Function at 0x1402e44e0
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x198
vzeroupper
lea rbp, [rsp + 0x1d0]
xor eax, eax
mov qword [rbp - 0x128], rax
vxorps xmm4, xmm4, xmm4
vmovdqa xmmword [rbp - 0x120], xmm4
vmovdqa xmmword [rbp - 0x110], xmm4
movabs rax, 0xffffffffffffff40
vmovdqa xmmword [rbp + rax - 0x40], xmm4
vmovdqa xmmword [rbp + rax - 0x30], xmm4
vmovdqa xmmword [rbp + rax - 0x20], xmm4
add rax, 0x30
jne 0x1402e4525
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov r10, rcx
mov rbx, r8
mov r14, r9
mov r15, qword [rbp + 0x48]
mov r13, qword [rbp + 0x50]
mov r12, qword [rbp + 0x58]
mov rcx, r10
mov edx, 1
xor r8d, r8d
call fcn.1402060f0
mov qword [rbp - 0x40], rax
mov rcx, qword [rbp + 0x18]
mov edx, 1
xor r8d, r8d
call fcn.1402060f0
mov qword [rbp - 0x48], rax
cmp byte [rbp + 0x30], 0
setne sil
movzx esi, sil
mov dword [rbp - 0x4c], esi
mov rcx, r15
mov edx, 1
xor r8d, r8d
call fcn.1402060f0
mov qword [rbp - 0x58], rax
lea rdi, [rbp - 0xb8]
mov qword [rbp + 0x50], r13
mov rsi, r13
mov ecx, recv
rep movsq qword [rdi], qword [rsi]
lea rcx, [rbp - 0xb8]
lea rdx, [rbp - 0x120]
call fcn.1403911c0
mov qword [rbp - 0x128], r12
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov r15d, dword [rbp - 0x4c]
mov dword [rsp + 0x20], r15d
mov r15d, dword [rbp + 0x38]
mov dword [rsp + 0x28], r15d
mov r15, qword [rbp + 0x40]
mov qword [rsp + 0x30], r15
mov r8, qword [rbp - 0x58]
mov qword [rsp + 0x38], r8
lea rcx, [rbp - 0x120]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], r12
mov rcx, qword [rbp - 0x40]
mov qword [rbp - 0x160], rcx
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x168], rdx
mov r8, rbx
mov qword [rbp - 0x170], r8
mov r9, r14
mov qword [rbp - 0x178], r9
lea rcx, [rbp - 0x150]
call fcn.14000a8e0
mov rcx, qword [rbp - 0x160]
mov rdx, qword [rbp - 0x168]
mov r8, qword [rbp - 0x170]
mov r9, qword [rbp - 0x178]
call sub.KERNEL32.dll_CreateProcessA
mov ebx, eax
lea rcx, [rbp - 0x150]
call fcn.14000a930
mov rax, qword gs:[0x58]
mov ecx, dword [0x140bcab18]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rcx, rdx
mov r14, qword [rcx]
test r14, r14
je 0x1402e4702
mov qword [rbp - 0x158], r14
call sub.KERNEL32.dll_GetLastError
mov r14, qword [rbp - 0x158]
mov dword [r14 + 0xe8], eax
test ebx, ebx
setne r15b
movzx r15d, r15b
lea rcx, [rbp - 0x120]
lea rdx, [rbp - 0xb8]
call fcn.140391100
mov rdi, qword [rbp + 0x50]
lea rsi, [rbp - 0xb8]
call fcn.140009050
call fcn.140009050
call fcn.140009050
mov ecx, 9
rep movsq qword [rdi], qword [rsi]
cmp dword [0x140bc09d8], 0
je 0x1402e471d
jmp 0x1402e4717
lea rax, [0x140222340]
call rax
mov r14, rax
mov qword [rbp - 0x158], r14
jmp 0x1402e46a5
call fcn.140009a00
nop
cmp qword [rbp + 0x10], 0
je 0x1402e4736
mov rcx, qword [rbp - 0x40]
test rcx, 0xffffffffffff0000
je 0x1402e4736
call fcn.140229340
cmp qword [rbp + 0x18], 0
je 0x1402e4752
mov rdx, qword [rbp - 0x48]
test rdx, 0xffffffffffff0000
je 0x1402e4752
mov rcx, rdx
call fcn.140229340
cmp qword [rbp + 0x48], 0
je 0x1402e476e
mov r8, qword [rbp - 0x58]
test r8, 0xffffffffffff0000
je 0x1402e476e
mov rcx, r8
call fcn.140229340
lea rcx, [rbp - 0x120]
call fcn.140391040
movzx eax, r15b
add rsp, 0x198
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret