Function at 0x180007a20
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x1b0
mov rax, qword [0x18006f080]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov rdi, r8
mov r14, rdx
mov rsi, rcx
xor r12d, r12d
lea edx, [r12 + 0x23]
lea r8d, [r12 + 0x24]
lea rcx, [rsp + 0x90]
call fcn.180011e30
mov r15, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x180007a90
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.180006470
nop
mov edx, 0x22
lea r8d, [rdx + 1]
lea rcx, [rsp + 0xb0]
call fcn.180011e30
nop
lea r9, [rsp + 0x50]
mov r8, rax
lea rcx, [rsp + 0xd0]
call fcn.180006840
nop
mov r9, r15
lea r8, [rsp + 0xd0]
lea rcx, [rsp + 0x110]
call fcn.180006840
nop
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0xf
jbe 0x180007b32
inc rdx
mov rcx, qword [rsp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007b2c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080ad
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0xc8]
cmp rdx, 0xf
jbe 0x180007b75
inc rdx
mov rcx, qword [rsp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007b70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080b3
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0xc0], xmm0
mov byte [rsp + 0xb0], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180007bcc
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007bc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080b9
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x180007c0f
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007c0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080bf
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0xa0], xmm0
mov byte [rsp + 0x90], 0
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x180007c30
mov rdx, rsi
lea rcx, [rsp + 0x110]
call fcn.180005f10
mov r8d, 1
lea rdx, [0x18005b688]
lea rcx, [rsp + 0x110]
call fcn.180005f10
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x80], xmm1
nop dword [rax + rax]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x180007c80
mov r8, rbx
mov rdx, r14
lea rcx, [rsp + 0x70]
call fcn.180006470
nop
mov r8, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x88]
mov rax, rcx
sub rax, r8
lea rdi, [0x18005b788]
cmp rax, 2
jb 0x180007d4b
lea rax, [r8 + 2]
mov qword [rsp + 0x80], rax
lea rsi, [rsp + 0x70]
cmp rcx, 0xf
cmova rsi, qword [rsp + 0x70]
lea rax, [0x18005b78a]
cmp rax, rsi
jbe 0x180007d09
lea rax, [rsi + r8]
cmp rdi, rax
ja 0x180007d09
mov ebx, 2
cmp rsi, rdi
ja 0x180007d01
mov r14, r12
jmp 0x180007d11
mov r14, rsi
sub r14, rdi
jmp 0x180007d11
mov ebx, 2
mov r14d, ebx
lea rcx, [rsi + 2]
inc r8
mov rdx, rsi
call fcn.18004a6e0
mov r8, r14
mov rdx, rdi
mov rcx, rsi
call fcn.18004a6e0
lea rcx, [rsi + r14]
sub rbx, r14
lea rdx, [rdi + 2]
add rdx, r14
mov r8, rbx
call fcn.18004a6e0
lea rax, [rsp + 0x70]
jmp 0x180007d66
mov ebx, 2
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
mov edx, ebx
lea rcx, [rsp + 0x70]
call fcn.180022ee0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov r8d, 1
lea rdx, [0x18005b784]
lea rcx, [rsp + 0x50]
call fcn.180005f10
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x90], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0xa0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rdx, [rsp + 0x90]
movq rcx, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0xf
cmova rdx, rcx
movq r8, xmm1
lea rcx, [rsp + 0x110]
call fcn.180005f10
nop
mov rdx, qword [rsp + 0xa8]
cmp rdx, 0xf
jbe 0x180007e4e
inc rdx
mov rcx, qword [rsp + 0x90]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007e48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080c5
call fcn.180024bcc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x180007e8b
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007e86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080cb
call fcn.180024bcc
movdqa xmm0, xmmword [0x180064c20]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rsp + 0x88]
cmp rdx, 0xf
jbe 0x180007ede
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007ed9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080d1
call fcn.180024bcc
xorps xmm1, xmm1
xor eax, eax
movups xmmword [rsp + 0x130], xmm1
movups xmmword [rsp + 0x140], xmm1
movups xmmword [rsp + 0x150], xmm1
movaps xmmword [rsp + 0x160], xmm1
movups xmmword [rsp + 0x170], xmm1
movups xmmword [rsp + 0x180], xmm1
mov qword [rsp + 0x190], rax
mov dword [rsp + 0x130], 0x68
xorps xmm0, xmm0
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], rax
psrldq xmm1, 0xc
movd eax, xmm1
or eax, 1
mov dword [rsp + 0x16c], eax
mov word [rsp + 0x170], r12w
lea rdx, [rsp + 0x110]
cmp qword [rsp + 0x128], 0xf
cmova rdx, qword [rsp + 0x110]
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x130]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x180007ff9
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x180007ff2
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007fed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080d7
call fcn.180024bcc
xor eax, eax
jmp 0x180008085
mov edx, 0xffffffff
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xf8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
nop
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x18000807e
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180008079
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800080d7
call fcn.180024bcc
mov eax, 1
jmp 0x180008085
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.180024b70
mov rbx, qword [rsp + 0x1f8]
add rsp, 0x1b0
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
nop
call fcn.18002bd24
int3