Function at 0x1400e28d0
Capabilities:
Create process on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x410
mov qword [rbp - 0x408], rbx
mov qword [rbp - 0x400], rsi
mov qword [rbp - 0x3f8], rdi
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x20], r8
mov qword [rbp + 0x28], r9
mov rbx, rdx
mov rcx, qword [rbp + 0x48]
sub rsp, 0x20
call fcn.14000c270
add rsp, 0x20
test al, al
je 0x1400e296f
lea rcx, [0x1401be430]
sub rsp, 0x20
call fcn.1400a9c50
add rsp, 0x20
mov rsi, rax
lea rax, str.Command_line_is_empty
mov qword [rbp - 0x398], rax
mov qword [rbp - 0x3a0], reloc.WS2_32.dll_setsockopt
lea r9, [rbp - 0x3a0]
mov r8d, 0x4d1
xor edx, edx
mov rcx, rsi
sub rsp, 0x20
call fcn.1400e76e0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1400b3dc0
mov rdx, qword [rbp + 0x20]
test ebx, 1
sete cl
sub rsp, 0x20
call fcn.1400fe030
add rsp, 0x20
mov qword [rbp - 0x390], rax
lea rsi, [0x14015f750]
lea rdi, [rbp - 0x380]
mov ecx, reloc.WS2_32.dll_listen
rep movsq qword [rdi], qword [rsi]
mov dword [rbp - 0x380], WSAGetLastError
mov eax, 0xffffffff
mov dword [rbp - 0x318], eax
mov dword [rbp - 0x314], eax
mov dword [rbp - 0x310], eax
sub rsp, 8
push qword [rbp + 0x38]
mov r9d, 0xfffffff6
lea rcx, str.stdin
mov qword [rbp - 0x2f8], rcx
mov qword [rbp - 0x300], 5
lea r8, [rbp - 0x300]
lea rdx, [rbp - 0x318]
lea rcx, [rbp - 0x330]
sub rsp, 0x20
call fcn.1400e3020
add rsp, 0x30
sub rsp, 8
push qword [rbp + 0x30]
mov r9d, 0xfffffff5
lea rax, str.stdout
mov qword [rbp - 0x2e8], rax
mov esi, 6
mov qword [rbp - 0x2f0], rsi
lea r8, [rbp - 0x2f0]
lea rdx, [rbp - 0x314]
lea rcx, [rbp - 0x328]
sub rsp, 0x20
call fcn.1400e3020
add rsp, 0x30
sub rsp, 8
push qword [rbp + 0x28]
mov r9d, 0xfffffff4
lea rax, str.stderr
mov qword [rbp - 0x2d8], rax
mov qword [rbp - 0x2e0], rsi
lea r8, [rbp - 0x2e0]
lea rdx, [rbp - 0x310]
lea rcx, [rbp - 0x320]
sub rsp, 0x20
call fcn.1400e3020
add rsp, 0x30
cmp qword [rbp - 0x330], 0
je 0x1400e2ab0
cmp qword [rbp - 0x330], 0xffffffffffffffff
jne 0x1400e2ad8
cmp qword [rbp - 0x328], 0
je 0x1400e2ac4
cmp qword [rbp - 0x328], 0xffffffffffffffff
jne 0x1400e2ad8
cmp qword [rbp - 0x320], 0
je 0x1400e2ae2
cmp qword [rbp - 0x320], 0xffffffffffffffff
je 0x1400e2ae2
mov dword [rbp - 0x344], 0x100
lea r9, [rbp - 0x2d0]
xor r10d, r10d
mov qword [r9], r10
mov qword [r9 + 8], r10
mov qword [r9 + 0x10], r10
test ebx, 0x10
mov esi, 0x8000000
jne 0x1400e2b06
xor esi, esi
or esi, 0x400
mov r8, qword [rbp + 0x10]
mov rdx, qword [r8 + 8]
mov rax, qword [r8]
mov qword [rbp - 0x1a0], rax
mov qword [rbp - 0x198], rdx
lea rdx, [rbp - 0x1a0]
lea rcx, [rbp - 0x2b0]
sub rsp, 0x20
call fcn.1400c90d0
add rsp, 0x20
mov r9, qword [rbp + 0x48]
mov rdx, qword [r9 + 8]
mov rax, qword [r9]
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rdx
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x190]
sub rsp, 0x20
call fcn.1400c90d0
add rsp, 0x20
lea r8, [rbp - 0x190]
mov rcx, r8
sub rsp, 0x20
call fcn.14000e7a0
add rsp, 0x20
mov rdi, rax
mov r9, qword [rbp - 0x390]
mov rdx, qword [rbp + 0x10]
cmp qword [rdx], 0
je 0x1400e2bac
lea rcx, [rbp - 0x2b0]
sub rsp, 0x20
call fcn.14000e7a0
add rsp, 0x20
jmp 0x1400e2bae
xor eax, eax
lea r8, [rbp - 0x380]
lea r9, [rbp - 0x2d0]
push r9
push r8
push rax
push qword [rbp - 0x390]
push rsi
push 1
xor r9d, r9d
mov r8, r9
mov rdx, rdi
mov rcx, r8
sub rsp, 0x20
call sub.KERNEL32.dll_CreateProcessW
add rsp, 0x50
test eax, eax
sete r10b
mov byte [rbp - 0x70], r10b
lea rcx, [rbp - 0x190]
sub rsp, 0x20
call fcn.14000e7b0
add rsp, 0x20
cmp byte [rbp - 0x70], 0
je 0x1400e2caf
lea rax, str.Failed_to_spawn_process__
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x60], 0x19
mov rdx, qword [rbp + 0x40]
mov rax, qword [rdx]
mov rdx, qword [rdx + 8]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
lea rbx, [0x14015ccc0]
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x40], 1
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x30], 3
lea rdx, [rbp - 0x30]
lea rcx, [0x140183520]
sub rsp, 0x20
call fcn.1400b0960
add rsp, 0x20
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
lea r8, [rbp - 0x20]
lea rax, str.stdprocess.d
mov qword [rbp - 8], rax
mov qword [rbp - 0x10], reloc.WS2_32.dll_listen
lea rdx, [rbp - 0x10]
mov ecx, 0x50e
sub rsp, 0x20
call fcn.1400d8fc0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1400b3dc0
test ebx, 2
jne 0x1400e2d04
mov eax, dword [rbp - 0x318]
cmp eax, 2
jle 0x1400e2d04
mov qword [rbp - 0x3f0], rax
sub rsp, 0x20
call fcn.1400c86c0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1400e2ff0
add rsp, 0x20
mov edx, eax
mov rax, qword [rbp - 0x3f0]
cmp eax, edx
je 0x1400e2d04
mov rcx, qword [rbp + 0x38]
sub rsp, 0x20
call fcn.1400ae560
add rsp, 0x20
test ebx, 4
jne 0x1400e2d49
mov esi, dword [rbp - 0x314]
cmp esi, 2
jle 0x1400e2d49
sub rsp, 0x20
call fcn.1400bdf40
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1400e2ff0
add rsp, 0x20
cmp esi, eax
je 0x1400e2d49
mov rcx, qword [rbp + 0x30]
sub rsp, 0x20
call fcn.1400ae560
add rsp, 0x20
test ebx, 8
jne 0x1400e2d9e
mov eax, dword [rbp - 0x310]
cmp eax, 2
jle 0x1400e2d9e
mov qword [rbp - 0x3e8], rax
sub rsp, 0x20
call fcn.1400c8920
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1400e2ff0
add rsp, 0x20
mov edx, eax
mov rax, qword [rbp - 0x3e8]
cmp eax, edx
je 0x1400e2d9e
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
call fcn.1400ae560
add rsp, 0x20
mov rcx, qword [rbp - 0x2c8]
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x20
test ebx, 0x40
je 0x1400e2e85
mov rcx, qword [rbp - 0x2d0]
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x20
lea rcx, [0x1401b36c0]
sub rsp, 0x20
call fcn.1400a9c50
add rsp, 0x20
mov rsi, rax
mov edx, dword [rbp - 0x2c0]
mov rcx, rsi
sub rsp, 0x20
call fcn.1400d8fb0
add rsp, 0x20
mov qword [rbp - 0x3c0], rax
sub rsp, 8
call fcn.1400e2f4f
add rsp, 8
mov rax, qword [rbp - 0x3c0]
mov qword [rbp - 0x3b8], rax
sub rsp, 8
call fcn.1400e2f73
add rsp, 8
mov rax, qword [rbp - 0x3b8]
mov qword [rbp - 0x3b0], rax
sub rsp, 8
call fcn.1400e2f94
add rsp, 8
mov rax, qword [rbp - 0x3b0]
mov qword [rbp - 0x3a8], rax
sub rsp, 8
call fcn.1400e2fb5
add rsp, 8
mov rax, qword [rbp - 0x3a8]
mov rbx, qword [rbp - 0x408]
mov rsi, qword [rbp - 0x400]
mov rdi, qword [rbp - 0x3f8]
mov rsp, rbp
pop rbp
ret
lea rcx, [0x1401b36c0]
sub rsp, 0x20
call fcn.1400a9c50
add rsp, 0x20
mov rsi, rax
mov r8d, dword [rbp - 0x2c0]
mov rdx, qword [rbp - 0x2d0]
mov rcx, rsi
sub rsp, 0x20
call fcn.1400d8fa0
add rsp, 0x20
mov qword [rbp - 0x3e0], rax
sub rsp, 8
call fcn.1400e2f4f
add rsp, 8
mov rax, qword [rbp - 0x3e0]
mov qword [rbp - 0x3d8], rax
sub rsp, 8
call fcn.1400e2f73
add rsp, 8
mov rax, qword [rbp - 0x3d8]
mov qword [rbp - 0x3d0], rax
sub rsp, 8
call fcn.1400e2f94
add rsp, 8
mov rax, qword [rbp - 0x3d0]
mov qword [rbp - 0x3c8], rax
sub rsp, 8
call fcn.1400e2fb5
add rsp, 8
mov rax, qword [rbp - 0x3c8]
mov rbx, qword [rbp - 0x408]
mov rsi, qword [rbp - 0x400]
mov rdi, qword [rbp - 0x3f8]
mov rsp, rbp
pop rbp
ret