Function at 0x14001eca0
Capabilities:
Accept command line arguments
Send data
Send data on socket
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r13, r9
mov r15, r8
mov r12, rdx
movsxd rsi, ecx
call fcn.14001b920
mov ecx, 0x18
mov rdi, rax
call qword [fcn.140089b68]
xor r14d, r14d
mov rbx, rax
test rax, rax
jne 0x14001eceb
mov ebx, r14d
jmp 0x14001ecfd
mov dword [rax], 3
mov qword [rax + 8], 1
mov qword [rax + 0x10], rsi
lea rcx, [0x1400dc7d4]
mov edx, 2
call fcn.14001b870
test eax, eax
je 0x14001ed26
lea rdx, [0x1400dc7d4]
mov r8, rbx
mov rcx, rdi
call fcn.14001b990
jmp 0x14001ed46
test rbx, rbx
je 0x14001ed46
mov rax, qword [rbx + 8]
cmp rax, 0xffffffffffffffff
je 0x14001ed46
dec rax
mov qword [rbx + 8], rax
jne 0x14001ed46
mov rcx, rbx
call fcn.14001bea0
lea rcx, str.error
mov edx, 5
call fcn.14001b870
test eax, eax
je 0x14001edb2
lea rbx, reloc.WS2_32.dll_getsockopt
test rdi, rdi
je 0x14001ed94
cmp dword [rdi], r14d
jne 0x14001ed94
cmp rdi, rbx
je 0x14001ed94
mov r8, qword [rdi + 0x38]
lea rcx, [rdi + 0x10]
lea rdx, str.error
lea rax, [r8 + 1]
mov r9, rbx
mov qword [rdi + 0x38], rax
call fcn.140019b20
test eax, eax
je 0x14001edd7
mov rax, qword [0x14010db30]
cmp rax, 0xffffffffffffffff
je 0x14001edd7
dec rax
mov qword [0x14010db30], rax
jne 0x14001edd7
mov rcx, rbx
jmp 0x14001edd2
mov rax, qword [0x14010db30]
cmp rax, 0xffffffffffffffff
je 0x14001edd7
dec rax
mov qword [0x14010db30], rax
jne 0x14001edd7
lea rcx, reloc.WS2_32.dll_getsockopt
call fcn.14001bea0
lea rcx, str.result
mov edx, 6
call fcn.14001b870
test eax, eax
je 0x14001ee43
lea rbx, [0x14010db38]
test rdi, rdi
je 0x14001ee25
cmp dword [rdi], r14d
jne 0x14001ee25
cmp rdi, rbx
je 0x14001ee25
mov r8, qword [rdi + 0x38]
lea rcx, [rdi + 0x10]
lea rdx, str.result
lea rax, [r8 + 1]
mov r9, rbx
mov qword [rdi + 0x38], rax
call fcn.140019b20
test eax, eax
je 0x14001ee68
mov rax, qword [0x14010db40]
cmp rax, 0xffffffffffffffff
je 0x14001ee68
dec rax
mov qword [0x14010db40], rax
jne 0x14001ee68
mov rcx, rbx
jmp 0x14001ee63
mov rax, qword [0x14010db40]
cmp rax, 0xffffffffffffffff
je 0x14001ee68
dec rax
mov qword [0x14010db40], rax
jne 0x14001ee68
lea rcx, [0x14010db38]
call fcn.14001bea0
mov rcx, rdi
call fcn.140019500
or rsi, 0xffffffffffffffff
mov rbp, rax
inc rsi
cmp byte [rsi + rax], r14b
jne 0x14001ee77
movsxd rbx, dword [r15]
movsxd r8, esi
mov rdx, rax
lea rcx, [r12 + rbx]
call fcn.1400889a0
lea eax, [rbx + rsi]
mov dword [r15], eax
test rdi, rdi
je 0x14001eeb8
mov rax, qword [rdi + 8]
cmp rax, 0xffffffffffffffff
je 0x14001eeb8
dec rax
mov qword [rdi + 8], rax
jne 0x14001eeb8
mov rcx, rdi
call fcn.14001bea0
mov rcx, rbp
call fcn.140089874
mov r8d, dword [r15]
xor r9d, r9d
mov rdx, r12
mov rcx, r13
call qword [sym.imp.WS2_32.dll_send]
mov rcx, r13
mov dword [r15], r14d
mov dword [0x140135b64], 1
call qword [sym.imp.WS2_32.dll_closesocket]
mov rcx, qword [0x14010dc10]
call qword [sym.imp.WS2_32.dll_closesocket]
lea rdx, str.Remote_management_required_restart_n
xor ecx, ecx
mov qword [0x14010dc10], 0xffffffffffffffff
call fcn.140010790
cmp byte [rsp + 0x70], r14b
setne r14b
mov dword [0x140135b34], r14d
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp fcn.14003aa40