcx
mov rdx, r8
mov qword [rsp + 0x30], rbx
mov rcx, r10
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r11d
movups xmmword [rbp - 0x39], xmm0
call fcn.14002c550
cmp byte [rbp - 0x47], 0
je 0x1400354d6
mov dword [rsp + 0x28], 5
xor r9d, r9d
mov r8, r13
mov qword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, qword [rbp - 0x29]
xor rcx, rsp
call fcn.1400aad70
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret