Function at 0x14002bd70
Capabilities:
Create process on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x410
mov qword [rbp - 0x408], rbx
mov qword [rbp - 0x400], rsi
mov qword [rbp - 0x3f8], rdi
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x20], r8
mov qword [rbp + 0x28], r9
mov rbx, rdx
mov rcx, qword [rbp + 0x48]
sub rsp, 0x20
call fcn.1400058c0
add rsp, 0x20
test al, al
je 0x14002be0f
lea rcx, [0x1400c3cb0]
sub rsp, 0x20
call fcn.140010940
add rsp, 0x20
mov rsi, rax
lea rax, str.Command_line_is_empty
mov qword [rbp - 0x398], rax
mov qword [rbp - 0x3a0], 0x15
lea r9, [rbp - 0x3a0]
mov r8d, 0x4d1
xor edx, edx
mov rcx, rsi
sub rsp, 0x20
call fcn.1400301c0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1400109f0
mov rdx, qword [rbp + 0x20]
test ebx, 1
sete cl
sub rsp, 0x20
call fcn.1400396b0
add rsp, 0x20
mov qword [rbp - 0x390], rax
lea rsi, [0x1400a9300]
lea rdi, [rbp - 0x380]
mov ecx, 0xd
rep movsq qword [rdi], qword [rsi]
mov dword [rbp - 0x380], 0x68
mov eax, 0xffffffff
mov dword [rbp - 0x318], eax
mov dword [rbp - 0x314], eax
mov dword [rbp - 0x310], eax
sub rsp, 8
push qword [rbp + 0x38]
mov r9d, 0xfffffff6
lea rcx, str.stdin
mov qword [rbp - 0x2f8], rcx
mov qword [rbp - 0x300], 5
lea r8, [rbp - 0x300]
lea rdx, [rbp - 0x318]
lea rcx, [rbp - 0x330]
sub rsp, 0x20
call fcn.14002c4c0
add rsp, 0x30
sub rsp, 8
push qword [rbp + 0x30]
mov r9d, 0xfffffff5
lea rax, str.stdout
mov qword [rbp - 0x2e8], rax
mov esi, 6
mov qword [rbp - 0x2f0], rsi
lea r8, [rbp - 0x2f0]
lea rdx, [rbp - 0x314]
lea rcx, [rbp - 0x328]
sub rsp, 0x20
call fcn.14002c4c0
add rsp, 0x30
sub rsp, 8
push qword [rbp + 0x28]
mov r9d, 0xfffffff4
lea rax, str.stderr
mov qword [rbp - 0x2d8], rax
mov qword [rbp - 0x2e0], rsi
lea r8, [rbp - 0x2e0]
lea rdx, [rbp - 0x310]
lea rcx, [rbp - 0x320]
sub rsp, 0x20
call fcn.14002c4c0
add rsp, 0x30
cmp qword [rbp - 0x330], 0
je 0x14002bf50
cmp qword [rbp - 0x330], 0xffffffffffffffff
jne 0x14002bf78
cmp qword [rbp - 0x328], 0
je 0x14002bf64
cmp qword [rbp - 0x328], 0xffffffffffffffff
jne 0x14002bf78
cmp qword [rbp - 0x320], 0
je 0x14002bf82
cmp qword [rbp - 0x320], 0xffffffffffffffff
je 0x14002bf82
mov dword [rbp - 0x344], 0x100
lea r9, [rbp - 0x2d0]
xor r10d, r10d
mov qword [r9], r10
mov qword [r9 + 8], r10
mov qword [r9 + 0x10], r10
test ebx, 0x10
mov esi, 0x8000000
jne 0x14002bfa6
xor esi, esi
or esi, 0x400
mov r8, qword [rbp + 0x10]
mov rdx, qword [r8 + 8]
mov rax, qword [r8]
mov qword [rbp - 0x1a0], rax
mov qword [rbp - 0x198], rdx
lea rdx, [rbp - 0x1a0]
lea rcx, [rbp - 0x2b0]
sub rsp, 0x20
call fcn.14001a170
add rsp, 0x20
mov r9, qword [rbp + 0x48]
mov rdx, qword [r9 + 8]
mov rax, qword [r9]
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rdx
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x190]
sub rsp, 0x20
call fcn.14001a170
add rsp, 0x20
lea r8, [rbp - 0x190]
mov rcx, r8
sub rsp, 0x20
call fcn.14000b2c0
add rsp, 0x20
mov rdi, rax
mov r9, qword [rbp - 0x390]
mov rdx, qword [rbp + 0x10]
cmp qword [rdx], 0
je 0x14002c04c
lea rcx, [rbp - 0x2b0]
sub rsp, 0x20
call fcn.14000b2c0
add rsp, 0x20
jmp 0x14002c04e
xor eax, eax
lea r8, [rbp - 0x380]
lea r9, [rbp - 0x2d0]
push r9
push r8
push rax
push qword [rbp - 0x390]
push rsi
push 1
xor r9d, r9d
mov r8, r9
mov rdx, rdi
mov rcx, r8
sub rsp, 0x20
call sub.KERNEL32.dll_CreateProcessW
add rsp, 0x50
test eax, eax
sete r10b
mov byte [rbp - 0x70], r10b
lea rcx, [rbp - 0x190]
sub rsp, 0x20
call fcn.14000b2d0
add rsp, 0x20
cmp byte [rbp - 0x70], 0
je 0x14002c14f
lea rax, str.Failed_to_spawn_process__
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x60], 0x19
mov rdx, qword [rbp + 0x40]
mov rax, qword [rdx]
mov rdx, qword [rdx + 8]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rdx
lea rbx, [0x1400a8a40]
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x40], 1
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x30], 3
lea rdx, [rbp - 0x30]
lea rcx, [0x1400ba4d0]
sub rsp, 0x20
call fcn.14000fbf0
add rsp, 0x20
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x18], rdx
lea r8, [rbp - 0x20]
lea rax, str.stdprocess.d
mov qword [rbp - 8], rax
mov qword [rbp - 0x10], 0xd
lea rdx, [rbp - 0x10]
mov ecx, 0x50e
sub rsp, 0x20
call fcn.14002b1c0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.1400109f0
test ebx, 2
jne 0x14002c1a4
mov eax, dword [rbp - 0x318]
cmp eax, 2
jle 0x14002c1a4
mov qword [rbp - 0x3f0], rax
sub rsp, 0x20
call fcn.140019510
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.14002c490
add rsp, 0x20
mov edx, eax
mov rax, qword [rbp - 0x3f0]
cmp eax, edx
je 0x14002c1a4
mov rcx, qword [rbp + 0x38]
sub rsp, 0x20
call fcn.14000dea0
add rsp, 0x20
test ebx, 4
jne 0x14002c1e9
mov esi, dword [rbp - 0x314]
cmp esi, 2
jle 0x14002c1e9
sub rsp, 0x20
call fcn.140019770
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.14002c490
add rsp, 0x20
cmp esi, eax
je 0x14002c1e9
mov rcx, qword [rbp + 0x30]
sub rsp, 0x20
call fcn.14000dea0
add rsp, 0x20
test ebx, 8
jne 0x14002c23e
mov eax, dword [rbp - 0x310]
cmp eax, 2
jle 0x14002c23e
mov qword [rbp - 0x3e8], rax
sub rsp, 0x20
call fcn.140019820
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.14002c490
add rsp, 0x20
mov edx, eax
mov rax, qword [rbp - 0x3e8]
cmp eax, edx
je 0x14002c23e
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
call fcn.14000dea0
add rsp, 0x20
mov rcx, qword [rbp - 0x2c8]
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x20
test ebx, 0x40
je 0x14002c325
mov rcx, qword [rbp - 0x2d0]
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x20
lea rcx, [0x1400c2700]
sub rsp, 0x20
call fcn.140010940
add rsp, 0x20
mov rsi, rax
mov edx, dword [rbp - 0x2c0]
mov rcx, rsi
sub rsp, 0x20
call fcn.14002b1b0
add rsp, 0x20
mov qword [rbp - 0x3c0], rax
sub rsp, 8
call fcn.14002c3ef
add rsp, 8
mov rax, qword [rbp - 0x3c0]
mov qword [rbp - 0x3b8], rax
sub rsp, 8
call fcn.14002c413
add rsp, 8
mov rax, qword [rbp - 0x3b8]
mov qword [rbp - 0x3b0], rax
sub rsp, 8
call fcn.14002c434
add rsp, 8
mov rax, qword [rbp - 0x3b0]
mov qword [rbp - 0x3a8], rax
sub rsp, 8
call fcn.14002c455
add rsp, 8
mov rax, qword [rbp - 0x3a8]
mov rbx, qword [rbp - 0x408]
mov rsi, qword [rbp - 0x400]
mov rdi, qword [rbp - 0x3f8]
mov rsp, rbp
pop rbp
ret
lea rcx, [0x1400c2700]
sub rsp, 0x20
call fcn.140010940
add rsp, 0x20
mov rsi, rax
mov r8d, dword [rbp - 0x2c0]
mov rdx, qword [rbp - 0x2d0]
mov rcx, rsi
sub rsp, 0x20
call fcn.14002b1a0
add rsp, 0x20
mov qword [rbp - 0x3e0], rax
sub rsp, 8
call fcn.14002c3ef
add rsp, 8
mov rax, qword [rbp - 0x3e0]
mov qword [rbp - 0x3d8], rax
sub rsp, 8
call fcn.14002c413
add rsp, 8
mov rax, qword [rbp - 0x3d8]
mov qword [rbp - 0x3d0], rax
sub rsp, 8
call fcn.14002c434
add rsp, 8
mov rax, qword [rbp - 0x3d0]
mov qword [rbp - 0x3c8], rax
sub rsp, 8
call fcn.14002c455
add rsp, 8
mov rax, qword [rbp - 0x3c8]
mov rbx, qword [rbp - 0x408]
mov rsi, qword [rbp - 0x400]
mov rdi, qword [rbp - 0x3f8]
mov rsp, rbp
pop rbp
ret