Function at 0x14019c0b0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
mov rax, qword [0x1405d3230]
xor rax, rsp
mov qword [rbp + 0x3f], rax
xor r14d, r14d
cmp qword [rcx + 0x18], 0x10
jb 0x14019c0f4
mov rsi, qword [rcx]
mov rdi, rsi
add rsi, qword [rcx + 0x10]
jmp 0x14019c0fe
mov rsi, qword [rcx + 0x10]
add rsi, rcx
mov rdi, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
mov r15, 0xffffffffffffffff
mov ebx, 7
mov qword [rbp + 0x17], rbx
cmp rdi, rsi
jne 0x14019c128
mov qword [rbp + 0xf], r14
mov word [rbp - 1], r14w
jmp 0x14019c230
mov rax, rsi
sub rax, rdi
mov rdx, r14
mov qword [rbp + 0xf], rdx
movabs rcx, 0x7ffffffffffffffe
cmp rax, rcx
ja 0x14019c33c
cmp rax, 8
jb 0x14019c1f0
mov rbx, rax
or rbx, 7
cmp rbx, rcx
jbe 0x14019c163
mov rbx, rcx
jmp 0x14019c16f
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
mov rax, rbx
add rax, 1
cmovb rax, r15
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x14019c336
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x14019c1cd
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14019c336
mov rcx, rax
call fcn.14045a514
mov rcx, rax
test rax, rax
je 0x14019c342
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rbp + 0xf]
jmp 0x14019c1e0
test rcx, rcx
je 0x14019c1dd
call fcn.14045a514
mov rdx, qword [rbp + 0xf]
jmp 0x14019c1e0
mov rax, r14
mov qword [rbp - 1], rax
mov qword [rbp + 0x17], rbx
nop dword [rax + rax]
lea rcx, [rbp - 1]
cmp rbx, 8
cmovae rcx, qword [rbp - 1]
movsx eax, byte [rdi]
mov word [rcx + rdx*2], ax
mov rdx, qword [rbp + 0xf]
inc rdx
mov qword [rbp + 0xf], rdx
inc rdi
cmp rdi, rsi
je 0x14019c21d
mov rbx, qword [rbp + 0x17]
jmp 0x14019c1f0
lea rax, [rbp - 1]
cmp qword [rbp + 0x17], 8
cmovae rax, qword [rbp - 1]
mov word [rax + rdx*2], r14w
mov edx, 0x7e
lea rcx, [rbp - 0x21]
call fcn.1401337a0
mov rbx, rax
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x14019c24e
mov r8, qword [rax]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, r15d
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd rdi, eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x1f], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x2f], xmm1
mov r8, rdi
xor edx, edx
lea rcx, [rbp + 0x1f]
call fcn.1401b55d0
lea rdx, [rbp + 0x1f]
cmp qword [rbp + 0x37], 8
cmovae rdx, qword [rbp + 0x1f]
cmp qword [rbx + 0x18], 0x10
jb 0x14019c2a0
mov rbx, qword [rbx]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdx
mov r9d, r15d
mov r8, rbx
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
nop
lea rcx, [rbp - 0x21]
call fcn.14014c8d0
lea r8, [rbp - 1]
cmp qword [rbp + 0x17], 8
cmovae r8, qword [rbp - 1]
lea rdx, [rbp + 0x1f]
cmp qword [rbp + 0x37], 8
cmovae rdx, qword [rbp + 0x1f]
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
lea rcx, [rbp + 0x1f]
call fcn.1401acb90
nop
lea rcx, [rbp - 1]
call fcn.1401acb90
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.14045a250
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140132900
int3
call fcn.1401329a0
int3
call fcn.140470888
int3