Function at 0x18003a4c0
Capabilities:
Check internet connectivity via wininet
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
xor edi, edi
mov rsi, r9
mov ebx, edi
mov r12, r8
mov dword [rsp + 0xb8], ebx
mov r13, rcx
mov ebp, 1
test r9, r9
je 0x18003a5f7
mov rdx, r8
lea rcx, [rsp + 0x48]
call fcn.18001f0e0
cmp dword [rax + 0xc], ebx
je 0x18003a512
mov r14, qword [rax]
jmp 0x18003a515
mov r14, rdi
mov dword [rsp + 0x28], edi
mov r9d, 0xffffffff
mov r8, rsi
mov qword [rsp + 0x20], rdi
xor edx, edx
mov qword [rsp + 0x30], rdi
mov ecx, 0xfde9
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x40], 0x1000
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movzx r8d, bpl
lea rcx, [rsp + 0x30]
cmp eax, ebp
cmovl eax, ebp
lea edx, [rax + rax]
call fcn.1800126d0
mov eax, dword [rsp + 0x3c]
mov r15, rdi
mov rbp, qword [rsp + 0x30]
mov ebx, eax
shr ebx, 1
mov r9d, 0xffffffff
test eax, eax
mov dword [rsp + 0x28], edi
mov r8, rsi
mov qword [rsp + 0x20], rdi
cmovne r15, rbp
mov ecx, 0xfde9
xor edx, edx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, 1
mov ecx, 1
cmovl eax, ecx
cmp eax, ebx
jg 0x18003a5c3
mov dword [rsp + 0x28], eax
mov r9d, 0xffffffff
mov r8, rsi
mov qword [rsp + 0x20], r15
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x18003a5c7
mov word [r15], di
cmp dword [rsp + 0x3c], edi
mov rdx, rdi
mov rcx, qword [r13 + 0x4a8]
mov r9d, 4
cmovne rdx, rbp
mov r8, r14
mov ebx, 3
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x18003a5fc
mov sil, 1
jmp 0x18003a5ff
mov rbp, qword [rsp + 0x30]
xor sil, sil
test bl, 2
je 0x18003a60f
and ebx, 0xfffffffd
mov rcx, rbp
call fcn.1800e1170
test bl, 1
je 0x18003a61e
mov rcx, qword [rsp + 0x48]
call fcn.1800e1170
test sil, sil
jne 0x18003a7ba
xor edx, edx
mov dword [rsp + 0xb8], edi
lea rcx, [rsp + 0xb8]
call qword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x18003a6a4
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsp + 0x48]
call fcn.18001f0e0
cmp dword [rax + 0xc], edi
je 0x18003a65e
mov r8, qword [rax]
jmp 0x18003a661
mov r8, rdi
mov rcx, qword [r13 + 0x4a8]
lea rdx, [0x180132d98]
mov r14d, 1
xor r9d, r9d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rdi
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rcx, qword [rsp + 0x48]
mov rbx, rax
call fcn.1800e1170
cmp rbx, 0x20
jbe 0x18003a6aa
movzx eax, r14b
jmp 0x18003a7bc
mov r14d, 1
mov rsi, qword [rsp + 0xc0]
test rsi, rsi
je 0x18003a7ba
mov rdx, r12
lea rcx, [rsp + 0x48]
call fcn.18001f0e0
cmp dword [rax + 0xc], edi
je 0x18003a6d2
mov rbp, qword [rax]
jmp 0x18003a6d5
mov rbp, rdi
mov dword [rsp + 0x28], edi
mov r9d, 0xffffffff
mov r8, rsi
mov qword [rsp + 0x20], rdi
xor edx, edx
mov qword [rsp + 0x30], rdi
mov ecx, 0xfde9
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x40], 0x1000
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r8b, 1
lea rcx, [rsp + 0x30]
cmp eax, 1
cmovl eax, r14d
lea edx, [rax + rax]
call fcn.1800126d0
mov r12d, dword [rsp + 0x3c]
mov r14, rdi
mov r15, qword [rsp + 0x30]
mov ebx, r12d
shr ebx, 1
mov r9d, 0xffffffff
test r12d, r12d
mov dword [rsp + 0x28], edi
mov r8, rsi
mov qword [rsp + 0x20], rdi
cmovne r14, r15
mov ecx, 0xfde9
xor edx, edx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, 1
mov ecx, 1
cmovl eax, ecx
cmp eax, ebx
jg 0x18003a787
mov dword [rsp + 0x28], eax
mov r9d, 0xffffffff
mov r8, rsi
mov qword [rsp + 0x20], r14
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x18003a78b
mov word [r14], di
mov rcx, qword [r13 + 0x4a8]
test r12d, r12d
mov r8, rbp
cmovne rdi, r15
xor r9d, r9d
mov rdx, rdi
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rcx, r15
call fcn.1800e1170
mov rcx, qword [rsp + 0x48]
call fcn.1800e1170
xor al, al
mov rbx, qword [rsp + 0xa0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret