Function at 0x140053410
Capabilities:
Create process on windows
Resume thread
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x638]
sub rsp, 0x738
mov rax, qword [0x1402a0480]
xor rax, rsp
mov qword [rbp + 0x620], rax
mov rdi, qword [rdx]
mov r14, r9
mov rbx, qword [rdx + 8]
mov rsi, r8
mov r13, qword [rbp + 0x6a0]
mov r12, rdx
mov r15, qword [rbp + 0x6b0]
mov qword [rsp + 0x78], rcx
lea rcx, [rbp + 0x60]
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x68], rbx
mov qword [rsp + 0x70], rdx
mov word [rbp + 0x80], 0x105
call fcn.1400290f0
test al, al
jne 0x14005349e
test r15, r15
je 0x140053497
lea rdx, str.program_not_executable
mov rcx, r15
call fcn.140028190
xor al, al
jmp 0x14005431a
lea rax, [rbp + 0x198]
mov qword [rbp + 0x190], 0x40
mov qword [rbp + 0x180], rax
lea rdx, [rbp + 0x60]
xor eax, eax
mov word [rbp + 0x80], 0x105
xor r8d, r8d
mov qword [rbp + 0x188], rax
lea rcx, [rbp + 0x20]
mov qword [rbp + 0x60], rdi
mov qword [rbp + 0x68], rbx
call fcn.140028a60
cmp dword [rax], 0
je 0x14005351e
lea rax, str..exe
mov word [rbp + 0x80], 0x305
lea r8, [rbp + 0x180]
mov qword [rbp + 0x70], rax
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x60], rdi
lea rcx, [rbp + 0x60]
mov qword [rbp + 0x68], rbx
call fcn.140030070
movups xmm0, xmmword [rax]
movups xmmword [r12], xmm0
movups xmm0, xmmword [rsi]
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x10]
movaps xmmword [rbp + 0x40], xmm0
call fcn.140055ec0
xor edi, edi
test byte [rbp + 0x10], 1
je 0x140053544
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rbp + 0x40], xmm0
jmp 0x140053550
mov dword [rbp + 0x40], edi
call fcn.140005800
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x40]
mov ecx, dword [rax]
test ecx, ecx
je 0x140053610
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 0x30
mov qword [rbp + 0xb0], rdi
call fcn.140183f40
movups xmm0, xmmword [str.Unable_to_convert_command_line_to_UTF_16]
lea rdx, [rbp + 0xa8]
mov qword [rbp + 0xa8], rax
mov rcx, r15
mov qword [rbp + 0xb8], 0x28
movups xmmword [rax], xmm0
mov qword [rbp + 0xc0], 0x2f
movups xmm1, xmmword [0x1401aa028]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x1401aa038]
movsd qword [rax + 0x20], xmm0
mov byte [rax + 0x28], 0
call fcn.140054490
mov rdx, qword [rbp + 0xc0]
cmp rdx, 0xf
jbe 0x140053608
mov rcx, qword [rbp + 0xa8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053603
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054224
call fcn.140183f7c
xor r15b, r15b
jmp 0x1400542ee
cmp qword [rbp + 8], 7
lea rsi, [rbp - 0x10]
mov rbx, qword [rbp]
movabs rdi, 0x7ffffffffffffffe
cmova rsi, qword [rbp - 0x10]
xorps xmm0, xmm0
movups xmmword [rbp + 0x88], xmm0
cmp rbx, rdi
ja 0x140054343
movabs rdx, 0x7fffffffffffffff
cmp rbx, 7
ja 0x14005366d
mov qword [rbp + 0x98], rbx
mov qword [rbp + 0xa0], 7
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x88], xmm0
jmp 0x1400536e9
mov rax, rbx
or rax, 7
cmp rax, rdi
jbe 0x140053684
lea rcx, [rdx + rdx]
call fcn.1400048b0
jmp 0x1400536c1
mov ecx, 0xa
mov rdi, rax
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, rdx
ja 0x140054349
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400536b3
call fcn.1400048b0
jmp 0x1400536c1
test rcx, rcx
je 0x1400536bf
call fcn.140183f40
jmp 0x1400536c1
xor eax, eax
lea r8, [rbx*2 + 2]
mov qword [rbp + 0x88], rax
mov rdx, rsi
mov qword [rbp + 0x98], rbx
mov rcx, rax
mov qword [rbp + 0xa0], rdi
call sub.VCRUNTIME140.dll_memcpy
xor esi, esi
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rsi
cmp byte [r14 + 0x10], sil
je 0x1400537cb
mov rdi, qword [r14]
mov rbx, qword [r14 + 8]
shl rbx, 4
add rbx, rdi
cmp rdi, rbx
je 0x1400537b5
nop
movups xmm0, xmmword [rdi]
lea rax, [rbp + 0x1f8]
mov qword [rbp + 0x1e8], rsi
lea r8, [rbp + 0x1e0]
mov qword [rbp + 0x1e0], rax
lea rdx, [rbp + 0x40]
movaps xmmword [rbp + 0x40], xmm0
lea rcx, [rbp + 0x20]
mov qword [rbp + 0x1f0], 0x104
call fcn.140028a10
mov ecx, dword [rbp + 0x20]
test ecx, ecx
jne 0x140053875
lea rdx, [rbp + 0x1e0]
lea rcx, [rbp + 0xa8]
call fcn.140053220
lea rdx, [rsp + 0x50]
mov word [rsp + 0x50], si
lea rcx, [rbp + 0xa8]
call fcn.1400563e0
mov rcx, qword [rbp + 0x1e0]
lea rax, [rbp + 0x1f8]
cmp rcx, rax
je 0x1400537a8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add rdi, 0x10
cmp rdi, rbx
jne 0x140053720
lea rdx, [rsp + 0x50]
mov word [rsp + 0x50], si
lea rcx, [rbp + 0xa8]
call fcn.1400563e0
xorps xmm0, xmm0
mov dword [rbp - 0x80], 0x68
xor eax, eax
mov qword [rbp - 0x20], 0xffffffffffffffff
movups xmmword [rbp - 0x7c], xmm0
mov qword [rbp - 0x3c], rax
movups xmmword [rbp - 0x6c], xmm0
mov dword [rbp - 0x34], eax
movups xmmword [rbp - 0x5c], xmm0
movups xmmword [rbp - 0x4c], xmm0
movdqa xmm0, xmmword [0x1401a9d70]
movdqa xmmword [rbp - 0x30], xmm0
cmp qword [r13 + 8], rax
je 0x140053b4b
mov rdi, qword [r13]
lea rcx, [rbp + 0x20]
mov dword [rbp - 0x44], 0x100
mov r8, r15
xor edx, edx
movups xmm0, xmmword [rdi]
movsd xmm1, qword [rdi + 0x10]
movaps xmmword [rbp + 0x20], xmm0
movsd qword [rbp + 0x30], xmm1
call fcn.140054a20
mov qword [rbp - 0x30], rax
cmp rax, 0xffffffffffffffff
jne 0x140053937
lea ecx, [rax + 0x21]
mov qword [rbp + 0x28], rsi
call fcn.140183f40
movups xmm0, xmmword [str.cant_redirect_stdin]
mov qword [rbp + 0x30], 0x14
movups xmmword [rax], xmm0
mov ecx, dword [0x1401aa090]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], sil
jmp 0x140053ae9
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 0x40
mov qword [rbp + 0x48], rsi
call fcn.140183f40
movups xmm0, xmmword [str.Unable_to_convert_environment_variable_to_UTF_16]
lea rdx, [rbp + 0x40]
mov qword [rbp + 0x40], rax
mov rcx, r15
mov qword [rbp + 0x50], 0x30
movups xmmword [rax], xmm0
mov qword [rbp + 0x58], 0x3f
movups xmm1, xmmword [0x1401aa058]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1401aa068]
movups xmmword [rax + 0x20], xmm0
mov byte [rax + 0x30], sil
call fcn.140054490
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14005390b
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053906
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140053906
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140183f7c
mov rcx, qword [rbp + 0x1e0]
lea rax, [rbp + 0x1f8]
cmp rcx, rax
je 0x140053b3c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r12, qword [rbp + 0xa8]
xor r15b, r15b
jmp 0x14005419c
movups xmm0, xmmword [rdi + 0x18]
lea rcx, [rbp + 0x20]
mov r8, r15
movsd xmm1, qword [rdi + 0x28]
mov edx, 1
movaps xmmword [rbp + 0x20], xmm0
movsd qword [rbp + 0x30], xmm1
call fcn.140054a20
mov qword [rbp - 0x28], rax
cmp rax, 0xffffffffffffffff
jne 0x14005399b
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
mov qword [rbp + 0x28], rsi
call fcn.140183f40
movups xmm0, xmmword [str.cant_redirect_stdout]
movups xmmword [rax], xmm0
mov ecx, dword [0x1401aa0a8]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x1401aa0ac]
jmp 0x140053ada
cmp byte [rdi + 0x28], sil
je 0x140053a6d
cmp byte [rdi + 0x40], sil
je 0x140053a6d
mov r8, qword [rdi + 0x38]
movups xmm1, xmmword [rdi + 0x18]
cmp qword [rdi + 0x20], r8
jne 0x140053a6d
test r8, r8
je 0x1400539dc
mov rdx, qword [rdi + 0x30]
movq rcx, xmm1
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140053a6d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdx, qword [rbp - 0x28]
lea r9, [rbp - 0x20]
mov dword [rsp + 0x30], 2
mov rcx, rax
mov dword [rsp + 0x28], 1
mov r8, rdi
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
jne 0x140053b4b
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
mov qword [rbp + 0x28], rsi
call fcn.140183f40
movups xmm0, xmmword [str.cant_dup_stderr_to_stdout]
mov qword [rbp + 0x30], 0x1a
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1401aa0c0]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x1401aa0c8]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], sil
jmp 0x140053ae9
movups xmm0, xmmword [rdi + 0x30]
lea rcx, [rbp + 0x20]
mov r8, r15
movsd xmm1, qword [rdi + 0x40]
mov edx, 2
movaps xmmword [rbp + 0x20], xmm0
movsd qword [rbp + 0x30], xmm1
call fcn.140054a20
mov qword [rbp - 0x20], rax
cmp rax, 0xffffffffffffffff
jne 0x140053b4b
mov rcx, qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x20
mov qword [rbp + 0x28], rsi
call fcn.140183f40
movups xmm0, xmmword [str.cant_redirect_stderr]
movups xmmword [rax], xmm0
mov ecx, dword [0x1401aa0e0]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x1401aa0e4]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], sil
mov qword [rbp + 0x30], 0x15
lea rdx, [rbp + 0x20]
mov qword [rbp + 0x20], rax
mov rcx, r15
mov qword [rbp + 0x38], 0x1f
call fcn.140054490
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140053b3c
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053b37
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054224
call fcn.140183f7c
mov r12, qword [rbp + 0xa8]
xor r15b, r15b
jmp 0x14005419c
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
lea ecx, [rax + 1]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
lea rax, [rbp + 0x418]
mov qword [rbp + 0x408], rsi
mov qword [rbp + 0x400], rax
lea r8, [rbp + 0x400]
mov rax, qword [r12]
lea rdx, [rbp + 0x60]
mov qword [rbp + 0x60], rax
lea rcx, [rbp + 0x20]
mov rax, qword [r12 + 8]
mov r9d, 0x104
mov qword [rbp + 0x68], rax
mov qword [rbp + 0x410], 0x104
mov word [rbp + 0x80], 0x105
call fcn.1400302d0
mov ecx, dword [rbp + 0x20]
mov r12, qword [rbp + 0xa8]
test ecx, ecx
je 0x140053c92
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 0x30
mov qword [rbp + 0x48], rsi
call fcn.140183f40
movups xmm0, xmmword [str.Unable_to_convert_application_name_to_UTF_16]
mov rcx, rax
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 0x40]
mov qword [rbp + 0x50], 0x2c
movups xmmword [rax], xmm0
mov qword [rbp + 0x58], 0x2f
movups xmm1, xmmword [0x1401aa0f8]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x1401aa108]
movsd qword [rax + 0x20], xmm0
mov eax, dword [0x1401aa110]
mov dword [rcx + 0x28], eax
mov byte [rcx + 0x2c], sil
mov rcx, r15
call fcn.140054490
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x140053c8a
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053c85
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140053c85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140183f7c
xor r15b, r15b
jmp 0x140054183
mov r13, qword [rbp + 0x6b8]
mov eax, 0x404
mov rbx, qword [rbp + 0x98]
test r13, r13
mov ecx, 0x400
mov word [rsp + 0x50], si
cmove eax, ecx
mov dword [rsp + 0x54], eax
xor eax, eax
mov r14d, eax
add rbx, 1
je 0x140053d2b
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
ja 0x14005433d
lea rdi, [rbx + rbx]
cmp rdi, 0x1000
jb 0x140053cee
mov rcx, rdi
call fcn.1400048b0
jmp 0x140053cfb
test rdi, rdi
je 0x140053cfe
mov rcx, rdi
call fcn.140183f40
mov rsi, rax
lea rcx, [rsp + 0x50]
lea r14, [rdi + rsi]
call fcn.140052d00
test al, al
je 0x140053d1d
mov rdx, rbx
mov rcx, rsi
call fcn.140052b10
jmp 0x140053d2b
xor eax, eax
mov rdi, rsi
movzx eax, ax
mov rcx, rbx
rep stosw word [rdi], ax
cmp qword [rbp + 0xa0], 7
lea rcx, [rbp + 0x88]
mov rax, qword [rbp + 0x98]
mov r8, rsi
cmova rcx, qword [rbp + 0x88]
lea rdx, [rcx + rax*2]
lea rcx, [rbp + 0x88]
cmova rcx, qword [rbp + 0x88]
call fcn.140027a20
cmp r12, qword [rbp + 0xb0]
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x48], rcx
mov edx, 0
lea rcx, [rbp - 0x80]
mov rax, r12
mov qword [rsp + 0x40], rcx
cmove rax, rdx
mov rcx, qword [rbp + 0x400]
xor r9d, r9d
mov qword [rsp + 0x38], rdx
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rdx, rsi
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp - 0x30]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x140054022
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, qword [rsp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov rdx, qword [rax]
test rdx, rdx
jne 0x140053e18
movdqa xmm1, xmmword [0x1401a7570]
movdqu xmmword [rbp + 0x50], xmm1
mov byte [rbp + 0x40], dl
jmp 0x140053e2d
mov r8, qword [rax + 8]
lea rcx, [rbp + 0x40]
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x50], xmm1
call fcn.140004900
xor edi, edi
mov qword [rbp + 0xd0], rdi
lea ecx, [rdi + 0x20]
call fcn.140183f40
movups xmm0, xmmword [str.Couldnt_execute_program_]
movzx edx, byte [rsp + 0x50]
lea r9, [rbp + 0x40]
lea r8, [rbp + 0xc8]
mov qword [rbp + 0xc8], rax
movups xmmword [rax], xmm0
mov qword [rbp + 0xd8], 0x1a
movsd xmm0, qword [0x1401aa128]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x1401aa130]
mov word [rax + 0x18], cx
lea rcx, [rbp + 0x20]
mov qword [rbp + 0xe0], 0x1f
mov byte [rax + 0x1a], dil
call fcn.140022850
mov rdx, qword [rbp + 0x38]
mov rcx, qword [rbp + 0x30]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140053ecf
lea rax, [rcx + 1]
cmp rdx, 0xf
mov qword [rbp + 0x30], rax
lea rax, [rbp + 0x20]
cmova rax, qword [rbp + 0x20]
mov word [rax + rcx], 0x27
lea rax, [rbp + 0x20]
jmp 0x140053eef
xor r8d, r8d
mov qword [rsp + 0x20], 1
lea r9, [0x1401a6e0c]
lea rcx, [rbp + 0x20]
lea edx, [r8 + 1]
call fcn.140022400
movups xmm0, xmmword [rax]
lea rdx, [rbp + 0x60]
mov rcx, r15
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rdi
movups xmmword [rbp + 0x60], xmm0
mov qword [rax + 0x18], 0xf
movups xmmword [rbp + 0x70], xmm1
mov byte [rax], dil
call fcn.140054490
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140053f54
mov rcx, qword [rbp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053f4f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005400e
call fcn.140183f7c
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x140053f8f
mov rcx, qword [rbp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053f8a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005400e
call fcn.140183f7c
mov rdx, qword [rbp + 0xe0]
mov qword [rbp + 0x30], rdi
mov qword [rbp + 0x38], 0xf
mov byte [rbp + 0x20], dil
cmp rdx, 0xf
jbe 0x140053fdc
mov rcx, qword [rbp + 0xc8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140053fd7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14005400e
call fcn.140183f7c
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x14005401a
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140054015
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140054015
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140183f7c
xor r15b, r15b
jmp 0x140054143
mov rdx, qword [rsp + 0x78]
mov eax, dword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov dword [rdx], eax
xor eax, eax
mov edi, eax
mov qword [rdx + 8], rcx
cmp dword [rbp + 0x6a8], eax
je 0x140054105
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateJobObjectW]
xor ecx, ecx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rdi, 0xffffffffffffffff
je 0x14005422b
mov eax, dword [rbp + 0x6a8]
lea r8, [rbp + 0xf0]
xorps xmm0, xmm0
shl rax, 0x14
movups xmmword [rbp + 0x100], xmm0
mov r9d, 0x90
mov edx, 9
movups xmmword [rbp + 0x160], xmm0
mov rcx, rdi
mov qword [rbp + 0x160], rax
movups xmmword [rbp + 0xf0], xmm0
mov dword [rbp + 0x100], 0x100
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
movups xmmword [rbp + 0x130], xmm0
movups xmmword [rbp + 0x140], xmm0
movups xmmword [rbp + 0x150], xmm0
movups xmmword [rbp + 0x170], xmm0
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
test eax, eax
je 0x14005422b
mov rdx, qword [rsp + 0x58]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
test eax, eax
je 0x14005422b
mov rcx, qword [rsp + 0x58]
test r13, r13
je 0x140054122
mov rdx, qword [r13]
mov rdx, qword [rdx]
call qword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_ResumeThread]
mov r15b, 1
cmp rdi, 0xffffffffffffffff
je 0x140054134
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp rbx, 0xffffffffffffffff
je 0x140054143
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rsi, rsi
je 0x140054181
sub r14, rsi
sar r14, 1
add r14, r14
cmp r14, 0x1000
jb 0x140054176
mov rcx, qword [rsi - 8]
add r14, 0x27
sub rsi, rcx
lea rax, [rsi - 8]
cmp rax, 0x1f
ja 0x140054224
mov rsi, rcx
mov rdx, r14
mov rcx, rsi
call fcn.140183f7c
xor esi, esi
mov rcx, qword [rbp + 0x400]
lea rax, [rbp + 0x418]
cmp rcx, rax
je 0x14005419c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test r12, r12
je 0x1400541db
mov rdx, qword [rbp + 0xb8]
mov rax, r12
sub rdx, r12
sar rdx, 1
add rdx, rdx
cmp rdx, 0x1000
jb 0x1400541d3
mov r12, qword [r12 - 8]
add rdx, 0x27
sub rax, r12
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140054224
mov rcx, r12
call fcn.140183f7c
mov rdx, qword [rbp + 0xa0]
cmp rdx, 7
jbe 0x1400542d5
mov rcx, qword [rbp + 0x88]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400542d0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400542d0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
mov qword [rbp + 0xd0], rax
lea ecx, [rax + 0x20]
call fcn.140183f40
movups xmm0, xmmword [str.Unable_to_set_memory_limit]
lea rdx, [rbp + 0xc8]
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd8], 0x1a
movups xmmword [rax], xmm0
mov qword [rbp + 0xe0], 0x1f
movsd xmm0, qword [0x1401aa148]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x1401aa150]
mov word [rax + 0x18], cx
mov rcx, r15
mov byte [rax + 0x1a], 0
call fcn.140054490
lea rcx, [rbp + 0xc8]
call fcn.140007f50
mov rcx, qword [rsp + 0x58]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, qword [rsp + 0x58]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor r15b, r15b
jmp 0x140054125
call fcn.140183f7c
mov qword [rbp + 0x98], rsi
mov qword [rbp + 0xa0], 7
mov word [rbp + 0x88], si
test byte [rbp + 0x10], 1
jne 0x1400542fd
lea rcx, [rbp - 0x10]
call fcn.140053250
mov rcx, qword [rbp + 0x180]
lea rax, [rbp + 0x198]
cmp rcx, rax
je 0x140054316
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movzx eax, r15b
mov rcx, qword [rbp + 0x620]
xor rcx, rsp
call fcn.1401842c0
add rsp, 0x738
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140055300
int3
call fcn.14000a2b0
int3
call fcn.14000a020
int3