Function at 0x18008c490
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x180155060]
xor rax, rsp
mov qword [rbp], rax
mov rsi, rcx
mov qword [rsp + 0x78], rcx
mov rcx, qword [rcx + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x14
jb 0x18008cd90
mov rax, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x18008c4f2
mov rax, qword [rsi]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x14
lea r9, [0x180060e50]
lea rcx, [rbp - 0x20]
call fcn.180072fc0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x48]
call fcn.180071970
mov rcx, rax
call fcn.180078200
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x48]
call fcn.180071970
mov rcx, rax
call fcn.1800866d0
lea rax, [rsp + 0x48]
mov qword [rsp + 0x70], rax
xor r12d, r12d
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 0xf
lea r8d, [r12 + 0x19]
lea rdx, [0x180060e68]
lea rcx, [rsp + 0x48]
call fcn.180071a80
nop
mov rdx, rsi
lea rcx, [rbp - 0x40]
call fcn.180071970
nop
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.1800ff6f0
test al, al
je 0x18008cba8
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x30], r12
mov qword [rbp - 0x28], 0xf
mov byte [rbp - 0x40], r12b
lea r8d, [r12 + 0x53]
lea rdx, [0x180060e90]
lea rcx, [rbp - 0x40]
call fcn.180071a80
nop
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
lea r14, [rbp - 0x40]
mov r13, qword [rbp - 0x28]
cmp r13, 0x10
setae byte [rsp + 0x40]
mov r15, qword [rbp - 0x40]
cmovae r14, r15
mov rdi, qword [rbp - 0x30]
cmp rdi, 0x10
jae 0x18008c603
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x80], xmm0
lea ebx, [r12 + 0xf]
jmp 0x18008c679
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18008c657
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18008cd96
mov rcx, rax
call fcn.180107480
mov rcx, rax
test rax, rax
je 0x18008cd9c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18008c666
test rcx, rcx
je 0x18008c663
call fcn.180107480
jmp 0x18008c666
mov rax, r12
mov qword [rbp - 0x80], rax
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call fcn.180109d40
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rbx
lea rcx, [rbp - 0x80]
call fcn.180078200
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], r12
lea r14, [rbp - 0x40]
cmp byte [rsp + 0x40], 0
cmovne r14, r15
cmp rdi, 0x10
jae 0x18008c6b8
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x80], xmm0
mov ebx, 0xf
jmp 0x18008c72e
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18008c70c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18008cda2
mov rcx, rax
call fcn.180107480
mov rcx, rax
test rax, rax
je 0x18008cda8
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18008c71b
test rcx, rcx
je 0x18008c718
call fcn.180107480
jmp 0x18008c71b
mov rax, r12
mov qword [rbp - 0x80], rax
lea r8, [rdi + 1]
mov rdx, r14
mov rcx, rax
call fcn.180109d40
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rbx
lea rcx, [rbp - 0x80]
call fcn.1800866d0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov r8d, 0x13
lea rdx, [0x180060ee8]
lea rcx, [rbp - 0x80]
call fcn.180071a80
nop
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], 0
mov r8d, 0x19
lea rdx, [0x180060e68]
lea rcx, [rsp + 0x48]
call fcn.180071a80
nop
xor r8d, r8d
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.180086240
mov rdx, rax
cmp rax, 0xffffffffffffffff
jne 0x18008c7b7
xor bl, bl
jmp 0x18008c7dd
lea r9, [rbp - 0x80]
cmp qword [rbp - 0x68], 0x10
cmovae r9, qword [rbp - 0x80]
mov rax, qword [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x58]
mov rcx, rsi
call fcn.1800b3c00
mov bl, 1
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x18008c81b
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008c815
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008cdae
call fcn.1801074bc
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x18008c856
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008c851
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008cdd2
call fcn.1801074bc
test bl, bl
je 0x18008c982
mov rbx, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x18008c871
mov r14, qword [rsi]
add rbx, r14
jmp 0x18008c877
add rbx, rsi
mov r14, rsi
mov qword [rbp - 0x80], r12
mov rcx, r12
mov qword [rbp - 0x70], rcx
mov r9d, 7
mov qword [rbp - 0x68], r9
mov rdx, rbx
sub rdx, r14
cmp rdx, r9
jbe 0x18008c8ab
lea rcx, [rbp - 0x80]
call fcn.1800b7a20
mov rcx, r12
mov qword [rbp - 0x70], rcx
mov r9, qword [rbp - 0x68]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x68], rax
cmp r14, rbx
je 0x18008c912
movzx edi, byte [rsp + 0x40]
nop
movsx edx, byte [r14]
cmp rcx, r9
jae 0x18008c8ea
lea rax, [rcx + 1]
mov qword [rbp - 0x70], rax
lea rax, [rbp - 0x80]
cmp r9, 8
cmovae rax, qword [rbp - 0x80]
mov word [rax + rcx*2], dx
mov word [rax + rcx*2 + 2], r12w
jmp 0x18008c900
movzx r9d, dx
movzx r8d, dil
mov edx, 1
lea rcx, [rbp - 0x80]
call fcn.1800b7b90
inc r14
mov r9, qword [rbp - 0x68]
cmp r14, rbx
je 0x18008c912
mov rcx, qword [rbp - 0x70]
jmp 0x18008c8c0
lea r8, [rbp - 0x80]
cmp r9, 8
cmovae r8, qword [rbp - 0x80]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp - 0x68]
cmp rdx, 8
jb 0x18008cb70
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008c978
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008cdb4
call fcn.1801074bc
jmp 0x18008cb70
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x70], r12
mov qword [rbp - 0x68], 0xf
mov byte [rbp - 0x80], 0
mov r8d, 0x27
lea rdx, [0x180060f00]
lea rcx, [rbp - 0x80]
call fcn.180071a80
nop
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
lea r15, [rbp - 0x80]
mov r13, qword [rbp - 0x68]
cmp r13, 0x10
setae r12b
mov r14, qword [rbp - 0x80]
cmovae r15, r14
mov rdi, qword [rbp - 0x70]
cmp rdi, 0x10
jae 0x18008c9ee
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x48], xmm0
mov ebx, 0xf
jmp 0x18008ca64
mov rbx, rdi
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18008ca42
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18008cdba
mov rcx, rax
call fcn.180107480
mov rcx, rax
test rax, rax
je 0x18008cdc0
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18008ca50
test rcx, rcx
je 0x18008ca4e
call fcn.180107480
jmp 0x18008ca50
xor eax, eax
mov qword [rsp + 0x48], rax
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call fcn.180109d40
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rbx
lea rcx, [rsp + 0x48]
call fcn.180078200
xor eax, eax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
lea r15, [rbp - 0x80]
test r12b, r12b
cmovne r15, r14
cmp rdi, 0x10
jae 0x18008caa8
movups xmm0, xmmword [r15]
movups xmmword [rsp + 0x48], xmm0
lea ebx, [rax + 0xf]
jmp 0x18008cb1a
mov rbx, rdi
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
cmova rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18008cafc
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18008cdc6
mov rcx, rax
call fcn.180107480
mov rcx, rax
test rax, rax
je 0x18008cdcc
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x18008cb06
test rcx, rcx
je 0x18008cb06
call fcn.180107480
mov qword [rsp + 0x48], rax
lea r8, [rdi + 1]
mov rdx, r15
mov rcx, rax
call fcn.180109d40
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rbx
lea rcx, [rsp + 0x48]
call fcn.180078dc0
nop
test r12b, r12b
je 0x18008cb65
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x18008cb5d
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008cdd2
mov rcx, r14
call fcn.1801074bc
xor r12d, r12d
mov r13, qword [rbp - 0x28]
mov r15, qword [rbp - 0x40]
cmp byte [rsp + 0x40], 0
je 0x18008cba8
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x18008cba0
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008cdd8
mov rcx, r15
call fcn.1801074bc
mov rbx, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x18008cbbb
mov r14, qword [rsi]
add rbx, r14
jmp 0x18008cbc1
add rbx, rsi
mov r14, rsi
mov qword [rbp - 0x60], r12
mov rcx, r12
mov qword [rbp - 0x50], rcx
mov r9d, 7
mov qword [rbp - 0x48], r9
mov rdx, rbx
sub rdx, r14
cmp rdx, r9
jbe 0x18008cbf5
lea rcx, [rbp - 0x60]
call fcn.1800b7a20
mov rcx, r12
mov qword [rbp - 0x50], rcx
mov r9, qword [rbp - 0x48]
lea rax, [rbp - 0x60]
mov qword [rsp + 0x68], rax
cmp r14, rbx
je 0x18008cc62
movzx edi, byte [rsp + 0x40]
nop dword [rax + rax]
movsx edx, byte [r14]
cmp rcx, r9
jae 0x18008cc3a
lea rax, [rcx + 1]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x60]
cmp r9, 8
cmovae rax, qword [rbp - 0x60]
mov word [rax + rcx*2], dx
mov word [rax + rcx*2 + 2], r12w
jmp 0x18008cc50
movzx r9d, dx
movzx r8d, dil
mov edx, 1
lea rcx, [rbp - 0x60]
call fcn.1800b7b90
inc r14
mov r9, qword [rbp - 0x48]
cmp r14, rbx
je 0x18008cc62
mov rcx, qword [rbp - 0x50]
jmp 0x18008cc10
lea r8, [rbp - 0x60]
cmp r9, 8
cmovae r8, qword [rbp - 0x60]
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], r12
xor r9d, r9d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteW]
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x18008ccc9
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008ccc4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008cdd8
call fcn.1801074bc
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], 7
mov word [rbp - 0x60], r12w
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x18008cd12
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18008cd0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18008cd84
call fcn.1801074bc
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x18008cd48
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x18008cd43
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18008cd8a
mov rcx, r8
call fcn.1801074bc
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.180107460
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.18010e2e4
nop
call fcn.18010e2e4
nop
call fcn.1800718b0
nop
call fcn.180071810
int3
call fcn.18010e2e4
int3
call fcn.180071810
int3
call fcn.18010e2e4
nop
call fcn.18010e2e4
nop
call fcn.18010e2e4
nop
call fcn.180071810
int3
call fcn.18010e2e4
int3
call fcn.180071810
int3
call fcn.18010e2e4
nop
call fcn.18010e2e4
nop
call fcn.18010e2e4
int3