Function at 0x140008cb0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
xor r13d, r13d
xor eax, eax
mov qword [rbp + 0x5f], r13
xorps xmm0, xmm0
mov qword [rbp - 0x59], rax
mov r12d, r9d
mov r14, r8
mov edi, r13d
movups xmmword [rbp - 0x69], xmm0
test rdx, rdx
jne 0x140008d06
lea ecx, [rax + 0x57]
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop dword [rax + rax]
xor eax, eax
jmp 0x140008f2e
test r14, r14
je 0x140008d0e
mov dword [r8], r13d
mov rsi, qword [rbp + 0x7f]
test rsi, rsi
je 0x140008d1a
mov qword [rsi], r13
test rcx, rcx
mov qword [rsp + 0x20], rdx
lea r8, [0x140028e80]
mov r9, r8
lea rax, [0x14002a780]
cmovne r8, rcx
lea rdx, str._s_s_s
cmovne r9, rax
lea rcx, [rbp + 0x5f]
call fcn.1400092a0
mov ebx, eax
test eax, eax
js 0x140008e80
mov rcx, qword [rbp + 0x5f]
call fcn.14000834c
mov rdi, rax
test rax, rax
je 0x140008d6c
cmp r13w, word [rax]
jne 0x140008dab
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
jns 0x140008da6
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x140008dab
mov ebx, 0x80004005
test ebx, ebx
js 0x140008e80
xor edx, edx
lea rcx, [rbp - 0x45]
lea r8d, [rdx + 0x64]
call sub.msvcrt.dll_memset
lea rax, [rbp - 0x69]
mov dword [rbp - 0x49], 0x68
mov qword [rsp + 0x48], rax
xor r9d, r9d
lea rax, [rbp - 0x49]
xor r8d, r8d
mov qword [rsp + 0x40], rax
mov rdx, rdi
mov qword [rsp + 0x38], r13
xor ecx, ecx
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], r13d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
nop dword [rax + rax]
test eax, eax
jne 0x140008e4c
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
jns 0x140008e47
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
movzx ebx, ax
or ebx, 0x80070000
test eax, eax
cmovle ebx, eax
jmp 0x140008e4c
mov ebx, 0x80004005
test ebx, ebx
js 0x140008e80
test r14, r14
je 0x140008e80
test r12d, r12d
je 0x140008e80
mov rcx, qword [rbp - 0x69]
mov edx, r12d
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x69]
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x61]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140008e9a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
test ebx, ebx
js 0x140008eac
test rsi, rsi
je 0x140008eac
mov rax, qword [rbp - 0x69]
mov qword [rsi], rax
jmp 0x140008ec6
mov rcx, qword [rbp - 0x69]
lea rax, [rcx - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140008ec6
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop dword [rax + rax]
cmp qword [rbp + 0x5f], r13
je 0x140008eed
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, qword [rbp + 0x5f]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
test rdi, rdi
je 0x140008f12
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
movzx ecx, bx
test ebx, ebx
cmovns ecx, r13d
call qword [sym.imp.KERNEL32.dll_SetLastError]
nop dword [rax + rax]
not ebx
shr ebx, 0x1f
mov eax, ebx
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret