Function at 0x14000fe80
Capabilities:
Create process on windows

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x3c0
mov qword [rbp - 0x3b8], rbx
mov qword [rbp - 0x3b0], rsi
mov qword [rbp - 0x3a8], rdi
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x20], r8
mov qword [rbp + 0x28], r9
mov rbx, rdx
mov rcx, qword [rbp + 0x40]
sub rsp, 0x20
call fcn.140012870
add rsp, 0x20
test al, al
je 0x14000ff1f
lea rcx, [0x1402173a0]
sub rsp, 0x20
call fcn.140009690
add rsp, 0x20
mov rsi, rax
lea rax, str.Command_line_is_empty
mov qword [rbp - 0x348], rax
mov qword [rbp - 0x350], 0x15
lea r9, [rbp - 0x350]
mov r8d, 0x4ba
xor edx, edx
mov rcx, rsi
sub rsp, 0x20
call fcn.14001f7f0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.140007bc0
mov rdx, qword [rbp + 0x20]
test ebx, 1
sete cl
sub rsp, 0x20
call fcn.14001f880
add rsp, 0x20
mov qword [rbp - 0x20], rax
lea rsi, [0x1400ad360]
lea rdi, [rbp - 0x2d0]
mov ecx, 0xd
rep movsq qword [rdi], qword [rsi]
mov dword [rbp - 0x2d0], 0x68
mov eax, 0xffffffff
mov dword [rbp - 0x10], eax
mov dword [rbp - 0x14], eax
mov dword [rbp - 0x18], eax
sub rsp, 8
push qword [rbp + 0x38]
mov r9d, 0xfffffff6
lea rcx, str.stdin
mov qword [rbp - 0x2e8], rcx
mov qword [rbp - 0x2f0], 5
lea r8, [rbp - 0x2f0]
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x280]
sub rsp, 0x20
call fcn.140010560
add rsp, 0x30
sub rsp, 8
push qword [rbp + 0x30]
mov r9d, 0xfffffff5
lea rax, str.stdout
mov qword [rbp - 0x2f8], rax
mov esi, 6
mov qword [rbp - 0x300], rsi
lea r8, [rbp - 0x300]
lea rdx, [rbp - 0x14]
lea rcx, [rbp - 0x278]
sub rsp, 0x20
call fcn.140010560
add rsp, 0x30
sub rsp, 8
push qword [rbp + 0x28]
mov r9d, 0xfffffff4
lea rax, str.stderr
mov qword [rbp - 0x308], rax
mov qword [rbp - 0x310], rsi
lea r8, [rbp - 0x310]
lea rdx, [rbp - 0x18]
lea rcx, [rbp - 0x270]
sub rsp, 0x20
call fcn.140010560
add rsp, 0x30
cmp qword [rbp - 0x280], 0
je 0x14001004b
cmp qword [rbp - 0x280], 0xffffffffffffffff
jne 0x140010073
cmp qword [rbp - 0x278], 0
je 0x14001005f
cmp qword [rbp - 0x278], 0xffffffffffffffff
jne 0x140010073
cmp qword [rbp - 0x270], 0
je 0x14001007d
cmp qword [rbp - 0x270], 0xffffffffffffffff
je 0x14001007d
mov dword [rbp - 0x294], 0x100
lea r9, [rbp - 0x260]
xor r10d, r10d
mov qword [r9], r10
mov qword [r9 + 8], r10
mov qword [r9 + 0x10], r10
test ebx, 0x10
mov esi, 0x8000000
jne 0x1400100a1
xor esi, esi
or esi, 0x400
mov r8, qword [rbp + 0x10]
mov rdx, qword [r8 + 8]
mov rax, qword [r8]
mov qword [rbp - 0x320], rax
mov qword [rbp - 0x318], rdx
lea rdx, [rbp - 0x320]
lea rcx, [rbp - 0x240]
sub rsp, 0x20
call fcn.14000f370
add rsp, 0x20
mov r9, qword [rbp + 0x40]
mov rdx, qword [r9 + 8]
mov rax, qword [r9]
mov qword [rbp - 0x330], rax
mov qword [rbp - 0x328], rdx
lea rdx, [rbp - 0x330]
lea rcx, [rbp - 0x130]
sub rsp, 0x20
call fcn.14000f370
add rsp, 0x20
lea r8, [rbp - 0x130]
mov rcx, r8
sub rsp, 0x20
call fcn.1400028a0
add rsp, 0x20
mov rdi, rax
mov r9, qword [rbp - 0x20]
mov rdx, qword [rbp + 0x10]
cmp qword [rdx], 0
je 0x14001014d
lea rcx, [rbp - 0x240]
sub rsp, 0x20
call fcn.1400028b0
add rsp, 0x20
jmp 0x14001014f
xor eax, eax
lea r8, [rbp - 0x2d0]
lea r9, [rbp - 0x260]
push r9
push r8
push rax
push qword [rbp - 0x20]
push rsi
push 1
xor r9d, r9d
mov r8, r9
mov rdx, rdi
mov rcx, r8
sub rsp, 0x20
call sub.KERNEL32.dll_CreateProcessW
add rsp, 0x50
test eax, eax
sete r10b
mov byte [rbp - 0xc], r10b
lea rcx, [rbp - 0x130]
sub rsp, 0x20
call fcn.1400028c0
add rsp, 0x20
cmp byte [rbp - 0xc], 0
je 0x140010205
lea rax, str.Failed_to_spawn_new_process
mov qword [rbp - 0x338], rax
mov qword [rbp - 0x340], 0x1b
lea r8, [rbp - 0x340]
lea rdx, str.stdprocess.d
mov qword [rbp - 0x2d8], rdx
mov qword [rbp - 0x2e0], 0xd
lea rdx, [rbp - 0x2e0]
mov ecx, 0x4f7
sub rsp, 0x20
call fcn.14001dd30
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.140007bc0
test ebx, 2
jne 0x140010257
mov eax, dword [rbp - 0x10]
cmp eax, 2
jle 0x140010257
mov qword [rbp - 0x3a0], rax
sub rsp, 0x20
call fcn.1400057e0
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.140010530
add rsp, 0x20
mov edx, eax
mov rax, qword [rbp - 0x3a0]
cmp eax, edx
je 0x140010257
mov rcx, qword [rbp + 0x38]
sub rsp, 0x20
call fcn.140006480
add rsp, 0x20
test ebx, 4
jne 0x140010299
mov esi, dword [rbp - 0x14]
cmp esi, 2
jle 0x140010299
sub rsp, 0x20
call fcn.140007050
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.140010530
add rsp, 0x20
cmp esi, eax
je 0x140010299
mov rcx, qword [rbp + 0x30]
sub rsp, 0x20
call fcn.140006480
add rsp, 0x20
test ebx, 8
jne 0x1400102eb
mov eax, dword [rbp - 0x18]
cmp eax, 2
jle 0x1400102eb
mov qword [rbp - 0x398], rax
sub rsp, 0x20
call fcn.140007100
add rsp, 0x20
mov rcx, rax
sub rsp, 0x20
call fcn.140010530
add rsp, 0x20
mov edx, eax
mov rax, qword [rbp - 0x398]
cmp eax, edx
je 0x1400102eb
mov rcx, qword [rbp + 0x28]
sub rsp, 0x20
call fcn.140006480
add rsp, 0x20
mov rcx, qword [rbp - 0x258]
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x20
test ebx, 0x40
je 0x1400103d2
mov rcx, qword [rbp - 0x260]
sub rsp, 0x20
call sub.KERNEL32.dll_CloseHandle
add rsp, 0x20
lea rcx, [0x140216ca0]
sub rsp, 0x20
call fcn.140009690
add rsp, 0x20
mov rsi, rax
mov edx, dword [rbp - 0x250]
mov rcx, rsi
sub rsp, 0x20
call fcn.14001dca0
add rsp, 0x20
mov qword [rbp - 0x370], rax
sub rsp, 8
call fcn.14001049c
add rsp, 8
mov rax, qword [rbp - 0x370]
mov qword [rbp - 0x368], rax
sub rsp, 8
call fcn.1400104c0
add rsp, 8
mov rax, qword [rbp - 0x368]
mov qword [rbp - 0x360], rax
sub rsp, 8
call fcn.1400104e1
add rsp, 8
mov rax, qword [rbp - 0x360]
mov qword [rbp - 0x358], rax
sub rsp, 8
call fcn.140010502
add rsp, 8
mov rax, qword [rbp - 0x358]
mov rbx, qword [rbp - 0x3b8]
mov rsi, qword [rbp - 0x3b0]
mov rdi, qword [rbp - 0x3a8]
mov rsp, rbp
pop rbp
ret
lea rcx, [0x140216ca0]
sub rsp, 0x20
call fcn.140009690
add rsp, 0x20
mov rsi, rax
mov r8d, dword [rbp - 0x250]
mov rdx, qword [rbp - 0x260]
mov rcx, rsi
sub rsp, 0x20
call fcn.14001dc90
add rsp, 0x20
mov qword [rbp - 0x390], rax
sub rsp, 8
call fcn.14001049c
add rsp, 8
mov rax, qword [rbp - 0x390]
mov qword [rbp - 0x388], rax
sub rsp, 8
call fcn.1400104c0
add rsp, 8
mov rax, qword [rbp - 0x388]
mov qword [rbp - 0x380], rax
sub rsp, 8
call fcn.1400104e1
add rsp, 8
mov rax, qword [rbp - 0x380]
mov qword [rbp - 0x378], rax
sub rsp, 8
call fcn.140010502
add rsp, 8
mov rax, qword [rbp - 0x378]
mov rbx, qword [rbp - 0x3b8]
mov rsi, qword [rbp - 0x3b0]
mov rdi, qword [rbp - 0x3a8]
mov rsp, rbp
pop rbp
ret