Function at 0x140002890
Capabilities:
Create process on windows

Disassembly:
push rbp
push rsi
push rdi
mov rbp, rsp
mov rsi, rcx
mov edx, dword [0x1400c34a0]
mov ecx, dword [0x1400c34a4]
lea eax, [rdx + 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x140002924
test eax, eax
je 0x140002924
mov eax, WSACleanup
call fcn.14008c4b0
sub rsp, rax
mov rcx, rsp
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x20], xmm0
mov dword [rcx], WSACleanup
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rsi
mov dword [rcx + 0x30], 1
sub rsp, 0x20
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
add rsp, 0x20
mov edx, dword [0x1400c34a0]
mov ecx, dword [0x1400c34a4]
lea eax, [rdx + 1]
imul eax, edx
and eax, 1
cmp ecx, 0xa
jl 0x14000292d
test eax, eax
jne 0x14000299f
mov eax, WSACleanup
call fcn.14008c4b0
sub rsp, rax
mov rcx, rsp
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x20], xmm0
mov dword [rcx], WSACleanup
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rsi
mov dword [rcx + 0x30], 1
sub rsp, 0x20
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
add rsp, 0x20
cmp dword [0x1400c34a4], 0xa
jl 0x1400029fc
mov ecx, dword [0x1400c34a0]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x1400029fc
mov eax, WSACleanup
call fcn.14008c4b0
sub rsp, rax
mov rcx, rsp
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x20], xmm0
mov dword [rcx], WSACleanup
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rsi
mov dword [rcx + 0x30], 1
sub rsp, 0x20
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
add rsp, 0x20
jmp 0x14000292d
test eax, eax
jne 0x140002b22
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp dword [0x1400c34a4], 0xa
jl 0x140002a66
mov ecx, dword [0x1400c34a0]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140002a66
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
sub rsp, 0x20
call rsi
call rsi
add rsp, 0x20
cmp dword [0x1400c34a4], 0xa
jl 0x140002a66
mov ecx, dword [0x1400c34a0]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
jne 0x140002a40
sub rsp, 0x20
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp eax, 0x4c7
jne 0x140002b0a
lea rdx, str.User_refused_to_grant_admin_privileges.
call fcn.140002220
mov rcx, rax
call fcn.140002500
add rsp, 0x20
cmp dword [0x1400c34a4], 0xa
jl 0x140002b22
mov eax, dword [0x1400c34a0]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140002b22
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdi, str.User_refused_to_grant_admin_privileges.
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.140002220
mov rcx, rax
call fcn.140002500
mov rcx, rsi
mov rdx, rdi
call fcn.140002220
mov rcx, rax
call fcn.140002500
add rsp, 0x20
cmp dword [0x1400c34a4], 0xa
jl 0x140002b22
mov eax, dword [0x1400c34a0]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140002ac0
jmp 0x140002b22
lea rdx, str.Failed_to_grant_admin_privileges.
call fcn.140002220
mov rcx, rax
call fcn.140002500
add rsp, 0x20
mov rsp, rbp
pop rdi
pop rsi
pop rbp
ret