Function at 0x140312d80
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x198
lea rbp, [rsp + 0x1d0]
xor eax, eax
mov qword [rbp - 0x128], rax
xorps xmm4, xmm4
movaps xmmword [rbp - 0x120], xmm4
movaps xmmword [rbp - 0x110], xmm4
movabs rax, 0xffffffffffffff40
movaps xmmword [rbp + rax - 0x40], xmm4
movaps xmmword [rbp + rax - 0x30], xmm4
movaps xmmword [rbp + rax - 0x20], xmm4
add rax, 0x30
jne 0x140312dbf
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov r10, rcx
mov rbx, r8
mov r14, r9
mov r15, qword [rbp + 0x48]
mov r13, qword [rbp + 0x50]
mov r12, qword [rbp + 0x58]
mov rcx, r10
mov edx, 1
xor r8d, r8d
call fcn.140214fc0
mov qword [rbp - 0x40], rax
mov rcx, qword [rbp + 0x18]
mov edx, 1
xor r8d, r8d
call fcn.140214fc0
mov qword [rbp - 0x48], rax
cmp byte [rbp + 0x30], 0
setne sil
movzx esi, sil
mov dword [rbp - 0x4c], esi
mov rcx, r15
mov edx, 1
xor r8d, r8d
call fcn.140214fc0
mov qword [rbp - 0x58], rax
lea rdi, [rbp - 0xb8]
mov qword [rbp + 0x50], r13
mov rsi, r13
mov ecx, recv
rep movsq qword [rdi], qword [rsi]
lea rcx, [rbp - 0xb8]
lea rdx, [rbp - 0x120]
call fcn.140411e80
mov qword [rbp - 0x128], r12
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov r15d, dword [rbp - 0x4c]
mov dword [rsp + 0x20], r15d
mov r15d, dword [rbp + 0x38]
mov dword [rsp + 0x28], r15d
mov r15, qword [rbp + 0x40]
mov qword [rsp + 0x30], r15
mov r8, qword [rbp - 0x58]
mov qword [rsp + 0x38], r8
lea rcx, [rbp - 0x120]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], r12
mov rcx, qword [rbp - 0x40]
mov qword [rbp - 0x160], rcx
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x168], rdx
mov r8, rbx
mov qword [rbp - 0x170], r8
mov r9, r14
mov qword [rbp - 0x178], r9
lea rcx, [rbp - 0x150]
call fcn.14000c770
mov rcx, qword [rbp - 0x160]
mov rdx, qword [rbp - 0x168]
mov r8, qword [rbp - 0x170]
mov r9, qword [rbp - 0x178]
call sub.KERNEL32.dll_CreateProcessA
mov ebx, eax
lea rcx, [rbp - 0x150]
call fcn.14000c7c0
mov rax, qword gs:[0x58]
mov ecx, dword [0x140d81418]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rcx, rdx
mov r14, qword [rcx]
test r14, r14
je 0x140312f99
mov qword [rbp - 0x158], r14
call sub.KERNEL32.dll_GetLastError
mov r14, qword [rbp - 0x158]
mov dword [r14 + 0xe8], eax
test ebx, ebx
setne r15b
movzx r15d, r15b
lea rcx, [rbp - 0x120]
lea rdx, [rbp - 0xb8]
call fcn.140411dc0
mov rdi, qword [rbp + 0x50]
lea rsi, [rbp - 0xb8]
call fcn.14000ae30
call fcn.14000ae30
call fcn.14000ae30
mov ecx, 9
rep movsq qword [rdi], qword [rsi]
cmp dword [0x140d772d8], 0
je 0x140312fb4
jmp 0x140312fae
lea rax, [0x140238900]
call rax
mov r14, rax
mov qword [rbp - 0x158], r14
jmp 0x140312f3c
call fcn.14000b890
nop
cmp qword [rbp + 0x10], 0
je 0x140312fcd
mov rcx, qword [rbp - 0x40]
test rcx, 0xffffffffffff0000
je 0x140312fcd
call fcn.14023f960
cmp qword [rbp + 0x18], 0
je 0x140312fe9
mov rdx, qword [rbp - 0x48]
test rdx, 0xffffffffffff0000
je 0x140312fe9
mov rcx, rdx
call fcn.14023f960
cmp qword [rbp + 0x48], 0
je 0x140313005
mov r8, qword [rbp - 0x58]
test r8, 0xffffffffffff0000
je 0x140313005
mov rcx, r8
call fcn.14023f960
lea rcx, [rbp - 0x120]
call fcn.140411d00
movzx eax, r15b
add rsp, 0x198
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret