Function at 0x14002cdf0
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xf8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x60], xmm8
movaps xmmword [rbp + 0x50], xmm7
movaps xmmword [rbp + 0x40], xmm6
mov qword [rbp + 0x38], 0xfffffffffffffffe
call fcn.1400644a0
mov rsi, rax
movabs rax, 0x6de44a106bdc16c9
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
movabs rax, 0xa0996c3b4e1c0ad9
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
movabs r12, 0x3eab06422e8a5387
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
movabs r13, 0xa0996c3b4e1c0a9c
mov qword [rbp + 0x30], r13
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x18], rax
lea r15, [rbp + 0x10]
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
xorps xmm0, xmm0
movaps xmmword [rbp - 0x40], xmm0
movaps xmmword [rbp - 0x30], xmm0
lea rcx, [rbp - 0x10]
call fcn.14035e7e0
test rax, rax
js 0x14002d8f7
mov rdi, rax
cmp rax, 0xf
ja 0x14002cee2
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x10]
mov r8, rdi
call fcn.1403766a0
add rdi, rbp
add rdi, 0xffffffffffffffc0
jmp 0x14002cf41
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov r14d, reloc.WS2_32.dll_shutdown
cmovae r14, rax
cmp r14, 0xfff
jb 0x14002cf17
lea rcx, [r14 + 0x28]
call fcn.140170c88
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14002cf23
lea rcx, [r14 + 1]
call fcn.140170c88
mov rbx, rax
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x30], rdi
mov qword [rbp - 0x28], r14
lea rdx, [rbp - 0x10]
mov rcx, rbx
mov r8, rdi
call fcn.1403766a0
add rdi, rbx
mov byte [rdi], 0
movabs rdx, 0x41a0000000000000
mov ecx, 1
mov r8b, 1
call fcn.14006d5c0
mov ecx, reloc.WS2_32.dll_listen
xor edx, edx
mov r8b, 1
call fcn.14006d5c0
movss xmm1, dword [0x140378014]
xor ecx, ecx
mov r8b, 1
call fcn.14006b5e0
mov r14d, eax
movss xmm1, dword [0x140378014]
mov ecx, 2
mov r8b, 1
call fcn.14006b5e0
xor ecx, ecx
mov edx, eax
call fcn.14006b3c0
call fcn.14006e8a0
mov rdi, rax
movss xmm0, dword [rsi + 0x6a4]
mulss xmm0, dword [0x14037a190]
movss dword [rbp - 0x20], xmm0
mov dword [rbp - 0x1c], 0xbf800000
movabs rbx, 0x5fc9632647f970a4
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
movabs rax, 0xa0996c3b4e1c0aee
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x30], r13
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
lea rcx, [rbp - 0x10]
lea rdx, [rbp - 0x20]
xor r8d, r8d
mov r9d, 0x18
call fcn.140061bd0
test al, al
je 0x14002d882
movss xmm6, dword [rsi + 0x6a4]
mulss xmm6, dword [0x14037a194]
movss dword [rbp - 0x20], xmm6
movss dword [rbp - 0x1c], xmm6
mov rcx, r15
call fcn.140064870
movss xmm7, dword [rbp + 0x14]
movd xmm8, dword [rsi + 8]
movd edx, xmm8
shl rdx, 0x20
mov ecx, 1
xor r8d, r8d
call fcn.14006d5c0
subss xmm7, xmm6
addss xmm8, xmm8
subss xmm7, xmm8
mov dword [rbp - 0x18], 0xbf800000
movss dword [rbp - 0x14], xmm7
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
movabs rax, 0xa0996c3b4e1c66ee
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x30], r13
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
lea rcx, [rbp - 0x10]
lea rdx, [rbp - 0x18]
xor r8d, r8d
mov r9d, 0x40110000
call fcn.140061bd0
test al, al
je 0x14002d6d8
movss xmm0, dword [rsi + 8]
call fcn.14006a760
movabs rdx, 0x4170000041200000
mov ecx, reloc.WS2_32.dll_listen
mov r8b, 1
call fcn.14006d5c0
mov rax, qword [rdi + 0xa8]
mov rcx, qword [rax + 0x50]
call fcn.14006b6b0
mov rax, qword [rdi + 0xa8]
mov rcx, qword [rax + 0x30]
call fcn.14006b6b0
movabs rax, 0x3eab06422e8a1fc9
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x30], r13
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
lea rcx, [rbp - 0x10]
call fcn.140095f00
call fcn.140061ad0
mov edx, 0x41200000
mov ecx, 0xa
mov r8b, 1
call fcn.14006d5c0
movabs rax, 0x3eab75205bf970a4
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
mov qword [rbp + 0x10], r13
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x30], r13
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
lea rcx, [rbp - 0x10]
call fcn.14005fcd0
movss xmm0, dword [rsi + 0x6a4]
mulss xmm0, dword [0x140378598]
mov dword [rbp + 0x10], 0
movss dword [rbp + 0x14], xmm0
lea rcx, [rbp + 0x10]
mov dl, 1
call fcn.1400a8b40
mov ecx, 0x1f
mov edx, r14d
call fcn.14006b3c0
xorps xmm0, xmm0
movlps qword [rbp - 0x10], xmm0
mov r15, qword [0x1406b9568]
lea rcx, str.sidebar_website
call fcn.140011280
mov dword [rsp + 0x20], 0
lea r14, [rbp + 0x10]
mov rcx, r15
mov rdx, r14
mov r8d, eax
mov r9d, 0xffffffff
call fcn.140021490
cmp qword [rbp + 0x28], 0x10
jb 0x14002d27b
mov r14, qword [rbp + 0x10]
lea rdx, [rbp - 0x10]
mov rcx, r14
xor r8d, r8d
call fcn.140098a80
mov r14d, eax
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x14002d2cc
mov rcx, qword [rbp + 0x10]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002d2c7
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002d8fc
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140170ccc
test r14b, r14b
je 0x14002d3ac
movabs rax, 0x11843c315efe27ef
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
movabs rax, 0xd3f600492b6a6ff2
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
movabs rax, 0x699f7c072dcda2b4
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp], rax
movabs rax, 0xa95193311d83383e
mov qword [rbp + 0x10], rax
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 8], rcx
mov qword [rbp + 0x10], r12
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x30], r13
mov rcx, qword [rbp + 0x30]
mov qword [rbp + 0x18], rcx
movabs rcx, 0x699f7c284eae8cd1
mov qword [rbp + 0x30], rcx
mov rcx, qword [rbp + 0x30]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
movaps xmm1, xmmword [rbp]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp], xmm1
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
lea r8, [rbp - 0x10]
xor ecx, ecx
xor edx, edx
xor r9d, r9d
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xorps xmm0, xmm0
movlps qword [rbp - 0x10], xmm0
mov r15, qword [0x1406b9568]
lea rcx, str.sidebar_support
call fcn.140011280
mov dword [rsp + 0x20], 0
lea r14, [rbp + 0x10]
mov rcx, r15
mov rdx, r14
mov r8d, eax
mov r9d, 0xffffffff
call fcn.140021490
cmp qword [rbp + 0x28], 0x10
jb 0x14002d3f1
mov r14, qword [rbp + 0x10]
lea rdx, [rbp - 0x10]
mov rcx, r14
xor r8d, r8d
call fcn.140098a80
mov r14d, eax
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x14002d442
mov rcx, qword [rbp + 0x10]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002d43d
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002d8fc
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140170ccc
test r14b, r14b
je 0x14002d52c
movabs rax, 0x11843c315efe27ef
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
movabs rax, 0xd3f600492b6a6ff2
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
movabs rax, 0xaf608072dcda2b4
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp], rax
movabs rax, 0xa95193316ef75d55
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x30], r13
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x18], rax
movabs rax, 0x699f7c284eae8cd1
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x20], rax
movabs rax, 0xa95193311d83383e
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
movaps xmm1, xmmword [rbp]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp], xmm1
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
lea r8, [rbp - 0x10]
xor ecx, ecx
xor edx, edx
xor r9d, r9d
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
xorps xmm0, xmm0
movlps qword [rbp - 0x10], xmm0
mov r15, qword [0x1406b9568]
lea rcx, str.sidebar_market
call fcn.140016a30
mov dword [rsp + 0x20], 0
lea r14, [rbp + 0x10]
mov rcx, r15
mov rdx, r14
mov r8d, eax
mov r9d, 0xffffffff
call fcn.140021490
lea r15, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
jb 0x14002d575
mov r14, qword [rbp + 0x10]
lea rdx, [rbp - 0x10]
mov rcx, r14
xor r8d, r8d
call fcn.140098a80
mov r14d, eax
mov rax, qword [rbp + 0x28]
cmp rax, 0x10
jb 0x14002d5c6
mov rcx, qword [rbp + 0x10]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002d5c1
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002d8fc
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140170ccc
test r14b, r14b
je 0x14002d6b0
movabs rax, 0x11843c315efe27ef
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
movabs rax, 0xd3f600492b6a6ff2
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
movabs rax, 0x1bfe11072dcda2b4
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp], rax
movabs rax, 0xa95193311df75d55
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x30], r13
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x18], rax
movabs rax, 0x699f7c284eae8cd1
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x20], rax
movabs rax, 0xa95193311d83383e
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x28], rax
lea rax, [rbp + 0x10]
mov qword [rbp + 0x30], rax
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
movaps xmm1, xmmword [rbp]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
xorps xmm1, xmmword [rax + 0x10]
movaps xmmword [rbp], xmm1
mov dword [rsp + 0x28], 5
mov qword [rsp + 0x20], 0
lea r8, [rbp - 0x10]
xor ecx, ecx
xor edx, edx
xor r9d, r9d
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 1
call fcn.1400744c0
call fcn.14006a590
mov ecx, 1
call fcn.14006a8b0
call fcn.140061ad0
mov ecx, 1
call fcn.14006a8b0
call fcn.14006d2a0
movss xmm0, dword [0x140378600]
movlps qword [rbp - 0x18], xmm0
mov qword [rbp + 0x10], rbx
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x10], rax
movabs rax, 0xa0996c3b2f6a6bee
mov qword [rbp + 0x10], rax
mov rax, qword [rbp + 0x10]
mov qword [rbp - 8], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x30], r13
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x30], r15
mov rax, qword [rbp + 0x30]
movaps xmm0, xmmword [rbp - 0x10]
xorps xmm0, xmmword [rax]
movaps xmmword [rbp - 0x10], xmm0
lea r14, [rbp - 0x10]
lea rdx, [rbp - 0x18]
mov rcx, r14
xor r8d, r8d
mov r9d, 0x10008
call fcn.140061bd0
test al, al
je 0x14002d873
movss xmm0, dword [rsi + 8]
call fcn.14006a760
movabs rdx, 0x40a0000041200000
mov ecx, reloc.WS2_32.dll_listen
mov r8b, 1
call fcn.14006d5c0
mov rsi, qword [0x1406b9500]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x10], xmm0
movaps xmm1, xmmword [0x1403785f0]
movaps xmmword [rbp - 0x10], xmm1
movsd xmm1, qword [0x1403785b0]
movsd qword [rbp + 0x30], xmm1
movlps qword [rbp - 0x18], xmm0
mov rcx, qword [rsi + 0x40]
test rcx, rcx
je 0x14002d7c5
mov rax, qword [rcx]
call qword [rax + 0x18]
test rax, rax
je 0x14002d7c5
mov rcx, qword [rsi + 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, rax
jmp 0x14002d7c7
xor ecx, ecx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
lea rdx, [rbp - 0x20]
lea r8, [rbp - 0x18]
lea r9, [rbp + 0x30]
call fcn.14008f790
movss xmm1, dword [0x140378600]
xorps xmm0, xmm0
call fcn.1400685a0
mov rax, qword [rdi + 0xa8]
mov rcx, qword [rax + 0x50]
call fcn.14006b6b0
call fcn.14006eed0
movaps xmm6, xmm0
movss xmm7, dword [rbp - 0x1c]
call fcn.14006a850
subss xmm7, xmm0
mulss xmm7, dword [0x140378010]
cvttps2dq xmm0, xmm7
cvtdq2ps xmm0, xmm0
addss xmm6, xmm0
movaps xmm0, xmm6
call fcn.140062890
cmp qword [rsi + 0x38], 0x10
jb 0x14002d851
mov rsi, qword [rsi + 0x20]
jmp 0x14002d855
add rsi, 0x20
lea rcx, [0x1403ff2f4]
mov rdx, rsi
call fcn.1400935c0
call fcn.140061ad0
mov ecx, 1
call fcn.14006a8b0
call fcn.14006d2a0
mov ecx, 1
call fcn.14006a8b0
call fcn.14006d2a0
mov ecx, 1
call fcn.1400744c0
mov ecx, 2
call fcn.14006a8b0
mov rax, qword [rbp - 0x28]
cmp rax, 0x10
jb 0x14002d8d6
mov rcx, qword [rbp - 0x40]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14002d8d1
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14002d8fc
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.140170ccc
movaps xmm6, xmmword [rbp + 0x40]
movaps xmm7, xmmword [rbp + 0x50]
movaps xmm8, xmmword [rbp + 0x60]
add rsp, 0xf8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140002160
call fcn.140351524
int3