Function at 0x1400033d0
Capabilities:
Create process on windows
Terminate process

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0x78]
sub rsp, 0x178
mov rax, qword gs:[0x58]
mov r15, rcx
mov edx, dword [0x1400c6730]
mov ecx, 8
mov rdx, qword [rax + rdx*8]
mov eax, dword [rcx + rdx]
cmp dword [0x1400c660c], eax
jg 0x140003963
cmp byte [0x1400c6608], 0
jne 0x140003420
xor al, al
add rsp, 0x178
pop r15
pop rbp
ret
xorps xmm0, xmm0
mov qword [rsp + 0x170], rbx
xor eax, eax
mov qword [rsp + 0x160], rdi
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x158], r12
movups xmmword [rsp + 0x74], xmm0
mov qword [rbp - 0x4c], rax
movups xmmword [rbp - 0x7c], xmm0
mov dword [rbp - 0x44], eax
movups xmmword [rbp - 0x6c], xmm0
mov dword [rsp + 0x70], 0x68
movups xmmword [rbp - 0x5c], xmm0
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov rax, qword [rbp + 0x30]
xorps xmm0, xmm0
mov qword [rbp - 0x40], rax
mov rax, qword [rbp + 0x38]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp + 0x40]
mov qword [rbp - 0x30], rax
xor eax, eax
mov qword [rsp + 0x68], rax
mov rax, qword [r15]
movups xmmword [rsp + 0x58], xmm0
movsxd rcx, dword [rax + 4]
mov eax, 2
inc rcx
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140037f64
mov rdx, qword [r15]
mov r12, rax
mov r9, qword [rdx + 0x10]
movsxd r8, dword [rdx + 4]
add r9, rdx
je 0x1400034d7
add r8, r8
mov rdx, r9
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [r15]
movsxd rax, dword [rdx + 4]
xor edi, edi
mov qword [rsp + 0x168], rsi
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x150], r14
mov rdx, r12
xor ecx, ecx
mov word [r12 + rax*2], di
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x140003662
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001680
lea r14, [0x14003b290]
mov rcx, qword [rax]
mov r8d, dword [rcx + 4]
cmp rcx, r14
jne 0x14000355e
mov edx, edi
jmp 0x140003565
mov rdx, qword [rcx + 0x10]
add rdx, rcx
lea rcx, [rbp + 0xa8]
call fcn.140009ad0
mov rax, qword [rbp + 0xa8]
mov rcx, qword [r15]
mov rsi, qword [rax + 0x10]
mov r8d, dword [rcx + 4]
add rsi, rax
cmp rcx, r14
je 0x140003592
mov rdi, qword [rcx + 0x10]
add rdi, rcx
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.140009ad0
mov rax, qword [rbp + 0xa0]
mov ecx, 2
mov rbx, qword [rax + 0x10]
add rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rsi
lea rdx, str.Unable_to_execute___s_:__s_n
mov rcx, rax
mov r8, rbx
call fcn.140003c30
mov rcx, qword [rbp + 0xa0]
mov eax, dword [rcx]
test eax, eax
je 0x1400035f1
cmp eax, 0xffffffff
je 0x1400035ff
dec eax
mov dword [rcx], eax
cmp eax, 0
jne 0x1400035ff
mov rcx, qword [rbp + 0xa0]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.140003e30
mov rcx, qword [rbp + 0xa8]
mov eax, dword [rcx]
test eax, eax
je 0x140003621
cmp eax, 0xffffffff
je 0x14000362f
dec eax
mov dword [rcx], eax
cmp eax, 0
jne 0x14000362f
mov rcx, qword [rbp + 0xa8]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.140003e30
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x14000364d
cmp eax, 0xffffffff
je 0x14000365b
dec eax
mov dword [rcx], eax
cmp eax, 0
jne 0x14000365b
mov rcx, qword [rsp + 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.140003e30
xor bl, bl
jmp 0x140003925
mov rcx, qword [rsp + 0x58]
mov edx, 0x7530
mov dword [rbp + 0x98], 1
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea r14, [0x14003b290]
test eax, eax
je 0x140003860
cmp eax, 0x102
je 0x1400037ca
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, [rsp + 0x50]
call fcn.140001680
mov rcx, qword [rax]
mov r8d, dword [rcx + 4]
