Function at 0x140002950
Capabilities:
Create process on windows

Disassembly:
push rbp
push rsi
push rdi
mov rbp, rsp
mov rsi, rcx
cmp dword [0x1400cb4a0], 0xa
jl 0x140002973
mov eax, dword [0x1400cb4a4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x1400029e5
mov eax, WSACleanup
call fcn.1400957c0
sub rsp, rax
mov rcx, rsp
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x20], xmm0
mov dword [rcx], WSACleanup
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rsi
mov dword [rcx + 0x30], 1
sub rsp, 0x20
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
add rsp, 0x20
cmp dword [0x1400cb4a0], 0xa
jl 0x140002a42
mov ecx, dword [0x1400cb4a4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140002a42
mov eax, WSACleanup
call fcn.1400957c0
sub rsp, rax
mov rcx, rsp
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x30], xmm0
movups xmmword [rcx + 0x60], xmm0
movups xmmword [rcx + 0x50], xmm0
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x20], xmm0
mov dword [rcx], WSACleanup
lea rax, str.runas
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], rsi
mov dword [rcx + 0x30], 1
sub rsp, 0x20
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
add rsp, 0x20
jmp 0x140002973
test eax, eax
je 0x140002a4d
mov rsp, rbp
pop rdi
pop rsi
pop rbp
ret
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
cmp dword [0x1400cb4a0], 0xa
jl 0x140002aa6
mov ecx, dword [0x1400cb4a4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
je 0x140002aa6
mov rsi, qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax]
sub rsp, 0x20
call rsi
call rsi
add rsp, 0x20
cmp dword [0x1400cb4a0], 0xa
jl 0x140002aa6
mov ecx, dword [0x1400cb4a4]
lea edx, [rcx + 1]
imul edx, ecx
and edx, 1
jne 0x140002a80
sub rsp, 0x20
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp eax, 0x4c7
jne 0x140002b61
lea rdx, str.User_refused_to_grant_admin_privileges.
call fcn.1400021f0
mov rcx, rax
call fcn.140002550
add rsp, 0x20
cmp dword [0x1400cb4a0], 0xa
jl 0x140002a46
mov eax, dword [0x1400cb4a4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140002a46
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdi, str.User_refused_to_grant_admin_privileges.
nop word cs:[rax + rax]
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.1400021f0
mov rcx, rax
call fcn.140002550
mov rcx, rsi
mov rdx, rdi
call fcn.1400021f0
mov rcx, rax
call fcn.140002550
add rsp, 0x20
cmp dword [0x1400cb4a0], 0xa
jl 0x140002a46
mov eax, dword [0x1400cb4a4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140002b10
jmp 0x140002a46
lea rdx, str.Failed_to_grant_admin_privileges.
call fcn.1400021f0
mov rcx, rax
call fcn.140002550
add rsp, 0x20
cmp dword [0x1400cb4a0], 0xa
jl 0x140002a46
mov eax, dword [0x1400cb4a4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
je 0x140002a46
mov rsi, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdi, str.Failed_to_grant_admin_privileges.
nop dword [rax]
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
call fcn.1400021f0
mov rcx, rax
call fcn.140002550
mov rcx, rsi
mov rdx, rdi
call fcn.1400021f0
mov rcx, rax
call fcn.140002550
add rsp, 0x20
cmp dword [0x1400cb4a0], 0xa
jl 0x140002a46
mov eax, dword [0x1400cb4a4]
lea ecx, [rax + 1]
imul ecx, eax
and ecx, 1
jne 0x140002bb0
jmp 0x140002a46