Function at 0x140044990
Capabilities:
Create process on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rax, qword [0x1400d5080]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov r15, r8
mov rsi, rdx
mov rdi, rcx
mov qword [rbp + 0xf], rcx
mov qword [rbp + 0xf], rdx
mov qword [rbp + 0x17], r8
xor r12d, r12d
mov rbx, qword [rdx + 0x10]
mov rcx, rdx
mov r14, qword [rdx + 0x18]
cmp r14, 0x10
jb 0x1400449e1
mov rcx, qword [rdx]
cmp rbx, 0xa
jne 0x140044a98
mov r8, rbx
lea rdx, str.R5Reloaded
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140044a98
lea rax, [rbp - 0x39]
mov qword [rbp - 0x49], rax
lea r14, [0x1400d52e8]
mov rdx, r14
lea rcx, [rbp - 0x39]
call fcn.1400477c0
mov rbx, rax
lea rcx, [rbp - 0x19]
mov rdx, r15
call fcn.1400477c0
nop
mov rdx, rbx
mov rcx, rax
call fcn.140044500
call fcn.140044790
test al, al
je 0x140044a86
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r14, qword [0x1400d52e8]
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
lea r9, [0x1400d6420]
mov r8, r14
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov r8d, 7
lea rdx, str.Success
jmp 0x140044ca7
mov r8d, reloc.WS2_32.dll_sendto
lea rdx, str.Failed_to_find_game.
jmp 0x140044ca7
mov rcx, rsi
cmp r14, 0x10
jb 0x140044aa4
mov rcx, qword [rsi]
cmp rbx, 0xa
jne 0x140044ae4
mov r8, rbx
lea rdx, str.R5Reloaded
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140044ae4
lea rax, [rbp - 0x19]
mov qword [rbp - 0x41], rax
lea r14, [0x1400d52e8]
mov rdx, r14
lea rcx, [rbp - 0x19]
call fcn.1400477c0
mov rbx, rax
lea rcx, [rbp - 0x39]
jmp 0x140044a24
mov rcx, rsi
cmp r14, 0x10
jb 0x140044af0
mov rcx, qword [rsi]
cmp rbx, 0xa
jne 0x140044b7a
mov r8, rbx
lea rdx, str.R5Reloaded
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140044b7a
lea rax, [rbp - 0x19]
mov qword [rbp - 0x41], rax
lea r14, [0x1400d52e8]
mov rdx, r14
lea rcx, [rbp - 0x19]
call fcn.1400477c0
mov rbx, rax
mov rdx, r15
lea rcx, [rbp - 0x39]
call fcn.1400477c0
nop
mov rdx, rbx
mov rcx, rax
call fcn.140044500
call fcn.140044790
test al, al
je 0x140044a86
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae r14, qword [0x1400d52e8]
mov rcx, r14
call fcn.140044760
mov r8d, 7
lea rdx, str.Success
jmp 0x140044ca7
mov rcx, rsi
cmp r14, 0x10
jb 0x140044b86
mov rcx, qword [rsi]
cmp rbx, 0xa
jne 0x140044bc2
mov r8, rbx
lea rdx, str.R5Reloaded
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140044bc2
lea rax, [rbp - 0x19]
mov qword [rbp - 0x41], rax
lea r14, [0x1400d52e8]
mov rdx, r14
lea rcx, [rbp - 0x19]
call fcn.1400477c0
mov rbx, rax
jmp 0x140044b2b
mov rcx, rsi
cmp r14, 0x10
jb 0x140044bce
mov rcx, qword [rsi]
cmp rbx, 0xa
jne 0x140044c0a
mov r8, rbx
lea rdx, str.R5Reloaded
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140044c0a
lea rax, [rbp - 0x19]
mov qword [rbp - 0x41], rax
lea r14, [0x1400d52e8]
mov rdx, r14
lea rcx, [rbp - 0x19]
call fcn.1400477c0
mov rbx, rax
jmp 0x140044b2b
mov rcx, rsi
cmp r14, 0x10
jb 0x140044c16
mov rcx, qword [rsi]
cmp rbx, 0xa
jne 0x140044c52
mov r8, rbx
lea rdx, str.R5Reloaded
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140044c52
lea rax, [rbp - 0x19]
mov qword [rbp - 0x41], rax
lea r14, [0x1400d52e8]
mov rdx, r14
lea rcx, [rbp - 0x19]
call fcn.1400477c0
mov rbx, rax
jmp 0x140044b2b
mov rcx, rsi
cmp r14, 0x10
jb 0x140044c5e
mov rcx, qword [rsi]
cmp rbx, 0xa
jne 0x140044c9a
mov r8, rbx
lea rdx, str.R5Reloaded
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140044c9a
lea rax, [rbp - 0x19]
mov qword [rbp - 0x41], rax
lea r14, [0x1400d52e8]
mov rdx, r14
lea rcx, [rbp - 0x19]
call fcn.1400477c0
mov rbx, rax
jmp 0x140044b2b
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Unknown_Error
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
mov rcx, rdi
call fcn.1400441f0
nop
mov rcx, rsi
call fcn.140047760
nop
mov rcx, r15
call fcn.140047760
mov rax, rdi
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1400abf20
add rsp, 0xa0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret