Function at 0x1400b4aa0
Capabilities:
Accept command line arguments
Create process on windows
Set environment variable

Disassembly:
endbr64
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x300
lea rsi, [0x1400bb050]
call fcn.14000a890
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleCP]
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov rbx, qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov rdx, rsi
lea rcx, [0x1400bb054]
call rbx
mov rdx, rsi
lea rcx, str.ENABLE_CP_UTF8
call rbx
mov rdx, rsi
lea rsi, [rsp + 0xf0]
lea rcx, str.ENABLE_HANDLING_VIRTUAL_TERMINAL_PROCESSING
call rbx
xor ecx, ecx
mov r8d, 0x104
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x1400b4c8f
mov rcx, rsi
call sub.msvcrt.dll_wcslen
mov rcx, rax
test rax, rax
je 0x1400b4b4c
lea rdx, [rax - 1]
nop dword [rax + rax]
mov rbx, rdx
lea rdx, [rdx - 1]
cmp word [rsi + rbx*2], 0x5c
je 0x1400b4b4e
cmp rdx, 0xffffffffffffffff
jne 0x1400b4b38
xor ebx, ebx
lea rbp, str._cli.exe
mov rdi, rcx
mov rcx, rbp
sub rdi, rbx
call sub.msvcrt.dll_wcslen
cmp rdi, rax
jb 0x1400b4e03
sub rdi, rax
mov rcx, rdi
test rax, rax
jne 0x1400b4dba
cmp rcx, 0xffffffffffffffff
je 0x1400b4e03
add rbx, rcx
lea rdx, str..exe
lea rbp, [rsp + 0x60]
add rbx, rbx
lea r12, [rsp + 0x80]
lea rcx, [rsi + rbx]
call sub.msvcrt.dll_wcscpy
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x84]
mov ecx, 0x19
mov rdi, rdx
mov rbx, rax
xor eax, eax
rep stosd dword [rdi], eax
mov ecx, 6
mov rdi, rbp
mov dword [rsp + 0x80], 0x68
rep stosd dword [rdi], eax
mov rdi, qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff5
call rdi
mov ecx, 0xfffffff4
mov qword [rsp + 0xd8], rax
call rdi
mov ecx, 0xfffffff6
mov qword [rsp + 0xe0], rax
call rdi
xor edx, edx
xor r9d, r9d
xor r8d, r8d
or dword [rsp + 0xbc], 0x100
mov rcx, rsi
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdx
mov rdx, rbx
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x48], rbp
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400b4cec
xor eax, eax
mov rcx, qword [rsp + 0x60]
or edx, 0xffffffff
mov dword [rsp + 0x50], eax
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov eax, dword [rsp + 0x50]
add rsp, 0x300
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
mov rsi, qword [0x1400c1080]
mov r8d, 0x2d
lea rdx, str.Unable_to_determine_wrapper_executable_path:
mov rcx, rsi
call fcn.1400ae450
call fcn.14009aca0
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [rsp + 0x80]
mov rcx, rsi
mov qword [rsp + 0x88], rbx
mov dword [rsp + 0x80], eax
call fcn.1400b1dc0
mov edx, 0xa
mov rcx, rax
call fcn.1400b1d20
mov eax, 1
jmp 0x1400b4c81
mov rbp, qword [0x1400c1080]
mov r8d, 0x22
lea rdx, str.Unable_to_launch_main_executable:
mov rcx, rbp
call fcn.1400ae450
call fcn.14009aca0
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [rsp + 0x50]
mov rcx, rbp
mov qword [rsp + 0x58], rdi
mov dword [rsp + 0x50], eax
lea rdi, str.___assumed_path:
call fcn.1400b1dc0
mov edx, 0xa
mov rcx, rax
call fcn.1400b1d20
mov rcx, rdi
call sub.msvcrt.dll_wcslen
mov rdx, rdi
mov rdi, qword [0x1400c10c0]
mov r8, rax
mov rcx, rdi
call fcn.1400ae850
mov rcx, rsi
call sub.msvcrt.dll_wcslen
mov rdx, rsi
mov rcx, rdi
lea rsi, str.___assumed_command_line:
mov r8, rax
call fcn.1400ae850
mov edx, 0xa
mov rcx, rdi
call fcn.140001630
mov rcx, rsi
call sub.msvcrt.dll_wcslen
mov rdx, rsi
mov rcx, rdi
mov r8, rax
call fcn.1400ae850
mov rdx, rbx
mov rcx, rdi
call fcn.1400b1fc0
mov edx, 0xa
mov rcx, rax
call fcn.140001630
jmp 0x1400b4ce5
lea r8, [rbx + rdi]
add r8, r8
add r8, rsi
nop dword [rax]
cmp r8, rbp
je 0x1400b4b7b
xor edx, edx
jmp 0x1400b4de5
add rdx, 1
cmp rax, rdx
je 0x1400b4b7b
movzx edi, word [rbp + rdx*2]
cmp word [r8 + rdx*2], di
je 0x1400b4dd8
lea rdx, [rcx - 1]
sub r8, 2
test rcx, rcx
je 0x1400b4e03
mov rcx, rdx
jmp 0x1400b4dc8
mov rcx, qword [0x1400c1080]
lea rdx, str.Unable_to_determine_main_executable_path:_unexpected_wrapper_executable_name_n
call fcn.1400b1c10
jmp 0x1400b4ce5