Function at 0x140001dd0
Capabilities:
Create pipe
Create process on windows
Create thread

Disassembly:
push rbp
push rsi
push r12
push r15
lea rbp, [rsp - 0x28]
sub rsp, 0x128
lea rcx, [rbp + 0x10]
call fcn.1400019e0
xor r12d, r12d
lea r8, [rbp - 0x80]
mov r15d, r12d
lea rdx, [rbp + 0x68]
lea rcx, [rsp + 0x50]
movups xmm1, xmmword [rax]
mov qword [rbp - 0x78], r12
mov dword [rbp - 0x80], 0x18
movd esi, xmm1
movups xmmword [rsp + 0x58], xmm1
test esi, esi
sete r15b
xor r9d, r9d
mov dword [rbp - 0x70], r15d
call qword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
je 0x140002015
mov rcx, qword [rbp + 0x68]
xor r8d, r8d
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rdi
mov qword [rsp + 0x120], r13
mov r13d, 1
mov edx, r13d
call qword [sym.imp.KERNEL32.dll_SetHandleInformation]
test eax, eax
jne 0x140001e6f
lea rcx, [0x140016810]
call fcn.140001050
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov ebx, 0x4000400
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
mov edi, r12d
setne dil
test esi, esi
je 0x140001e99
mov ebx, 0x4000410
jmp 0x140001ea3
test edi, edi
mov eax, 0xc000400
cmovne ebx, eax
test r15d, r15d
je 0x140001edb
mov ecx, 0xfffffff5
mov dword [rbp - 0x24], 0x100
mov word [rbp - 0x20], r12w
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov ecx, 0xfffffff4
mov qword [rbp - 8], rax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rbp], rax
mov rax, qword [rsp + 0x50]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x48]
test esi, esi
cmovne rax, qword [rsp + 0x60]
xor edx, edx
xor ecx, ecx
mov qword [rbp - 0x48], rax
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
jne 0x140001f05
lea rcx, str.Cannot_restore_normal_processing_of_CTRLC_input
call fcn.140001050
mov rdx, qword [rsp + 0x60]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x48], rax
xor r9d, r9d
lea rax, [rbp - 0x60]
xor r8d, r8d
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x140002029
test edi, edi
jne 0x140001f4e
test esi, esi
je 0x140001f58
lea rcx, [rsp + 0x68]
call fcn.1400016a0
mov edx, r13d
lea rcx, section..text
call qword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
test eax, eax
jne 0x140001f78
lea rcx, [0x140016870]
call fcn.140001050
mov qword [rsp + 0x28], r12
lea r9, [rbp + 0x68]
lea r8, [0x140001c60]
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [rbp + 0x60], r12d
nop dword [rax + rax]
mov rcx, qword [rsp + 0x68]
or edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x140001fa0
mov rcx, qword [rsp + 0x60]
call fcn.1400063b4
mov rcx, qword [rsp + 0x68]
lea rdx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x60]
mov rdi, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x150]
mov r13, qword [rsp + 0x120]
add rsp, 0x128
pop r15
pop r12
pop rsi
pop rbp
ret
lea rcx, [0x140016800]
call fcn.140001050
xor ecx, ecx
call fcn.140006664
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
lea rcx, str.CreateProcess
mov ebx, eax
cmove ebx, r13d
call fcn.140001050
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, ebx
call fcn.140006664
int3