Function at 0x140311ae0
Capabilities:
Create process on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x198
lea rbp, [rsp + 0x1d0]
xor eax, eax
mov qword [rbp - 0x128], rax
xorps xmm4, xmm4
movaps xmmword [rbp - 0x120], xmm4
movaps xmmword [rbp - 0x110], xmm4
movabs rax, 0xffffffffffffff40
movaps xmmword [rbp + rax - 0x40], xmm4
movaps xmmword [rbp + rax - 0x30], xmm4
movaps xmmword [rbp + rax - 0x20], xmm4
add rax, 0x30
jne 0x140311b1f
mov qword [rbp - 0x40], rax
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x18], rdx
mov r10, rcx
mov rbx, r8
mov r14, r9
mov r15, qword [rbp + 0x48]
mov r13, qword [rbp + 0x50]
mov r12, qword [rbp + 0x58]
mov rcx, r10
mov edx, 1
xor r8d, r8d
call fcn.140228430
mov qword [rbp - 0x40], rax
mov rcx, qword [rbp + 0x18]
mov edx, 1
xor r8d, r8d
call fcn.140228430
mov qword [rbp - 0x48], rax
cmp byte [rbp + 0x30], 0
setne sil
movzx esi, sil
mov dword [rbp - 0x4c], esi
mov rcx, r15
mov edx, 1
xor r8d, r8d
call fcn.140228430
mov qword [rbp - 0x58], rax
lea rdi, [rbp - 0xb8]
mov qword [rbp + 0x50], r13
mov rsi, r13
mov ecx, recv
rep movsq qword [rdi], qword [rsi]
lea rcx, [rbp - 0xb8]
lea rdx, [rbp - 0x120]
call fcn.1403d1150
mov qword [rbp - 0x128], r12
xor ecx, ecx
call sub.KERNEL32.dll_SetLastError
mov r15d, dword [rbp - 0x4c]
mov dword [rsp + 0x20], r15d
mov r15d, dword [rbp + 0x38]
mov dword [rsp + 0x28], r15d
mov r15, qword [rbp + 0x40]
mov qword [rsp + 0x30], r15
mov r8, qword [rbp - 0x58]
mov qword [rsp + 0x38], r8
lea rcx, [rbp - 0x120]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], r12
mov rcx, qword [rbp - 0x40]
mov qword [rbp - 0x160], rcx
mov rdx, qword [rbp - 0x48]
mov qword [rbp - 0x168], rdx
mov r8, rbx
mov qword [rbp - 0x170], r8
mov r9, r14
mov qword [rbp - 0x178], r9
lea rcx, [rbp - 0x150]
call fcn.14000aea0
mov rcx, qword [rbp - 0x160]
mov rdx, qword [rbp - 0x168]
mov r8, qword [rbp - 0x170]
mov r9, qword [rbp - 0x178]
call sub.KERNEL32.dll_CreateProcessA
mov ebx, eax
lea rcx, [rbp - 0x150]
call fcn.14000aef0
mov rax, qword gs:[0x58]
mov ecx, dword [0x1407df6b8]
mov edx, reloc.WS2_32.dll_recv
add rdx, qword [rax + rcx*8]
mov rcx, rdx
mov r14, qword [rcx]
test r14, r14
je 0x140311cf9
mov qword [rbp - 0x158], r14
call sub.KERNEL32.dll_GetLastError
mov r14, qword [rbp - 0x158]
mov dword [r14 + 0xe8], eax
test ebx, ebx
setne r15b
movzx r15d, r15b
lea rcx, [rbp - 0x120]
lea rdx, [rbp - 0xb8]
call fcn.1403d1090
mov rdi, qword [rbp + 0x50]
lea rsi, [rbp - 0xb8]
call fcn.140009560
call fcn.140009560
call fcn.140009560
mov ecx, 9
rep movsq qword [rdi], qword [rsi]
cmp dword [0x1407d5218], 0
je 0x140311d14
jmp 0x140311d0e
lea rax, [0x140246e70]
call rax
mov r14, rax
mov qword [rbp - 0x158], r14
jmp 0x140311c9c
call fcn.140009fc0
nop
cmp qword [rbp + 0x10], 0
je 0x140311d2d
mov rcx, qword [rbp - 0x40]
test rcx, 0xffffffffffff0000
je 0x140311d2d
call fcn.14024e6c0
cmp qword [rbp + 0x18], 0
je 0x140311d49
mov rdx, qword [rbp - 0x48]
test rdx, 0xffffffffffff0000
je 0x140311d49
mov rcx, rdx
call fcn.14024e6c0
cmp qword [rbp + 0x48], 0
je 0x140311d65
mov r8, qword [rbp - 0x58]
test r8, 0xffffffffffff0000
je 0x140311d65
mov rcx, r8
call fcn.14024e6c0
lea rcx, [rbp - 0x120]
call fcn.1403d0fd0
movzx eax, r15b
add rsp, 0x198
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret