Function at 0x180075e40
Capabilities:
Create a process with modified i/o handles and window
Create process on windows

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x290]
sub rsp, 0x390
mov rax, qword [0x180106b38]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov rbx, qword [rbp + 0x2f0]
lea eax, [r8 + 0xe]
mov rdi, qword [rbp + 0x2f8]
mov rsi, rdx
mov rdx, qword [rbp + 0x308]
mov r12, r9
mov r14, qword [rbp + 0x300]
mov r13d, r8d
mov qword [rbp - 0x70], rdx
mov r15, rcx
mov qword [rbp - 0x80], r9
mov qword [rsp + 0x78], rcx
mov qword [rsp + 0x70], rbx
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], r14
mov dword [rsp + 0x68], eax
cmp r8d, eax
jae case.0x180075ef5.117
xor r8d, r8d
lea eax, [r13 - 0x6c]
lea r10, [0x1800e3d02]
lea r9, [0x180000000]
cmp eax, 0x2c
ja case.0x180075ef5.121
movzx eax, byte [r9 + rax + 0x76510]
mov ecx, dword [r9 + rax*4 + 0x764d8]
add rcx, r9
jmp rcx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [r14]
mov qword [rbp - 0x78], rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__get_osfhandle]
mov r8, qword [rbp - 0x78]
lea r9, [rbp + 0x20]
mov rdx, rax
mov dword [rsp + 0x30], 2
xor eax, eax
mov dword [rsp + 0x28], 1
mov rcx, r8
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
jmp case.0x180075ef5.121
mov rax, qword [r12]
jmp 0x180076463
cmp dword [rdi], 1
je 0x180075f94
mov rax, qword [0x1800fb5d8]
lea r9, [rsp + 0x50]
mov dword [rsp + 0x50], r8d
lea rcx, [rbp - 0x68]
mov r8, r10
mov qword [rbp - 0x68], rax
mov edx, 0x54
call fcn.180012120
mov r9d, PathYetAnotherMakeUniqueName
lea r8, str.structType__t.s.strTagSym
xor edx, edx
xor ecx, ecx
call fcn.180030130
mov edx, dword [rdi]
lea rcx, str.vpsraw__s__s_
call fcn.180011460
xor r8d, r8d
mov eax, dword [rdi + 8]
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x30], 0xf0
inc eax
mov qword [rsp + 0x28], r8
mov r9, rdi
mov qword [rsp + 0x20], r8
mov rcx, rsi
xor r8d, r8d
mov dword [rsp + 0x50], eax
call fcn.18007d670
movsxd rax, dword [rdi + 8]
movups xmm0, xmmword [rbx]
lea rcx, [rax + rax*2]
mov rax, qword [rdi + 0x10]
movups xmmword [rax + rcx*8 - 0x18], xmm0
movsd xmm1, qword [rbx + 0x10]
movsd qword [rax + rcx*8 - 8], xmm1
jmp case.0x180075ef5.121
mov rcx, qword [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp case.0x180075ef5.121
mov dword [rbp - 0x30], 0x68
mov dword [rbp + 0xc], 0x101
mov word [rbp + 0x10], r8w
jmp case.0x180075ef5.121
mov rax, qword [r12]
cmp rax, qword [r14]
jae 0x180076187
nop word [rax + rax]
movzx eax, byte [rax + rbx]
cmp byte [rax + r9 + 0xc6210], 0xff
je 0x180076091
inc qword [rsi + 0xd8]
cmp qword [rsi + 0xd8], 6
jne 0x180076159
mov eax, 0x30
nop dword [rax]
cmp eax, 0x30
je 0x180076075
cmp eax, 0x17d0
je 0x180076069
cmp eax, 0x2f70
je 0x180076187
jmp 0x180076080
mov dword [rsi + 0x88], 0x6c
jmp 0x180076080
inc qword [r12]
mov qword [rsi + 0xd8], r8
add eax, 0x17a0
cmp eax, 0x46e0
jbe 0x180076050
jmp 0x180076159
cmp al, 0x3f
je 0x18007617d
cmp al, 0x2d
jne 0x1800760d9
mov ecx, 0x72
mov eax, ecx
sub eax, 0x72
je 0x1800760b4
cmp eax, 0x46
je 0x180076187
jmp 0x1800760c9
inc qword [r12]
mov qword [rsi + 0xd8], r8
mov dword [rsi + 0x88], 0x6c
add ecx, 0x46
cmp ecx, 0xfe
jb 0x1800760a2
jmp 0x180076159
mov ebx, 0x6c
nop
mov eax, ebx
sub eax, 0x6c
je 0x180076132
sub eax, 1
je 0x18007612a
sub eax, 1
je 0x18007610a
sub eax, 1
je 0x180076101
cmp eax, 1
je 0x180076187
jmp 0x180076146
mov dword [rsi + 0x88], r8d
jmp 0x180076146
inc qword [rsi + 0xd0]
mov rax, qword [rsi + 0xc0]
test rax, rax
je 0x180076146
mov rdx, rdi
mov rcx, rsi
call rax
xor r8d, r8d
jmp 0x180076146
mov dword [rdi], 0x20
jmp 0x180076146
mov rax, qword [rsi + 0x78]
mov rcx, qword [rax + 0x18]
sub rcx, qword [rdi + 8]
add rcx, qword [r12]
mov qword [rdi + 0x10], rcx
inc ebx
cmp ebx, 0x71
jb 0x1800760e0
mov rbx, qword [rsp + 0x70]
lea r9, [0x180000000]
mov rax, qword [r12]
inc rax
mov qword [r12], rax
cmp rax, qword [r14]
jb 0x180076020
mov rbx, qword [rsp + 0x70]
mov r13d, ILFree
jmp case.0x180075ef5.121
mov dword [rsi + 0x88], 0x6b
mov rbx, qword [rsp + 0x70]
mov r13d, ILFree
jmp case.0x180075ef5.121
mov rbx, qword [rsp + 0x58]
test rbx, rbx
jne 0x1800762f2
mov r12, qword [rsp + 0x78]
mov r15d, 0xca
mov eax, r15d
sub eax, 0xca
je 0x1800761d1
cmp eax, 0x34
jne 0x1800762c8
lea rbx, [rbp + 0x62]
mov qword [rsp + 0x58], rbx
jmp 0x1800762cd
mov qword [rsp + 0x30], rdi
lea r9, str._s_c_s
mov dword [rsp + 0x28], 0x5c
lea rdx, [rbp + 0x170]
mov r8d, 0x104
mov qword [rsp + 0x20], r12
mov rcx, rsi
mov byte [rbp + 0x62], 0
call fcn.18004cb80
lea rdx, [0x1800e8070]
lea rcx, [rbp + 0x170]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov r14, rax
test rax, rax
je 0x1800762c8
mov edi, 0xa0
cmp edi, 0xa0
je 0x180076243
cmp edi, 0x2a80
jne 0x1800762b2
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
jmp 0x1800762b2
mov r8, r14
lea rcx, [rbp + 0x60]
mov edx, 0x104
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
cmp byte [rbp + 0x60], 0x23
jne 0x1800762ae
cmp byte [rbp + 0x61], 0x21
jne 0x1800762ae
lea rcx, [rbp + 0x60]
mov rax, 0xffffffffffffffff
nop dword [rax]
cmp byte [rcx + rax + 1], 0
lea rax, [rax + 1]
jne 0x180076270
lea rbx, [rbp + rax + 0x5f]
lea rax, [rbp + 0x60]
cmp rbx, rax
jbe 0x1800762b2
nop dword [rax]
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isspace]
test eax, eax
je 0x1800762b2
mov byte [rbx], 0
lea rax, [rbp + 0x60]
dec rbx
cmp rbx, rax
ja 0x180076290
jmp 0x1800762b2
mov byte [rbp + 0x62], 0
add edi, 0x29e0
cmp edi, 0x53c0
jbe 0x180076228
mov rdi, qword [rbp - 0x60]
mov rbx, qword [rsp + 0x58]
add r15d, 0x34
cmp r15d, 0x132
jb 0x1800761b0
mov r12, qword [rbp - 0x80]
lea r10, [0x1800e3d02]
mov r14, qword [rbp - 0x58]
mov r15, qword [rsp + 0x78]
cmp byte [rbx], 0
lea rax, [0x1800ea104]
mov qword [rsp + 0x40], rdi
lea r9, str.Y__ENTITY
mov dword [rsp + 0x38], 0x5c
lea rdx, [rbp + 0x170]
cmove rax, r10
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], rax
mov r8d, 0x104
mov rcx, rsi
mov qword [rsp + 0x20], rbx
call fcn.18004cb80
mov rbx, qword [rsp + 0x70]
lea rax, [rbp - 0x50]
mov qword [rsp + 0x48], rax
lea rdx, [rbp + 0x170]
lea rax, [rbp - 0x30]
xor r9d, r9d
mov qword [rsp + 0x40], rax
xor r8d, r8d
mov qword [rsp + 0x38], r15
xor ecx, ecx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x1800763b6
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9, [rbp + 0x170]
mov rcx, rsi
lea r8, [0x1800e3d02]
mov dword [rsp + 0x20], eax
lea rdx, str.Reserved_krb5_error__241_
call fcn.18002de60
mov qword [rbp - 0x50], 0xffffffffffffffff
jmp case.0x180075ef5.121
mov ecx, dword [r14]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__close]
mov rax, qword [rbp - 0x70]
mov ecx, dword [rax]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__close]
jmp case.0x180075ef5.121
mov r12, r8
mov qword [rbp - 0x80], r8
jmp case.0x180075ef5.121
mov ecx, dword [rdx]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__get_osfhandle]
mov r8, qword [rbp - 0x78]
lea r9, [rbp + 0x28]
mov rdx, rax
mov dword [rsp + 0x30], 2
xor eax, eax
mov dword [rsp + 0x28], 1
mov rcx, r8
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov rax, qword [rsi + 0x458]
mov rcx, qword [rax + 0x28]
mov qword [rsp + 0x58], rcx
jmp case.0x180075ef5.121
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp + 0x30], rax
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x40], rax
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
movups xmmword [rbp - 0x50], xmm0
jmp case.0x180075ef5.121
mov rcx, qword [rbp + 0x20]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp - 0x50]
mov qword [rsp + 0x60], rax
inc r13d
cmp r13d, dword [rsp + 0x68]
jae case.0x180075ef5.117
mov rdx, qword [rbp - 0x70]
jmp 0x180075ec3
mov qword [rsp + 0x38], r8
lea rcx, [rbp + 0x40]
mov qword [rsp + 0x30], r8
xor r9d, r9d
mov qword [rsp + 0x28], rsi
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 0xb5
call fcn.18004e110
mov eax, dword [rax]
mov byte [rsp + 0x60], al
mov rax, qword [rsp + 0x60]
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.1800bfc40
mov rbx, qword [rsp + 0x3e0]
add rsp, 0x390
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret