Function at 0x18003ba20
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x178
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xe0], xmm6
mov rsi, rdx
mov rdi, rcx
lea rcx, [rbp + 0xd0]
lea rdx, [rbp + 0xb0]
lea r8, [rbp + 0xb8]
lea r9, [rbp + 0xc0]
call fcn.18002ad90
test al, al
je 0x18003bc84
xorps xmm6, xmm6
movaps xmmword [rbp + 0x70], xmm6
movaps xmmword [rbp + 0x60], xmm6
movaps xmmword [rbp + 0x50], xmm6
movaps xmmword [rbp + 0x40], xmm6
movaps xmmword [rbp + 0x30], xmm6
movaps xmmword [rbp + 0x20], xmm6
mov qword [rbp + 0x80], 0
movaps xmmword [rbp + 0x90], xmm6
mov qword [rbp + 0xa0], 0
mov ecx, 0x11eec9ae
call fcn.180010450
mov dword [rbp + 0x20], eax
mov word [rbp + 0x60], 0
mov dword [rbp + 0x5c], 0x101
mov rax, qword [rbp + 0xb8]
mov qword [rbp + 0x70], rax
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x78], rax
mov qword [rbp + 0x80], rax
mov rcx, rdi
call fcn.1800416b0
mov rdi, rax
mov ecx, 0x11eec9c7
call fcn.180010450
lea rcx, [rbp + 0x90]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x40], rcx
movups xmmword [rsp + 0x30], xmm6
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 0
xor r12d, r12d
xor ecx, ecx
mov rdx, rdi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov edi, eax
test eax, eax
je 0x18003bd31
mov dword [rbp + 0xcc], edi
mov r14b, 1
mov dword [rbp + 0xdc], 0
xor r13d, r13d
jmp 0x18003bb8f
test r13b, 1
jne 0x18003bcd7
mov rbx, qword [rbp + 0x90]
lea rcx, [0x18005a064]
call fcn.18002a820
mov rcx, rbx
mov edx, 0x64
call rax
test eax, eax
je 0x18003bc75
mov rcx, qword [rbp + 0xd0]
call fcn.18000f200
test rax, rax
je 0x18003bbe0
test r14b, 1
je 0x18003bbc0
test r12d, r12d
jle 0x18003bbbd
mov r8, qword [rsi]
lea rcx, [0x18005c3b8]
mov edx, 2
call qword [rsi + reloc.WS2_32.dll_htonl]
xor r14d, r14d
mov r8, qword [rsi]
mov rdx, qword [rsi + 8]
mov rcx, qword [rbp + 0xd0]
call fcn.180004140
test eax, eax
jns 0x18003bc40
jmp 0x18003bcd7
test r14b, 1
je 0x18003bc40
mov rdi, qword [rsi]
mov r15, rsi
mov rbx, qword [rsi + 8]
mov ecx, 0x11eec9c7
call fcn.180010450
lea rcx, [0x18005c558]
mov edx, eax
mov r8, rdi
call rbx
mov esi, dword [rbp + 0xdc]
add esi, 0x64
movsxd rbx, esi
movabs rcx, 0x15af729f11ec76e6
call fcn.180005e20
cmp rax, rbx
jbe 0x18003bc8b
mov dword [rbp + 0xdc], esi
inc r12d
mov rsi, r15
nop word cs:[rax + rax]
test r14b, 1
jne 0x18003bb60
mov r8, qword [rbp + 0xc0]
mov rdx, qword [rsi]
mov rcx, qword [rsi + 0x10]
call fcn.18000fa70
mov ecx, eax
call fcn.180011170
test al, 1
jne 0x18003bcd7
mov eax, r13d
and al, 1
je 0x18003bb6a
jmp 0x18003bcd7
mov cl, 0xc7
call fcn.1800119e0
mov r13d, eax
jmp 0x18003bb8f
xor esi, esi
jmp 0x18003bd8e
lea rcx, [0x18005bbcc]
lea rdx, [rbp - 0x2d]
call fcn.180001d00
lea rdi, [rbp + 8]
mov rcx, rdi
mov rdx, rax
call fcn.180046ed0
mov rbx, qword [r15]
mov r14, qword [r15 + 8]
mov rcx, rdi
call fcn.180040a40
mov rsi, rax
mov rcx, rdi
call fcn.1800416b0
mov rcx, rax
mov edx, esi
mov r8, rbx
call r14
mov rcx, rdi
call fcn.180044000
mov rsi, qword [rbp + 0x90]
lea rcx, [0x18005a3bc]
call fcn.18002a820
mov rcx, rsi
xor edx, edx
call rax
mov rsi, qword [rbp + 0x90]
test rsi, rsi
je 0x18003bd0e
lea rcx, [0x18005aa98]
call fcn.18002a820
mov rcx, rsi
call rax
mov rsi, qword [rbp + 0x98]
test rsi, rsi
mov edi, dword [rbp + 0xcc]
je 0x18003bd31
lea rcx, [0x18005aa98]
call fcn.18002a820
mov rcx, rsi
call rax
test edi, edi
setne sil
mov rbx, qword [rbp + 0xd0]
lea rdi, [0x18005aa98]
mov rcx, rdi
call fcn.18002a820
mov rcx, rbx
call rax
mov rbx, qword [rbp + 0xb0]
mov rcx, rdi
call fcn.18002a820
mov rcx, rbx
call rax
mov rbx, qword [rbp + 0xb8]
mov rcx, rdi
call fcn.18002a820
mov rcx, rbx
call rax
mov rbx, qword [rbp + 0xc0]
mov rcx, rdi
call fcn.18002a820
mov rcx, rbx
call rax
mov eax, esi
movaps xmm6, xmmword [rbp + 0xe0]
add rsp, 0x178
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret