Function at 0x140002350
Capabilities:
Check mutex on windows
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x106b0]
mov eax, 0x107b0
call fcn.14000aff0
sub rsp, rax
mov rax, qword [0x140042060]
xor rax, rsp
mov qword [rbp + 0x106a0], rax
xor r13d, r13d
mov qword [rbp + 0x148], 0xf
mov rsi, r8
mov qword [rbp + 0x140], r13
lea rdx, str.GlobalD14718B7_BC31_4F09_9E3C_75D933967967
mov byte [rbp + 0x130], r13b
lea rcx, [rbp + 0x130]
lea r8d, [r13 + 0x2d]
call fcn.140006250
cmp qword [rbp + 0x148], 0x10
lea r8, [rbp + 0x130]
lea edx, [r13 + 1]
mov ecx, 0x1f0003
cmovae r8, qword [rbp + 0x130]
call qword [sym.imp.KERNEL32.dll_OpenSemaphoreA]
mov rbx, rax
test rax, rax
je 0x140002451
lea r8, [rsp + 0x58]
mov dword [rsp + 0x58], r13d
lea edx, [r13 + 1]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
test eax, eax
je 0x140002451
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
movdqa xmm0, xmmword [0x14003d660]
lea r8d, [r13 + 0x37]
lea rdx, str.Tried_launching_but_failed_because_of_installation_lock
mov word [rbp + 0x30], r13w
lea rcx, [rbp + 0x30]
movdqu xmmword [rbp + 0x40], xmm0
call fcn.140006020
lea rcx, [rbp + 0x30]
call fcn.140001ef0
mov ebx, 0xd4
jmp 0x1400035b7
movups xmm0, xmmword [str.com_adobe_apps_cclibrary]
lea r8, [rbp + 0x270]
movzx eax, byte [0x14003d318]
movsd xmm1, qword [0x14003d310]
mov edx, 1
xor ecx, ecx
movsd qword [rbp + 0x280], xmm1
movups xmmword [rbp + 0x270], xmm0
mov byte [rbp + 0x288], al
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov qword [rsp + 0x60], rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0xb7
cmp eax, ebx
jne 0x1400024da
movdqa xmm0, xmmword [0x14003d660]
lea rdx, str.Tried_launching_but_failed_because_already_running
mov r8d, 0x32
mov word [rbp + 0x30], r13w
lea rcx, [rbp + 0x30]
movdqu xmmword [rbp + 0x40], xmm0
call fcn.140006020
lea rcx, [rbp + 0x30]
call fcn.140001ef0
jmp 0x1400035b7
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateJobObjectW]
xorps xmm0, xmm0
lea r8, [rbp + 0x1b0]
mov r9d, 0x90
mov qword [rsp + 0x58], rax
movaps xmmword [rbp + 0x1c0], xmm0
mov edx, 9
mov rcx, rax
mov dword [rbp + 0x1c0], 0x3000
movaps xmmword [rbp + 0x1b0], xmm0
movaps xmmword [rbp + 0x1d0], xmm0
movaps xmmword [rbp + 0x1e0], xmm0
movaps xmmword [rbp + 0x1f0], xmm0
movaps xmmword [rbp + 0x200], xmm0
movaps xmmword [rbp + 0x210], xmm0
movaps xmmword [rbp + 0x220], xmm0
movaps xmmword [rbp + 0x230], xmm0
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov r8d, 0x104
lea rdx, [rbp + 0x490]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov edi, 7
mov qword [rbp + 0xc0], r13
mov rbx, 0xffffffffffffffff
mov qword [rbp + 0xc8], rdi
mov r8, rbx
mov word [rbp + 0xb0], r13w
lea rax, [rbp + 0x490]
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], r13w
jne 0x1400025a0
lea rdx, [rbp + 0x490]
lea rcx, [rbp + 0xb0]
call fcn.140006020
mov r12, qword [rbp + 0xc8]
lea rdi, [rbp + 0xb0]
mov r15, qword [rbp + 0xb0]
cmp r12, 8
mov r14, qword [rbp + 0xc0]
mov r9d, pe_nt_image_headers64
cmovae rdi, r15
test r14, r14
je 0x1400026b2
mov r8d, r9d
lea rcx, [rbp + 0x290]
xor edx, edx
call fcn.14000cce0
lea rcx, [0x14003d388]
mov r9d, pe_nt_image_headers64
lea rdx, [0x14003d38a]
movzx eax, word [rcx]
cmp ax, r9w
jae 0x140002663
movzx eax, al
add rcx, 2
mov byte [rbp + rax + 0x290], 1
cmp rcx, rdx
jne 0x140002615
lea rcx, [r14 - 1]
mov rax, rbx
cmp rcx, rbx
cmovb rax, rcx
lea r8, [rdi + rax*2]
movzx eax, word [r8]
cmp ax, r9w
jae 0x140002658
cmp byte [rbp + rax + 0x290], r13b
jne 0x1400026aa
cmp r8, rdi
je 0x1400026b2
sub r8, 2
jmp 0x140002644
lea rcx, [r14 - 1]
mov rax, rbx
cmp rcx, rbx
cmovb rax, rcx
lea r8, [rdi + rax*2]
nop word [rax + rax]
movzx edx, word [r8]
lea rax, [0x14003d388]
mov ecx, 1
cmp word [rax], dx
je 0x1400026aa
add rax, 2
sub rcx, 1
jne 0x140002690
cmp r8, rdi
je 0x1400026b2
sub r8, 2
jmp 0x140002680
sub r8, rdi
sar r8, 1
jmp 0x1400026b5
mov r8, rbx
cmp r14, r8
mov qword [rbp + 0xa0], r13
lea rdx, [rbp + 0xb0]
mov word [rbp + 0x90], r13w
cmovb r8, r14
lea rcx, [rbp + 0x90]
cmp r12, 8
mov edi, 7
mov qword [rbp + 0xa8], rdi
cmovae rdx, r15
call fcn.140006020
mov qword [rbp + 0xe0], r13
mov r14, r13
mov qword [rbp + 0xe8], rdi
mov word [rbp + 0xd0], r13w
test rsi, rsi
je 0x140002768
mov rax, rbx
inc rax
cmp byte [rsi + rax], r13b
jne 0x140002713
mov r9, rsi
mov qword [rsp + 0x20], rax
mov r8d, pe_nt_image_headers64
lea rdx, [rbp + 0x290]
lea rcx, [rbp - 0x68]
call fcn.140013e54
lea rax, [rbp + 0x290]
inc rbx
cmp word [rax + rbx*2], r13w
jne 0x140002741
mov r8, rbx
lea rdx, [rbp + 0x290]
lea rcx, [rbp + 0xd0]
call fcn.140006020
mov r14, qword [rbp + 0xe0]
mov r15d, 0x22
lea r8, [rbp + 0x90]
mov edx, r15d
lea rcx, [rbp + 0x30]
call fcn.140007a60
mov rbx, rax
mov rax, qword [rax + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rax, rdx
jae 0x1400027af
lea rcx, [rax + 1]
mov qword [rbx + 0x10], rcx
mov rcx, rbx
cmp rdx, 8
jb 0x1400027a5
mov rcx, qword [rbx]
mov esi, 0x5c
mov dword [rcx + rax*2], esi
jmp 0x1400027bf
mov esi, 0x5c
mov rcx, rbx
mov r9d, esi
call fcn.140009200
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], rdi
mov word [rbx], r13w
mov r8, qword [rbp + 0x68]
mov rdx, qword [rbp + 0x60]
mov rax, r8
sub rax, rdx
cmp rax, 4
jb 0x14000281c
cmp r8, 8
lea rcx, [rdx + 4]
mov qword [rbp + 0x60], rcx
lea rax, [rbp + 0x50]
cmovae rax, qword [rbp + 0x50]
movabs r8, 0x7300620069006c
mov qword [rax + rdx*2], r8
mov word [rax + rcx*2], r13w
lea rax, [rbp + 0x50]
jmp 0x14000283a
lea r9, str.libs
mov qword [rsp + 0x20], 4
mov edx, 4
lea rcx, [rbp + 0x50]
call fcn.140008790
movups xmm1, xmmword [rax + 0x10]
movups xmm0, xmmword [rax]
mov qword [rax + 0x10], r13
movq rcx, xmm1
mov qword [rax + 0x18], rdi
movups xmmword [rbp + 0x80], xmm1
mov word [rax], r13w
psrldq xmm1, 8
movq rdx, xmm1
movups xmmword [rbp + 0x70], xmm0
cmp rcx, rdx
jae 0x14000288d
lea rax, [rcx + 1]
cmp rdx, 8
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x70]
cmovae rax, qword [rbp + 0x70]
mov dword [rax + rcx*2], 0x5c
jmp 0x140002899
mov r9d, esi
lea rcx, [rbp + 0x70]
call fcn.140009200
movups xmm1, xmmword [rbp + 0x80]
movups xmm0, xmmword [rbp + 0x70]
movq rcx, xmm1
movups xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
sub rax, rcx
movups xmmword [rbp + 0x20], xmm1
cmp rax, 8
jb 0x140002904
cmp qword [rbp + 0x28], 8
lea rdi, [rcx + 8]
lea rbx, [rbp + 0x10]
mov qword [rbp + 0x20], rdi
cmovae rbx, qword [rbp + 0x10]
lea rdx, str.node.exe
mov r8d, 0x10
lea rcx, [rbx + rcx*2]
call fcn.14000c6f0
mov word [rbx + rdi*2], r13w
lea rax, [rbp + 0x10]
mov edi, 7
jmp 0x140002922
lea r9, str.node.exe
mov qword [rsp + 0x20], 8
mov edx, 8
lea rcx, [rbp + 0x10]
call fcn.140008790
movups xmm1, xmmword [rax + 0x10]
movups xmm0, xmmword [rax]
mov qword [rax + 0x10], r13
movq rcx, xmm1
mov qword [rax + 0x18], rdi
movups xmmword [rbp + 0x80], xmm1
mov word [rax], r13w
psrldq xmm1, 8
movq rdx, xmm1
movups xmmword [rbp + 0x70], xmm0
cmp rcx, rdx
jae 0x140002972
lea rax, [rcx + 1]
cmp rdx, 8
mov qword [rbp + 0x80], rax
lea rax, [rbp + 0x70]
cmovae rax, qword [rbp + 0x70]
mov dword [rax + rcx*2], r15d
jmp 0x14000297e
mov r9d, r15d
lea rcx, [rbp + 0x70]
call fcn.140009200
movups xmm0, xmmword [rbp + 0x70]
mov rdx, qword [rbp + 0x28]
movups xmm1, xmmword [rbp + 0x80]
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x160], xmm1
cmp rdx, 8
jb 0x1400029d7
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029d2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003632
call fcn.14000aa70
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], rdi
mov word [rbp + 0x10], r13w
cmp rdx, 8
jb 0x140002a24
mov rcx, qword [rbp + 0x50]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a1f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003632
call fcn.14000aa70
mov rdx, qword [rbp + 0x48]
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], rdi
mov word [rbp + 0x50], r13w
cmp rdx, 8
jb 0x140002a71
mov rcx, qword [rbp + 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a6c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003632
call fcn.14000aa70
mov edx, r15d
lea r8, [rbp + 0x90]
lea rcx, [rbp + 0x240]
call fcn.140007a60
mov rbx, rax
mov rax, qword [rax + 0x10]
mov rdx, qword [rbx + 0x18]
cmp rax, rdx
jae 0x140002ab4
lea rcx, [rax + 1]
mov qword [rbx + 0x10], rcx
mov rcx, rbx
cmp rdx, 8
jb 0x140002aab
mov rcx, qword [rbx]
mov dword [rcx + rax*2], 0x5c
jmp 0x140002abf
mov r9d, esi
mov rcx, rbx
call fcn.140009200
movups xmm0, xmmword [rbx]
movups xmmword [rbp + 0x50], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp + 0x60], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], rdi
mov word [rbx], r13w
mov r8, qword [rbp + 0x68]
mov rdx, qword [rbp + 0x60]
mov rax, r8
sub rax, rdx
cmp rax, 2
jb 0x140002b15
lea rcx, [rdx + 2]
cmp r8, 8
mov qword [rbp + 0x60], rcx
lea rax, [rbp + 0x50]
cmovae rax, qword [rbp + 0x50]
mov dword [rax + rdx*2], 0x73006a
mov word [rax + rcx*2], r13w
lea rax, [rbp + 0x50]
jmp 0x140002b33
lea r9, [0x14003d3cc]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp + 0x50]
call fcn.140008790
movups xmm1, xmmword [rax + 0x10]
movups xmm0, xmmword [rax]
mov qword [rax + 0x10], r13
movq rcx, xmm1
mov qword [rax + 0x18], rdi
movups xmmword [rbp + 0x40], xmm1
mov word [rax], r13w
psrldq xmm1, 8
movq rdx, xmm1
movups xmmword [rbp + 0x30], xmm0
cmp rcx, rdx
jae 0x140002b80
lea rax, [rcx + 1]
cmp rdx, 8
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x30]
cmovae rax, qword [rbp + 0x30]
mov dword [rax + rcx*2], 0x5c
jmp 0x140002b8c
mov r9d, esi
lea rcx, [rbp + 0x30]
call fcn.140009200
movups xmm1, xmmword [rbp + 0x40]
movups xmm0, xmmword [rbp + 0x30]
movq rcx, xmm1
movups xmmword [rbp + 0x10], xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
sub rax, rcx
movups xmmword [rbp + 0x20], xmm1
cmp rax, 9
jb 0x140002bf4
cmp qword [rbp + 0x28], 8
lea rdi, [rcx + 9]
lea rbx, [rbp + 0x10]
mov qword [rbp + 0x20], rdi
cmovae rbx, qword [rbp + 0x10]
lea rdx, str.server.js
mov r8d, 0x12
lea rcx, [rbx + rcx*2]
call fcn.14000c6f0
mov word [rbx + rdi*2], r13w
lea rax, [rbp + 0x10]
mov edi, 7
jmp 0x140002c12
lea r9, str.server.js
mov qword [rsp + 0x20], 9
mov edx, 9
lea rcx, [rbp + 0x10]
call fcn.140008790
movups xmm1, xmmword [rax + 0x10]
movups xmm0, xmmword [rax]
mov qword [rax + 0x10], r13
movq rcx, xmm1
mov qword [rax + 0x18], rdi
movups xmmword [rbp + 0x40], xmm1
mov word [rax], r13w
psrldq xmm1, 8
movq rdx, xmm1
movups xmmword [rbp + 0x30], xmm0
cmp rcx, rdx
jae 0x140002c5c
lea rax, [rcx + 1]
cmp rdx, 8
mov qword [rbp + 0x40], rax
lea rax, [rbp + 0x30]
cmovae rax, qword [rbp + 0x30]
mov dword [rax + rcx*2], r15d
jmp 0x140002c68
mov r9d, r15d
lea rcx, [rbp + 0x30]
call fcn.140009200
movups xmm0, xmmword [rbp + 0x30]
mov rdx, qword [rbp + 0x28]
movups xmm1, xmmword [rbp + 0x40]
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm1
cmp rdx, 8
jb 0x140002cbe
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002cb9
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003638
call fcn.14000aa70
mov rdx, qword [rbp + 0x68]
mov qword [rbp + 0x20], r13
mov qword [rbp + 0x28], rdi
mov word [rbp + 0x10], r13w
cmp rdx, 8
jb 0x140002d0b
mov rcx, qword [rbp + 0x50]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d06
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003638
call fcn.14000aa70
mov rdx, qword [rbp + 0x258]
mov qword [rbp + 0x60], r13
mov qword [rbp + 0x68], rdi
mov word [rbp + 0x50], r13w
cmp rdx, 8
jb 0x140002d5e
mov rcx, qword [rbp + 0x240]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002d59
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003638
call fcn.14000aa70
mov eax, 0x20
test r14, r14
je 0x140002dd9
mov edx, eax
lea r8, [rbp + 0xd0]
lea rcx, [rbp + 0x240]
call fcn.140007a60
mov rdx, rax
lea rcx, [rbp + 0x110]
call fcn.1400061c0
mov rdx, qword [rbp + 0x258]
cmp rdx, 8
jb 0x140002dd2
mov rcx, qword [rbp + 0x240]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002dcd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000363e
call fcn.14000aa70
mov r14, qword [rbp + 0xe0]
xorps xmm0, xmm0
mov qword [rsp + 0x20], r13
xor eax, eax
movaps xmmword [rbp + 0x170], xmm0
mov qword [rbp], rax
lea r8, [rbp + 0x170]
lea rax, [0x14003d3d8]
movaps xmmword [rbp + 0x180], xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x48], rax
xor ecx, ecx
xor eax, eax
movaps xmmword [rbp + 0x190], xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x70], rax
mov r12d, r13d
movups xmmword [rbp - 0x80], xmm0
lea r9d, [rax + 0x40]
mov dword [rbp - 0x60], 0x68
lea edx, [rax + 2]
mov dword [rbp - 0x80], 0x18
movups xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x70], 1
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movaps xmmword [rbp + 0x1a0], xmm0
call qword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
test eax, eax
je 0x140002e6e
test dword [rbp + 0x180], 0x800
je 0x140002e74
mov r12d, 0x1000000
test r14, r14
je 0x140002eca
cmp qword [rbp + 0xe8], 8
lea r8, [rbp + 0xd0]
mov rdx, r14
lea rcx, str.__debug
cmovae r8, qword [rbp + 0xd0]
cmp r14, 7
cmova rdx, rdi
test rdx, rdx
je 0x140002ec4
sub r8, rcx
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140002eca
add rcx, 2
sub rdx, 1
jne 0x140002eb0
cmp r14, 7
je 0x140002ecf
bts r12d, 0x1b
xor edx, edx
mov dword [rsp + 0x50], r13d
mov r8d, 0x10000
lea rcx, [rbp + 0x6a0]
call fcn.14000cce0
mov rsi, qword [rbp + 0x80]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, rsi
cmp rax, 1
jb 0x140003644
cmp qword [rbp + 0x88], 8
lea r13, [rbp + 0x150]
mov r15, qword [rbp + 0x70]
lea r14, [rsi + 1]
cmovae r13, r15
mov rbx, rdi
xor edx, edx
lea rdi, [rbp + 0x10]
mov qword [rbp + 0x20], rdx
mov qword [rbp + 0x28], rdx
cmp r14, 7
jbe 0x140002fc5
mov rbx, r14
or rbx, 7
cmp rbx, rcx
jbe 0x140002f54
mov rbx, rcx
lea rcx, [rdx - 2]
jmp 0x140002f83
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
movabs rax, 0x7fffffffffffffff
lea rcx, [rbx + 1]
cmp rcx, rax
ja 0x140003650
add rcx, rcx
cmp rcx, 0x1000
jb 0x140002faf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003650
mov rcx, rax
call fcn.14000aa34
test rax, rax
je 0x14000364a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002fc1
test rcx, rcx
je 0x140002fbe
call fcn.14000aa34
mov rdi, rax
jmp 0x140002fc1
mov rdi, rdx
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x28], rbx
mov rdx, r13
lea rbx, [rsi + rsi]
mov qword [rbp + 0x20], r14
mov r8, rbx
mov rcx, rdi
call fcn.14000c6f0
mov eax, 0x20
lea rdx, [rbp + 0x110]
mov word [rbx + rdi], ax
lea rcx, [rbp + 0x10]
xor esi, esi
mov word [rdi + r14*2], si
call fcn.1400061c0
mov edi, 7
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0xf0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x100], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov word [rax], si
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140003064
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000305f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000364a
call fcn.14000aa70
cmp qword [rbp + 0x108], 8
lea r8, [rbp + 0xf0]
mov edx, 0x8000
lea rcx, [rbp + 0x6a0]
cmovae r8, qword [rbp + 0xf0]
call fcn.140011480
cmp qword [rbp + 0xa8], 8
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x48], rcx
lea rax, [rbp + 0x90]
cmovae rax, qword [rbp + 0x90]
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x40], rcx
lea r8, [rbp - 0x80]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0x6a0]
mov qword [rsp + 0x30], rsi
xor r9d, r9d
mov dword [rsp + 0x28], r12d
xor ecx, ecx
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x14000325b
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
mov rcx, qword [rsp + 0x68]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x68]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov r8d, dword [rsp + 0x50]
lea r9, [rbp + 0x26a]
nop word [rax + rax]
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx eax, dx
shl ax, 2
lea ecx, [rax + rdx]
add cx, cx
sub r8w, cx
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x140003130
lea rax, [rbp + 0x26a]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rdi
mov word [rbp + 0x10], si
cmp r9, rax
je 0x140003191
lea r8, [rbp + 0x26a]
mov rdx, r9
sub r8, r9
lea rcx, [rbp + 0x10]
sar r8, 1
call fcn.140006020
mov r8d, 0x18
mov qword [rbp + 0x40], rsi
lea rdx, str.Process_exit_with_code:
mov qword [rbp + 0x48], rdi
lea rcx, [rbp + 0x30]
mov word [rbp + 0x30], si
call fcn.140006020
lea r9, [rbp + 0x10]
lea r8, [rbp + 0x30]
lea rcx, [rbp + 0x150]
call fcn.140008cd0
lea rcx, [rbp + 0x150]
call fcn.140001ef0
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x140003213
mov rcx, qword [rbp + 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000320e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000362c
call fcn.14000aa70
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140003393
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000338e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000362c
jmp 0x14000338e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov dword [rsp + 0x50], eax
lea r9, [rbp + 0x26a]
nop
sub r9, 2
mov eax, 0xcccccccd
mul r8d
shr edx, 3
movzx ecx, dx
shl cx, 2
lea eax, [rcx + rdx]
add ax, ax
sub r8w, ax
add r8w, 0x30
mov word [r9], r8w
mov r8d, edx
test edx, edx
jne 0x140003270
lea rax, [rbp + 0x26a]
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rdi
mov word [rbp + 0x10], si
cmp r9, rax
je 0x1400032d1
lea r8, [rbp + 0x26a]
mov rdx, r9
sub r8, r9
lea rcx, [rbp + 0x10]
sar r8, 1
call fcn.140006020
mov r8d, 0x22
mov qword [rbp + 0x40], rsi
lea rdx, str.Launch_Process_failed_with_error:
mov qword [rbp + 0x48], rdi
lea rcx, [rbp + 0x30]
mov word [rbp + 0x30], si
call fcn.140006020
lea r9, [rbp + 0x10]
lea r8, [rbp + 0x30]
lea rcx, [rbp + 0x150]
call fcn.140008cd0
lea rcx, [rbp + 0x150]
call fcn.140001ef0
mov rdx, qword [rbp + 0x48]
cmp rdx, 8
jb 0x140003353
mov rcx, qword [rbp + 0x30]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000334e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003656
call fcn.14000aa70
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140003393
mov rcx, qword [rbp + 0x10]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000338e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003656
call fcn.14000aa70
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, qword [rbp + 0x108]
mov ebx, dword [rsp + 0x50]
cmp rdx, 8
jb 0x140003409
mov rcx, qword [rbp + 0xf0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003404
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003626
call fcn.14000aa70
mov rdx, qword [rbp + 0x128]
mov qword [rbp + 0x100], rsi
mov qword [rbp + 0x108], rdi
mov word [rbp + 0xf0], si
cmp rdx, 8
jb 0x140003464
mov rcx, qword [rbp + 0x110]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000345f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003626
call fcn.14000aa70
mov rax, qword [rbp + 0x88]
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x128], rdi
mov word [rbp + 0x110], si
cmp rax, 8
jb 0x1400034bb
lea rdx, [rax*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x1400034b3
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003626
mov rcx, r15
call fcn.14000aa70
mov rax, qword [rbp + 0xe8]
cmp rax, 8
jb 0x140003501
mov rcx, qword [rbp + 0xd0]
lea rdx, [rax*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034fc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003626
call fcn.14000aa70
mov rdx, qword [rbp + 0xa8]
cmp rdx, 8
jb 0x140003547
mov rcx, qword [rbp + 0x90]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003542
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003626
call fcn.14000aa70
mov rdx, qword [rbp + 0xc8]
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0xa8], rdi
mov word [rbp + 0x90], si
cmp rdx, 8
jb 0x1400035a2
mov rcx, qword [rbp + 0xb0]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000359d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003626
call fcn.14000aa70
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0xc8], rdi
mov word [rbp + 0xb0], si
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x1400035f4
mov rcx, qword [rbp + 0x130]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035ef
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003626
call fcn.14000aa70
mov eax, ebx
mov rcx, qword [rbp + 0x106a0]
xor rcx, rsp
call fcn.14000aa10
lea r11, [rsp + 0x107b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140010b1c
int3
call fcn.140010b1c
int3
call fcn.140010b1c
int3
call fcn.140010b1c
int3
call fcn.140010b1c
int3
call fcn.1400011e0
int3
call fcn.140010b1c
int3
call fcn.1400011c0
int3
call fcn.140010b1c
int3