cmp rcx, r14
jne 0x1400036b9
mov rdx, rdi
jmp 0x1400036c0
mov rdx, qword [rcx + 0x10]
add rdx, rcx
lea rcx, [rbp + 0xa8]
call fcn.140009ad0
mov rax, qword [rbp + 0xa8]
mov rcx, qword [r15]
mov rsi, qword [rax + 0x10]
mov r8d, dword [rcx + 4]
add rsi, rax
cmp rcx, r14
jne 0x1400036eb
mov rdx, rdi
jmp 0x1400036f2
mov rdx, qword [rcx + 0x10]
add rdx, rcx
lea rcx, [rbp + 0xa0]
call fcn.140009ad0
mov rax, qword [rbp + 0xa0]
mov ecx, 2
mov rbx, qword [rax + 0x10]
add rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rsi
lea rdx, str.Error_waiting_for___s_:__s_n
mov rcx, rax
mov r8, rbx
call fcn.140003c30
mov rcx, qword [rbp + 0xa0]
mov eax, dword [rcx]
test eax, eax
je 0x14000374d
cmp eax, 0xffffffff
je 0x14000375b
dec eax
mov dword [rcx], eax
cmp eax, edi
jne 0x14000375b
mov rcx, qword [rbp + 0xa0]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.140003e30
mov rcx, qword [rbp + 0xa8]
mov eax, dword [rcx]
test eax, eax
je 0x14000377c
cmp eax, 0xffffffff
je 0x14000378a
dec eax
mov dword [rcx], eax
cmp eax, edi
jne 0x14000378a
mov rcx, qword [rbp + 0xa8]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.140003e30
mov rcx, qword [rsp + 0x50]
mov eax, dword [rcx]
test eax, eax
je 0x1400037a7
cmp eax, 0xffffffff
je 0x1400037b5
dec eax
mov dword [rcx], eax
cmp eax, edi
jne 0x1400037b5
mov rcx, qword [rsp + 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.140003e30
mov rcx, qword [rsp + 0x58]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x140003872
mov rcx, qword [r15]
mov r8d, dword [rcx + 4]
cmp rcx, r14
jne 0x1400037db
mov rdx, rdi
jmp 0x1400037e2
mov rdx, qword [rcx + 0x10]
add rdx, rcx
lea rcx, [rbp + 0xa0]
call fcn.140009ad0
mov rax, qword [rbp + 0xa0]
mov ecx, 2
mov rbx, qword [rax + 0x10]
add rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9, rbx
lea rdx, str.Timed_out_after__d_ms_out_waiting_for___s_._n
mov rcx, rax
mov r8d, 0x7530
call fcn.140003c30
mov rcx, qword [rbp + 0xa0]
mov eax, dword [rcx]
test eax, eax
je 0x140003840
cmp eax, 0xffffffff
je 0x14000384e
dec eax
mov dword [rcx], eax
cmp eax, edi
jne 0x14000384e
mov rcx, qword [rbp + 0xa0]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.140003e30
mov rcx, qword [rsp + 0x58]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x140003872
mov rcx, qword [rsp + 0x58]
lea rdx, [rbp + 0x98]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [rbp + 0x98]
test esi, esi
je 0x140003922
mov rcx, qword [r15]
mov r8d, dword [rcx + 4]
cmp rcx, r14
je 0x1400038a9
mov rdi, qword [rcx + 0x10]
add rdi, rcx
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.140009ad0
mov rax, qword [rbp + 0xa0]
mov ecx, 2
mov rbx, qword [rax + 0x10]
add rbx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r9d, esi
mov dword [rsp + 0x20], esi
mov rcx, rax
lea rdx, str.__s__returned_exit_code:__lu__0x_lx__n
mov r8, rbx
call fcn.140003c30
mov rcx, qword [rbp + 0xa0]
mov eax, dword [rcx]
test eax, eax
je 0x14000390c
cmp eax, 0xffffffff
je 0x14000391a
dec eax
mov dword [rcx], eax
cmp eax, 0
jne 0x14000391a
mov rcx, qword [rbp + 0xa0]
mov edx, 1
lea r8d, [rdx + 7]
call fcn.140003e30
mov esi, dword [rbp + 0x98]
test esi, esi
sete bl
mov rcx, r12
call fcn.140037f6c
mov r14, qword [rsp + 0x150]
movzx eax, bl
mov rbx, qword [rsp + 0x170]
mov r12, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x168]
add rsp, 0x178
pop r15
pop rbp
ret
lea rcx, [0x1400c660c]
call fcn.1400380cc
cmp dword [0x1400c660c], 0xffffffff
jne 0x14000340a
call fcn.140001790
lea rcx, [0x1400c660c]
mov byte [0x1400c6608], al
call fcn.14003806c
jmp 0x14000340a