Function at 0x14004a090
Capabilities:
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
mov rax, qword [0x14016c040]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xor esi, esi
mov dword [rbp - 0x39], esi
call fcn.140073be0
mov dword [rbp - 0x39], 0x431e0000
mov dword [rbp - 0x35], 0x42480000
lea rdx, [rbp - 0x31]
lea rcx, [0x14016e638]
call fcn.14000a0e0
nop
lea rcx, [rbp - 0x31]
cmp qword [rbp - 0x19], 0xf
cmova rcx, qword [rbp - 0x31]
mov r9d, 8
mov r8d, 1
lea rdx, [rbp - 0x39]
call fcn.140069f90
nop
lea rcx, [rbp - 0x31]
call fcn.140007360
mov rcx, qword [0x140174cc0]
call fcn.14006fed0
mov rcx, qword [0x140174ea0]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
xorps xmm7, xmm7
movss xmm6, dword [0x140153494]
cmp byte [rax + 0xc3], sil
jne 0x14004a163
mov qword [rbp - 0x39], rsi
movaps xmm1, xmm6
lea rcx, [rbp - 0x39]
call fcn.140073780
lea rdx, [rbp - 0x31]
lea rcx, [0x14016e540]
call fcn.1400038a0
lea rax, [rbp - 0x31]
cmp qword [rbp - 0x19], 0xf
cmova rax, qword [rbp - 0x31]
mov rbx, qword [0x140174ea0]
test rax, rax
je 0x14004a1da
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rax
movss dword [rsp + 0x20], xmm6
movss xmm3, dword [0x140153470]
movss xmm2, dword [rbx + 0x3d38]
lea rdx, [rbp - 0x39]
mov rcx, qword [rbx + 0x3d30]
call fcn.14008bc10
movss xmm0, dword [rbp - 0x39]
addss xmm0, dword [0x1401532e4]
cvttss2si eax, xmm0
movd xmm7, eax
cvtdq2ps xmm7, xmm7
mov rdx, qword [rbx + 0x4000]
cmp qword [rdx + 0x1b8], 0
jne 0x14004a1fa
cmp qword [rbx + 0x4e18], 0
mov eax, 0x260
je 0x14004a1ff
mov eax, 0x230
movss xmm0, dword [rdx + rax]
subss xmm0, dword [rdx + 0x110]
mulss xmm0, dword [0x1401532a4]
mulss xmm7, dword [0x1401532a4]
subss xmm0, xmm7
movaps xmm1, xmm6
call fcn.1400738f0
lea rcx, [rbp - 0x31]
call fcn.140007360
lea rdx, [rbp + 0xf]
lea rcx, [0x14016e880]
call fcn.1400038a0
nop
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x11]
call fcn.1400071c0
movss xmm0, dword [0x14015324c]
movss dword [rsp + 0x30], xmm0
movss xmm1, dword [0x140153290]
movss dword [rsp + 0x28], xmm1
movss xmm0, dword [0x1401532f0]
movss dword [rsp + 0x20], xmm0
movss xmm2, dword [0x1401532ec]
movaps xmm3, xmm2
movss xmm1, dword [0x1401532b0]
mov rcx, rax
call fcn.140047730
mov rcx, qword [0x140174ea0]
mov rax, qword [rcx + 0x4000]
mov byte [rax + 0xc0], 1
mov rax, qword [rcx + 0x4000]
cmp byte [rax + 0xc3], 0
jne 0x14004a2cd
mov qword [rbp - 0x39], 0
movaps xmm1, xmm6
lea rcx, [rbp - 0x39]
call fcn.140073780
call fcn.14006ff70
call fcn.14006a390
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.140071640
test al, al
je 0x14004a3d0
xor ecx, ecx
call fcn.140066b50
test al, al
je 0x14004a3d0
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
movdqa xmm1, xmmword [0x140153520]
movdqu xmmword [rbp - 0x21], xmm1
mov byte [rbp - 0x31], 0
mov dword [rbp - 0x39], 0x17
lea rbx, [0x14016e708]
lea rdi, [0x14016e71d]
nop word [rax + rax]
movzx r9d, byte [rbx]
xor r9b, 0x70
mov rcx, qword [rbp - 0x21]
mov rdx, qword [rbp - 0x19]
cmp rcx, rdx
jae 0x14004a365
lea rax, [rcx + 1]
mov qword [rbp - 0x21], rax
lea rax, [rbp - 0x31]
cmp rdx, 0xf
cmova rax, qword [rbp - 0x31]
mov byte [rax + rcx], r9b
mov byte [rax + rcx + 1], 0
jmp 0x14004a36e
lea rcx, [rbp - 0x31]
call fcn.1400077b0
inc rbx
cmp rbx, rdi
jne 0x14004a330
lea rbx, [rbp - 0x31]
cmp qword [rbp - 0x19], 0xf
cmova rbx, qword [rbp - 0x31]
lea rdx, [rbp - 0x11]
lea rcx, [0x14016e6a8]
call fcn.14000a0e0
lea rdx, [rbp - 0x11]
cmp qword [rbp + 7], 0xf
cmova rdx, qword [rbp - 0x11]
mov dword [rsp + 0x28], 0xa
mov qword [rsp + 0x20], rsi
xor r9d, r9d
mov r8, rbx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea rcx, [rbp - 0x11]
call fcn.140007360
nop
lea rcx, [rbp - 0x31]
call fcn.140007360
call fcn.140073d20
nop
lea rcx, [rbp + 0xf]
call fcn.140007360
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400c4790
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
ret