Function at 0x14005a6f0
Capabilities:
Create process on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x3f0
mov qword [rbp - 0x3e8], rbx
mov qword [rbp - 0x3e0], rsi
mov qword [rbp - 0x3d8], rdi
mov qword [rbp + 0x10], rcx
mov dword [rbp + 0x18], edx
mov qword [rbp + 0x28], r9
mov rsi, r8
mov rcx, qword [rbp + 0x48]
sub rsp, 0x20
call fcn.1400061e0
add rsp, 0x20
test al, al
je 0x14005a787
sub rsp, 0x20
call fcn.140065ee0
add rsp, 0x20
mov rsi, rax
lea rax, str.Command_line_is_empty
mov qword [rbp - 0x378], rax
mov qword [rbp - 0x380], 0x15
lea r9, [rbp - 0x380]
mov r8d, 0x53f
xor edx, edx
mov rcx, rsi
sub rsp, 0x20
call fcn.1400248e0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.140019e30
mov rdx, rsi
mov ecx, dword [rbp + 0x18]
and ecx, 1
neg ecx
sbb ecx, ecx
inc ecx
sub rsp, 0x20
call fcn.140065f30
add rsp, 0x20
mov qword [rbp - 0x370], rax
lea rsi, [0x140098250]
lea rdi, [rbp - 0x360]
mov ecx, 0xd
rep movsq qword [rdi], qword [rsi]
mov dword [rbp - 0x360], 0x68
mov eax, 0xffffffff
mov dword [rbp - 0x2f8], eax
mov dword [rbp - 0x2f4], eax
mov dword [rbp - 0x2f0], eax
sub rsp, 8
push qword [rbp + 0x38]
mov r9d, 0xfffffff6
lea rcx, str.stdin
mov qword [rbp - 0x2d8], rcx
mov qword [rbp - 0x2e0], 5
lea r8, [rbp - 0x2e0]
lea rdx, [rbp - 0x2f8]
lea rcx, [rbp - 0x310]
sub rsp, 0x20
call fcn.14005ae10
add rsp, 0x30
sub rsp, 8
push qword [rbp + 0x30]
mov r9d, 0xfffffff5
lea rax, str.stdout
mov qword [rbp - 0x2c8], rax
mov ebx, 6
mov qword [rbp - 0x2d0], rbx
lea r8, [rbp - 0x2d0]
lea rdx, [rbp - 0x2f4]
lea rcx, [rbp - 0x308]
sub rsp, 0x20
call fcn.14005ae10
add rsp, 0x30
sub rsp, 8
push qword [rbp + 0x28]
mov r9d, 0xfffffff4
lea rax, str.stderr
mov qword [rbp - 0x2b8], rax
mov qword [rbp - 0x2c0], rbx
lea r8, [rbp - 0x2c0]
lea rdx, [rbp - 0x2f0]
lea rcx, [rbp - 0x300]
sub rsp, 0x20
call fcn.14005ae10
add rsp, 0x30
cmp qword [rbp - 0x310], 0
je 0x14005a8cd
cmp qword [rbp - 0x310], 0xffffffffffffffff
jne 0x14005a8f5
cmp qword [rbp - 0x308], 0
je 0x14005a8e1
cmp qword [rbp - 0x308], 0xffffffffffffffff
jne 0x14005a8f5
cmp qword [rbp - 0x300], 0
je 0x14005a8ff
cmp qword [rbp - 0x300], 0xffffffffffffffff
je 0x14005a8ff
mov dword [rbp - 0x324], 0x100
xor ebx, ebx
mov qword [rbp - 0x2b0], rbx
mov qword [rbp - 0x2a8], rbx
mov qword [rbp - 0x2a0], rbx
test dword [rbp + 0x18], 0x10
mov esi, 0x8000000
jne 0x14005a926
xor esi, esi
or esi, 0x400
mov rax, qword [rbp + 0x10]
mov rdx, qword [rax + 8]
mov rbx, qword [rax]
mov qword [rbp - 0x180], rbx
mov qword [rbp - 0x178], rdx
lea rdx, [rbp - 0x180]
lea rcx, [rbp - 0x290]
sub rsp, 0x20
call fcn.1400290b0
add rsp, 0x20
mov r8, qword [rbp + 0x48]
mov rdx, qword [r8 + 8]
mov rax, qword [r8]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rdx
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x170]
sub rsp, 0x20
call fcn.1400290b0
add rsp, 0x20
lea r9, [rbp - 0x170]
mov rcx, r9
sub rsp, 0x20
call fcn.140013800
add rsp, 0x20
mov rdi, rax
mov r8, qword [rbp - 0x370]
mov rdx, qword [rbp + 0x10]
cmp qword [rdx], 0
je 0x14005a9cc
lea rcx, [rbp - 0x290]
sub rsp, 0x20
call fcn.140013810
add rsp, 0x20
jmp 0x14005a9ce
xor eax, eax
lea r9, [rbp - 0x360]
lea r8, [rbp - 0x2b0]
push r8
push r9
push rax
push qword [rbp - 0x370]
push rsi
push 1
xor r9d, r9d
mov r8, r9
mov rdx, rdi
mov rcx, r8
sub rsp, 0x20
call sub.KERNEL32.dll_CreateProcessW
add rsp, 0x50
test eax, eax
sete r10b
mov byte [rbp - 0x50], r10b
lea rcx, [rbp - 0x170]
sub rsp, 0x20
call fcn.140013830
add rsp, 0x20
cmp byte [rbp - 0x50], 0
je 0x14005aaae
lea rax, str.Failed_to_spawn_process__
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x40], 0x19
lea r8, [rbp - 0x40]
mov rdx, qword [rbp + 0x40]
mov rax, qword [rdx]
mov rdx, qword [rdx + 8]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], rdx
lea rdx, [rbp - 0x30]
mov ecx, 0x22
sub rsp, 0x20
call fcn.14005a500
add rsp, 0x20
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
lea r8, [rbp - 0x20]
lea rbx, str.stdprocess.d
mov qword [rbp - 8], rbx
mov qword [rbp - 0x10], 0xd
lea rdx, [rbp - 0x10]
mov ecx, 0x57c
sub rsp, 0x20
call fcn.140024320
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.140019e30
test dword [rbp + 0x18], 2
jne 0x14005ab04
mov eax, dword [rbp - 0x2f8]
cmp eax, 2
jle 0x14005ab04
mov qword [rbp - 0x3d0], rax
sub rsp, 0x20
call fcn.140049b10
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.14005ade0
add rsp, 0x20
mov edx, eax
mov rax, qword [rbp - 0x3d0]
cmp eax, edx
je 0x14005ab04
mov rcx, qword [rbp + 0x38]
sub rsp, 0x20
call fcn.14002a670
add rsp, 0x20
test dword [rbp + 0x18], 4
jne 0x14005ab4a
mov ebx, dword [rbp - 0x2f4]
cmp ebx, 2
jle 0x14005ab4a
sub rsp, 0x20
call fcn.140049d60
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.14005ade0
add rsp, 0x20
cmp ebx, eax
je 0x14005ab4a
mov rcx, qword [rbp + 0x30]
sub rsp, 0x20
call fcn.14002a670
add rsp, 0x20
test dword [rbp + 0x18], 8
jne 0x14005aba0
mov eax, dword [rbp - 0x2f0]
cmp eax, 2
jle 0x14005aba0
mov qword [rbp - 0x3c8], rax
sub rsp, 0x20
call fcn.140049e10
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.14005ade0
add rsp, 0x20
mov edx, eax
mov rax, qword [rbp - 0x3c8]
cmp eax, edx
je 0x14005aba0
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
call fcn.14002a670
add rsp, 0x20
mov rcx, qword [rbp - 0x2a8]
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x20
test dword [rbp + 0x18], 0x40
je 0x14005ac81
mov rcx, qword [rbp - 0x2b0]
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x20
sub rsp, 0x20
call fcn.1400661f0
add rsp, 0x20
mov rsi, rax
mov edx, dword [rbp - 0x2a0]
mov rcx, rsi
sub rsp, 0x20
call fcn.140024310
add rsp, 0x20
mov qword [rbp - 0x3a0], rax
sub rsp, 8
call fcn.14005ad44
add rsp, 8
mov rax, qword [rbp - 0x3a0]
mov qword [rbp - 0x398], rax
sub rsp, 8
call fcn.14005ad68
add rsp, 8
mov rax, qword [rbp - 0x398]
mov qword [rbp - 0x390], rax
sub rsp, 8
call fcn.14005ad89
add rsp, 8
mov rax, qword [rbp - 0x390]
mov qword [rbp - 0x388], rax
sub rsp, 8
call fcn.14005adaa
add rsp, 8
mov rax, qword [rbp - 0x388]
mov rbx, qword [rbp - 0x3e8]
mov rsi, qword [rbp - 0x3e0]
mov rdi, qword [rbp - 0x3d8]
mov rsp, rbp
pop rbp
ret
sub rsp, 0x20
call fcn.1400661f0
add rsp, 0x20
mov rsi, rax
mov r8d, dword [rbp - 0x2a0]
mov rdx, qword [rbp - 0x2b0]
mov rcx, rsi
sub rsp, 0x20
call fcn.140024300
add rsp, 0x20
mov qword [rbp - 0x3c0], rax
sub rsp, 8
call fcn.14005ad44
add rsp, 8
mov rax, qword [rbp - 0x3c0]
mov qword [rbp - 0x3b8], rax
sub rsp, 8
call fcn.14005ad68
add rsp, 8
mov rax, qword [rbp - 0x3b8]
mov qword [rbp - 0x3b0], rax
sub rsp, 8
call fcn.14005ad89
add rsp, 8
mov rax, qword [rbp - 0x3b0]
mov qword [rbp - 0x3a8], rax
sub rsp, 8
call fcn.14005adaa
add rsp, 8
mov rax, qword [rbp - 0x3a8]
mov rbx, qword [rbp - 0x3e8]
mov rsi, qword [rbp - 0x3e0]
mov rdi, qword [rbp - 0x3d8]
mov rsp, rbp
pop rbp
ret