Function at 0x1401179d0
Capabilities:
Create process on windows

Disassembly:
jmp 0x1401179d0
push rbp
push rbx
push rsi
push rdi
sub rsp, 0x2c8
lea rbp, [rsp + 0x30]
mov rdi, rdx
mov rsi, rcx
lea rcx, [rbp]
mov edx, 0x12c
lea r8, str.open
mov r9d, 4
lea rbx, [0x140000000]
mov byte [0x14063e02c], 0
call fcn.1400042eb
mov rax, qword [rbp + 0x120]
mov edx, dword [rbp + 0x128]
mov qword [0x14063dee0], rax
mov eax, 0x120
mov dword [0x14063dee8], edx
movups xmm0, xmmword [rbp + rax - 0x10]
movups xmm1, xmmword [rbp + rax - 0x20]
movups xmm2, xmmword [rbp + rax - 0x30]
movups xmm3, xmmword [rbp + rax - 0x40]
movups xmm4, xmmword [rbp + rax - 0x50]
movups xmm5, xmmword [rbp + rax - 0x60]
movups xmmword [rbx + rax + 0x63ddb0], xmm0
movups xmmword [rbx + rax + 0x63dda0], xmm1
movups xmmword [rbx + rax + 0x63dd90], xmm2
movups xmmword [rbx + rax + 0x63dd80], xmm3
movups xmmword [rbx + rax + 0x63dd70], xmm4
movups xmmword [rbx + rax + 0x63dd60], xmm5
sub rax, 0x60
jne 0x140117a2e
mov edx, 0x12c
lea rcx, [rbp + 0x130]
mov r8, rsi
mov r9, rdi
call fcn.1400042eb
mov rax, qword [rbp + 0x250]
mov edx, dword [rbp + 0x258]
mov qword [0x14063e020], rax
mov eax, 0x120
mov dword [0x14063e028], edx
movups xmm0, xmmword [rbp + rax + 0x120]
movups xmm1, xmmword [rbp + rax + 0x110]
movups xmm2, xmmword [rbp + rax + 0x100]
movups xmm3, xmmword [rbp + rax + 0xf0]
movups xmm4, xmmword [rbp + rax + 0xe0]
movups xmm5, xmmword [rbp + rax + 0xd0]
movups xmmword [rbx + rax + 0x63def0], xmm0
movups xmmword [rbx + rax + 0x63dee0], xmm1
movups xmmword [rbx + rax + 0x63ded0], xmm2
movups xmmword [rbx + rax + 0x63dec0], xmm3
movups xmmword [rbx + rax + 0x63deb0], xmm4
movups xmmword [rbx + rax + 0x63dea0], xmm5
sub rax, 0x60
jne 0x140117ab8
mov rax, rsp
lea rbx, [0x14063e02c]
xor ecx, ecx
lea rdx, [0x14063ddc0]
lea r8, [0x14063df00]
mov r9, rbx
mov qword [rax + 0x20], rbx
mov dword [rax + 0x28], 1
call sub.SHELL32.dll_ShellExecuteA
mov rsi, rax
mov rax, rsp
lea rcx, [0x14063df00]
mov edx, 0x12c
mov r8, rbx
mov r9d, 1
mov dword [rax + 0x20], 0
call fcn.140006019
movsxd rbx, eax
mov rdi, rsp
xor edx, edx
dec rbx
lea rcx, [0x14063df00]
lea r8, [0x1404d4978]
cmovg rdx, rbx
mov r9d, 1
mov dword [rdi + 0x20], 0xffffffff
call fcn.140006019
movsxd rax, eax
cmp esi, 0x20
jg 0x140117c47
lea rcx, [0x14063df00]
lea rdx, [rax - 1]
sub rbx, rdx
lea rdi, [0x1404d497c]
mov qword [rbp + 0x260], rdi
mov edi, 0
cmovg rdi, rbx
lea r8, str._launch_failed
mov qword [rbp + 0x278], rdi
add rdi, 0xf
mov qword [rbp + 0x268], 1
lea rbx, [rcx + rax - 1]
mov rax, rdi
mov rsi, rsp
mov qword [rbp + 0x270], rbx
mov qword [rbp + 0x280], r8
mov qword [rbp + 0x288], 0xe
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.140001e38
sub rsp, rax
lea rax, [rsp + 0x30]
mov rbx, rax
lea rcx, [rbp + 0x260]
mov edx, 3
mov r8, rbx
mov r9, rdi
call fcn.1400048cc
jmp 0x140117cdc
lea rcx, [0x14063df00]
lea rdx, [rax - 1]
sub rbx, rdx
lea rdi, [0x1404d4990]
mov qword [rbp + 0x260], rdi
mov edi, 0
cmovg rdi, rbx
lea r8, str._launch_succeeded
mov qword [rbp + 0x278], rdi
add rdi, 0x12
mov qword [rbp + 0x268], 1
lea rbx, [rcx + rax - 1]
mov rax, rdi
mov rsi, rsp
mov qword [rbp + 0x270], rbx
mov qword [rbp + 0x280], r8
mov qword [rbp + 0x288], 0x11
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.140001e38
sub rsp, rax
lea rax, [rsp + 0x30]
mov rbx, rax
lea rcx, [rbp + 0x260]
mov edx, 3
mov r8, rbx
mov r9, rdi
call fcn.1400048cc
mov rcx, rbx
mov rdx, rdi
call fcn.140004ad9
mov rax, rsi
mov rsp, rax
lea rsp, [rbp + 0x298]
pop rdi
pop rsi
pop rbx
pop rbp
ret