Function at 0x1400012d0
Capabilities:
Create process on windows
Read file on windows

Disassembly:
mov r8d, 1
jmp 0x1400012d0
push rbp
push rsi
push rdi
push r12
lea rbp, [rsp - 0x648]
sub rsp, 0x748
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rbp + 0x620], rax
mov dword [rsp + 0x64], r8d
mov r12d, ecx
mov qword [rsp + 0x78], rdx
mov r8d, pe_nt_image_headers64
mov dword [rsp + 0x60], ecx
lea rdx, [rbp + 0x10]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor esi, esi
lea rcx, [rbp + 0x10]
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
lea r8d, [rsi + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
xor r9d, r9d
lea rdx, [rbp + 0x10]
mov rcx, rax
mov r8d, pe_nt_image_headers64
call qword [sym.imp.KERNEL32.dll_GetFinalPathNameByHandleA]
lea rcx, [rbp + 0x10]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], sil
jne 0x140001367
lea rcx, [rbp + 0x10]
add rax, rcx
lea rcx, [rbp + 0x10]
cmp rax, rcx
jbe 0x140001394
cmp byte [rax], 0x2e
je 0x140001394
mov byte [rax], sil
lea rcx, [rbp + 0x10]
dec rax
cmp rax, rcx
ja 0x140001380
lea rcx, [rbp + 0x10]
mov byte [rax], sil
dec rcx
nop
cmp byte [rcx + 1], sil
lea rcx, [rcx + 1]
jne 0x1400013a0
movsd xmm0, qword [str._script.pyw]
xor edx, edx
mov eax, dword [0x140003338]
movsd qword [rcx], xmm0
mov dword [rcx + 8], eax
lea rcx, [rbp + 0x10]
call sub.api_ms_win_crt_stdio_l1_1_0.dll__open
mov edi, eax
cmp eax, 0xffffffff
jne 0x1400013f5
lea ecx, [rax + 3]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea r8, [rbp + 0x10]
lea rdx, str.Cannot_open__s_n
call fcn.140001040
lea eax, [rdi + 3]
jmp 0x1400019a2
mov qword [rsp + 0x780], rbx
lea rdx, [rbp + 0x110]
mov qword [rsp + 0x738], r14
mov r8d, pe_nt_image_headers64
mov ecx, edi
mov qword [rsp + 0x730], r15
call sub.api_ms_win_crt_stdio_l1_1_0.dll__read
movsxd rcx, eax
lea rbx, [rbp + 0x110]
add rbx, rcx
mov ecx, edi
call sub.api_ms_win_crt_stdio_l1_1_0.dll__close
lea rax, [rbp + 0x110]
dec rax
nop
inc rax
cmp rax, rbx
jae 0x140001459
movzx ecx, byte [rax]
test cl, cl
je 0x140001459
cmp cl, 0xa
je 0x140001459
cmp cl, 0xd
jne 0x140001440
mov r8d, 2
mov byte [rax], sil
lea rdx, [0x140003350]
lea rcx, [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1400014a3
mov eax, dword [0x140003360]
movsd xmm0, qword [str._python.exe]
mov dword [rbp + 0x118], eax
movzx eax, byte [0x140003364]
mov byte [rbp + 0x11c], al
movsd qword [rbp + 0x110], xmm0
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x112]
call fcn.1400010a0
mov r14, rax
mov rbx, qword [rax]
mov rcx, rbx
movzx edx, byte [rbx]
test dl, dl
je 0x1400014da
mov r8, rcx
inc rcx
cmp dl, 0x2f
jne 0x1400014d3
mov byte [r8], 0x5c
movzx edx, byte [rcx]
test dl, dl
jne 0x1400014c4
lea rax, [rbp + 0x310]
mov rcx, rbx
lea r9, [rbp + 0x410]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x210]
lea rdx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath]
cmp byte [rsp + 0x50], sil
jne 0x1400015e1
cmp byte [rbp + 0x210], 0x5c
je 0x1400015e1
lea rax, [rbp + 0x310]
lea r9, [rbp + 0x410]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x210]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x10]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath]
lea rcx, [rbp + 0x210]
mov rax, 0xffffffffffffffff
cmp byte [rcx + rax + 1], sil
lea rax, [rax + 1]
jne 0x140001551
movzx r8d, byte [rbp + rax + 0x20f]
lea rcx, [rbp + rax + 0x20f]
cmp r8b, 0x5c
jne 0x140001578
movzx r8d, byte [rcx - 1]
lea rax, [rcx - 1]
cmovne rax, rcx
cmp r8b, 0x5c
je 0x1400015a7
nop word [rax + rax]
lea rcx, [rbp + 0x210]
cmp rax, rcx
jb 0x1400015a7
mov byte [rax], sil
dec rax
cmp byte [rax], 0x5c
jne 0x140001590
mov r9, rbx
mov qword [rsp + 0x20], rsi
lea r8, [rbp + 0x210]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x510]
call qword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__makepath]
mov edx, 1
mov ecx, 0x104
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
lea rdx, [rbp + 0x510]
jmp 0x1400015f4
mov edx, 1
mov ecx, 0x104
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rdx, rbx
mov r8d, 0x104
mov rcx, rax
mov r15, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
test r15, r15
jne 0x140001633
mov rbx, qword [r14]
lea ecx, [r15 + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, rbx
lea rdx, str.Cannot_find_Python_executable__s_n
mov rcx, rax
call fcn.140001040
lea eax, [r15 + 2]
jmp 0x14000198a
mov edi, dword [rsp + 0x58]
mov edx, 8
mov qword [rsp + 0x740], r13
lea eax, [r12 + rdi]
movsxd r13, eax
mov qword [rsp + 0x68], r13
lea rcx, [r13 + 1]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov rcx, r15
mov qword [rsp + 0x58], rax
mov rbx, rax
call fcn.140001200
mov qword [rbx], rax
lea rsi, [rbx + 8]
cmp edi, 1
jle 0x140001699
lea rbx, [r14 + 8]
dec edi
nop dword [rax]
mov rcx, qword [rbx]
call fcn.140001200
mov qword [rsi], rax
lea rbx, [rbx + 8]
add rsi, 8
sub rdi, 1
jne 0x140001680
lea rax, [rbp + 0x10]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400016a4
lea eax, [rbx + rbx]
mov edx, 1
movsxd rcx, eax
add rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
xor r14d, r14d
movsxd r12, ebx
mov qword [rsp + 0x70], rax
mov ecx, r14d
mov byte [rax], 0x22
lea rdi, [rax + 1]
test ebx, ebx
jle 0x140001747
xor r13d, r13d
nop
movzx eax, byte [rbp + r14 + 0x10]
cmp al, 0x5c
jne 0x1400016ee
inc ecx
jmp 0x140001716
cmp al, 0x22
jne 0x140001713
test ecx, ecx
jle 0x14000170b
mov ebx, ecx
mov dl, 0x5c
mov r8d, ecx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
add rdi, rbx
mov ecx, r13d
mov byte [rdi], 0x5c
inc rdi
jmp 0x140001716
mov ecx, r13d
movzx eax, byte [rbp + r14 + 0x10]
inc r14
mov byte [rdi], al
inc rdi
cmp r14, r12
jl 0x1400016e0
mov r13, qword [rsp + 0x68]
test ecx, ecx
jle 0x140001744
mov ebx, ecx
mov dl, 0x5c
mov r8d, ecx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
add rdi, rbx
xor r14d, r14d
mov rax, qword [rsp + 0x70]
mov word [rdi], 0x22
movsxd rdi, dword [rsp + 0x60]
mov qword [rsi], rax
add rsi, 8
cmp rdi, 1
jle 0x140001788
mov r12, qword [rsp + 0x78]
mov ebx, 1
nop dword [rax]
mov rcx, qword [r12 + rbx*8]
call fcn.140001200
mov qword [rsi], rax
inc rbx
add rsi, 8
cmp rbx, rdi
jl 0x140001770
cmp dword [rsp + 0x64], 0
mov qword [rsi], r14
je 0x1400017c7
mov rdx, qword [rsp + 0x58]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_process_l1_1_0.dll__execv]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov r8, r15
lea rdx, str.Could_not_exec__s
mov rcx, rax
call fcn.140001040
mov eax, 2
jmp 0x140001982
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [r15 + rcx], 0
jne 0x1400017d0
mov r12, qword [rsp + 0x58]
add ecx, 2
cmp r13, 1
jle 0x140001815
mov r8d, 1
nop
mov rdx, qword [r12 + r8*8]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x140001800
inc ecx
inc r8
add ecx, eax
cmp r8, r13
jl 0x1400017f0
movsxd rcx, ecx
mov edx, 1
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov r8, r15
lea rdx, [0x140003328]
mov rcx, rax
mov rsi, rax
call fcn.1400019c0
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [r15 + rbx], 0
jne 0x140001840
cmp r13, 1
jle 0x140001896
mov edi, 1
nop word [rax + rax]
mov r8, qword [r12 + rdi*8]
lea rdx, [0x14000332c]
movsxd rcx, ebx
add rcx, rsi
call fcn.1400019c0
mov rcx, qword [r12 + rdi*8]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x140001881
inc ebx
inc rdi
add ebx, eax
cmp rdi, r13
jl 0x140001860
xorps xmm1, xmm1
mov dword [rsp + 0x50], r14d
xor eax, eax
mov dword [rbp - 0x60], 0x68
xorps xmm0, xmm0
mov qword [rbp - 0x70], rax
lea rcx, [0x140001010]
mov dword [rbp + 4], eax
movups xmmword [rbp - 0x80], xmm0
lea edx, [rax + 1]
movups xmmword [rbp - 0x5c], xmm1
movups xmmword [rbp - 0x4c], xmm1
movups xmmword [rbp - 0x3c], xmm1
movups xmmword [rbp - 0x2c], xmm1
movups xmmword [rbp - 0x1c], xmm1
movups xmmword [rbp - 0xc], xmm1
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea rax, [rbp - 0x80]
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor r8d, r8d
lea rax, [rbp - 0x60]
mov rdx, rsi
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140001935
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.failed_to_create_process._n
call fcn.140001040
jmp 0x14000197f
mov eax, dword [rbp - 0x70]
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x80]
mov dword [0x140005040], eax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x80]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x14000197a
lea ecx, [rax + 2]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
lea rdx, str.failed_to_get_exit_code_from_process._n
call fcn.140001040
jmp 0x14000197f
mov r14d, dword [rsp + 0x50]
mov eax, r14d
mov r13, qword [rsp + 0x740]
mov r14, qword [rsp + 0x738]
mov rbx, qword [rsp + 0x780]
mov r15, qword [rsp + 0x730]
mov rcx, qword [rbp + 0x620]
xor rcx, rsp
call fcn.140001ab0
add rsp, 0x748
pop r12
pop rdi
pop rsi
pop rbp
ret