Function at 0x1400cb370
Capabilities:
Create process on windows
Query environment variable
Resume thread

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x268
movaps xmmword [rsp + 0x250], xmm6
mov r12, r8
mov r15, rdx
mov r14, rcx
mov rax, qword [0x14020b038]
xor rax, rsp
mov qword [rsp + 0x248], rax
cmp byte [r8 + 0x21], 0
jne 0x1400cba57
movabs rbx, 0xaaaaaaaaaaaaaaaa
mov al, byte [0x14020d170]
xor esi, esi
test al, 0x19
mov byte [rsp + 0x67], al
je 0x1400cb42f
lea rdi, [rsp + 0x120]
mov rcx, rdi
call fcn.140082a30
call sub.KERNEL32.dll_GetCurrentThreadId
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
lea rdi, [0x14020d170]
lea r8, str.LaunchProcess
mov cl, 0x58
mov rdx, rdi
mov qword [rsp + 0x88], r8
xor r9d, r9d
call fcn.1400833b0
mov qword [rsp + 0x80], rax
jmp 0x1400cb441
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x88], rbx
xor edi, edi
lea r13, [rsp + 0x1b0]
mov qword [r13 + 0x10], rbx
movaps xmm6, xmmword [0x1401dfd10]
movaps xmmword [r13], xmm6
lea rdx, str.LaunchProcess
lea r8, str....._baseprocesslaunch_win.cc
lea rbp, [rsp + 0x120]
mov rcx, rbp
mov r9d, 0x125
call fcn.1400713b0
lea r8, [0x14021f49c]
mov rcx, r13
mov rdx, rbp
call fcn.14007ec50
xorps xmm0, xmm0
movaps xmmword [rsp + 0x230], xmm0
mov dword [rsp + 0x19c], 0
mov qword [rbp + 0x70], rbx
movaps xmmword [rbp + 0x60], xmm6
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x40], xmm6
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x20], xmm6
movaps xmmword [rbp + 0x10], xmm6
movaps xmmword [rbp], xmm6
lea rcx, [rsp + 0x120]
call fcn.1400da190
cmp byte [r12 + 0x7a], 0
je 0x1400cb4e8
call fcn.1400825c0
xor esi, esi
cmp eax, 0x10
setge sil
movzx eax, byte [r12 + 0x7b]
add esi, eax
mov rcx, qword [r12 + 0x28]
xor r8d, r8d
cmp rcx, qword [r12 + 0x30]
setne r8b
add r8d, esi
movzx edx, byte [r12 + 0x7c]
add edx, r8d
je 0x1400cbabb
lea rcx, [rsp + 0x120]
call fcn.1400da210
test al, al
je 0x1400cbaea
mov al, byte [r12 + 0x7b]
mov ebx, 0x80000
mov dword [rsp + 0x11c], 2
test al, al
jne 0x1400cbac2
cmp byte [r12 + 0x7a], 0
je 0x1400cb584
call fcn.1400825c0
cmp eax, 0x10
jl 0x1400cb584
lea r8, [rsp + 0x230]
or byte [r8 + 0xb], 0x20
lea rcx, [rsp + 0x120]
mov edx, 0x20007
mov r9d, 0x10
call fcn.1400da2e0
test al, al
je 0x1400cbaea
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x68], r14
cmp byte [r12 + 0x7c], 0
jne 0x1400cbafd
cmp dword [r12 + 0x24], 1
sete dil
mov rsi, qword [r12 + 0x28]
mov r14, qword [r12 + 0x30]
cmp rsi, r14
je 0x1400cb639
mov rax, r14
sub rax, rsi
mov ecx, 0xfffffff8
cmp rax, rcx
ja 0x1400cbb2c
mov rdi, qword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea r13, str....._baseprocesslaunch_win.cc
lea rbp, [rsp + 0x110]
mov rcx, qword [rsi]
mov edx, 1
mov r8d, 1
call rdi
test eax, eax
je 0x1400cb99a
add rsi, 8
cmp rsi, r14
jne 0x1400cb5e1
mov r8, qword [r12 + 0x28]
mov r9, qword [r12 + 0x30]
cmp r9, r8
je 0x1400cbb49
sub r9d, r8d
and r9d, 0xfffffff8
lea rcx, [rsp + 0x120]
mov edx, 0x20002
call fcn.1400da2e0
mov dil, 1
test al, al
je 0x1400cbb2c
cmp byte [r12 + 0x22], 0
jne 0x1400cbb75
cmp byte [r12 + 0x50], 0
jne 0x1400cbb82
mov eax, dword [rsp + 0x164]
mov ecx, eax
or ecx, 1
mov dword [rsp + 0x164], ecx
mov edx, dword [r12 + 0x40]
test edx, edx
jne 0x1400cbb96
movzx ecx, byte [r12 + 0x20]
xor ecx, 1
mov word [rsp + 0x168], cx
mov rcx, qword [r12 + 0x60]
mov rdx, qword [r12 + 0x68]
mov r8, qword [r12 + 0x70]
test rcx, rcx
jne 0x1400cb9b8
test rdx, rdx
jne 0x1400cb9b8
test r8, r8
jne 0x1400cb9b8
cmp qword [r12 + 0x58], 0
jne 0x1400cb921
mov esi, ebx
or esi, 0x1000000
cmp byte [r12 + 0x78], 0
cmove esi, ebx
xorps xmm0, xmm0
movaps xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], 0
movzx eax, byte [r12 + 0x1f]
test al, al
jns 0x1400cb6f6
mov rax, qword [r12 + 0x10]
mov rbx, qword [r12 + 8]
jmp 0x1400cb6fe
lea rbx, [r12 + 8]
and eax, 0x7f
test rax, rax
cmove rbx, rax
movabs rbp, 0xaaaaaaaaaaaaaaaa
mov qword [rsp + 0xe0], rbp
movaps xmmword [rsp + 0xd0], xmm6
cmp byte [r15 + 0x17], 0
jns 0x1400cbbbf
mov rdx, qword [r15]
mov r8, qword [r15 + 8]
lea rcx, [rsp + 0xd0]
call fcn.14006c08e
cmp byte [r12 + 0x7d], 0
jne 0x1400cbbdc
xor r13d, r13d
lea r14, [rsp + 0x128]
mov rdx, qword [r12 + 0x48]
test rdx, rdx
jne 0x1400cbbf5
xorps xmm0, xmm0
movaps xmmword [rsp + 0x1d0], xmm0
mov qword [rsp + 0x1e0], 0
mov al, byte [r12 + 0x98]
test al, al
jne 0x1400cb9e1
cmp qword [r12 + 0x90], 0
jne 0x1400cb9e1
xor eax, eax
movzx ecx, dil
cmp byte [rsp + 0xe7], 0
jns 0x1400cb7b3
mov rdx, qword [rsp + 0xd0]
jmp 0x1400cb7bb
lea rdx, [rsp + 0xd0]
lea r8, [rsp + 0xf0]
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], ecx
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x1400cbd7a
cmp byte [rsp + 0x1e7], 0
js 0x1400cbc41
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
lea rcx, [rsp + 0xb0]
mov qword [rcx + 0x10], rbp
movaps xmmword [rcx], xmm6
lea rdx, [rsp + 0xf0]
call fcn.1400da3f0
test r13, r13
je 0x1400cb83a
cmp byte [r12 + 0x7d], 0
jne 0x1400cbdb0
mov rcx, qword [r12 + 0x58]
test rcx, rcx
jne 0x1400cb939
cmp byte [r12 + 0x79], 0
jne 0x1400cbc53
cmp byte [r12], 0
jne 0x1400cbc6d
mov edx, dword [rsp + 0xc0]
mov rcx, qword [0x14021da80]
test rcx, rcx
jne 0x1400cbce9
lea rcx, [rsp + 0xb0]
call fcn.1400da540
mov rcx, r14
mov rdx, rax
call fcn.14010a570
mov bl, byte [rsp + 0x67]
lea rcx, [rsp + 0xb0]
call fcn.1400da480
cmp byte [rsp + 0xe7], 0
jns 0x1400cb8b6
mov rcx, qword [rsp + 0xd0]
call fcn.140111a1c
lea rcx, [rsp + 0x120]
call fcn.1400da1d0
lea rcx, [rsp + 0x1b0]
call fcn.14007efc0
test bl, 0x19
je 0x1400cb8f2
cmp byte [rdi], 0
je 0x1400cb8f2
mov rcx, rdi
mov rdx, qword [rsp + 0x88]
mov r8, qword [rsp + 0x80]
call fcn.140085190
mov rcx, qword [rsp + 0x248]
xor rcx, rsp
call fcn.140113000
mov rax, r14
movaps xmm6, xmmword [rsp + 0x250]
add rsp, 0x268
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400825c0
lea ecx, [rbx + 0x1000000]
cmp eax, 5
cmovge ecx, ebx
mov ebx, ecx
jmp 0x1400cb6b8
mov rdx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
test eax, eax
jne 0x1400cb848
lea r15, [rsp + 0x1d0]
movaps xmmword [r15], xmm6
lea rcx, [rsp + 0xb0]
call fcn.1400da540
mov rcx, r15
mov rdx, rax
call fcn.14010a570
mov rcx, r15
mov edx, 1
mov r8b, 1
call fcn.140173de0
mov rcx, r14
xor edx, edx
call fcn.14010a570
mov rcx, r15
call fcn.140072d00
jmp 0x1400cb88e
mov rcx, rbp
mov rdx, r13
mov r8d, 0x180
call fcn.14017bcd0
mov rcx, rbp
call fcn.14017bcf0
jmp 0x1400cb5f9
or eax, 0x101
mov dword [rsp + 0x164], eax
mov qword [rsp + 0x178], rcx
mov qword [rsp + 0x180], rdx
mov qword [rsp + 0x188], r8
jmp 0x1400cb6ac
test al, al
je 0x1400cbd09
lea r8, [r12 + 0x80]
lea rdx, [0x1401e9062]
lea rcx, [rsp + 0x90]
call fcn.14004af70
cmp byte [rsp + 0x1e7], 0
jns 0x1400cba1c
mov rcx, qword [rsp + 0x1d0]
call fcn.140111a1c
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x1e0], rax
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x1d0], xmm0
cmp byte [rsp + 0x1e7], 0
jns 0x1400cbcf6
mov rax, qword [rsp + 0x1d0]
jmp 0x1400cbcfe
mov bl, byte [r12]
mov dil, byte [r12 + 0x20]
movzx eax, byte [r15 + 0x17]
mov ecx, eax
and ecx, 0x7f
test al, al
mov rax, qword [r15]
cmovns rax, r15
lea rdx, [rsp + 0x1a0]
mov qword [rdx], rax
cmovs rcx, qword [r15 + 8]
mov qword [rdx + 8], rcx
mov rsi, r14
lea r14, [rsp + 0x120]
mov rcx, r14
call fcn.1400c2660
mov rcx, rsi
mov rdx, r14
mov r8d, edi
mov r9d, ebx
call fcn.140173a30
mov rcx, r14
mov r14, rsi
call fcn.1400c1c10
jmp 0x1400cb8f2
xor ebx, ebx
jmp 0x1400cb532
lea rcx, [rsp + 0x120]
lea r8, [rsp + 0x11c]
mov edx, 0x20012
mov r9d, 4
call fcn.1400da2e0
test al, al
jne 0x1400cb545
mov rcx, r14
xor edx, edx
call fcn.14010a570
mov bl, byte [rsp + 0x67]
jmp 0x1400cb8b6
lea r8, [rsp + 0x19c]
mov dword [r8], 1
lea rcx, [rsp + 0x120]
mov edx, 0x2001c
mov r9d, 4
call fcn.1400da2e0
test al, al
jne 0x1400cb59a
mov r14, qword [rsp + 0x68]
mov rcx, r14
xor edx, edx
call fcn.14010a570
mov bl, byte [rsp + 0x67]
mov rdi, qword [rsp + 0x70]
jmp 0x1400cb8b6
lea rax, str.vector___index_out_of_bounds
mov qword [rsp + 0x20], rax
lea rcx, str._s:_d:_assertion__s_failed:__s
lea rdx, str....._buildtools_third_partylibc_trunkinclude_vector
lea r9, str.__n___size__
mov r8d, 0x5b4
call fcn.140152a0d
or byte [rsp + 0x164], 0x80
jmp 0x1400cb645
lea rax, [0x1401e398a]
mov qword [rsp + 0x138], rax
jmp 0x1400cb651
mov cx, 0xa
add edx, 0xfffffffe
cmp edx, 3
ja case.default.0x1400cbbb4
lea rcx, [0x1400cbe6c]
movsxd rdx, dword [rcx + rdx*4]
add rdx, rcx
jmp rdx
mov cx, 1
jmp case.default.0x1400cbbb4
mov rax, qword [r15 + 0x10]
mov qword [rsp + 0xe0], rax
movups xmm0, xmmword [r15]
movaps xmmword [rsp + 0xd0], xmm0
jmp 0x1400cb73e
call fcn.14017bd10
test rax, rax
je 0x1400cbdd8
mov r13, rax
or esi, 4
jmp 0x1400cb74d
lea rcx, [rsp + 0x1d0]
mov qword [rcx], 0
xor r8d, r8d
call sub.USERENV.dll_CreateEnvironmentBlock
test eax, eax
je 0x1400cbe3f
or esi, 0x400
mov rdx, qword [rsp + 0x1d0]
movzx eax, dil
cmp byte [rsp + 0xe7], 0
jns 0x1400cbde3
mov r8, qword [rsp + 0xd0]
jmp 0x1400cbdeb
mov rcx, qword [rsp + 0x1d0]
call fcn.140111a1c
jmp 0x1400cb803
mov rcx, qword [rsp + 0xb0]
call fcn.14010c7e0
mov ecx, eax
call qword [sym.imp.USER32.dll_AllowSetForegroundWindow]
jmp 0x1400cb854
lea r12, [rsp + 0x1d0]
mov qword [r12 + 0x50], rbp
movaps xmmword [r12 + 0x40], xmm6
movaps xmmword [r12 + 0x30], xmm6
movaps xmmword [r12 + 0x20], xmm6
movaps xmmword [r12 + 0x10], xmm6
movaps xmmword [r12], xmm6
lea rdx, str.LaunchProcess
lea r8, str....._baseprocesslaunch_win.cc
lea r13, [rsp + 0x90]
mov rcx, r13
mov r9d, 0x21f
call fcn.1400713b0
mov rcx, r12
mov rdx, r13
xor r8d, r8d
call fcn.14007d430
mov rcx, qword [rsp + 0xb0]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, r12
call fcn.14007e5d0
jmp 0x1400cb85f
mov r8, r15
call fcn.14016eda0
jmp 0x1400cb876
lea rax, [rsp + 0x1d0]
or esi, 0x400
jmp 0x1400cb79b
call qword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1400cbd7a
lea r8, [r12 + 0x80]
lea rcx, [rsp + 0x90]
mov rdx, qword [rsp + 0x78]
call fcn.14004af70
cmp byte [rsp + 0x1e7], 0
jns 0x1400cbd4a
mov rcx, qword [rsp + 0x1d0]
call fcn.140111a1c
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x1e0], rax
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x1d0], xmm0
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
jmp 0x1400cba3c
mov rcx, qword [rsp + 0x68]
xor edx, edx
call fcn.14010a570
cmp byte [rsp + 0x1e7], 0
jns 0x1400cbd9d
mov rcx, qword [rsp + 0x1d0]
call fcn.140111a1c
mov r14, qword [rsp + 0x68]
mov bl, byte [rsp + 0x67]
mov rdi, qword [rsp + 0x70]
jmp 0x1400cb89f
mov ecx, dword [rsp + 0xc0]
mov edx, 4
mov rax, r13
call qword [case.0x140173f30.0]
mov rcx, qword [rsp + 0xb8]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x1400cb83a
or esi, 0x8000
jmp 0x1400cb74a
lea r8, [rsp + 0xd0]
mov rcx, qword [r12 + 0x48]
lea r9, [rsp + 0xf0]
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], 0
xor edx, edx
xor r9d, r9d
call qword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
mov esi, eax
mov rcx, qword [rsp + 0x1d0]
call sub.USERENV.dll_DestroyEnvironmentBlock
test esi, esi
jne 0x1400cb803
mov r14, qword [rsp + 0x68]
mov rcx, r14
xor edx, edx
call fcn.14010a570
jmp 0x1400cbda2
mov cx, 2
jmp case.default.0x1400cbbb4
mov cx, 7
jmp case.default.0x1400cbbb4
xor ecx, ecx
jmp case.default.0x1400cbbb4