Function at 0x18000e350
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Read file on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
movaps xmmword [rsp + 0x2d0], xmm6
mov rax, qword [0x180076100]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r14, rdx
mov rdi, rcx
mov qword [rbp + 0x28], rcx
xor r15d, r15d
mov edx, 0x55
mov r8d, 0x56
lea rcx, [rsp + 0x58]
call fcn.180013cc0
nop
mov rdx, rax
lea rcx, [rbp + 0x118]
call fcn.180006600
xor ecx, ecx
call fcn.180035e70
mov ecx, eax
call fcn.180032198
lea rbx, [rbp + 0x118]
cmp qword [rbp + 0x130], 0xf
cmova rbx, qword [rbp + 0x118]
lea rcx, [rbp + 0x118]
cmova rcx, qword [rbp + 0x118]
mov rsi, qword [rbp + 0x128]
add rsi, rcx
cmp rbx, rsi
je 0x18000e422
nop dword [rax]
call fcn.18003216c
test al, 1
movsx ecx, byte [rbx]
je 0x18000e413
call fcn.180032444
jmp 0x18000e418
call fcn.180032418
mov byte [rbx], al
inc rbx
cmp rbx, rsi
jne 0x18000e400
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x18000e45f
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e45a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eacd
call fcn.18002825c
movdqa xmm6, xmmword [0x18006b5f0]
movdqu xmmword [rsp + 0x68], xmm6
mov byte [rsp + 0x58], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
mov r8d, 1
lea rdx, [0x18005f7c4]
lea rcx, [rbp - 0x80]
call fcn.180006de0
nop
mov rdx, r14
lea rcx, [rbp - 0x40]
call fcn.180006600
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8d, 2
lea rdx, [0x18005f7c8]
lea rcx, [rsp + 0x58]
call fcn.180006de0
nop
lea rdx, [rbp + 0x118]
lea rcx, [rbp - 0x60]
call fcn.180006600
nop
lea r9, [rsp + 0x58]
mov r8, rax
lea rcx, [rbp]
call fcn.180007070
nop
mov r9, rbx
lea r8, [rbp]
lea rcx, [rbp - 0x20]
call fcn.180007070
nop
lea r9, [rbp - 0x80]
lea r8, [rbp - 0x20]
lea rcx, [rbp + 0xf8]
call fcn.180007070
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x18000e555
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e54f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ead3
call fcn.18002825c
nop
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x18000e591
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e58b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ead9
call fcn.18002825c
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x18000e5cc
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e5c7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eadf
call fcn.18002825c
movdqu xmmword [rbp - 0x50], xmm6
mov byte [rbp - 0x60], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x18000e613
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e60d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eae5
call fcn.18002825c
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x18000e64e
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e649
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eaeb
call fcn.18002825c
movdqu xmmword [rbp - 0x30], xmm6
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x18000e692
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e68d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eaf1
call fcn.18002825c
xorps xmm0, xmm0
movups xmmword [rbp + 0xd8], xmm0
movdqu xmmword [rbp + 0xe8], xmm6
mov byte [rbp + 0xd8], 0
mov dword [rbp + 0x48], 0x18
mov qword [rbp + 0x50], r15
mov dword [rbp + 0x58], 1
xor r9d, r9d
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x28]
lea rcx, [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_CreatePipe]
xorps xmm0, xmm0
test eax, eax
jne 0x18000e80d
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
xor r8d, r8d
lea rdx, [0x18005f688]
mov rcx, rdi
call fcn.180006de0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x18000e73c
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e737
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eac1
call fcn.18002825c
mov byte [rbp + 0xd8], 0
movdqu xmmword [rbp + 0xe8], xmm6
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x18000e78c
inc rdx
mov rcx, qword [rbp + 0xf8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x18000e787
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eaf7
call fcn.18002825c
movdqu xmmword [rbp + 0x108], xmm6
mov byte [rbp + 0xf8], 0
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x18000e7dc
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e7d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eac7
call fcn.18002825c
mov rax, rdi
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.180028200
mov rbx, qword [rsp + 0x320]
movaps xmm6, xmmword [rsp + 0x2d0]
add rsp, 0x2e0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov dword [rbp + 0x60], 0x68
movups xmmword [rbp + 0x68], xmm0
movups xmmword [rbp + 0x78], xmm0
movups xmmword [rbp + 0x88], xmm0
movups xmmword [rbp + 0x98], xmm0
movups xmmword [rbp + 0xa8], xmm0
movups xmmword [rbp + 0xb8], xmm0
mov dword [rbp + 0x9c], 0x101
mov word [rbp + 0xa0], r15w
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 0xc0], rax
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
lea rdx, [rbp + 0xf8]
cmp qword [rbp + 0x110], 0xf
cmova rdx, qword [rbp + 0xf8]
lea rax, [rbp + 0x30]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rbp + 0x28]
test eax, eax
jne 0x18000e939
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r15
mov qword [rdi + 0x18], r15
xor r8d, r8d
lea rdx, [0x18005f688]
mov rcx, rdi
call fcn.180006de0
nop
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0xf
jbe 0x18000e73c
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e737
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eac1
jmp 0x18000e737
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0xd0]
mov r8d, 0x7f
lea rdx, [rbp + 0x140]
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x18000e9e4
nop word [rax + rax]
mov eax, dword [rbp + 0xd0]
cmp rax, 0x80
jae 0x18000eabb
mov byte [rbp + rax + 0x140], 0
lea rax, [rbp + 0x140]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x18000e9a0
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0xd8]
call fcn.180006880
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0xd0]
mov r8d, 0x7f
lea rdx, [rbp + 0x140]
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x18000e970
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movups xmm0, xmmword [rbp + 0xd8]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbp + 0xe8]
movups xmmword [rdi + 0x10], xmm1
movdqu xmmword [rbp + 0xe8], xmm6
mov byte [rbp + 0xd8], 0
mov rdx, qword [rbp + 0x110]
cmp rdx, 0xf
jbe 0x18000ea67
inc rdx
mov rcx, qword [rbp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ea62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eaf7
call fcn.18002825c
movdqu xmmword [rbp + 0x108], xmm6
mov byte [rbp + 0xf8], 0
mov rdx, qword [rbp + 0x130]
cmp rdx, 0xf
jbe 0x18000e7dc
inc rdx
mov rcx, qword [rbp + 0x118]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000e7d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000eac7
jmp 0x18000e7d7
call fcn.180028398
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
nop
call fcn.18002e4dc
int3