Function at 0x14001e40c
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [0x1400513c8]
xor rax, rsp
mov qword [rbp + 0x68], rax
mov rbx, rcx
mov dword [rsp + 0x60], 0x70
mov dword [rsp + 0x64], 0x40
xor r15d, r15d
mov qword [rsp + 0x68], r15
lea rax, str.open
mov qword [rsp + 0x70], rax
lea r13, [0x14003a934]
cmp qword [rdx + 0x10], r15
jbe 0x14001e47d
cmp qword [rdx + 0x18], 8
jb 0x14001e476
mov rdx, qword [rdx]
mov qword [rsp + 0x78], rdx
jmp 0x14001e482
mov qword [rsp + 0x78], r13
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 8
mov qword [rbp - 0x68], r15
lea rcx, [rsp + 0x60]
call qword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
setne r14b
test eax, eax
jne 0x14001e6d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
add rbx, 0x40
cmp qword [rbx + 0x18], 8
jb 0x14001e4c4
mov rbx, qword [rbx]
lea rdi, vtable.CVarAdapter.0
mov qword [rbp - 8], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x14003eab0]
movdqu xmmword [rbp + 0x10], xmm1
mov word [rbp], r15w
test rbx, rbx
je 0x14001e509
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x14001e509
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov rdx, rbx
jmp 0x14001e515
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov rdx, r13
mov r8, rax
lea rcx, [rbp]
call fcn.14000c850
nop
mov edx, esi
lea rcx, [rbp + 0x40]
call fcn.14001c8d8
nop
mov qword [rbp - 0x30], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
movdqa xmm1, xmmword [0x14003eab0]
movdqu xmmword [rbp - 0x18], xmm1
mov word [rbp - 0x28], r15w
lea rcx, str.failed
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x14001e5f7
lea rdx, str.failed
lea rcx, [rbp + 0x20]
call fcn.140023b14
mov rsi, rax
lea rax, [rbp - 0x28]
mov ebx, 7
cmp rax, rsi
je 0x14001e5cd
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14001e59d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140002de0
movdqa xmm0, xmmword [0x14003eab0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov r8d, 0x20
mov rdx, rsi
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], rbx
mov word [rsi], r15w
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x14001e5e8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
call fcn.140002de0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], rbx
mov word [rbp + 0x20], r15w
jmp 0x14001e610
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r8, rax
mov rdx, r13
lea rcx, [rbp - 0x28]
call fcn.14000c850
nop
lea rax, [rbp - 8]
mov qword [rsp + 0x58], rax
lea rax, str.mStrCmd.c_str__
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x40]
mov qword [rsp + 0x38], rax
lea rax, str.dwError
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x40]
lea rdx, str.CWbxShellExecute::Go
mov ecx, 6
call fcn.14001ee7c
nop
mov qword [rbp - 0x30], rdi
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14001e68d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140002de0
movdqa xmm0, xmmword [0x14003eab0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov qword [rbp + 0x40], rdi
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x14001e6be
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
call fcn.140002de0
movdqa xmm0, xmmword [0x14003eab0]
movdqu xmmword [rbp + 0x58], xmm0
mov word [rbp + 0x48], r15w
mov qword [rbp - 8], rdi
jmp 0x14001e8aa
mov rcx, qword [rbp - 0x38]
test rcx, rcx
je 0x14001e6e8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rbx, 0x40
cmp qword [rbx + 0x18], 8
jb 0x14001e6f6
mov rbx, qword [rbx]
lea rdi, vtable.CVarAdapter.0
mov qword [rbp - 8], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x10], xmm0
movdqa xmm1, xmmword [0x14003eab0]
movdqu xmmword [rbp + 0x10], xmm1
mov word [rbp], r15w
test rbx, rbx
je 0x14001e73b
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x14001e73b
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov rdx, rbx
jmp 0x14001e747
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov rdx, r13
mov r8, rax
lea rcx, [rbp]
call fcn.14000c850
nop
mov qword [rbp - 0x30], rdi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x18], xmm0
movdqa xmm1, xmmword [0x14003eab0]
movdqu xmmword [rbp - 0x18], xmm1
mov word [rbp - 0x28], r15w
lea rcx, str.success
call qword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
je 0x14001e81d
lea rdx, str.success
lea rcx, [rbp + 0x20]
call fcn.140023b14
mov rsi, rax
lea rax, [rbp - 0x28]
mov ebx, 7
cmp rax, rsi
je 0x14001e7f3
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14001e7c3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140002de0
movdqa xmm0, xmmword [0x14003eab0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov r8d, 0x20
mov rdx, rsi
lea rcx, [rbp - 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], rbx
mov word [rsi], r15w
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x14001e80e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
call fcn.140002de0
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], rbx
mov word [rbp + 0x20], r15w
jmp 0x14001e836
mov rcx, r13
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcslen]
mov r8, rax
mov rdx, r13
lea rcx, [rbp - 0x28]
call fcn.14000c850
nop
lea rax, [rbp - 8]
mov qword [rsp + 0x48], rax
lea rax, str.mStrCmd.c_str__
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r15
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x30]
lea rdx, str.CWbxShellExecute::Go
mov ecx, 6
call fcn.14001ee9c
nop
mov qword [rbp - 0x30], rdi
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14001e894
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
call fcn.140002de0
movdqa xmm0, xmmword [0x14003eab0]
movdqu xmmword [rbp - 0x18], xmm0
mov word [rbp - 0x28], r15w
mov qword [rbp - 8], rdi
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x14001e8c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
call fcn.140002de0
movdqa xmm0, xmmword [0x14003eab0]
mov word [rbp], r15w
movdqu xmmword [rbp + 0x10], xmm0
mov al, r14b
mov rcx, qword [rbp + 0x68]
xor rcx, rsp
call fcn.14002e470
lea r11, [rsp + 0x170]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret