Function at 0x18000a4c0
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x1800653c0]
xor rax, rsp
mov qword [rbp + 0xf0], rax
xor edi, edi
xor edx, edx
mov r8d, 0x104
lea rcx, [rbp - 0x20]
call fcn.180046050
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], dil
cmp qword [0x1800651a8], rdi
je 0x18000a6ac
lea rbx, [0x180065198]
mov rcx, rbx
cmp qword [0x1800651b0], 0xf
cmova rcx, qword [0x180065198]
xor edx, edx
call fcn.180027c6c
cmp eax, 0xffffffff
je 0x18000a6ac
cmp qword [0x1800651b0], 0xf
cmova rbx, qword [0x180065198]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x18000a563
mov rdx, rbx
lea rcx, [rbp - 0x60]
call fcn.180005050
lea rcx, [rbp - 0x60]
mov r9, qword [rbp - 0x60]
mov r10, qword [rbp - 0x48]
cmp r10, 0xf
cmova rcx, r9
mov rdx, qword [rbp - 0x50]
cmp rdx, 1
jb 0x18000a5cf
lea rax, [rdx - 1]
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
add r8, rcx
nop dword [rax]
cmp byte [r8], 0x5c
jne 0x18000a5bc
mov eax, edi
test eax, eax
je 0x18000a5c6
cmp r8, rcx
je 0x18000a5cf
dec r8
jmp 0x18000a5b0
sub r8, rcx
cmp r8, 0xffffffffffffffff
jne 0x18000a622
lea rcx, [rbp - 0x60]
cmp r10, 0xf
cmova rcx, r9
cmp rdx, 1
jb 0x18000a611
lea rax, [rdx - 1]
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
add r8, rcx
cmp byte [r8], 0x2f
jne 0x18000a602
mov eax, edi
test eax, eax
je 0x18000a60c
cmp r8, rcx
je 0x18000a611
dec r8
jmp 0x18000a5f6
sub r8, rcx
jmp 0x18000a618
mov r8, 0xffffffffffffffff
cmp r8, 0xffffffffffffffff
je 0x18000a76d
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
cmp rdx, r8
cmovb r8, rdx
lea rdx, [rbp - 0x60]
cmp r10, 0xf
cmova rdx, r9
lea rcx, [rbp - 0x40]
call fcn.180001350
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x18000a688
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a683
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a831
call fcn.18001c6c8
movups xmm1, xmmword [rbp - 0x40]
movups xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rbp - 0x50], xmm0
psrldq xmm0, 8
movq r10, xmm0
movq r9, xmm1
jmp 0x18000a76d
lea rcx, [rbp - 0x40]
call fcn.18000dc80
mov rbx, rax
lea rax, [rbp - 0x60]
cmp rax, rbx
je 0x18000a72a
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x18000a6fc
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a6f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a837
call fcn.18001c6c8
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], 0xf
mov byte [rbp - 0x60], 0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x18000a765
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a760
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a837
call fcn.18001c6c8
mov r9, qword [rbp - 0x60]
mov r10, qword [rbp - 0x48]
lea r8, [rbp - 0x60]
cmp r10, 0xf
cmova r8, r9
mov edx, 0x104
lea rcx, [rbp - 0x20]
call fcn.1800238f4
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
mov dword [rsp + 0x30], 0x70
lea rax, [rbp - 0x20]
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x60], 5
lea rcx, [rsp + 0x30]
call qword [sym.imp.SHELL32.dll_ShellExecuteExA]
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x18000a807
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a802
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000a82b
call fcn.18001c6c8
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.18001cb50
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret
call fcn.18002387c
nop
call fcn.18002387c
nop
call fcn.18002387c
int3