Function at 0x14000f8e0
Capabilities:
Create process on windows
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xe0
mov esi, r8d
mov rbx, rdx
xor r14d, r14d
mov qword [rbp + 0x7f], r14
mov rdi, 0xffffffffffffffff
mov r8, rdi
lea rdx, [0x14008f070]
lea rcx, [rbp + 0x7f]
call fcn.140007510
test al, al
je 0x14000fb44
mov rax, qword [rbp + 0x7f]
test rax, rax
je 0x14000f96c
mov rcx, qword [rax - 0xc]
test rcx, rcx
je 0x14000f96c
cmp dword [rax - 0x10], 0xabcd
jne 0x14000fb44
cmp dword [rax - 4], 0xabcd
jne 0x14000fb44
mov rcx, qword [rcx + 0x10]
cmp dword [rax + rcx*2 + 2], 0xabcd
jne 0x14000fb44
mov rdx, rbx
lea rcx, [rbp + 0x7f]
call fcn.140007130
lea rdx, [0x14008f070]
lea rcx, [rbp + 0x7f]
call fcn.140007130
mov rdx, rbx
lea rcx, str._Script_running_exe:_szFile____s__n
call fcn.14000bc30
lea rdx, [0x14008d480]
mov rbx, qword [rbp + 0x7f]
test rbx, rbx
cmovne rdx, rbx
lea rcx, str.Script__s_n
call fcn.14000bc30
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x25], xmm0
movups xmmword [rbp - 0x15], xmm0
movups xmmword [rbp - 5], xmm0
movups xmmword [rbp + 0xb], xmm0
movups xmmword [rbp + 0x1b], xmm0
movups xmmword [rbp + 0x2b], xmm0
mov dword [rbp + 0x3b], eax
mov dword [rbp - 0x29], 0x68
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], rax
test rbx, rbx
jne 0x14000f9f9
lea edx, [rbx + 0x40]
lea rcx, [rbp + 0x7f]
call fcn.140007630
mov rbx, qword [rbp + 0x7f]
lea rax, [rbp - 0x49]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14000fa52
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov edx, eax
lea rcx, str.Script_failed_0x_x_CreateProcess_n
call fcn.14000bc30
jmp 0x14000fae8
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x14000fa61
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x49]
test rcx, rcx
je 0x14000fadb
imul edx, esi, 0x3e8
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x49]
test eax, eax
je 0x14000faa6
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
lea rcx, str.Script_failed__1_Timeout_n
call fcn.14000bc30
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, 0x5b4
jmp 0x14000fae8
lea rdx, [rbp + 0x67]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x14000fabd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x67], eax
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [rbp + 0x67]
lea rcx, str.Script_result_0x_x_n
call fcn.14000bc30
mov edi, dword [rbp + 0x67]
jmp 0x14000fae8
lea rcx, str.Script_failed__1_Invalid_handles_n
call fcn.14000bc30
nop
test rbx, rbx
je 0x14000fb16
mov rax, qword [rbx - 0xc]
test rax, rax
je 0x14000fb16
cmp dword [rbx - 0x10], 0xabcd
jne 0x14000fb3a
cmp dword [rbx - 4], 0xabcd
jne 0x14000fb3a
mov rax, qword [rax + 0x10]
cmp dword [rbx + rax*2 + 2], 0xabcd
jne 0x14000fb3a
lea rcx, [rbp + 0x7f]
call fcn.14000c390
nop
mov eax, edi
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
xor edx, edx
xor ecx, ecx
call fcn.14004aaec
nop
xor edx, edx
xor ecx, ecx
call fcn.14004aaec
int3