Function at 0x1800045d0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x180d7e0c0]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov ebx, edx
xor esi, esi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rax
movups xmmword [rbp - 0x78], xmm0
mov qword [rbp - 0x68], rax
mov dword [rbp - 0x40], 0x68
mov r14d, 1
mov dword [rbp - 4], r14d
mov word [rbp], si
mov edi, esi
mov eax, 0x10
test edx, edx
cmove edi, eax
lea rax, [0x18005b710]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], 0xd
mov rdx, rcx
cmp qword [rcx + 0x18], 7
jbe 0x180004668
mov rdx, qword [rcx]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rax
movups xmm0, xmmword [rsp + 0x50]
movups xmmword [rsp + 0x78], xmm0
movabs rax, 0xc000000000000000
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x50], r14
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
movaps xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm1
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.18000c370
lea rdx, [rbp - 0x60]
cmp qword [rbp - 0x48], 7
cmova rdx, qword [rbp - 0x60]
lea rax, [rbp - 0x78]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x180004712
xor bl, bl
jmp 0x180004809
mov rcx, qword [rbp - 0x78]
test ebx, ebx
je 0x180004726
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x50]
call fcn.180002230
mov rbx, qword [rsp + 0x50]
movabs rax, 0x7fffffffc46535ff
cmp rbx, rax
jge 0x18000475d
add rbx, 0x3b9aca00
jmp 0x180004767
movabs rbx, 0x7fffffffffffffff
movabs rdi, 0x4e94914f0000
movabs rsi, 0x431bde82d7b634db
nop dword [rax + rax]
lea rcx, [rsp + 0x50]
call fcn.180002230
mov rax, qword [rsp + 0x50]
cmp rbx, rax
je 0x180004807
mov ecx, 0xff
cmovge ecx, r14d
test cl, cl
jle 0x180004807
mov rcx, rbx
sub rcx, rax
cmp rcx, rdi
jne 0x1800047c9
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x180004780
jl 0x1800047d9
mov edx, 0x5265c00
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x180004780
mov rax, rsi
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x1800047fb
inc edx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
jmp 0x180004780
mov bl, 1
mov rdx, qword [rbp - 0x48]
cmp rdx, 7
jbe 0x180004845
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180004840
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000486c
call fcn.180017b10
movzx eax, bl
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.180017af0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.18001f5a8
int3